Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: 600HL4MHTzK1ZHbyHSi7eDTeB51nCz/qLNIpTXf0fys=
Subject key identifier: 77:9A:FA:4C:3E:8C:02:66:02:CB:B2:F4:4F:C9:AA:C6:B2:D2:44:11
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 01976BBD5EDA299BE51AB27BA4775FFBF31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0C5A
Signing time: Sat 14 Jun 2025 00:01:02 +0000
Manifest this update: Sat 14 Jun 2025 00:01:02 +0000
Manifest next update: Sun 15 Jun 2025 00:01:02 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: ukJ+88CwneqDDVzgad9DGV46XKosAizW44npQeb7cQg=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:5e:da:29:9b:e5:1a:b2:7b:a4:77:5f:fb:f3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Jun 14 00:01:02 2025 GMT
Not After : Jun 15 00:01:02 2025 GMT
Subject: CN=779afa4c3e8c026602cbb2f44fc9aac6b2d24411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:81:4b:dc:33:bb:c6:18:6b:03:43:18:2b:
a9:fe:de:75:99:b6:5e:ca:c5:da:6e:c1:18:0a:c1:
f6:dc:75:3a:99:2b:07:6c:0e:5e:83:10:2a:63:38:
02:50:4d:fe:2e:45:38:10:89:1d:1b:6c:e1:b7:96:
80:08:ca:93:be:4b:a3:2b:d2:1c:8e:d0:07:f9:1a:
e1:12:13:69:be:2e:59:62:2a:e2:81:98:9d:c5:f7:
0b:f2:0e:08:4d:78:61:d0:6f:f0:c9:47:6e:67:61:
83:3d:88:38:0a:0a:3d:54:8f:c7:9f:37:ca:fd:63:
33:2e:82:4a:47:5b:57:fd:30:c7:65:1f:12:ba:fa:
3b:0a:82:79:0d:aa:66:fc:b2:a5:0d:ae:41:15:65:
03:fd:01:de:7d:a9:d9:3c:bb:d4:e1:24:07:e4:f4:
89:0e:41:af:fe:fe:28:8c:53:cc:85:a4:2b:f9:7b:
71:e3:3c:0e:82:97:c2:23:d1:bd:ec:35:6c:d7:93:
f0:40:87:f2:97:f0:29:b6:6e:f6:d7:00:f5:09:70:
76:33:93:e0:55:60:e7:b5:79:a4:68:55:a7:ed:22:
7a:a8:d3:e0:61:cc:71:e6:5f:02:d7:36:f8:d4:69:
4a:f2:78:24:b0:71:3f:3b:86:1f:20:14:e1:ed:72:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9A:FA:4C:3E:8C:02:66:02:CB:B2:F4:4F:C9:AA:C6:B2:D2:44:11
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8f:25:e0:ac:47:a7:a5:7c:f2:62:4f:e7:7b:c5:4d:e1:18:
74:8a:a6:f2:06:aa:50:d3:6a:c3:d1:0a:2d:d2:77:3b:36:a1:
ac:5f:f8:2c:b3:50:e3:38:e7:10:b1:fc:58:9d:3d:60:3a:c7:
61:a2:12:34:29:3e:26:c7:f6:93:1c:51:c5:7e:55:da:e5:60:
d4:71:eb:db:f8:73:d3:32:60:9b:9b:21:dd:09:2d:63:f3:42:
d3:5f:45:69:33:77:15:34:7b:e4:4c:2c:88:65:c2:d0:a8:82:
ef:a9:97:0a:3c:c6:27:9f:d9:68:81:fb:4a:76:1a:f0:5d:ac:
c1:23:e0:9e:83:26:b0:26:48:c2:18:a3:53:b0:6b:c5:36:b7:
78:a1:d2:3c:e1:d6:25:db:fe:c3:e6:d2:9f:d5:43:c2:b7:ae:
85:40:fb:57:86:0e:74:14:1f:e3:55:64:58:ba:7f:89:2b:51:
7c:37:28:c5:1f:1c:6a:1c:ec:27:61:7f:f5:b7:fe:38:8b:82:
62:d3:6f:40:c9:03:be:f2:b2:84:3f:4e:50:a1:f1:37:a6:c3:
8a:8c:2c:94:f1:93:ab:8f:e6:0e:c2:d0:d8:e4:49:c0:2b:05:
ca:1c:24:b2:85:46:21:37:76:87:65:4b:13:a6:91:45:69:15:
3e:76:d9:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvV7aKZvlGrJ7pHdf+/MeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFm
NGU3N2YwHhcNMjUwNjE0MDAwMTAyWhcNMjUwNjE1MDAwMTAyWjAzMTEwLwYDVQQD
Eyg3NzlhZmE0YzNlOGMwMjY2MDJjYmIyZjQ0ZmM5YWFjNmIyZDI0NDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UWBS9wzu8YYawNDGCup/t51mbZe
ysXabsEYCsH23HU6mSsHbA5egxAqYzgCUE3+LkU4EIkdG2zht5aACMqTvkujK9Ic
jtAH+RrhEhNpvi5ZYirigZidxfcL8g4ITXhh0G/wyUduZ2GDPYg4Cgo9VI/HnzfK
/WMzLoJKR1tX/TDHZR8Suvo7CoJ5Dapm/LKlDa5BFWUD/QHefanZPLvU4SQH5PSJ
DkGv/v4ojFPMhaQr+Xtx4zwOgpfCI9G97DVs15PwQIfyl/Aptm721wD1CXB2M5Pg
VWDntXmkaFWn7SJ6qNPgYcxx5l8C1zb41GlK8ngksHE/O4YfIBTh7XKDhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHea+kw+jAJmAsuy9E/Jqsay0kQRMB8GA1UdIwQY
MBaAFPReeRQRMM7shXIV+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2Ut
MzNiZDg0MzQ5NWY4LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4
LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe48l4KxH
p6V88mJP53vFTeEYdIqm8gaqUNNqw9EKLdJ3OzahrF/4LLNQ4zjnELH8WJ09YDrH
YaISNCk+Jsf2kxxRxX5V2uVg1HHr2/hz0zJgm5sh3QktY/NC019FaTN3FTR75Ews
iGXC0KiC76mXCjzGJ5/ZaIH7SnYa8F2swSPgnoMmsCZIwhijU7BrxTa3eKHSPOHW
Jdv+w+bSn9VDwreuhUD7V4YOdBQf41VkWLp/iStRfDcoxR8cahzsJ2F/9bf+OIuC
YtNvQMkDvvKyhD9OUKHxN6bDiowslPGTq4/mDsLQ2ORJwCsFyhwksoVGITd2h2VL
E6aRRWkVPnbZWA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:51 2025 by rpki-client