Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: ssr9YrDDd1i3eN77rPdZ3QtXNtnwgZbzV2BMsPRkml4=
Subject key identifier: 94:C1:A6:DA:BA:EB:6A:74:EB:9E:D8:21:21:C2:FC:E3:07:7D:1A:C8
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 01977CB18DE00D1245E95BC7DB90EFD31B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 0D8F
Signing time: Tue 17 Jun 2025 07:01:40 +0000
Manifest this update: Tue 17 Jun 2025 07:01:40 +0000
Manifest next update: Wed 18 Jun 2025 07:01:40 +0000
Files and hashes: 1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: +T0AufPdXwET/l8DhC1kWinc2VPWh3MYUjGEXl6p26A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:8d:e0:0d:12:45:e9:5b:c7:db:90:ef:d3:1b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Jun 17 07:01:40 2025 GMT
Not After : Jun 18 07:01:40 2025 GMT
Subject: CN=94c1a6dabaeb6a74eb9ed82121c2fce3077d1ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:d8:2f:91:31:0b:ee:16:e5:93:a7:6c:66:
99:55:0d:04:6a:5b:91:86:d0:60:46:66:3f:41:3f:
de:36:51:6e:2a:a2:aa:72:71:7c:89:fb:b7:9a:ac:
d2:61:2d:2e:8c:1c:2b:a4:1a:31:cc:87:5b:55:9e:
bd:c8:05:09:a2:7f:62:d5:ce:30:85:41:3c:da:ca:
3f:36:aa:6a:d9:7f:30:c5:05:3a:28:db:a9:cf:b5:
42:c1:64:36:98:61:06:f3:15:34:9e:c3:de:d4:2c:
83:c5:9d:38:36:b8:bd:6f:b2:40:fd:25:f4:27:24:
06:b4:11:3b:06:0e:c3:6d:39:14:c2:b2:82:ed:0e:
f6:25:af:60:16:2d:2d:7e:f3:0c:fd:3a:38:e5:e5:
a7:de:50:43:3a:99:d1:0f:41:1d:54:18:d2:f1:0b:
cd:58:fc:e2:d3:86:5a:f8:fe:ff:89:b7:19:9e:56:
44:38:d1:1b:f3:83:70:a5:11:e9:94:81:60:a9:a7:
24:86:34:7f:5b:1f:c9:9f:b5:80:8c:f5:74:11:f8:
38:6a:72:b1:ef:57:19:8d:60:5f:6a:96:c9:67:51:
30:6b:47:4c:33:02:a1:b8:15:d2:b8:24:02:ca:bf:
b6:8c:5c:29:8a:9c:f9:eb:6e:c3:80:56:9c:7d:40:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:A6:DA:BA:EB:6A:74:EB:9E:D8:21:21:C2:FC:E3:07:7D:1A:C8
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f2:64:d3:fe:5c:c9:7b:4c:40:10:10:ad:bd:b6:4d:9a:4b:
23:47:ea:6b:f3:68:3a:8f:21:a0:f6:50:55:ce:0f:18:60:d0:
9a:f0:a5:f7:74:67:3b:49:0b:02:ed:ea:5d:e7:78:d3:df:45:
90:6d:94:6f:7a:c0:03:f0:51:d2:d9:a1:14:84:0e:45:00:c6:
b6:92:32:b8:8d:bf:39:ca:61:4b:df:cf:d3:98:1e:57:94:d3:
0b:a5:d4:d1:7e:67:80:29:a2:f6:20:89:2a:ba:05:d1:7e:fe:
93:82:97:e8:61:d8:fd:a2:4e:c2:a0:24:d1:d5:90:79:e8:cd:
16:71:57:e4:b9:6c:2d:c0:ba:47:94:2d:db:87:42:81:8b:02:
ca:be:69:2f:3c:f1:8a:03:7c:11:eb:30:65:f9:ed:cf:9e:e2:
7c:24:c9:0a:6f:7b:df:29:79:d7:bc:13:3e:13:49:5f:02:60:
b9:da:cc:3b:28:97:fe:cc:26:aa:18:ca:49:d0:63:c5:5b:05:
a4:b2:20:31:3a:fb:eb:e7:61:83:f4:7b:9d:c0:4a:4d:7b:79:
2d:79:fe:46:5b:f1:68:a3:6c:c6:b2:72:b7:a0:03:9e:e4:db:
91:e7:23:e9:64:32:69:08:5e:8c:c9:80:92:f0:3b:71:7d:d2:
fd:b2:6f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8sY3gDRJF6VvH25Dv0xsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM1NjAzZTUyZTgzMTUzNzcxNmQ0NThiMzYwMTkyZjk5
YTM2ODkwHhcNMjUwNjE3MDcwMTQwWhcNMjUwNjE4MDcwMTQwWjAzMTEwLwYDVQQD
Eyg5NGMxYTZkYWJhZWI2YTc0ZWI5ZWQ4MjEyMWMyZmNlMzA3N2QxYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxbYL5ExC+4W5ZOnbGaZVQ0EaluR
htBgRmY/QT/eNlFuKqKqcnF8ifu3mqzSYS0ujBwrpBoxzIdbVZ69yAUJon9i1c4w
hUE82so/Nqpq2X8wxQU6KNupz7VCwWQ2mGEG8xU0nsPe1CyDxZ04Nri9b7JA/SX0
JyQGtBE7Bg7DbTkUwrKC7Q72Ja9gFi0tfvMM/To45eWn3lBDOpnRD0EdVBjS8QvN
WPzi04Za+P7/ibcZnlZEONEb84NwpRHplIFgqackhjR/Wx/Jn7WAjPV0Efg4anKx
71cZjWBfapbJZ1Ewa0dMMwKhuBXSuCQCyr+2jFwpipz5627DgFacfUCpeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTBptq662p0657YISHC/OMHfRrIMB8GA1UdIwQY
MBaAFK+TVgPlLoMVN3FtRYs2AZL5mjaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYt
MGEwZDA1ZWQwYzZiLzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYtMGEwZDA1ZWQwYzZi
LzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/Jk0/5c
yXtMQBAQrb22TZpLI0fqa/NoOo8hoPZQVc4PGGDQmvCl93RnO0kLAu3qXed4099F
kG2Ub3rAA/BR0tmhFIQORQDGtpIyuI2/OcphS9/P05geV5TTC6XU0X5ngCmi9iCJ
KroF0X7+k4KX6GHY/aJOwqAk0dWQeejNFnFX5LlsLcC6R5Qt24dCgYsCyr5pLzzx
igN8EeswZfntz57ifCTJCm973yl517wTPhNJXwJgudrMOyiX/swmqhjKSdBjxVsF
pLIgMTr76+dhg/R7ncBKTXt5LXn+RlvxaKNsxrJyt6ADnuTbkecj6WQyaQhejMmA
kvA7cX3S/bJvtg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:47:04 2025 by rpki-client