Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
File: 0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json)
Hash identifier: 9IzNvxwrpAZ23nJwDzbaMc53Zku9sRyTRx0UMenkYps=
Subject key identifier: C9:B6:0C:B1:E9:09:58:20:49:FF:60:6E:2F:D1:F6:C3:0C:C5:65:C1
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial: 01976D3D7F62D68A209A4EF5FC3D8F8363E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
Manifest number: 0724
Signing time: Sat 14 Jun 2025 07:00:36 +0000
Manifest this update: Sat 14 Jun 2025 07:00:36 +0000
Manifest next update: Sun 15 Jun 2025 07:00:36 +0000
Files and hashes: 1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: 99pJgaHTjattNNS3nsXgWLyBLQTd1woNZGriJc8RPNs=)
2: 5kBRIytnJyvZSwOvYDew9C5v8g8.roa (hash: vyD1EDIJkExeSnXzO8jxWYNY6MqP1zOjQuUSZZBKDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:7f:62:d6:8a:20:9a:4e:f5:fc:3d:8f:83:63:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Validity
Not Before: Jun 14 07:00:36 2025 GMT
Not After : Jun 15 07:00:36 2025 GMT
Subject: CN=c9b60cb1e909582049ff606e2fd1f6c30cc565c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:3a:9a:bf:09:a9:63:95:92:b3:e5:30:74:
6c:07:95:85:fc:84:80:a0:f8:d1:5c:eb:d8:f9:bf:
fd:46:8a:dd:c5:ae:d7:a7:ae:57:00:c9:da:cb:a8:
02:6f:90:c7:d4:11:df:9a:7f:7c:30:f6:60:65:6e:
63:f1:38:1e:26:83:24:4d:a8:c4:da:95:91:40:44:
77:2a:35:88:97:5a:8b:97:ed:1a:03:15:63:8b:7f:
50:e6:d8:d6:47:85:50:17:f5:56:60:c3:e9:d3:92:
ec:43:c7:d0:93:40:3a:3f:42:cc:e3:d6:2e:51:f0:
77:9e:6b:9e:e3:de:c2:ff:50:01:04:34:72:64:fd:
4c:e2:b3:f0:b8:e7:c8:c4:80:5d:12:04:15:c6:13:
8f:7d:70:30:d2:9c:83:0d:c2:5e:2d:ab:61:61:b6:
b6:4b:09:3e:3f:5f:df:ba:1b:cf:0b:fd:8a:b0:88:
1a:2c:ba:db:f5:53:89:b6:2b:7b:8b:a4:46:d0:9d:
f2:b7:a0:83:74:2f:4c:aa:6e:8a:64:9b:55:38:7f:
05:5e:83:94:76:b5:c6:af:e8:ac:ca:79:25:5d:c3:
f2:1a:f9:10:e7:67:ea:50:55:07:ef:8c:0e:4c:8e:
49:0b:ab:ff:14:9d:3a:68:f7:66:50:f3:52:be:b6:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B6:0C:B1:E9:09:58:20:49:FF:60:6E:2F:D1:F6:C3:0C:C5:65:C1
X509v3 Authority Key Identifier:
keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2e:e9:fe:31:81:c3:0d:67:06:96:93:cb:48:42:d5:1d:13:
c9:d3:a0:e3:fe:87:df:b6:e4:d8:3a:d9:69:a1:39:63:4f:ad:
f5:ff:99:df:73:cf:12:01:44:0e:6f:05:1e:4d:a5:7c:da:86:
81:af:19:5e:6a:81:94:13:6c:14:10:77:8f:bd:76:66:9c:2e:
82:40:ed:ea:4a:16:c1:97:70:36:d8:c4:8f:31:d9:3a:b4:99:
c4:4d:5b:3e:6d:4a:6e:13:ed:7d:51:f5:aa:85:a8:04:16:a3:
15:54:9b:12:78:ce:7a:a1:f3:92:4f:f1:ca:a3:e7:72:01:97:
2b:73:3e:82:38:1f:1b:b2:97:f0:d6:28:fb:14:50:a4:78:38:
e6:f6:5c:5e:56:5e:4a:bb:f8:c0:61:fe:11:91:82:d4:e0:77:
f0:a0:6b:f4:38:12:5b:ee:53:a8:d4:3d:aa:69:f2:72:1c:b5:
8b:6d:47:2b:50:a6:a2:c9:85:e9:bd:ca:46:3f:8b:f0:1d:4e:
7f:7e:dc:f1:92:2e:05:e6:ef:9a:19:0b:c0:e6:83:dd:ec:de:
ae:dc:ba:77:53:34:46:65:56:32:23:f7:cd:58:59:76:8f:6a:
b1:15:d6:78:78:54:e7:9c:68:c7:74:3f:fe:99:28:f4:63:84:
08:a6:41:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPX9i1oogmk71/D2Pg2PgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNTY0NmEzYzlhY2I2YTRiMjAxYmI2MzI2YTlmMDA3NDIy
NGYzODcwHhcNMjUwNjE0MDcwMDM2WhcNMjUwNjE1MDcwMDM2WjAzMTEwLwYDVQQD
EyhjOWI2MGNiMWU5MDk1ODIwNDlmZjYwNmUyZmQxZjZjMzBjYzU2NWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWI6mr8JqWOVkrPlMHRsB5WF/ISA
oPjRXOvY+b/9Rordxa7Xp65XAMnay6gCb5DH1BHfmn98MPZgZW5j8TgeJoMkTajE
2pWRQER3KjWIl1qLl+0aAxVji39Q5tjWR4VQF/VWYMPp05LsQ8fQk0A6P0LM49Yu
UfB3nmue497C/1ABBDRyZP1M4rPwuOfIxIBdEgQVxhOPfXAw0pyDDcJeLathYba2
Swk+P1/fuhvPC/2KsIgaLLrb9VOJtit7i6RG0J3yt6CDdC9Mqm6KZJtVOH8FXoOU
drXGr+isynklXcPyGvkQ52fqUFUH74wOTI5JC6v/FJ06aPdmUPNSvraEgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMm2DLHpCVggSf9gbi/R9sMMxWXBMB8GA1UdIwQY
MBaAFNFWRqPJrLaksgG7Yyap8AdCJPOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi81MGQ0ZDItY2I5NC00MGY1LTliY2Ut
OTBkZGU4NWQ4ZmE3LzEvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi81MGQ0ZDItY2I5NC00MGY1LTliY2UtOTBkZGU4NWQ4ZmE3
LzEvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGy7p/jGB
ww1nBpaTy0hC1R0TydOg4/6H37bk2DrZaaE5Y0+t9f+Z33PPEgFEDm8FHk2lfNqG
ga8ZXmqBlBNsFBB3j712ZpwugkDt6koWwZdwNtjEjzHZOrSZxE1bPm1KbhPtfVH1
qoWoBBajFVSbEnjOeqHzkk/xyqPncgGXK3M+gjgfG7KX8NYo+xRQpHg45vZcXlZe
Srv4wGH+EZGC1OB38KBr9DgSW+5TqNQ9qmnychy1i21HK1CmosmF6b3KRj+L8B1O
f37c8ZIuBebvmhkLwOaD3ezerty6d1M0RmVWMiP3zVhZdo9qsRXWeHhU55xox3Q/
/pko9GOECKZBjA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:14 2025 by rpki-client