Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: lDgr6yyKx8TCA84Sxk5KaQycp28wd1kOyeclKVPwdBk=
Subject key identifier: 92:AC:88:17:55:F1:79:18:34:21:51:3B:C7:0E:1D:E7:83:8D:20:6E
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 0197789CB13CC73EE772F193F1ACAA771E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 02F6
Signing time: Mon 16 Jun 2025 12:00:24 +0000
Manifest this update: Mon 16 Jun 2025 12:00:24 +0000
Manifest next update: Tue 17 Jun 2025 12:00:24 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: 5OWTJ1euhyq1ypG3gKL8fmz2/+MjReNacyKePxlh868=)
2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=)
3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:b1:3c:c7:3e:e7:72:f1:93:f1:ac:aa:77:1e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Jun 16 12:00:24 2025 GMT
Not After : Jun 17 12:00:24 2025 GMT
Subject: CN=92ac881755f179183421513bc70e1de7838d206e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:39:8b:62:85:b0:57:24:5f:ea:10:5e:0b:
f2:cd:3d:5b:01:d1:56:ee:99:65:50:a6:5b:e8:b5:
ee:0e:51:38:69:23:9f:5e:8b:8a:39:0f:f0:c6:01:
17:63:0e:34:6f:7b:b2:8d:8e:ea:ec:a6:15:9f:e5:
de:ef:81:a7:3c:1a:74:30:0f:fa:1d:7b:49:b6:f1:
1b:43:cd:9b:a8:61:b6:61:c8:33:57:f1:cc:15:65:
48:a9:70:b8:de:03:de:67:e6:a8:b4:a3:48:8c:5e:
15:83:cd:c8:d0:c6:0b:af:49:59:a7:08:b3:10:d9:
cf:3b:15:56:e3:5a:e9:26:bf:c8:3c:54:9a:94:13:
50:9a:3b:c6:1d:1c:5f:a5:55:0d:c1:02:7e:76:54:
75:50:6a:50:c9:6a:d3:e1:6a:19:f4:8b:58:8e:4d:
1c:25:71:f7:6f:6a:a1:bd:3c:c3:a8:c8:2d:36:70:
49:cf:e5:60:62:89:23:67:87:32:2f:09:1c:4b:53:
4c:3d:61:79:2c:6f:2c:58:03:7e:54:61:6c:66:1b:
6f:31:91:3b:5e:2f:be:51:f5:6d:13:9e:9b:70:35:
d5:34:46:e4:d1:55:31:9e:92:0d:ef:e3:37:22:b4:
fe:43:72:48:38:19:74:b8:d3:85:d0:c8:aa:62:d2:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AC:88:17:55:F1:79:18:34:21:51:3B:C7:0E:1D:E7:83:8D:20:6E
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:23:ca:cb:f3:90:32:9e:e0:fb:c0:04:58:fb:75:44:05:05:
63:6e:ea:ce:58:26:37:8f:c2:21:5d:22:d3:52:90:f4:3c:45:
4d:7c:1d:8f:f6:b9:6f:46:72:00:08:2e:d2:37:fb:38:09:73:
e2:e9:0f:45:16:a3:9b:84:c8:4c:63:e8:7a:aa:d2:78:4c:44:
00:08:9e:a0:54:1f:c4:98:e1:f7:48:68:63:58:3a:ea:46:e4:
7b:e9:dc:6f:cd:e4:a9:13:aa:7b:86:e0:4a:cb:3a:07:d1:aa:
1d:7d:ed:33:89:9c:b8:d2:9e:3a:f2:c1:49:e0:27:3a:c6:10:
e5:75:d3:9f:f3:5e:d5:e6:1a:8d:19:34:3c:dd:af:16:06:73:
f8:54:5d:21:b8:f7:f4:b9:33:f1:ef:6f:18:12:a8:01:8a:88:
1e:ad:33:a4:f4:6a:bf:ff:98:1f:4e:73:aa:27:83:07:0f:25:
11:0b:18:8c:f8:50:35:1a:89:51:50:41:b2:ee:bb:6e:20:7f:
ea:93:c8:81:0c:c2:ff:a8:95:92:ed:46:43:01:c8:9c:ee:17:
d5:1d:e8:30:be:4e:65:2f:ff:2b:84:0a:54:95:f6:cd:6c:70:
20:b2:9a:78:6e:7b:59:19:a6:e7:59:07:8f:a9:29:eb:1d:fa:
ff:14:67:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4nLE8xz7ncvGT8ayqdx48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiN2UxNzcwYTM4MDRjNzRiOWYxMmNiOWI2ZmE3MDM5NmRl
OTMyOWYwHhcNMjUwNjE2MTIwMDI0WhcNMjUwNjE3MTIwMDI0WjAzMTEwLwYDVQQD
Eyg5MmFjODgxNzU1ZjE3OTE4MzQyMTUxM2JjNzBlMWRlNzgzOGQyMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBs5i2KFsFckX+oQXgvyzT1bAdFW
7pllUKZb6LXuDlE4aSOfXouKOQ/wxgEXYw40b3uyjY7q7KYVn+Xe74GnPBp0MA/6
HXtJtvEbQ82bqGG2YcgzV/HMFWVIqXC43gPeZ+aotKNIjF4Vg83I0MYLr0lZpwiz
ENnPOxVW41rpJr/IPFSalBNQmjvGHRxfpVUNwQJ+dlR1UGpQyWrT4WoZ9ItYjk0c
JXH3b2qhvTzDqMgtNnBJz+VgYokjZ4cyLwkcS1NMPWF5LG8sWAN+VGFsZhtvMZE7
Xi++UfVtE56bcDXVNEbk0VUxnpIN7+M3IrT+Q3JIOBl0uNOF0MiqYtJ+sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKsiBdV8XkYNCFRO8cOHeeDjSBuMB8GA1UdIwQY
MBaAFNt+F3CjgEx0ufEsubb6cDlt6TKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQt
NmM3NjdiOTJjOWE1LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQtNmM3NjdiOTJjOWE1
LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSPKy/OQ
Mp7g+8AEWPt1RAUFY27qzlgmN4/CIV0i01KQ9DxFTXwdj/a5b0ZyAAgu0jf7OAlz
4ukPRRajm4TITGPoeqrSeExEAAieoFQfxJjh90hoY1g66kbke+ncb83kqROqe4bg
Sss6B9GqHX3tM4mcuNKeOvLBSeAnOsYQ5XXTn/Ne1eYajRk0PN2vFgZz+FRdIbj3
9Lkz8e9vGBKoAYqIHq0zpPRqv/+YH05zqieDBw8lEQsYjPhQNRqJUVBBsu67biB/
6pPIgQzC/6iVku1GQwHInO4X1R3oML5OZS//K4QKVJX2zWxwILKaeG57WRmm51kH
j6kp6x36/xRnSQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:39:55 2025 by rpki-client