Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: vMtH8MdZUbqglusRw1Ec+ffTIDxvnBD75+fIawoY8aA=
Subject key identifier: 78:AE:11:ED:95:96:6D:4D:97:4A:17:A5:63:42:61:0A:F6:2C:D7:C1
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 01977C7977774B943854BB9E33CA884BFB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 13D1
Signing time: Tue 17 Jun 2025 06:00:24 +0000
Manifest this update: Tue 17 Jun 2025 06:00:24 +0000
Manifest next update: Wed 18 Jun 2025 06:00:24 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: rcG6umdr6glqBzzJEGi2+0qR21vNS9YUT2L84eD79fY=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:77:77:4b:94:38:54:bb:9e:33:ca:88:4b:fb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Jun 17 06:00:24 2025 GMT
Not After : Jun 18 06:00:24 2025 GMT
Subject: CN=78ae11ed95966d4d974a17a56342610af62cd7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:66:78:08:8b:b4:8f:a5:bb:74:b2:b7:6b:
2b:a3:37:a8:dd:4d:08:38:97:9e:19:7f:ad:33:04:
db:71:68:e5:41:0e:fb:30:c7:ed:24:52:06:57:48:
5f:c9:a2:93:39:fe:35:ef:71:1e:97:38:27:7d:6f:
a4:5c:46:ee:bb:ad:d7:56:17:ed:23:23:69:6a:c4:
7d:d9:ba:7c:ba:37:05:6e:34:b8:1e:4c:fd:bc:c8:
98:9f:8a:c4:7c:b7:28:0f:60:93:55:45:3c:21:18:
ff:4a:91:58:c3:e7:6a:fa:4d:82:a8:48:4b:24:2e:
46:28:2e:ec:3d:b2:34:09:1a:c3:a2:64:79:2b:00:
9b:1a:95:34:56:3b:45:c6:41:83:bc:1d:86:3a:c6:
09:53:91:4c:87:1a:50:ab:d1:6f:b3:36:96:bf:f8:
ca:a5:4f:15:6f:e1:aa:06:ad:68:f7:58:f9:54:77:
41:f3:af:90:f6:83:19:da:d5:85:ea:53:03:f1:0e:
3b:ac:93:3f:b3:74:61:25:0d:87:60:05:96:0d:88:
89:3d:d3:9a:27:ae:93:82:d9:d4:42:7e:31:4d:cd:
aa:4e:9b:50:94:a0:41:a6:32:e0:9b:f5:02:eb:89:
e0:99:cf:56:08:47:60:e2:fd:8f:15:ed:26:95:f6:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AE:11:ED:95:96:6D:4D:97:4A:17:A5:63:42:61:0A:F6:2C:D7:C1
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5a:88:0a:0f:36:b4:b1:fe:29:41:d5:e2:cd:d4:91:7c:ac:
f1:45:3b:ba:92:39:a4:96:1d:40:c3:89:c4:68:75:ba:c4:b1:
a2:3c:fa:de:8d:a7:0f:c1:c3:2e:3a:bb:67:cf:34:ee:cb:0a:
3b:bd:e3:ed:65:0b:01:6a:58:f2:ab:5b:0f:f6:22:86:8f:55:
91:a1:fb:80:68:77:25:0b:45:6f:b5:e8:84:f0:b1:ac:21:4b:
84:e0:9e:33:ce:dc:ae:2a:52:d5:0b:46:da:94:05:71:bf:6a:
04:70:2e:56:d0:c3:72:3b:af:de:dd:ef:c2:5b:9b:d8:89:88:
f6:f1:10:fb:ff:35:da:4d:af:32:e2:0f:39:f9:b2:11:a6:d2:
fd:2f:f9:2a:0b:42:ac:5b:e4:8c:31:d1:88:e5:df:e3:ca:54:
e9:fa:9c:08:55:2e:4a:bf:69:4b:1e:f4:27:2b:f5:f8:cb:ed:
6f:54:0b:51:e8:29:2b:7a:d7:07:38:9a:e0:4e:ea:69:68:a0:
24:e6:37:84:80:b7:b6:23:c2:62:0e:74:f6:86:bb:a7:ab:fb:
25:49:d8:ec:28:13:cd:2e:50:ca:62:0d:06:6a:6a:ce:90:27:
72:8a:67:7b:bf:65:9f:8e:c2:43:02:e3:44:d0:a1:13:74:54:
71:8b:75:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8eXd3S5Q4VLueM8qIS/tyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTk2NTk2MzYwODllMzIzMjQ2OTc2MjljMjE4ZGEzOGEy
YjY3M2QwHhcNMjUwNjE3MDYwMDI0WhcNMjUwNjE4MDYwMDI0WjAzMTEwLwYDVQQD
Eyg3OGFlMTFlZDk1OTY2ZDRkOTc0YTE3YTU2MzQyNjEwYWY2MmNkN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuilmeAiLtI+lu3Syt2srozeo3U0I
OJeeGX+tMwTbcWjlQQ77MMftJFIGV0hfyaKTOf4173EelzgnfW+kXEbuu63XVhft
IyNpasR92bp8ujcFbjS4Hkz9vMiYn4rEfLcoD2CTVUU8IRj/SpFYw+dq+k2CqEhL
JC5GKC7sPbI0CRrDomR5KwCbGpU0VjtFxkGDvB2GOsYJU5FMhxpQq9FvszaWv/jK
pU8Vb+GqBq1o91j5VHdB86+Q9oMZ2tWF6lMD8Q47rJM/s3RhJQ2HYAWWDYiJPdOa
J66TgtnUQn4xTc2qTptQlKBBpjLgm/UC64ngmc9WCEdg4v2PFe0mlfbXKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiuEe2Vlm1Nl0oXpWNCYQr2LNfBMB8GA1UdIwQY
MBaAFH1ZZZY2CJ4yMkaXYpwhjaOKK2c9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAt
NmMxY2Y3MjVkOGY3LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAtNmMxY2Y3MjVkOGY3
LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1qICg82
tLH+KUHV4s3UkXys8UU7upI5pJYdQMOJxGh1usSxojz63o2nD8HDLjq7Z8807ssK
O73j7WULAWpY8qtbD/Yiho9VkaH7gGh3JQtFb7XohPCxrCFLhOCeM87cripS1QtG
2pQFcb9qBHAuVtDDcjuv3t3vwlub2ImI9vEQ+/812k2vMuIPOfmyEabS/S/5KgtC
rFvkjDHRiOXf48pU6fqcCFUuSr9pSx70Jyv1+Mvtb1QLUegpK3rXBzia4E7qaWig
JOY3hIC3tiPCYg509oa7p6v7JUnY7CgTzS5QymINBmpqzpAncopne79ln47CQwLj
RNChE3RUcYt1cw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 14:32:06 2025 by rpki-client