Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: zYCIDl8SGVA2guwFLBNeMMtSikjse6HNV6nWE2m6vxY=
Subject key identifier: BA:A3:DA:1E:D9:5F:8F:15:DA:A7:D7:63:7F:65:24:C2:07:C9:2D:61
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019788EB31BA6AE02356C791D1765B53C266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 15A3
Signing time: Thu 19 Jun 2025 16:00:04 +0000
Manifest this update: Thu 19 Jun 2025 16:00:04 +0000
Manifest next update: Fri 20 Jun 2025 16:00:04 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: KH6lEsugzrCfdXLmKPTpBLfqsI2gHtSGaHRbBef5uIo=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: cWqhhGQ2nwF4u5SVS7GOVj8_H8Q.roa (hash: tE3zP2hfr/4EiGnnKAeQTDpDnqcSls7BckOuw6iyYdQ=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:eb:31:ba:6a:e0:23:56:c7:91:d1:76:5b:53:c2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jun 19 16:00:04 2025 GMT
Not After : Jun 20 16:00:04 2025 GMT
Subject: CN=baa3da1ed95f8f15daa7d7637f6524c207c92d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:79:9d:3a:31:9b:a5:c2:e3:02:59:c5:5c:19:
c2:72:c3:3b:e8:04:2a:38:de:f8:45:4e:7b:ff:90:
f4:68:e2:f4:af:ac:cd:67:91:1f:c8:cd:2d:f9:10:
2a:09:4e:1c:2d:d5:bf:31:5d:1a:c2:e0:6d:1e:66:
29:26:e9:83:cd:06:4a:56:59:ee:3c:6c:d7:9a:27:
9c:26:83:7f:45:70:cd:57:34:3a:fd:a8:a0:0e:9e:
f0:6a:d3:80:65:31:cf:da:a5:ce:50:03:a6:d9:c9:
f9:eb:4a:fe:ce:5e:8a:2a:49:b5:e4:90:4a:22:31:
a1:b2:0a:98:ca:a9:ad:88:35:3a:99:3b:b5:a8:84:
dd:da:fe:ea:34:22:79:f2:8f:47:68:d6:b9:0d:64:
56:b7:52:0f:13:34:3a:df:0e:4e:80:fd:0d:e3:63:
44:0d:bf:94:1c:de:a9:de:92:73:25:d6:08:3d:a0:
e4:1c:29:dc:0b:bb:a5:73:72:7d:83:d6:33:ba:9b:
9d:dc:5d:2c:a3:75:8e:b5:8b:5c:a6:a4:8f:01:7e:
a7:3e:71:09:29:eb:61:c6:3e:ec:f7:9d:d9:f1:29:
db:a1:5e:42:83:3c:33:0d:ec:d5:8f:c8:54:de:f2:
17:a3:5c:82:45:24:32:be:c3:a9:88:b4:f9:28:9d:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:DA:1E:D9:5F:8F:15:DA:A7:D7:63:7F:65:24:C2:07:C9:2D:61
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e7:eb:63:67:0a:f7:d8:c6:4e:31:65:11:67:6e:26:f3:ef:
0d:8d:bb:d9:78:1b:69:36:22:5e:80:4b:d7:dc:78:27:f3:c1:
59:1a:00:58:b4:ca:3d:55:90:bd:15:c9:59:15:70:54:4e:d9:
97:c5:1f:2b:99:87:07:45:fb:07:62:75:1a:d3:1a:16:ed:76:
e1:f9:96:e0:62:23:50:05:3c:ea:f2:19:92:3b:e5:1a:d2:54:
14:06:08:9d:a8:da:fe:62:d2:bd:83:18:db:0d:d0:45:21:3d:
a6:5d:7a:87:e7:66:b1:10:40:30:79:ab:7b:af:95:2d:47:d4:
05:85:68:bd:ce:ff:d9:d2:6b:3c:c9:31:3d:de:59:a9:7c:d4:
7f:8d:ff:e1:68:6a:53:dc:db:cb:8e:33:5e:b7:e7:48:5e:d4:
ce:c7:d3:8f:8b:78:35:52:ba:9f:13:d5:25:09:8b:9b:04:03:
22:4e:2d:89:9a:2f:d4:67:fa:73:41:03:ce:9a:04:47:39:90:
bd:af:cb:41:4c:d5:f6:bb:8a:d0:cf:ce:73:0d:cd:e5:ac:44:
92:ff:73:25:6a:21:ff:c1:0d:0a:5e:c0:30:c1:68:75:6a:7a:
2b:4c:9a:9e:01:91:b2:e6:fa:a3:ba:9e:c5:7d:28:39:b9:8e:
0d:95:91:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeI6zG6auAjVseR0XZbU8JmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz
YjJjYTIwHhcNMjUwNjE5MTYwMDA0WhcNMjUwNjIwMTYwMDA0WjAzMTEwLwYDVQQD
EyhiYWEzZGExZWQ5NWY4ZjE1ZGFhN2Q3NjM3ZjY1MjRjMjA3YzkyZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83mdOjGbpcLjAlnFXBnCcsM76AQq
ON74RU57/5D0aOL0r6zNZ5EfyM0t+RAqCU4cLdW/MV0awuBtHmYpJumDzQZKVlnu
PGzXmiecJoN/RXDNVzQ6/aigDp7watOAZTHP2qXOUAOm2cn560r+zl6KKkm15JBK
IjGhsgqYyqmtiDU6mTu1qITd2v7qNCJ58o9HaNa5DWRWt1IPEzQ63w5OgP0N42NE
Db+UHN6p3pJzJdYIPaDkHCncC7ulc3J9g9Yzupud3F0so3WOtYtcpqSPAX6nPnEJ
Kethxj7s953Z8SnboV5CgzwzDezVj8hU3vIXo1yCRSQyvsOpiLT5KJ1LlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqj2h7ZX48V2qfXY39lJMIHyS1hMB8GA1UdIwQY
MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct
NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1
LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+frY2cK
99jGTjFlEWduJvPvDY272XgbaTYiXoBL19x4J/PBWRoAWLTKPVWQvRXJWRVwVE7Z
l8UfK5mHB0X7B2J1GtMaFu124fmW4GIjUAU86vIZkjvlGtJUFAYInaja/mLSvYMY
2w3QRSE9pl16h+dmsRBAMHmre6+VLUfUBYVovc7/2dJrPMkxPd5ZqXzUf43/4Whq
U9zby44zXrfnSF7UzsfTj4t4NVK6nxPVJQmLmwQDIk4tiZov1Gf6c0EDzpoERzmQ
va/LQUzV9ruK0M/Ocw3N5axEkv9zJWoh/8ENCl7AMMFodWp6K0yangGRsub6o7qe
xX0oObmODZWRuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 19 23:27:12 2025 by rpki-client