Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: KPelOIAZxIc7etN9/pWm8lj30oO/BSXuECE4iIUTG0E=
Subject key identifier: 9C:07:F7:09:A8:60:3D:D4:58:38:E9:F7:C4:BE:AD:A5:86:06:1B:A7
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 01976BBD4D9AA9CFFF823F9F527E8CAF94B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 0ECD
Signing time: Sat 14 Jun 2025 00:00:57 +0000
Manifest this update: Sat 14 Jun 2025 00:00:57 +0000
Manifest next update: Sun 15 Jun 2025 00:00:57 +0000
Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: L9QH2Rbx4wVi5rOmW7tOpozLrv1By1xKTFk/yyh9ej8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:4d:9a:a9:cf:ff:82:3f:9f:52:7e:8c:af:94:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Jun 14 00:00:57 2025 GMT
Not After : Jun 15 00:00:57 2025 GMT
Subject: CN=9c07f709a8603dd45838e9f7c4beada586061ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:54:d5:c4:42:23:1a:61:99:c4:19:15:62:
98:81:0c:fb:1d:39:12:57:ae:ee:6d:45:29:b0:51:
4a:65:47:67:73:99:8e:5b:5e:85:5c:a6:ce:15:81:
e9:b8:52:b9:b3:97:e6:0a:ab:6e:fd:9f:d4:7f:70:
cb:92:fa:86:54:78:8b:5f:8c:b4:75:03:5f:c5:06:
54:3d:cf:74:24:98:6a:1d:05:b3:21:84:0f:fd:9d:
42:5f:8b:92:45:a1:1e:e3:7a:db:46:f9:bb:68:be:
0c:05:25:ca:8d:78:17:57:a8:9d:f5:b1:b7:2d:76:
d7:e4:ff:59:3d:d4:0c:83:14:2d:ed:3e:74:bc:8c:
2a:81:94:c9:5a:20:d6:29:1d:23:81:14:81:9a:7a:
e9:72:fb:fc:e6:f8:0d:3a:54:e5:4d:4d:ad:bd:41:
bc:f6:00:97:bd:f6:08:6a:ab:3a:75:b3:c3:3b:93:
a6:45:8b:84:c7:ea:a2:77:ab:41:68:4b:8a:6e:9d:
15:9b:75:b0:ae:c8:e9:d2:1e:d7:ed:a7:56:a0:54:
17:30:e4:06:4f:c6:12:0e:d2:29:69:2a:e3:f2:cd:
4d:2e:e1:9b:03:4a:a3:8c:12:16:09:40:dc:e2:90:
35:0b:f5:35:d3:e8:1e:f9:ab:c9:39:65:fc:14:1a:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:07:F7:09:A8:60:3D:D4:58:38:E9:F7:C4:BE:AD:A5:86:06:1B:A7
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c6:0c:d4:f7:46:09:5e:a3:04:ee:12:76:d1:c6:ba:d2:ca:
2b:91:1d:ca:da:89:07:df:6a:39:1f:e6:9c:84:c4:d3:59:0d:
a4:3c:eb:f5:43:90:e1:a5:fb:c6:31:59:d8:42:42:cc:a2:e9:
6b:e5:e9:e0:47:78:0e:2b:59:7f:95:54:84:31:e4:90:21:6b:
55:25:44:01:90:a9:a4:2e:0a:6c:37:6a:bb:cd:dd:2a:88:87:
56:9f:5b:0d:ef:c3:dd:b4:61:75:38:1e:84:4d:fd:eb:24:af:
ef:32:cd:d3:4a:84:72:bd:81:80:e2:ff:02:94:24:54:dc:82:
54:02:05:0f:66:34:0b:10:93:af:10:f0:56:f7:72:64:04:76:
e3:c4:23:e5:fa:f7:8b:e7:50:23:72:46:d3:0c:cf:81:65:48:
14:fc:0a:49:7d:af:b2:7f:30:3c:c4:91:6b:1b:c9:45:20:e0:
28:df:77:31:60:d2:d9:da:3f:d0:db:e5:f3:be:25:47:26:1b:
47:b7:b6:7c:95:41:c0:2a:aa:e9:a5:ae:9b:a8:d4:4b:5d:43:
72:e5:71:17:02:32:e2:e0:79:67:fc:ab:50:9d:5f:b1:fe:03:
44:10:ce:39:c6:25:84:9b:f8:69:a0:88:a8:0c:75:d0:03:75:
40:bc:07:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvU2aqc//gj+fUn6Mr5SyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTVkNTJiM2NhODc0NTQ1NzViNjViNzIwZWVmODFhMjYy
YTVmM2EwHhcNMjUwNjE0MDAwMDU3WhcNMjUwNjE1MDAwMDU3WjAzMTEwLwYDVQQD
Eyg5YzA3ZjcwOWE4NjAzZGQ0NTgzOGU5ZjdjNGJlYWRhNTg2MDYxYmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJhU1cRCIxphmcQZFWKYgQz7HTkS
V67ubUUpsFFKZUdnc5mOW16FXKbOFYHpuFK5s5fmCqtu/Z/Uf3DLkvqGVHiLX4y0
dQNfxQZUPc90JJhqHQWzIYQP/Z1CX4uSRaEe43rbRvm7aL4MBSXKjXgXV6id9bG3
LXbX5P9ZPdQMgxQt7T50vIwqgZTJWiDWKR0jgRSBmnrpcvv85vgNOlTlTU2tvUG8
9gCXvfYIaqs6dbPDO5OmRYuEx+qid6tBaEuKbp0Vm3Wwrsjp0h7X7adWoFQXMOQG
T8YSDtIpaSrj8s1NLuGbA0qjjBIWCUDc4pA1C/U10+ge+avJOWX8FBrVDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwH9wmoYD3UWDjp98S+raWGBhunMB8GA1UdIwQY
MBaAFK2l1Ss8qHRUV1tltyDu+BomKl86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMt
ZDE4YWI0ZjdmNWRmLzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMtZDE4YWI0ZjdmNWRm
LzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMYM1PdG
CV6jBO4SdtHGutLKK5EdytqJB99qOR/mnITE01kNpDzr9UOQ4aX7xjFZ2EJCzKLp
a+Xp4Ed4DitZf5VUhDHkkCFrVSVEAZCppC4KbDdqu83dKoiHVp9bDe/D3bRhdTge
hE396ySv7zLN00qEcr2BgOL/ApQkVNyCVAIFD2Y0CxCTrxDwVvdyZAR248Qj5fr3
i+dQI3JG0wzPgWVIFPwKSX2vsn8wPMSRaxvJRSDgKN93MWDS2do/0Nvl874lRyYb
R7e2fJVBwCqq6aWum6jUS11DcuVxFwIy4uB5Z/yrUJ1fsf4DRBDOOcYlhJv4aaCI
qAx10AN1QLwHHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:48 2025 by rpki-client