Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: d7MNn7LUpbXcBefjus71kDH08SFSMBXUaVbmGC4E+4o=
Subject key identifier: DA:23:A1:B4:5B:26:8F:AA:55:A0:6A:FB:7D:FD:2C:70:73:78:ED:D4
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 0197B7EA1FB0026479932F0C9186E687391B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=)
2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: FtGhlEuHSZkj4eM/VFzQrWwF+ivfh6FOYbnn8xgZvkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1f:b0:02:64:79:93:2f:0c:91:86:e6:87:39:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=da23a1b45b268faa55a06afb7dfd2c707378edd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:07:00:f4:75:11:66:60:7e:3d:37:46:86:
98:7e:5a:2e:cf:67:fa:ea:76:f1:e3:3a:a8:3b:64:
97:c6:6a:01:c8:aa:86:0a:0d:20:15:23:cb:38:0d:
58:f4:72:78:5a:de:f9:f6:3c:0c:c9:85:64:6b:88:
d8:8c:0d:a2:84:6b:11:cb:36:e3:52:cd:99:b2:1a:
55:cc:a9:7e:13:67:17:b2:40:61:9f:ee:46:0b:91:
05:49:2e:4b:47:3c:94:b3:cb:a5:c0:af:8c:0b:51:
c7:7c:30:30:12:41:c7:41:ea:94:9b:c6:28:e1:4e:
ec:97:35:de:b3:3d:a9:c8:23:69:37:82:8b:b9:fd:
75:4f:bc:af:d2:fa:68:38:83:b0:a4:d3:24:ab:0f:
75:36:27:9e:4c:8c:49:1e:fd:16:4c:e2:dc:d7:c8:
69:34:0e:fa:e1:03:f6:79:e5:b8:d0:66:03:2c:a7:
1f:33:ea:89:59:84:90:79:6f:49:66:88:fc:f5:74:
84:b0:9d:82:cf:49:b5:2f:5f:24:4b:6b:3d:df:67:
ab:ba:85:1d:5a:15:94:e4:22:63:87:f1:e3:60:2f:
da:62:67:fd:90:0a:ee:d4:3d:3a:b2:d7:44:e1:5c:
41:01:c8:9c:f1:40:5b:c2:b2:46:da:77:0a:d4:88:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:23:A1:B4:5B:26:8F:AA:55:A0:6A:FB:7D:FD:2C:70:73:78:ED:D4
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:75:28:96:66:38:09:fa:ff:af:3e:b2:1c:ac:d5:90:77:b6:
aa:87:f1:c6:40:73:b5:48:90:ff:2b:60:19:35:de:0f:12:5d:
59:6e:09:98:56:9c:ef:c5:68:0c:d0:c4:ad:94:f2:62:81:0f:
4d:fc:10:df:41:6e:62:53:5e:ef:56:55:b5:5b:43:2f:d3:8d:
e1:e1:b0:4f:1a:b4:ac:19:a3:8e:c6:70:38:10:9a:a6:6d:91:
eb:f6:81:03:10:87:fe:8c:38:73:81:79:5f:bb:c7:e0:05:e1:
09:80:06:f0:59:5a:e5:ac:a6:78:4b:52:ef:07:a4:2c:75:b4:
73:d4:c5:a7:b1:56:4d:c5:e8:c6:6b:8e:f1:0d:08:d0:30:2a:
7c:41:a6:28:b1:a1:e2:2a:5b:04:60:0b:7f:2f:06:fd:1b:15:
a5:98:9e:d9:13:42:f0:7f:e4:9c:37:64:cb:0b:68:af:79:51:
27:2b:0e:65:04:37:38:6c:9f:38:66:13:51:f4:ad:40:a3:f2:
af:5c:de:85:27:91:93:e1:4c:c9:9a:c8:11:20:78:81:f5:8d:
0b:b9:5c:f7:e2:a7:d1:d8:f1:79:f2:ac:fd:e3:96:01:64:14:
7f:07:2d:dc:07:f7:f6:8b:2e:50:b8:31:42:17:c3:a1:1f:b3:
d2:2c:9f:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36h+wAmR5ky8MkYbmhzkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTY2YzFhMjgzZDU1M2VmM2Y2NTZmNTcyMjM5ODRkZGE3
YzM1NWYwHhcNMjUwNjI4MTkwMTAzWhcNMjUwNjI5MTkwMTAzWjAzMTEwLwYDVQQD
EyhkYTIzYTFiNDViMjY4ZmFhNTVhMDZhZmI3ZGZkMmM3MDczNzhlZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXgHAPR1EWZgfj03RoaYflouz2f6
6nbx4zqoO2SXxmoByKqGCg0gFSPLOA1Y9HJ4Wt759jwMyYVka4jYjA2ihGsRyzbj
Us2ZshpVzKl+E2cXskBhn+5GC5EFSS5LRzyUs8ulwK+MC1HHfDAwEkHHQeqUm8Yo
4U7slzXesz2pyCNpN4KLuf11T7yv0vpoOIOwpNMkqw91NieeTIxJHv0WTOLc18hp
NA764QP2eeW40GYDLKcfM+qJWYSQeW9JZoj89XSEsJ2Cz0m1L18kS2s932eruoUd
WhWU5CJjh/HjYC/aYmf9kAru1D06stdE4VxBAcic8UBbwrJG2ncK1Ihq8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNojobRbJo+qVaBq+339LHBzeO3UMB8GA1UdIwQY
MBaAFERWbBooPVU+8/ZW9XIjmE3afDVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGIt
OWQ1OGNlMjIxODQzLzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGItOWQ1OGNlMjIxODQz
LzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHUolmY4
Cfr/rz6yHKzVkHe2qofxxkBztUiQ/ytgGTXeDxJdWW4JmFac78VoDNDErZTyYoEP
TfwQ30FuYlNe71ZVtVtDL9ON4eGwTxq0rBmjjsZwOBCapm2R6/aBAxCH/ow4c4F5
X7vH4AXhCYAG8Fla5aymeEtS7wekLHW0c9TFp7FWTcXoxmuO8Q0I0DAqfEGmKLGh
4ipbBGALfy8G/RsVpZie2RNC8H/knDdkywtor3lRJysOZQQ3OGyfOGYTUfStQKPy
r1zehSeRk+FMyZrIESB4gfWNC7lc9+Kn0djxefKs/eOWAWQUfwct3Af39osuULgx
QhfDoR+z0iyfeQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:04:14 2025 by rpki-client