Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
File: R0kcIjvm4aqla_7G2g2pDEqFKq8.mft (raw, json)
Hash identifier: DGtXGxfd2Ni8enpgu7Ly/IYQBPXpt62l9cub2SumDFg=
Subject key identifier: 39:6A:E6:68:5D:6B:21:9A:69:AC:02:54:4F:39:4D:D8:21:70:6C:BB
Authority key identifier: 47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
Certificate issuer: /CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Certificate serial: 01978244A4C8C174B6A3EFCE1486BA8CC6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
Manifest number: 0301
Signing time: Wed 18 Jun 2025 09:00:26 +0000
Manifest this update: Wed 18 Jun 2025 09:00:26 +0000
Manifest next update: Thu 19 Jun 2025 09:00:26 +0000
Files and hashes: 1: R0kcIjvm4aqla_7G2g2pDEqFKq8.crl (hash: aBKEojnS/c+zfoz16rmvV4Fsvx058x9BdiT7JD1/iwQ=)
2: rVporlTC0KO2iHCmNkPkBQ1rLtA.roa (hash: QNFtzFtuUhiRexRD3zRBFnGt2eHAdDUybJR5bbQe4xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:44:a4:c8:c1:74:b6:a3:ef:ce:14:86:ba:8c:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Validity
Not Before: Jun 18 09:00:26 2025 GMT
Not After : Jun 19 09:00:26 2025 GMT
Subject: CN=396ae6685d6b219a69ac02544f394dd821706cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:fe:7d:f4:72:f9:8f:89:00:3f:78:9b:b0:
4a:5e:07:39:1d:16:99:62:16:13:56:72:f6:07:22:
e7:36:27:c2:88:10:71:98:e2:83:d2:73:d1:54:b6:
84:2f:1f:ae:5c:f9:75:0e:e3:65:f5:75:b1:a0:b8:
d4:cc:2a:f0:7a:97:9f:7c:36:ec:97:d4:9f:91:6c:
4f:da:6e:87:5e:47:be:a9:73:74:cf:f4:63:bd:18:
ed:67:ff:af:12:74:82:a8:95:62:a1:59:81:94:b2:
ad:b0:0e:b5:a5:65:95:de:53:bf:34:16:7d:d2:70:
6a:2d:b3:8f:11:04:94:63:4f:f1:69:8e:a1:ff:bb:
59:a3:09:10:58:a6:5e:5a:f8:5e:c5:a1:1c:cd:09:
17:be:ec:b6:dc:68:8a:ca:12:73:c2:7b:0f:13:a8:
26:73:5f:a5:d5:8c:fb:43:b2:cf:9b:b1:ea:7a:43:
b4:34:18:8f:31:42:44:f7:87:b3:ef:0d:aa:d5:3d:
12:25:a1:dd:27:52:49:d0:e7:d9:68:b1:a9:27:61:
2d:a9:e3:50:06:0a:50:0b:7c:77:94:31:73:a0:6d:
f5:d0:1c:73:60:79:09:a1:d7:2c:73:aa:fc:d5:39:
35:3f:0c:11:3b:8e:92:e8:58:fa:59:d6:a3:2e:2a:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6A:E6:68:5D:6B:21:9A:69:AC:02:54:4F:39:4D:D8:21:70:6C:BB
X509v3 Authority Key Identifier:
keyid:47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b3:fd:03:83:a2:0d:b8:f1:1e:a1:d3:14:c5:e2:7a:ae:1d:
b9:64:b1:ab:00:12:39:8b:03:5c:fd:f9:d5:d7:ae:a7:d9:2e:
cb:2e:09:24:a8:44:a0:4e:21:71:bb:a2:b4:c6:fe:5b:27:46:
f1:8b:8b:5f:19:bf:46:5b:99:66:8f:5a:ca:4a:76:8c:ab:cf:
55:59:86:2a:72:12:a2:07:ff:9b:ad:04:72:84:ff:58:57:4d:
ce:6d:16:ab:0b:1e:29:40:1a:dc:c9:d0:e2:30:b7:34:49:84:
fc:db:28:75:74:e7:b2:8a:6d:ea:d4:c7:8b:d3:db:61:16:ea:
42:36:fc:92:5f:0a:4e:a6:65:a8:8e:51:9a:8d:ba:19:62:33:
d8:00:2d:ba:27:78:b8:7a:76:b4:37:dc:63:d9:f2:ae:7b:83:
83:3a:fa:c8:81:fb:15:60:b0:8b:00:e5:50:69:f5:f4:36:0e:
2c:45:bf:26:4e:4a:06:f9:83:af:6b:2a:fc:9c:3c:1a:cf:35:
35:46:56:5f:90:21:c5:a9:f7:ac:d0:30:48:a2:66:45:3e:35:
93:14:9b:43:53:90:ac:dd:c4:26:25:cd:5c:f3:75:53:cd:39:
38:d8:53:e9:2e:70:0f:3e:ee:d7:7e:91:ed:22:b4:24:3e:58:
b2:86:4a:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeCRKTIwXS2o+/OFIa6jMbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NDkxYzIyM2JlNmUxYWFhNTZiZmVjNmRhMGRhOTBjNGE4
NTJhYWYwHhcNMjUwNjE4MDkwMDI2WhcNMjUwNjE5MDkwMDI2WjAzMTEwLwYDVQQD
EygzOTZhZTY2ODVkNmIyMTlhNjlhYzAyNTQ0ZjM5NGRkODIxNzA2Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPL+ffRy+Y+JAD94m7BKXgc5HRaZ
YhYTVnL2ByLnNifCiBBxmOKD0nPRVLaELx+uXPl1DuNl9XWxoLjUzCrwepeffDbs
l9SfkWxP2m6HXke+qXN0z/RjvRjtZ/+vEnSCqJVioVmBlLKtsA61pWWV3lO/NBZ9
0nBqLbOPEQSUY0/xaY6h/7tZowkQWKZeWvhexaEczQkXvuy23GiKyhJzwnsPE6gm
c1+l1Yz7Q7LPm7HqekO0NBiPMUJE94ez7w2q1T0SJaHdJ1JJ0OfZaLGpJ2EtqeNQ
BgpQC3x3lDFzoG310BxzYHkJodcsc6r81Tk1PwwRO46S6Fj6WdajLiqtPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlq5mhdayGaaawCVE85TdghcGy7MB8GA1UdIwQY
MBaAFEdJHCI75uGqpWv+xtoNqQxKhSqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgt
OGFjZGY5NmM5OGEwLzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgtOGFjZGY5NmM5OGEw
LzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrP9A4Oi
DbjxHqHTFMXieq4duWSxqwASOYsDXP351deup9kuyy4JJKhEoE4hcbuitMb+WydG
8YuLXxm/RluZZo9aykp2jKvPVVmGKnISogf/m60EcoT/WFdNzm0WqwseKUAa3MnQ
4jC3NEmE/NsodXTnsopt6tTHi9PbYRbqQjb8kl8KTqZlqI5Rmo26GWIz2AAtuid4
uHp2tDfcY9nyrnuDgzr6yIH7FWCwiwDlUGn19DYOLEW/Jk5KBvmDr2sq/Jw8Gs81
NUZWX5Ahxan3rNAwSKJmRT41kxSbQ1OQrN3EJiXNXPN1U805ONhT6S5wDz7u136R
7SK0JD5YsoZKkw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 16:38:55 2025 by rpki-client