Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: U2dR/UaTIPELz9numv/vIbrwm2nkouIBVkHigODKhMY=
Subject key identifier: 20:32:30:FB:D1:75:0F:81:D2:F6:F7:D7:8E:19:54:8C:61:32:39:0F
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 0197B77C6EDC69BCAADB41A779F4E06708F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=)
2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: t8zr6pJW1A24SUlEdd2vKq5ILP6VN1CnBlpRnDe9dlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6e:dc:69:bc:aa:db:41:a7:79:f4:e0:67:08:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=203230fbd1750f81d2f6f7d78e19548c6132390f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:83:61:78:7f:07:2e:18:d2:e0:e5:9f:08:
e3:35:01:91:77:93:ea:2e:db:b9:34:cb:0b:98:90:
e1:76:e5:3c:d7:58:92:18:5b:aa:07:15:f1:be:bf:
9c:d7:d1:b5:22:65:8b:81:c9:f6:d0:4d:2d:2b:f9:
fc:57:ef:7c:bc:a2:07:e5:58:a9:48:11:03:26:58:
25:8f:61:91:23:8c:d5:fd:f5:d6:05:47:f6:e3:18:
0c:53:cb:f1:3e:0f:ec:6f:c0:c3:a0:d6:3a:94:63:
57:7d:75:23:39:d3:e3:ef:36:59:e2:d5:ac:a5:a7:
f3:30:7c:d7:6b:a4:1d:9c:9c:33:40:19:43:e2:f7:
f8:26:dd:4b:2f:41:7a:3a:3c:0e:0d:62:94:4b:13:
1d:13:d1:7b:61:ce:c1:19:ed:0e:68:4f:8e:60:f1:
42:e4:3c:47:80:d0:31:ba:0d:08:5e:7c:4a:b8:86:
12:20:51:1d:b8:14:82:fe:eb:34:26:ff:4a:b8:9b:
32:18:12:a0:61:90:43:d9:d9:33:b1:3c:d1:fe:a1:
e3:55:41:61:61:38:57:75:80:b3:c7:6b:a9:09:bf:
76:c5:d0:3a:7d:b5:a6:7d:a7:16:36:0c:f4:7a:17:
df:d0:13:dd:b5:df:7b:2b:ac:9f:90:d1:87:4a:85:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:32:30:FB:D1:75:0F:81:D2:F6:F7:D7:8E:19:54:8C:61:32:39:0F
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:89:7c:b2:22:bf:17:a9:80:ca:a9:1f:e9:97:81:8f:57:c6:
e0:b4:7b:a8:be:40:25:37:d1:80:79:55:0e:47:da:35:96:be:
90:75:c5:c6:f8:09:4f:cf:c1:8c:96:58:5f:3c:f9:3b:ca:fa:
53:c4:0f:f1:33:76:7e:7d:05:08:b5:5a:4a:97:ef:8b:69:ec:
d4:80:1f:f7:5b:af:83:e8:ad:dc:3d:5d:d9:28:6e:42:c5:1b:
19:f7:71:9b:9e:46:15:3d:a0:06:1c:2f:f8:2e:57:90:87:f6:
ff:b0:20:91:8d:42:f2:0f:0e:a1:4c:09:94:79:11:2d:a0:e8:
fb:81:bd:9c:28:b1:e4:71:35:4e:b0:d4:9f:c8:5a:90:d5:2e:
7b:76:b3:a6:93:2c:7e:fa:06:4c:45:4b:ac:23:9c:05:44:a3:
6d:95:0c:b7:52:f6:7e:6c:14:94:89:b5:ce:d4:8d:b8:e0:7b:
72:7a:b6:df:85:63:7b:52:d7:5f:44:f9:cf:64:2a:c8:52:bc:
13:ac:37:7e:f9:32:3b:78:7c:bc:4e:71:97:1d:0f:c1:0c:da:
0c:0f:1f:0e:e0:cd:74:8e:71:a1:61:99:50:7b:36:81:36:f7:
0e:ad:c3:f8:e5:df:06:cb:92:26:80:be:fb:2e:8e:55:57:05:
57:7c:32:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fG7cabyq20GnefTgZwj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NWRmMTNkMjBmM2I1NzFhNGJhNjEwYjgxZTYzMDNkYjZk
MDk5YzAwHhcNMjUwNjI4MTcwMTE0WhcNMjUwNjI5MTcwMTE0WjAzMTEwLwYDVQQD
EygyMDMyMzBmYmQxNzUwZjgxZDJmNmY3ZDc4ZTE5NTQ4YzYxMzIzOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnKDYXh/By4Y0uDlnwjjNQGRd5Pq
Ltu5NMsLmJDhduU811iSGFuqBxXxvr+c19G1ImWLgcn20E0tK/n8V+98vKIH5Vip
SBEDJlglj2GRI4zV/fXWBUf24xgMU8vxPg/sb8DDoNY6lGNXfXUjOdPj7zZZ4tWs
pafzMHzXa6QdnJwzQBlD4vf4Jt1LL0F6OjwODWKUSxMdE9F7Yc7BGe0OaE+OYPFC
5DxHgNAxug0IXnxKuIYSIFEduBSC/us0Jv9KuJsyGBKgYZBD2dkzsTzR/qHjVUFh
YThXdYCzx2upCb92xdA6fbWmfacWNgz0ehff0BPdtd97K6yfkNGHSoVifQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAyMPvRdQ+B0vb3144ZVIxhMjkPMB8GA1UdIwQY
MBaAFERd8T0g87VxpLphC4HmMD220JnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTkt
NGY1NGFkNzU1YjIwLzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTktNGY1NGFkNzU1YjIw
LzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYl8siK/
F6mAyqkf6ZeBj1fG4LR7qL5AJTfRgHlVDkfaNZa+kHXFxvgJT8/BjJZYXzz5O8r6
U8QP8TN2fn0FCLVaSpfvi2ns1IAf91uvg+it3D1d2ShuQsUbGfdxm55GFT2gBhwv
+C5XkIf2/7AgkY1C8g8OoUwJlHkRLaDo+4G9nCix5HE1TrDUn8hakNUue3azppMs
fvoGTEVLrCOcBUSjbZUMt1L2fmwUlIm1ztSNuOB7cnq234Vje1LXX0T5z2QqyFK8
E6w3fvkyO3h8vE5xlx0PwQzaDA8fDuDNdI5xoWGZUHs2gTb3Dq3D+OXfBsuSJoC+
+y6OVVcFV3wyHw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:21 2025 by rpki-client