Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier: qJmtYcjUJRjHAsVNGeDfqMKpAiQ9mqJ+qF/mK9pKnVM=
Subject key identifier: 1A:A3:65:1F:F3:A4:A7:A8:C5:60:E1:8A:12:0D:73:26:63:AB:69:49
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 01976960BC3822FC43013B9E87ABADC9F9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number: 1470
Signing time: Fri 13 Jun 2025 13:00:36 +0000
Manifest this update: Fri 13 Jun 2025 13:00:36 +0000
Manifest next update: Sat 14 Jun 2025 13:00:36 +0000
Files and hashes: 1: 2z0NeYZe1xNl9FiaXMK1zDvmewM.roa (hash: cOILWkUhsnduTiBD7sHiLuG2BYfCl/U6Tpdfh+0XXP8=)
2: 5Sxq5_88aKl6Q1AixLmSpdxssj4.roa (hash: 930p4kPdeb7NPu1eD23W3ram0O2yZZYGtkILA0nswPo=)
3: BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa (hash: go8wZXjflDuAlY6EuMTLQuty8jZX31nqsRbiTUQs4zs=)
4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: fII6o4mcLdditb7WgAOFLxsZUSPDHQukixJSUYjGbOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:bc:38:22:fc:43:01:3b:9e:87:ab:ad:c9:f9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Jun 13 13:00:36 2025 GMT
Not After : Jun 14 13:00:36 2025 GMT
Subject: CN=1aa3651ff3a4a7a8c560e18a120d732663ab6949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e9:08:c6:02:b4:73:e2:6a:b1:0e:99:e9:d1:
19:bf:86:7c:ec:38:7f:6d:3f:26:4a:f9:e6:22:f0:
55:08:40:2c:91:95:db:56:f1:4a:d0:61:17:2f:d8:
03:e2:a5:4b:35:c4:ab:26:f5:bb:37:88:75:e5:16:
2f:82:1b:26:7f:c1:da:dc:71:8b:9f:dc:5c:26:a1:
90:a9:92:89:5d:6b:46:da:a4:a7:f1:35:45:ec:85:
b8:58:89:52:7b:03:dc:f9:39:f7:5c:b2:2d:d0:81:
1e:ee:f4:5f:6a:8d:09:8c:91:43:06:f2:22:4a:22:
25:43:77:38:0c:51:50:96:8a:17:e3:98:d5:c5:eb:
0f:85:f3:21:3a:3f:99:4a:b1:d3:2e:6a:6e:c5:05:
13:2c:a8:a5:4c:d4:2c:0c:99:98:2e:25:fc:f8:e9:
d9:74:d0:67:52:bd:6b:f8:83:3a:75:26:73:18:ed:
5f:0c:09:24:7e:ed:e6:b9:f1:a8:a7:5e:1f:c2:e2:
d5:98:e6:df:f7:e8:1d:5a:c1:ed:e2:b4:ad:41:db:
02:4f:b7:fa:5d:57:d1:9e:4e:85:c8:73:b4:10:4d:
c9:13:ab:13:93:55:99:f0:ef:fb:ba:5a:4a:31:20:
d5:2d:94:79:c5:eb:11:bb:f1:65:f6:04:11:45:30:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:65:1F:F3:A4:A7:A8:C5:60:E1:8A:12:0D:73:26:63:AB:69:49
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:06:f0:92:08:5d:5b:cf:6c:a6:6c:60:68:3b:97:f4:0e:9e:
a4:fd:05:72:ef:de:a8:d7:62:72:03:52:5a:89:01:dc:34:7a:
55:77:ec:bc:4a:b1:1d:7d:92:a2:ec:25:52:5f:2a:0e:5a:91:
d7:17:c4:b3:41:cd:50:79:05:a1:7a:11:fe:8b:3a:b4:d9:99:
21:f6:5f:49:4c:01:ca:05:17:41:4e:7a:0c:72:10:59:ce:78:
96:96:db:a0:63:a9:29:40:7f:36:ba:51:cc:cf:a3:2c:4d:42:
fe:f3:67:f4:54:cb:bc:f5:aa:68:c5:1d:73:b5:f3:36:b3:d3:
6b:7a:bd:4d:be:83:21:d1:d7:10:e3:b8:50:47:02:58:44:d1:
e1:cb:24:15:92:e2:58:55:30:c3:0d:2a:fa:6f:80:a8:dd:0d:
13:3e:86:f1:cf:53:25:64:22:45:60:74:f0:36:63:1a:c5:6d:
be:83:d7:cf:d1:76:45:d5:ad:c9:37:bd:5f:af:6c:cf:b5:30:
ee:05:ef:65:3f:7f:13:21:ed:30:0c:b2:40:c8:fc:27:99:ac:
9c:6c:c3:18:4e:a6:82:de:fa:4d:e4:ff:f1:cf:85:34:25:d5:
98:51:03:e2:4c:41:a2:74:95:f8:95:a8:e4:1a:6e:ce:e0:21:
15:dd:87:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYLw4IvxDATueh6utyfmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NTVjNWE3MTM3ZWI1ZDQ3ZWEyNGUxN2QyN2ZhOTJkMGI0
MmZiZDgwHhcNMjUwNjEzMTMwMDM2WhcNMjUwNjE0MTMwMDM2WjAzMTEwLwYDVQQD
EygxYWEzNjUxZmYzYTRhN2E4YzU2MGUxOGExMjBkNzMyNjYzYWI2OTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OkIxgK0c+JqsQ6Z6dEZv4Z87Dh/
bT8mSvnmIvBVCEAskZXbVvFK0GEXL9gD4qVLNcSrJvW7N4h15RYvghsmf8Ha3HGL
n9xcJqGQqZKJXWtG2qSn8TVF7IW4WIlSewPc+Tn3XLIt0IEe7vRfao0JjJFDBvIi
SiIlQ3c4DFFQlooX45jVxesPhfMhOj+ZSrHTLmpuxQUTLKilTNQsDJmYLiX8+OnZ
dNBnUr1r+IM6dSZzGO1fDAkkfu3mufGop14fwuLVmObf9+gdWsHt4rStQdsCT7f6
XVfRnk6FyHO0EE3JE6sTk1WZ8O/7ulpKMSDVLZR5xesRu/Fl9gQRRTByNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqjZR/zpKeoxWDhihINcyZjq2lJMB8GA1UdIwQY
MBaAFJlVxacTfrXUfqJOF9J/qS0LQvvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTkt
ZTM5NTI0ZTdhNmVkLzEvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTktZTM5NTI0ZTdhNmVk
LzEvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwbwkghd
W89spmxgaDuX9A6epP0Fcu/eqNdicgNSWokB3DR6VXfsvEqxHX2SouwlUl8qDlqR
1xfEs0HNUHkFoXoR/os6tNmZIfZfSUwBygUXQU56DHIQWc54lpbboGOpKUB/NrpR
zM+jLE1C/vNn9FTLvPWqaMUdc7XzNrPTa3q9Tb6DIdHXEOO4UEcCWETR4cskFZLi
WFUwww0q+m+AqN0NEz6G8c9TJWQiRWB08DZjGsVtvoPXz9F2RdWtyTe9X69sz7Uw
7gXvZT9/EyHtMAyyQMj8J5msnGzDGE6mgt76TeT/8c+FNCXVmFED4kxBonSV+JWo
5BpuzuAhFd2HWw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:21 2025 by rpki-client