Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: IwO21zNY7vY5srhXBiAzLU6LmpqbljaRiJxKGsdD1/Q=
Subject key identifier: C7:57:D7:CE:27:41:40:D1:D6:DB:FE:43:DA:40:8A:2A:E0:40:68:75
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 01976997A5A44778275EF6EF5351CADCDE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 14:00:35 +0000
Manifest this update: Fri 13 Jun 2025 14:00:35 +0000
Manifest next update: Sat 14 Jun 2025 14:00:35 +0000
Files and hashes: 1: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (hash: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: qC3orcY5WVy1+lVCwMrE74H4RFLz9/zYFyXFKgJJkGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:a5:a4:47:78:27:5e:f6:ef:53:51:ca:dc:de:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Jun 13 14:00:35 2025 GMT
Not After : Jun 14 14:00:35 2025 GMT
Subject: CN=c757d7ce274140d1d6dbfe43da408a2ae0406875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:9f:78:e3:6a:26:8f:5a:2d:d2:68:27:c8:
5e:21:96:12:22:84:ef:31:9c:30:3b:09:ce:1c:f7:
0d:55:bf:6e:c5:9b:47:e2:3a:78:6c:2b:17:47:7a:
63:0f:64:c5:3b:7d:3e:26:77:d2:78:ff:5b:a5:a4:
12:ea:bb:96:d1:ec:9a:c3:3c:a6:37:e1:2c:12:6f:
e8:99:f0:90:52:88:df:ae:09:4e:55:f6:02:71:e1:
b9:bc:1f:1e:93:0d:ae:36:ff:82:c6:1b:f6:34:05:
bd:d4:b2:c3:0d:d5:c8:26:2c:53:aa:eb:c7:e6:65:
02:04:81:8d:dd:16:51:dd:38:76:97:15:64:92:26:
99:b5:a1:8e:f2:46:ea:82:f7:98:1a:3a:e7:5f:81:
9f:76:cc:00:43:28:4e:12:5a:08:e8:55:58:15:38:
0c:55:cc:27:a2:d0:66:f3:37:3b:0e:d3:18:70:ec:
99:94:d0:46:bf:e6:71:0f:f8:6c:7d:18:46:14:dc:
d0:b0:16:aa:f9:3c:9c:cc:9e:5a:5b:0d:7d:73:36:
34:b4:02:6a:ee:a2:f7:18:c3:b6:6d:23:20:2b:4f:
c0:64:0d:b7:41:26:a5:26:8c:10:de:f3:a9:b6:81:
58:4c:85:01:90:11:19:94:43:f6:80:4c:ec:5b:9c:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:57:D7:CE:27:41:40:D1:D6:DB:FE:43:DA:40:8A:2A:E0:40:68:75
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:99:43:e8:17:9d:e8:ce:ac:34:6e:b8:7b:fa:bc:d9:30:e6:
b9:c8:e3:7f:f8:bf:37:ec:47:81:55:ad:b6:54:83:2d:d2:a4:
7c:2a:63:bf:60:fe:0b:c1:19:b9:23:fa:90:4e:c1:eb:a5:38:
f6:ed:af:7c:69:cb:0d:a4:39:9e:3f:54:2f:41:d7:42:e1:2c:
d5:c3:ec:57:2f:cd:df:33:74:d9:09:e8:f1:28:54:08:4b:83:
40:d6:ff:e0:5f:8b:b6:86:ce:a4:56:a2:70:94:b6:7a:7f:37:
23:5f:3f:bc:a2:b1:8b:d7:b9:45:1b:56:8c:03:56:ef:d2:45:
01:5f:ae:cf:2d:31:a7:38:5e:96:fa:c4:3e:14:f9:df:af:4d:
bb:5d:ef:4f:67:14:0d:e4:80:85:85:ab:a9:b6:be:5d:18:c7:
a5:0d:f2:83:44:2d:8b:38:ab:96:2b:6f:4b:39:d0:95:42:b8:
5a:28:e4:44:5f:f8:2d:5a:3e:e3:fa:49:fe:83:ee:39:26:5a:
53:89:8a:89:d1:8c:30:be:cb:c4:08:ad:a4:8c:87:0b:0f:8d:
b0:af:76:c3:04:aa:96:7e:b8:1f:b0:ba:c7:dc:ba:e5:d1:93:
1b:ad:03:a6:d6:6a:24:b0:55:e5:5f:a1:68:84:16:96:c5:ce:
de:67:68:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl6WkR3gnXvbvU1HK3N6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZDNhOTE0NTk3M2M3OWEzZTdiOTU1MzFlM2QwZGY3ZDI4
YzRhMDQwHhcNMjUwNjEzMTQwMDM1WhcNMjUwNjE0MTQwMDM1WjAzMTEwLwYDVQQD
EyhjNzU3ZDdjZTI3NDE0MGQxZDZkYmZlNDNkYTQwOGEyYWUwNDA2ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV2feONqJo9aLdJoJ8heIZYSIoTv
MZwwOwnOHPcNVb9uxZtH4jp4bCsXR3pjD2TFO30+JnfSeP9bpaQS6ruW0eyawzym
N+EsEm/omfCQUojfrglOVfYCceG5vB8ekw2uNv+Cxhv2NAW91LLDDdXIJixTquvH
5mUCBIGN3RZR3Th2lxVkkiaZtaGO8kbqgveYGjrnX4GfdswAQyhOEloI6FVYFTgM
VcwnotBm8zc7DtMYcOyZlNBGv+ZxD/hsfRhGFNzQsBaq+TyczJ5aWw19czY0tAJq
7qL3GMO2bSMgK0/AZA23QSalJowQ3vOptoFYTIUBkBEZlEP2gEzsW5zhDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdX184nQUDR1tv+Q9pAiirgQGh1MB8GA1UdIwQY
MBaAFInTqRRZc8eaPnuVUx49DffSjEoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUt
N2Q0MGMxMWE5NTAwLzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUtN2Q0MGMxMWE5NTAw
LzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJlD6Bed
6M6sNG64e/q82TDmucjjf/i/N+xHgVWttlSDLdKkfCpjv2D+C8EZuSP6kE7B66U4
9u2vfGnLDaQ5nj9UL0HXQuEs1cPsVy/N3zN02Qno8ShUCEuDQNb/4F+LtobOpFai
cJS2en83I18/vKKxi9e5RRtWjANW79JFAV+uzy0xpzhelvrEPhT5369Nu13vT2cU
DeSAhYWrqba+XRjHpQ3yg0QtizirlitvSznQlUK4WijkRF/4LVo+4/pJ/oPuOSZa
U4mKidGMML7LxAitpIyHCw+NsK92wwSqln64H7C6x9y65dGTG60DptZqJLBV5V+h
aIQWlsXO3mdolw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:56 2025 by rpki-client