Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: vkB2l9tGU47zeVAYlUYpP4c5Eju29iNwz3y59jaC+dA=
Subject key identifier: 0E:A3:3D:5B:80:C6:85:D1:E4:CA:5F:E7:1C:B2:A6:B8:F4:5E:76:20
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 0197B7B32E9F9C5D58A22EEB71C905562143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 0CEE
Signing time: Sat 28 Jun 2025 18:01:02 +0000
Manifest this update: Sat 28 Jun 2025 18:01:02 +0000
Manifest next update: Sun 29 Jun 2025 18:01:02 +0000
Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: XvsId2RgR41M1uss/nTLnSGcN/tzEJV0dvtG4jbwsxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2e:9f:9c:5d:58:a2:2e:eb:71:c9:05:56:21:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Jun 28 18:01:02 2025 GMT
Not After : Jun 29 18:01:02 2025 GMT
Subject: CN=0ea33d5b80c685d1e4ca5fe71cb2a6b8f45e7620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:d4:63:5c:87:fa:7d:d6:45:0c:e4:40:c2:
34:c2:58:f2:eb:0b:a0:0e:1f:ff:ff:ce:fc:15:9b:
eb:f3:f4:2c:8a:ac:84:77:cc:18:a8:81:74:5f:1d:
37:21:a6:77:aa:0e:68:58:8b:5d:1a:33:71:e0:57:
bd:57:2d:7f:e3:e3:56:8e:52:71:4b:0a:6c:22:6b:
cc:95:63:73:38:1a:50:92:8f:fd:65:82:0a:70:11:
d5:eb:b4:36:93:b9:67:5e:59:83:e4:73:95:19:1e:
ab:f1:e9:c5:bf:da:8f:40:86:13:90:be:11:3c:1c:
6a:dc:49:cb:96:df:c6:2e:26:0f:c9:74:09:d9:aa:
68:04:b0:51:21:05:c4:41:4f:40:d2:a1:f7:dc:d2:
6c:24:a1:5c:e1:59:b1:76:30:b1:5d:76:37:25:b7:
fb:1d:d9:08:ca:f5:4f:90:a2:f5:fd:8f:77:fe:8d:
32:0d:cf:12:45:79:f6:4d:b5:56:3e:47:50:bf:ab:
0f:ab:b1:d1:2a:db:a9:30:94:f4:62:1b:de:75:e7:
d6:39:e5:79:53:6f:30:7d:9d:c5:a8:bf:62:4b:99:
71:09:07:b2:2d:6f:5b:fe:a2:a1:e4:46:12:b3:e1:
66:3f:0a:88:99:f0:92:2d:03:e4:28:01:86:b0:a0:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A3:3D:5B:80:C6:85:D1:E4:CA:5F:E7:1C:B2:A6:B8:F4:5E:76:20
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:21:d2:d3:9a:c5:c1:2d:a2:d0:ac:70:32:0c:d1:fc:57:6d:
e1:b1:28:8c:61:df:0e:83:a6:7d:93:37:8f:94:0d:28:ce:bf:
85:d5:cf:7e:2c:5d:4e:c0:dc:4c:42:3d:c3:b3:ec:38:28:99:
5c:32:2e:0c:21:7e:db:a4:85:78:be:99:86:f2:5a:88:0f:fc:
86:e9:54:99:24:8d:73:f2:2a:71:c5:45:cf:ea:da:83:49:1f:
19:24:85:26:a5:13:76:2f:44:d3:57:0d:64:08:b1:81:12:e9:
ce:41:78:7f:b5:d6:3e:15:15:a5:0b:11:38:fb:5c:6b:34:20:
1c:04:ae:ce:4b:7d:ed:4d:19:38:1b:e2:82:63:18:bf:6a:72:
57:64:9a:da:02:7c:20:49:95:95:9b:ea:6c:fd:5b:b9:2a:ca:
22:d3:ac:3f:e1:e8:ff:44:ce:10:37:27:69:76:e1:99:b2:23:
85:dd:26:66:eb:c0:c0:e0:a2:f0:90:a7:93:74:d8:50:81:1d:
f1:6a:11:9c:8f:dd:0b:30:db:06:c1:c3:f9:0d:ce:28:a6:b5:
75:26:cf:c3:db:de:db:35:4b:e3:76:db:67:24:ad:4a:0a:97:
51:31:f4:73:30:07:0e:92:6b:05:d4:d5:53:5a:dd:c4:71:91:
42:4d:3f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sy6fnF1Yoi7rcckFViFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk
OGYzNGUwHhcNMjUwNjI4MTgwMTAyWhcNMjUwNjI5MTgwMTAyWjAzMTEwLwYDVQQD
EygwZWEzM2Q1YjgwYzY4NWQxZTRjYTVmZTcxY2IyYTZiOGY0NWU3NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY7UY1yH+n3WRQzkQMI0wljy6wug
Dh///878FZvr8/QsiqyEd8wYqIF0Xx03IaZ3qg5oWItdGjNx4Fe9Vy1/4+NWjlJx
SwpsImvMlWNzOBpQko/9ZYIKcBHV67Q2k7lnXlmD5HOVGR6r8enFv9qPQIYTkL4R
PBxq3EnLlt/GLiYPyXQJ2apoBLBRIQXEQU9A0qH33NJsJKFc4VmxdjCxXXY3Jbf7
HdkIyvVPkKL1/Y93/o0yDc8SRXn2TbVWPkdQv6sPq7HRKtupMJT0YhvedefWOeV5
U28wfZ3FqL9iS5lxCQeyLW9b/qKh5EYSs+FmPwqImfCSLQPkKAGGsKDT4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6jPVuAxoXR5Mpf5xyyprj0XnYgMB8GA1UdIwQY
MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt
YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk
LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCHS05rF
wS2i0KxwMgzR/Fdt4bEojGHfDoOmfZM3j5QNKM6/hdXPfixdTsDcTEI9w7PsOCiZ
XDIuDCF+26SFeL6ZhvJaiA/8hulUmSSNc/IqccVFz+rag0kfGSSFJqUTdi9E01cN
ZAixgRLpzkF4f7XWPhUVpQsROPtcazQgHASuzkt97U0ZOBvigmMYv2pyV2Sa2gJ8
IEmVlZvqbP1buSrKItOsP+Ho/0TOEDcnaXbhmbIjhd0mZuvAwOCi8JCnk3TYUIEd
8WoRnI/dCzDbBsHD+Q3OKKa1dSbPw9ve2zVL43bbZyStSgqXUTH0czAHDpJrBdTV
U1rdxHGRQk0/wg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:01:28 2025 by rpki-client