Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: 209VcTdvjsChyKKFVg/S10+ekPDkeVohRiaUPXZoYYs=
Subject key identifier: EE:CF:B5:AC:F0:63:DA:8C:6B:52:7B:C0:17:32:02:53:E2:24:FB:96
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 01976D74484329930B014EFFA6F01CD2AF10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 06D1
Signing time: Sat 14 Jun 2025 08:00:26 +0000
Manifest this update: Sat 14 Jun 2025 08:00:26 +0000
Manifest next update: Sun 15 Jun 2025 08:00:26 +0000
Files and hashes: 1: DSjiByReVAFtGenTha4D-8dSQJA.roa (hash: LTaqsJLmNorNuR9w6MCAPY47C39e6eSxiN8KzBSficg=)
2: N3Ms1tO5Rc3q58ZodMbwcW3QRxA.roa (hash: QeEjLFu1bfyi8L5wOE2F/BxSn3Wihpq/1jEicr1OiIU=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: PQBak6IY+Yxbb18sEN70lFJIFWkXjL3QNrB7MWhJRQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:48:43:29:93:0b:01:4e:ff:a6:f0:1c:d2:af:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Jun 14 08:00:26 2025 GMT
Not After : Jun 15 08:00:26 2025 GMT
Subject: CN=eecfb5acf063da8c6b527bc017320253e224fb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:64:72:4b:0c:89:aa:45:a6:b6:99:27:87:
9f:3e:da:e5:9f:b7:9b:3d:73:fa:a2:04:25:f4:fd:
17:42:6b:74:bd:84:8a:59:ed:6f:3d:1c:66:da:a9:
9e:32:c6:be:2e:ed:71:b8:6e:43:0c:98:c8:15:6e:
4e:4d:5e:33:4f:fa:07:63:1d:20:08:21:90:15:4e:
5e:3a:9c:81:be:e1:31:dc:5f:5d:13:06:80:a5:7f:
b9:eb:54:88:4e:71:5a:54:f2:2a:fc:a3:49:d4:4e:
1c:02:b6:52:be:f1:61:24:19:58:af:b1:aa:38:68:
ab:2a:89:7b:26:a3:d6:6c:17:9b:27:87:05:47:55:
65:ec:07:42:00:13:6e:78:09:3c:55:cd:17:05:ff:
2b:ab:ba:eb:62:5d:f8:fa:12:1d:84:15:34:3f:de:
7f:f5:72:c2:81:d3:24:c5:c4:aa:f4:b6:61:d2:46:
0f:8c:f0:d2:55:7c:3e:a3:cc:0f:f8:43:0c:76:04:
12:17:44:c9:6d:e8:b4:d6:17:6f:fb:1f:77:2b:15:
16:07:ae:76:9d:cf:de:f9:c7:c8:da:00:45:bf:a1:
02:1c:50:0c:09:cb:d7:f6:f2:54:6b:8c:1f:58:33:
0b:7d:ec:76:ec:e7:04:b1:62:8c:af:e9:83:7e:69:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CF:B5:AC:F0:63:DA:8C:6B:52:7B:C0:17:32:02:53:E2:24:FB:96
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a5:18:5e:2b:04:d5:f3:c2:4d:a0:6f:75:ee:8b:07:37:85:
36:26:60:21:eb:1e:6a:a6:1d:97:38:73:4b:b0:3a:db:0b:9e:
9b:08:39:11:b1:6b:3a:90:a0:02:7d:8b:ee:41:ff:9c:1c:16:
fb:54:dd:3f:c5:c6:30:40:37:5c:20:4d:1f:dc:0f:2b:2f:16:
ae:63:21:07:ab:c4:61:f6:61:93:78:ea:4b:ce:da:30:f7:6d:
77:13:13:8e:1f:42:47:55:a8:b0:37:64:42:3c:10:78:c5:69:
4a:b0:cb:8f:60:fc:75:ba:aa:ee:a3:54:4b:bd:54:bc:6b:cf:
ec:7d:9b:5b:8b:ca:6f:66:f7:f8:c7:b0:5c:6a:4e:54:7f:20:
99:f9:2e:27:37:4d:dc:0a:e7:ea:4e:07:b5:e1:83:f5:52:02:
5f:4b:0b:f0:6e:d7:0d:81:73:2e:d8:8a:94:23:58:68:9d:96:
32:8d:e5:78:fc:1c:f1:a4:5f:9e:ea:94:b2:d8:3d:7e:80:fa:
cf:4e:b6:e9:c5:1f:d8:af:e4:bc:dd:86:39:2c:44:5f:51:c7:
54:53:9b:78:e2:63:5e:c1:a9:96:68:0b:86:b2:07:a6:af:d6:
ca:f2:a8:5e:c8:64:57:b6:92:ae:0f:0e:25:82:73:4d:7a:2f:
b7:bf:6f:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdEhDKZMLAU7/pvAc0q8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmUxOTA1Y2Q3YWYzNmU2M2FkYTYzNjZjMTQ3YjYxZDg1
YzlmMmIwHhcNMjUwNjE0MDgwMDI2WhcNMjUwNjE1MDgwMDI2WjAzMTEwLwYDVQQD
EyhlZWNmYjVhY2YwNjNkYThjNmI1MjdiYzAxNzMyMDI1M2UyMjRmYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv31kcksMiapFpraZJ4efPtrln7eb
PXP6ogQl9P0XQmt0vYSKWe1vPRxm2qmeMsa+Lu1xuG5DDJjIFW5OTV4zT/oHYx0g
CCGQFU5eOpyBvuEx3F9dEwaApX+561SITnFaVPIq/KNJ1E4cArZSvvFhJBlYr7Gq
OGirKol7JqPWbBebJ4cFR1Vl7AdCABNueAk8Vc0XBf8rq7rrYl34+hIdhBU0P95/
9XLCgdMkxcSq9LZh0kYPjPDSVXw+o8wP+EMMdgQSF0TJbei01hdv+x93KxUWB652
nc/e+cfI2gBFv6ECHFAMCcvX9vJUa4wfWDMLfex27OcEsWKMr+mDfmm8xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7PtazwY9qMa1J7wBcyAlPiJPuWMB8GA1UdIwQY
MBaAFIj+GQXNevNuY62mNmwUe2HYXJ8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUt
ZDYzM2FhNzBkZDY2LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUtZDYzM2FhNzBkZDY2
LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaUYXisE
1fPCTaBvde6LBzeFNiZgIeseaqYdlzhzS7A62wuemwg5EbFrOpCgAn2L7kH/nBwW
+1TdP8XGMEA3XCBNH9wPKy8WrmMhB6vEYfZhk3jqS87aMPdtdxMTjh9CR1WosDdk
QjwQeMVpSrDLj2D8dbqq7qNUS71UvGvP7H2bW4vKb2b3+MewXGpOVH8gmfkuJzdN
3Arn6k4HteGD9VICX0sL8G7XDYFzLtiKlCNYaJ2WMo3lePwc8aRfnuqUstg9foD6
z0626cUf2K/kvN2GOSxEX1HHVFObeOJjXsGplmgLhrIHpq/WyvKoXshkV7aSrg8O
JYJzTXovt79voA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:46:18 2025 by rpki-client