Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: RbuMTSDj5Jz/cQ7H7bPPQ3fR8izsMiJW0tzOFTdntZk=
Subject key identifier: 18:38:7D:86:98:50:69:3E:BD:C8:DE:54:37:29:C5:8B:20:8D:86:5E
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 01976F9A3A1FF3B12B850CFB8E6E24CCC4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 12D3
Signing time: Sat 14 Jun 2025 18:01:07 +0000
Manifest this update: Sat 14 Jun 2025 18:01:07 +0000
Manifest next update: Sun 15 Jun 2025 18:01:07 +0000
Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: Jl1pB+Qwu3mpg9/U2uVvTIJE+9fn/SvYfDKNCq2H1y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:3a:1f:f3:b1:2b:85:0c:fb:8e:6e:24:cc:c4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Jun 14 18:01:07 2025 GMT
Not After : Jun 15 18:01:07 2025 GMT
Subject: CN=18387d869850693ebdc8de543729c58b208d865e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:f8:9d:2a:26:10:68:21:23:a5:a3:80:3d:
90:63:2e:70:f8:25:d5:be:12:56:07:e6:ff:be:3c:
be:08:50:1c:33:ab:c8:8f:d7:5e:3e:da:49:57:51:
79:5f:a0:b7:44:84:b8:fc:b4:ae:f7:78:39:10:e6:
76:9c:da:c8:a7:6e:0a:fd:27:5a:f6:97:9a:00:3a:
93:a6:c3:d4:89:f6:dd:12:04:36:9e:80:97:53:0b:
56:8f:4e:80:00:8d:ca:72:79:13:73:87:49:ba:d5:
c6:97:09:2d:69:44:3d:9d:89:af:b6:20:0d:f8:3f:
30:23:ab:9c:b3:3f:b7:e2:bf:6d:bc:4f:00:5e:c1:
02:c5:f6:05:5e:4f:5c:d4:74:9b:88:2a:e9:23:57:
c1:0e:d8:62:40:db:c4:e3:d1:e6:59:6d:99:e3:2a:
8a:4f:f1:4a:a9:f8:fa:41:16:8c:93:4a:60:34:6e:
5c:01:3c:ff:3f:73:86:a7:51:8a:0e:78:6d:b0:de:
bc:fa:45:d9:fb:8a:ae:0b:bd:a5:48:22:af:7b:ea:
ce:37:db:fa:f4:cd:3f:02:27:ff:e9:0d:c7:bb:3e:
ac:10:1a:72:f3:29:c6:47:a0:f1:ff:2a:e2:85:38:
82:54:28:f7:8b:a9:bd:69:4d:3e:3d:94:1d:cb:78:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:7D:86:98:50:69:3E:BD:C8:DE:54:37:29:C5:8B:20:8D:86:5E
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:14:e5:a7:ba:15:4a:6a:72:df:57:99:11:53:89:a7:75:b1:
3d:85:f2:ff:f7:b5:d9:60:d8:2e:5f:0b:1f:bb:e9:92:25:94:
82:15:21:b8:ce:7d:bf:56:c4:1a:00:0b:09:e6:54:7c:4f:80:
26:01:78:8e:ed:cb:9b:0b:cd:22:1d:2a:9f:60:16:07:80:90:
5f:69:bc:d4:62:15:c3:d9:df:f5:cf:0a:f2:f1:29:f5:4c:f9:
d5:f0:56:48:d1:be:26:67:c2:33:13:c0:31:a8:91:a0:f1:1c:
81:22:85:bb:63:63:a6:29:b8:3d:10:3e:aa:1d:54:aa:2c:b8:
b8:47:29:c6:8c:d4:ef:96:3c:09:d3:ea:52:af:96:2f:5b:ce:
da:58:20:6c:4a:b5:8f:f6:67:f1:81:2a:76:d9:83:2c:e1:15:
e3:d0:bf:bc:a8:f2:08:2c:44:4f:61:72:b1:73:d4:60:4b:b0:
52:03:3f:96:84:c2:b3:50:a6:66:80:65:46:75:a9:05:50:80:
7d:6b:4c:6d:d0:b5:f8:8c:78:2b:b2:9d:61:60:01:b8:30:ce:
18:52:d8:b4:b9:5e:42:99:6a:7e:e5:fa:44:89:44:6f:9d:30:
e4:e3:e7:42:60:6f:21:fc:f9:c7:78:05:dc:87:69:02:6c:ab:
b8:3b:29:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmjof87ErhQz7jm4kzMS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YWI2YjIyNTRlNDU3MzBhYWZhNDVhYjUxOTczMjAzNjE0
YmI2Y2MwHhcNMjUwNjE0MTgwMTA3WhcNMjUwNjE1MTgwMTA3WjAzMTEwLwYDVQQD
EygxODM4N2Q4Njk4NTA2OTNlYmRjOGRlNTQzNzI5YzU4YjIwOGQ4NjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsj4nSomEGghI6WjgD2QYy5w+CXV
vhJWB+b/vjy+CFAcM6vIj9dePtpJV1F5X6C3RIS4/LSu93g5EOZ2nNrIp24K/Sda
9peaADqTpsPUifbdEgQ2noCXUwtWj06AAI3KcnkTc4dJutXGlwktaUQ9nYmvtiAN
+D8wI6ucsz+34r9tvE8AXsECxfYFXk9c1HSbiCrpI1fBDthiQNvE49HmWW2Z4yqK
T/FKqfj6QRaMk0pgNG5cATz/P3OGp1GKDnhtsN68+kXZ+4quC72lSCKve+rON9v6
9M0/Aif/6Q3Huz6sEBpy8ynGR6Dx/yrihTiCVCj3i6m9aU0+PZQdy3g4owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg4fYaYUGk+vcjeVDcpxYsgjYZeMB8GA1UdIwQY
MBaAFMerayJU5FcwqvpFq1GXMgNhS7bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAt
MWQ1NWQ1OTI5Y2VjLzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAtMWQ1NWQ1OTI5Y2Vj
LzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxTlp7oV
Smpy31eZEVOJp3WxPYXy//e12WDYLl8LH7vpkiWUghUhuM59v1bEGgALCeZUfE+A
JgF4ju3LmwvNIh0qn2AWB4CQX2m81GIVw9nf9c8K8vEp9Uz51fBWSNG+JmfCMxPA
MaiRoPEcgSKFu2Njpim4PRA+qh1Uqiy4uEcpxozU75Y8CdPqUq+WL1vO2lggbEq1
j/Zn8YEqdtmDLOEV49C/vKjyCCxET2FysXPUYEuwUgM/loTCs1CmZoBlRnWpBVCA
fWtMbdC1+Ix4K7KdYWABuDDOGFLYtLleQplqfuX6RIlEb50w5OPnQmBvIfz5x3gF
3IdpAmyruDspTQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:05:57 2025 by rpki-client