Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: QxuMtLyc9ipRLBYTw1Rc64wFg1aCm68zuudw50vaGL8=
Subject key identifier: 71:C6:2E:6F:AF:C1:28:D3:AD:F6:BE:BB:A8:95:E5:28:0E:F0:F9:7A
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 01976960F87DB31898F544D8C0397D366824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0D28
Signing time: Fri 13 Jun 2025 13:00:52 +0000
Manifest this update: Fri 13 Jun 2025 13:00:52 +0000
Manifest next update: Sat 14 Jun 2025 13:00:52 +0000
Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: mGIAXihHpWEjPGh6jrKPxuuvqtmLTQGulQ7r/pAWLbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:f8:7d:b3:18:98:f5:44:d8:c0:39:7d:36:68:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Jun 13 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=71c62e6fafc128d3adf6bebba895e5280ef0f97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:78:33:36:a8:2f:5e:64:f9:ae:9c:61:81:43:
d5:f4:dd:ee:db:b9:78:dd:b8:b7:27:2c:96:a3:e3:
db:32:67:94:61:5f:35:1b:6b:ad:64:53:01:47:62:
96:70:38:70:17:86:15:0d:8a:90:9f:9a:48:43:6a:
d5:77:56:9f:73:f9:ec:c7:0e:10:ab:ca:bb:31:9f:
a7:61:ef:fd:cd:08:95:06:89:07:8b:38:f8:b2:3c:
7d:6a:aa:d8:4e:be:41:b3:7c:8d:c2:76:12:28:48:
b8:9d:ac:e3:cf:5d:8c:af:7c:94:3c:8c:81:81:f9:
16:20:78:0f:06:16:c3:d1:40:56:e7:0b:6a:f1:db:
28:0a:65:10:e9:24:d2:94:8b:5d:31:57:04:fb:be:
ae:06:16:46:0d:ee:df:91:cf:82:cf:2e:74:0d:b0:
1f:70:11:6a:72:ad:e1:b5:30:35:43:2c:3d:4c:08:
2f:63:ea:c5:81:50:6f:86:3e:de:35:25:ca:48:9b:
7e:be:69:44:e9:1d:80:27:ff:50:1c:ed:07:69:7c:
8a:f5:fa:ed:d4:55:6a:a6:63:b9:8d:69:b3:be:f3:
f6:81:39:fa:38:5e:74:06:e5:b2:e7:f1:a5:2f:e2:
14:ac:8d:64:12:a6:eb:59:1d:06:64:dc:f5:95:89:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:2E:6F:AF:C1:28:D3:AD:F6:BE:BB:A8:95:E5:28:0E:F0:F9:7A
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:91:cb:10:2f:10:cf:03:78:61:a1:52:e8:b7:5e:0a:14:76:
3f:9b:86:7c:af:f2:a1:1b:99:02:76:99:44:de:51:f8:e6:e9:
74:6e:43:0c:60:80:e7:8e:52:29:5f:b9:42:2a:f9:6c:e7:a1:
3f:8f:21:b0:02:90:6b:25:cf:4f:a4:a7:b2:8f:5e:1e:51:89:
45:5c:08:a3:4d:32:5b:f2:ea:03:57:a4:a4:97:d3:a5:60:d7:
9e:38:7c:03:4f:a3:81:82:48:f4:71:31:c7:b6:6e:df:11:25:
09:7e:c9:d6:02:ca:04:e4:28:ed:74:53:30:ac:1a:f3:9a:88:
c7:ba:28:f4:3c:97:90:7a:85:a8:a4:21:d2:54:eb:e3:c9:85:
39:0b:ca:c0:8e:47:67:dd:ef:dd:39:de:a1:87:e5:c6:fd:67:
02:0b:f5:36:29:82:73:57:cf:20:f4:7b:96:b8:aa:c3:3f:7f:
b2:9a:df:77:7d:7f:6e:be:01:9f:e0:bf:15:83:5b:e4:ea:7e:
02:6e:b8:5d:b2:a3:7e:11:52:9e:c7:63:c9:94:e0:27:54:79:
4e:c5:a9:35:b2:75:06:31:20:6a:e5:7c:44:5f:64:9e:63:f5:
c0:d0:d0:03:d5:9f:66:f8:81:ef:1a:75:79:9b:53:3c:bb:bb:
b2:89:b9:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYPh9sxiY9UTYwDl9NmgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYmQwNDYxOWEyZTE2OGFjOTU3NTIyZWRmZjAyMmY5MGJj
MGE0ZGYwHhcNMjUwNjEzMTMwMDUyWhcNMjUwNjE0MTMwMDUyWjAzMTEwLwYDVQQD
Eyg3MWM2MmU2ZmFmYzEyOGQzYWRmNmJlYmJhODk1ZTUyODBlZjBmOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63gzNqgvXmT5rpxhgUPV9N3u27l4
3bi3JyyWo+PbMmeUYV81G2utZFMBR2KWcDhwF4YVDYqQn5pIQ2rVd1afc/nsxw4Q
q8q7MZ+nYe/9zQiVBokHizj4sjx9aqrYTr5Bs3yNwnYSKEi4nazjz12Mr3yUPIyB
gfkWIHgPBhbD0UBW5wtq8dsoCmUQ6STSlItdMVcE+76uBhZGDe7fkc+Czy50DbAf
cBFqcq3htTA1Qyw9TAgvY+rFgVBvhj7eNSXKSJt+vmlE6R2AJ/9QHO0HaXyK9frt
1FVqpmO5jWmzvvP2gTn6OF50BuWy5/GlL+IUrI1kEqbrWR0GZNz1lYmlFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHGLm+vwSjTrfa+u6iV5SgO8Pl6MB8GA1UdIwQY
MBaAFEu9BGGaLhaKyVdSLt/wIvkLwKTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mZDkyY2MtNGZmNC00OTU3LTg4OTgt
MmZhZjUzODNiNTA1LzEvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mZDkyY2MtNGZmNC00OTU3LTg4OTgtMmZhZjUzODNiNTA1
LzEvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZHLEC8Q
zwN4YaFS6LdeChR2P5uGfK/yoRuZAnaZRN5R+ObpdG5DDGCA545SKV+5Qir5bOeh
P48hsAKQayXPT6Snso9eHlGJRVwIo00yW/LqA1ekpJfTpWDXnjh8A0+jgYJI9HEx
x7Zu3xElCX7J1gLKBOQo7XRTMKwa85qIx7oo9DyXkHqFqKQh0lTr48mFOQvKwI5H
Z93v3TneoYflxv1nAgv1NimCc1fPIPR7lriqwz9/sprfd31/br4Bn+C/FYNb5Op+
Am64XbKjfhFSnsdjyZTgJ1R5TsWpNbJ1BjEgauV8RF9knmP1wNDQA9WfZviB7xp1
eZtTPLu7som5yw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:18 2025 by rpki-client