Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: ohDQlSEC9B/ythffdU6VGm7/bCD48pi8fFqGI7N85t0=
Subject key identifier: CB:7A:C0:AD:A2:11:60:F1:35:E4:61:1B:12:C1:FD:1B:EE:31:AE:89
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 0197B8213B1BD79A0048A421F8508899EE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:14 +0000
Manifest this update: Sat 28 Jun 2025 20:01:14 +0000
Manifest next update: Sun 29 Jun 2025 20:01:14 +0000
Files and hashes: 1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: NZ1abXC1XDr7aGsA6xxsNfFCHtVuvfhttPljFGP5ofA=)
2: aATeS7_Zg3KdAOaKx-n1ZvynPH4.roa (hash: BiTKK6ZatcQ+uoSfiABBAw2jPEjkMuOpjqegStTZ06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3b:1b:d7:9a:00:48:a4:21:f8:50:88:99:ee:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Jun 28 20:01:14 2025 GMT
Not After : Jun 29 20:01:14 2025 GMT
Subject: CN=cb7ac0ada21160f135e4611b12c1fd1bee31ae89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:cf:3c:98:05:9a:45:ef:2d:95:71:47:e0:
f7:4c:ab:f8:2f:20:a8:ae:a5:ac:e8:61:7b:11:41:
4b:66:e4:a8:16:6f:7a:14:ae:95:51:95:5d:76:d4:
78:2a:91:a8:c5:67:dc:69:e0:11:de:10:24:3f:33:
dc:85:8b:ab:5f:4b:de:e8:c3:62:41:99:49:9c:ee:
a5:1b:37:a8:62:2c:d8:ae:69:f7:7a:42:22:88:f7:
7c:76:d4:1e:75:1f:a0:18:e8:4a:42:c3:32:cc:f2:
cb:41:47:04:8b:1d:cb:b0:27:8e:a5:67:d9:56:af:
52:bc:bc:01:86:5a:8c:6d:5c:9a:6c:ae:9d:42:d8:
80:d7:f1:e5:13:c4:66:0e:a9:5a:5d:d7:04:40:01:
7f:aa:a3:aa:58:88:b5:b2:68:db:7b:3d:f9:ab:44:
8a:85:34:67:a6:eb:5a:7d:67:22:3d:48:e1:d0:66:
db:7f:6b:4b:74:2b:dc:8a:7c:43:09:bf:75:ac:90:
cb:9e:9d:ac:e6:e9:e9:85:43:1e:72:dc:d6:06:d4:
85:3d:f7:ee:3e:52:93:4c:ae:c6:86:b6:08:51:69:
2e:d7:64:21:14:c9:b5:98:84:94:85:50:a3:35:80:
01:3c:b2:9a:a1:33:9d:c8:1c:a1:7f:6f:dd:8c:72:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7A:C0:AD:A2:11:60:F1:35:E4:61:1B:12:C1:FD:1B:EE:31:AE:89
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3b:38:d4:23:cc:bc:09:29:fc:96:8a:4c:0a:cf:32:02:30:
18:b8:28:bb:90:9e:c3:b7:fe:91:6b:75:f3:e1:6a:52:4c:3f:
b7:6b:dd:f1:e6:3d:2e:97:a0:20:6d:92:47:36:21:5d:19:95:
b4:26:36:67:95:58:09:d5:ae:66:2a:7c:ea:c4:fe:33:0a:da:
32:b5:37:c9:f2:47:af:03:4c:74:af:fa:21:9d:6b:b1:d3:cb:
a3:14:a1:83:5d:09:83:2a:40:3a:6d:77:3e:bb:58:af:43:69:
9d:1e:cf:5c:37:53:15:c8:62:21:5b:56:85:4d:f9:2c:2e:89:
15:57:7f:c6:79:5a:1b:a5:a2:fd:68:d1:b5:f7:9e:35:43:7d:
ce:01:f7:2f:01:0c:6b:2d:b6:73:44:b2:24:14:c3:f6:7f:81:
37:14:fd:4b:62:4a:23:ef:f4:cd:e2:f1:d5:9b:8f:02:06:d7:
4e:3b:54:0e:bc:ab:d5:6c:ad:82:82:91:d5:27:a8:5d:24:3b:
00:16:4a:5b:33:38:80:e3:83:e8:c9:9c:ac:1e:f0:86:75:96:
f1:1f:55:b8:20:78:4d:cb:a1:c1:ae:14:ff:b6:ef:80:f9:5b:
df:c9:be:fa:db:e6:c1:5c:2d:7a:0e:69:fb:8e:4b:21:49:6f:
20:42:46:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ITsb15oASKQh+FCIme4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjQ3MGZkNGQ2NzQyMTJmZmM4MmE5OTM2ZjNmZTI1NGJl
Y2NlNjYwHhcNMjUwNjI4MjAwMTE0WhcNMjUwNjI5MjAwMTE0WjAzMTEwLwYDVQQD
EyhjYjdhYzBhZGEyMTE2MGYxMzVlNDYxMWIxMmMxZmQxYmVlMzFhZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t/PPJgFmkXvLZVxR+D3TKv4LyCo
rqWs6GF7EUFLZuSoFm96FK6VUZVddtR4KpGoxWfcaeAR3hAkPzPchYurX0ve6MNi
QZlJnO6lGzeoYizYrmn3ekIiiPd8dtQedR+gGOhKQsMyzPLLQUcEix3LsCeOpWfZ
Vq9SvLwBhlqMbVyabK6dQtiA1/HlE8RmDqlaXdcEQAF/qqOqWIi1smjbez35q0SK
hTRnputafWciPUjh0Gbbf2tLdCvcinxDCb91rJDLnp2s5unphUMectzWBtSFPffu
PlKTTK7GhrYIUWku12QhFMm1mISUhVCjNYABPLKaoTOdyByhf2/djHIglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt6wK2iEWDxNeRhGxLB/RvuMa6JMB8GA1UdIwQY
MBaAFD60cP1NZ0IS/8gqmTbz/iVL7M5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83NDRlNTMtOGRlNi00NjcxLTlmODAt
NWYwMTU3MzBkODExLzEvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83NDRlNTMtOGRlNi00NjcxLTlmODAtNWYwMTU3MzBkODEx
LzEvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTs41CPM
vAkp/JaKTArPMgIwGLgou5Cew7f+kWt18+FqUkw/t2vd8eY9LpegIG2SRzYhXRmV
tCY2Z5VYCdWuZip86sT+MwraMrU3yfJHrwNMdK/6IZ1rsdPLoxShg10JgypAOm13
PrtYr0NpnR7PXDdTFchiIVtWhU35LC6JFVd/xnlaG6Wi/WjRtfeeNUN9zgH3LwEM
ay22c0SyJBTD9n+BNxT9S2JKI+/0zeLx1ZuPAgbXTjtUDryr1WytgoKR1SeoXSQ7
ABZKWzM4gOOD6MmcrB7whnWW8R9VuCB4Tcuhwa4U/7bvgPlb38m++tvmwVwteg5p
+45LIUlvIEJG0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:05 2025 by rpki-client