Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: UOBjlHa9WxOaYdIaYjuPa9TD2J+HhMtROmWRMDm6nY8=
Subject key identifier: C2:13:62:DB:DE:33:58:FC:04:72:59:54:47:86:99:8D:EB:44:28:87
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 0197684E03034EC4EBAC3320E05F84654FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0AD3
Signing time: Fri 13 Jun 2025 08:00:32 +0000
Manifest this update: Fri 13 Jun 2025 08:00:32 +0000
Manifest next update: Sat 14 Jun 2025 08:00:32 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: NeL6L5MlMYK8swC20UEP2tY2dFPNqvArPKCySJkhypU=)
2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:03:03:4e:c4:eb:ac:33:20:e0:5f:84:65:4f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Jun 13 08:00:32 2025 GMT
Not After : Jun 14 08:00:32 2025 GMT
Subject: CN=c21362dbde3358fc047259544786998deb442887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d5:fe:5c:e8:0c:2b:49:eb:cf:49:9d:72:2d:
40:e7:6f:37:62:e9:fc:d5:32:7b:fd:92:d0:49:54:
f3:2f:e1:0b:a3:cf:84:d5:a3:72:d5:db:8f:23:9f:
62:26:2e:b7:ea:7b:53:3d:0b:dd:ee:14:80:0d:b4:
e1:b3:19:32:b5:ce:79:29:33:7b:fd:14:33:85:1b:
fd:bc:26:25:55:e9:d3:24:04:97:28:87:b8:e9:49:
78:a7:04:42:a3:1c:cd:d3:41:6f:85:8f:77:2e:23:
ce:36:a1:e9:7e:46:1b:8e:bc:d6:1b:df:e0:05:b7:
33:7a:a1:d6:15:10:fc:19:4b:6d:db:06:d3:92:96:
11:f7:dd:fa:bc:d8:20:2f:c1:22:ce:76:3f:8f:5e:
4c:ea:4b:bd:99:8a:15:49:1f:d6:93:47:97:f8:ac:
5b:dd:5c:67:9a:01:01:f2:15:fe:89:67:7b:87:e2:
04:38:97:9b:43:c1:49:12:f3:30:fa:aa:19:73:db:
ca:38:fc:78:20:25:f5:0c:47:84:02:14:4a:2b:b4:
0f:87:21:7c:6b:d0:11:b4:78:b7:68:11:d6:73:f4:
c6:cc:38:ec:4d:79:d1:32:29:25:94:54:6d:dc:69:
2d:79:89:9b:4a:98:cd:b0:a2:38:a8:4e:f6:a4:90:
7e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:62:DB:DE:33:58:FC:04:72:59:54:47:86:99:8D:EB:44:28:87
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fd:f0:4e:38:25:a2:4d:e5:19:ed:48:d3:28:d4:4d:f8:5d:
38:78:de:2f:d8:06:4b:71:74:72:6a:c7:6d:93:9c:b0:de:5d:
0a:c7:bd:f0:b1:36:4b:d7:32:47:3f:21:c4:11:80:89:66:0e:
93:4d:9b:17:37:89:e6:16:be:fe:3d:74:f1:b2:73:90:96:3a:
de:9a:24:1c:1f:3a:a4:e6:56:bf:ae:bd:eb:01:c7:75:3e:67:
e4:00:11:28:f4:2f:4d:09:40:67:f4:bb:9d:f1:1f:98:48:fa:
fa:44:3b:c0:47:7d:f1:df:8d:b8:99:86:87:35:58:f1:b8:ba:
00:2c:5e:7e:78:76:cf:39:69:ac:fb:3e:05:6b:10:e2:87:3b:
d7:50:34:7c:5f:dd:50:39:9f:f9:d9:84:d9:17:de:e9:53:f7:
91:d4:87:26:61:09:ab:20:2a:ce:d3:b3:43:5f:a7:ec:3a:77:
cb:62:46:de:07:d7:47:f5:cd:7c:c6:2d:c8:9a:d2:96:42:f1:
13:86:d5:49:79:c1:f2:52:19:99:ed:a3:9a:36:c2:cd:d9:0d:
f3:23:76:48:6a:a3:eb:d1:52:fe:ba:c0:7d:57:05:cf:fc:49:
f8:fe:90:b8:07:e0:67:cd:71:36:aa:50:b9:4f:39:8a:7e:be:
5a:f0:b3:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTgMDTsTrrDMg4F+EZU/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDViODQ4M2IxNzEyYjcwMjM1NDEwNTZlNzMwODUzNjZk
MjkzNDYwHhcNMjUwNjEzMDgwMDMyWhcNMjUwNjE0MDgwMDMyWjAzMTEwLwYDVQQD
EyhjMjEzNjJkYmRlMzM1OGZjMDQ3MjU5NTQ0Nzg2OTk4ZGViNDQyODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tX+XOgMK0nrz0mdci1A5283Yun8
1TJ7/ZLQSVTzL+ELo8+E1aNy1duPI59iJi636ntTPQvd7hSADbThsxkytc55KTN7
/RQzhRv9vCYlVenTJASXKIe46Ul4pwRCoxzN00FvhY93LiPONqHpfkYbjrzWG9/g
BbczeqHWFRD8GUtt2wbTkpYR9936vNggL8EiznY/j15M6ku9mYoVSR/Wk0eX+Kxb
3VxnmgEB8hX+iWd7h+IEOJebQ8FJEvMw+qoZc9vKOPx4ICX1DEeEAhRKK7QPhyF8
a9ARtHi3aBHWc/TGzDjsTXnRMikllFRt3GkteYmbSpjNsKI4qE72pJB+QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMITYtveM1j8BHJZVEeGmY3rRCiHMB8GA1UdIwQY
MBaAFCDVuEg7FxK3AjVBBW5zCFNm0pNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEt
MGMyZmY3OTM3ZTZmLzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEtMGMyZmY3OTM3ZTZm
LzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/3wTjgl
ok3lGe1I0yjUTfhdOHjeL9gGS3F0cmrHbZOcsN5dCse98LE2S9cyRz8hxBGAiWYO
k02bFzeJ5ha+/j108bJzkJY63pokHB86pOZWv6696wHHdT5n5AARKPQvTQlAZ/S7
nfEfmEj6+kQ7wEd98d+NuJmGhzVY8bi6ACxefnh2zzlprPs+BWsQ4oc711A0fF/d
UDmf+dmE2Rfe6VP3kdSHJmEJqyAqztOzQ1+n7Dp3y2JG3gfXR/XNfMYtyJrSlkLx
E4bVSXnB8lIZme2jmjbCzdkN8yN2SGqj69FS/rrAfVcFz/xJ+P6QuAfgZ81xNqpQ
uU85in6+WvCzpw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:53 2025 by rpki-client