Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: a6C7ZjgiRTRlLXBOj1sBFM4YldDqDNS64eWYzq9d2iU=
Subject key identifier: 6F:D7:CD:C1:95:96:48:75:7E:6C:5A:8F:85:F1:36:4D:8B:96:C3:5B
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 0197B7458E4BDB9030A2B7B7F2CBF344E33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 12B9
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: Y2uFJSLehBxSX02V85/urv0NcNrTtCE8wuQKDjjxGVw=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8e:4b:db:90:30:a2:b7:b7:f2:cb:f3:44:e3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=6fd7cdc1959648757e6c5a8f85f1364d8b96c35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:6c:66:d6:74:22:a3:3e:f0:4a:80:47:1f:
18:06:d6:08:69:17:15:ac:1c:9a:2f:ac:72:f0:30:
bc:33:df:0c:e9:99:b0:fe:86:5c:07:0f:88:f8:1b:
9c:30:c5:76:24:75:08:9b:86:e6:26:1e:a9:00:5e:
7e:ce:31:b0:9b:d8:49:7e:50:3e:6c:7c:57:e1:79:
e9:09:71:76:77:5c:f1:b9:c0:55:9a:6c:c3:17:c5:
47:26:eb:ff:65:47:51:2d:b9:00:03:25:40:24:22:
0e:32:f8:6b:92:74:72:b7:c3:29:5d:ea:77:f0:bc:
55:b2:82:71:c2:e9:c1:7a:b5:72:24:8c:69:58:37:
85:0b:3d:fc:ec:60:89:61:59:03:78:42:67:a2:24:
e1:e6:1c:3d:73:2f:e0:3d:2d:44:9f:b3:44:eb:f5:
1e:98:26:56:fc:d1:40:71:b3:f8:67:cd:66:c4:97:
ea:10:0a:74:bc:f4:9b:bd:e0:e9:34:e8:f8:4f:0a:
e2:27:63:51:34:0b:e0:81:23:1c:ba:68:80:7d:6c:
17:07:57:0b:1c:fc:ab:a3:a2:e4:0c:97:8e:1a:1e:
d4:24:9e:03:7a:cf:68:77:16:59:66:bd:59:36:ca:
78:a0:8e:6f:dc:5b:e2:0e:21:a8:f6:bb:3c:9e:66:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D7:CD:C1:95:96:48:75:7E:6C:5A:8F:85:F1:36:4D:8B:96:C3:5B
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d2:ff:24:2d:10:4c:88:23:5c:84:3c:00:1b:13:af:7c:78:
9d:2e:06:29:be:08:c1:f2:d7:93:77:b2:94:39:39:3f:4f:f2:
ad:88:ec:43:40:85:6d:cd:6b:38:04:d4:50:e8:28:4f:e2:8e:
ec:ba:a5:18:93:80:11:b6:40:0f:e0:50:4d:d4:d1:89:4b:b2:
47:a4:cf:98:fe:db:1b:d1:a2:52:6f:9b:32:17:c0:fb:80:19:
74:97:d8:bf:8d:0a:cb:92:9f:c5:dd:23:ac:ae:b6:ef:77:be:
5a:f6:dd:9f:69:a3:e4:8d:06:44:fe:65:47:b0:b2:4f:20:e2:
04:47:38:98:24:fe:da:3d:a0:5b:69:a8:a1:dc:39:e3:1b:67:
2c:eb:96:02:64:68:33:6a:9d:79:f6:ba:36:18:58:6d:54:78:
a8:37:59:fb:33:bb:f0:81:0a:77:b9:7d:b5:11:9f:ae:4d:b5:
d2:81:a5:28:bc:a1:b4:11:b9:ad:2f:17:41:11:af:26:12:3e:
5e:e4:d5:93:e4:f4:4c:d9:eb:e1:8d:69:01:7f:fb:7d:4a:b3:
a6:43:78:17:cf:9e:43:ca:6b:b3:c8:c2:f4:07:27:55:92:52:
1f:21:6e:26:9c:37:f0:9a:4e:98:fd:76:17:b7:93:41:14:27:
f0:90:e9:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RY5L25Awore38svzROM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWU1ZTcxNDA5YjIxZmQ1YzgyMGYzZDNhYzNmZGMwZmNl
NzVhMGIwHhcNMjUwNjI4MTYwMTE4WhcNMjUwNjI5MTYwMTE4WjAzMTEwLwYDVQQD
Eyg2ZmQ3Y2RjMTk1OTY0ODc1N2U2YzVhOGY4NWYxMzY0ZDhiOTZjMzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hJsZtZ0IqM+8EqARx8YBtYIaRcV
rByaL6xy8DC8M98M6Zmw/oZcBw+I+BucMMV2JHUIm4bmJh6pAF5+zjGwm9hJflA+
bHxX4XnpCXF2d1zxucBVmmzDF8VHJuv/ZUdRLbkAAyVAJCIOMvhrknRyt8MpXep3
8LxVsoJxwunBerVyJIxpWDeFCz387GCJYVkDeEJnoiTh5hw9cy/gPS1En7NE6/Ue
mCZW/NFAcbP4Z81mxJfqEAp0vPSbveDpNOj4TwriJ2NRNAvggSMcumiAfWwXB1cL
HPyro6LkDJeOGh7UJJ4Des9odxZZZr1ZNsp4oI5v3FviDiGo9rs8nmZV0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/XzcGVlkh1fmxaj4XxNk2LlsNbMB8GA1UdIwQY
MBaAFCPuXnFAmyH9XIIPPTrD/cD851oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMt
YmM2MzdhODUxMmIxLzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMtYmM2MzdhODUxMmIx
LzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtL/JC0Q
TIgjXIQ8ABsTr3x4nS4GKb4IwfLXk3eylDk5P0/yrYjsQ0CFbc1rOATUUOgoT+KO
7LqlGJOAEbZAD+BQTdTRiUuyR6TPmP7bG9GiUm+bMhfA+4AZdJfYv40Ky5Kfxd0j
rK6273e+Wvbdn2mj5I0GRP5lR7CyTyDiBEc4mCT+2j2gW2moodw54xtnLOuWAmRo
M2qdefa6NhhYbVR4qDdZ+zO78IEKd7l9tRGfrk210oGlKLyhtBG5rS8XQRGvJhI+
XuTVk+T0TNnr4Y1pAX/7fUqzpkN4F8+eQ8prs8jC9AcnVZJSHyFuJpw38JpOmP12
F7eTQRQn8JDpMg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:48 2025 by rpki-client