Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
File: a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json)
Hash identifier: in+J04tHujBZvJ6S4xOJnKVud9YzImW7UWKNF+WrrlM=
Subject key identifier: EA:08:04:3A:F6:29:A1:F3:3A:40:ED:36:86:B3:E1:9C:EC:AD:29:F1
Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
Certificate issuer: /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Certificate serial: 0197B6D7AAEBB0297D14A015C4D0F1137D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
Manifest number: 0D22
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: K6xAMmZL/oMwA19IgaEOx4SWXfyE1CySf6WGx8uC7Zs=)
2: y1CXud9r4_KJCPJy5YSEoyYl1eg.roa (hash: kuTX8hxg4+tvv3VjP1J6iCQyHiFE3dinO8w9j6x97BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:aa:eb:b0:29:7d:14:a0:15:c4:d0:f1:13:7d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=ea08043af629a1f33a40ed3686b3e19cecad29f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:37:f0:b7:88:ee:2e:bd:20:14:09:b7:fa:
c8:6f:e6:ac:2f:65:ba:c3:2f:d5:66:f8:cb:2c:a7:
e5:19:db:bd:6a:db:4b:b8:5f:28:d4:36:46:86:6a:
d2:25:11:55:d1:61:5f:74:ed:a5:a7:be:d7:94:86:
ae:69:77:8f:bf:2c:b1:67:32:ce:74:34:21:b0:71:
48:b2:98:af:7f:2c:21:64:1f:5e:c2:ed:b8:55:a7:
32:dc:5a:c6:a4:cb:87:c2:f6:67:bc:07:28:b6:64:
f9:c2:7b:a8:da:b3:9c:1c:23:f9:44:ee:8c:51:85:
17:1e:22:ca:b9:e1:f6:c1:64:18:04:8a:07:de:bd:
b4:7f:d7:80:f5:61:72:0e:9c:de:99:97:05:de:4a:
59:d7:1a:47:88:94:f8:ec:45:42:28:8b:eb:27:ea:
e1:fa:e3:de:e5:d8:6e:55:ba:a4:83:20:ed:a3:5e:
52:ee:9a:8c:5e:22:28:d1:b8:22:55:d4:97:a1:f4:
c7:0f:73:94:fb:6b:95:74:46:9e:a9:6c:7f:15:f6:
85:5f:b5:76:df:2c:ea:fc:28:8d:06:8a:50:6d:48:
0a:8d:82:92:1b:b4:2d:29:b7:8d:68:10:0e:ea:a1:
81:eb:0a:b5:03:3a:68:24:b9:50:6a:89:9c:07:ce:
cc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:08:04:3A:F6:29:A1:F3:3A:40:ED:36:86:B3:E1:9C:EC:AD:29:F1
X509v3 Authority Key Identifier:
keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:06:5b:d2:b0:69:c0:5c:db:a0:a4:a9:bd:31:d6:4c:ee:0b:
43:8f:66:57:ea:cf:69:ed:e0:58:29:69:73:59:d7:93:d3:d4:
b8:e2:51:3c:ff:a7:7e:56:40:f6:fd:f9:45:1b:f4:90:2a:25:
69:7b:be:de:ef:4e:50:78:45:0e:1f:dc:2c:a1:1c:5b:02:42:
df:40:17:66:d4:5a:1b:70:b6:f5:25:fc:3b:89:27:c4:fd:51:
f7:e9:c7:f3:05:bd:d9:b5:41:78:0d:cd:8a:e8:18:23:63:f0:
ad:b7:87:19:76:67:9d:57:64:db:b8:60:b9:c1:53:b0:8d:1d:
08:60:f1:55:bf:36:ff:5c:76:c6:22:53:85:17:07:04:0d:58:
20:52:11:38:0e:f6:11:81:19:eb:cd:8e:f3:43:75:2f:65:c0:
78:6b:1d:58:ba:85:9f:c7:13:a6:95:f2:19:5b:91:f4:10:5f:
37:1b:de:45:d4:14:3c:a4:5b:ba:2a:dd:ad:eb:b4:00:96:04:
76:50:24:8c:c8:14:24:2b:40:1a:d2:5f:27:40:4b:c8:c6:94:
6d:dd:72:27:84:46:ea:30:93:ae:52:29:bc:bc:fc:fa:c2:ec:
af:6c:a8:25:82:de:5b:22:d1:53:8d:1a:17:32:6d:80:26:0d:
26:80:17:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216rrsCl9FKAVxNDxE30bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWM0ZTI5YzY4NDljNWY4MDg0MjhlNjY4NThmNGYwZWNm
NGE2NTQwHhcNMjUwNjI4MTQwMTE2WhcNMjUwNjI5MTQwMTE2WjAzMTEwLwYDVQQD
EyhlYTA4MDQzYWY2MjlhMWYzM2E0MGVkMzY4NmIzZTE5Y2VjYWQyOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3g38LeI7i69IBQJt/rIb+asL2W6
wy/VZvjLLKflGdu9attLuF8o1DZGhmrSJRFV0WFfdO2lp77XlIauaXePvyyxZzLO
dDQhsHFIspivfywhZB9ewu24Vacy3FrGpMuHwvZnvAcotmT5wnuo2rOcHCP5RO6M
UYUXHiLKueH2wWQYBIoH3r20f9eA9WFyDpzemZcF3kpZ1xpHiJT47EVCKIvrJ+rh
+uPe5dhuVbqkgyDto15S7pqMXiIo0bgiVdSXofTHD3OU+2uVdEaeqWx/FfaFX7V2
3yzq/CiNBopQbUgKjYKSG7QtKbeNaBAO6qGB6wq1AzpoJLlQaomcB87MrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoIBDr2KaHzOkDtNoaz4ZzsrSnxMB8GA1UdIwQY
MBaAFGvsTinGhJxfgIQo5mhY9PDs9KZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgt
ZGJmYWVjZGM3ZWEzLzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgtZGJmYWVjZGM3ZWEz
LzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwZb0rBp
wFzboKSpvTHWTO4LQ49mV+rPae3gWClpc1nXk9PUuOJRPP+nflZA9v35RRv0kCol
aXu+3u9OUHhFDh/cLKEcWwJC30AXZtRaG3C29SX8O4knxP1R9+nH8wW92bVBeA3N
iugYI2PwrbeHGXZnnVdk27hgucFTsI0dCGDxVb82/1x2xiJThRcHBA1YIFIROA72
EYEZ682O80N1L2XAeGsdWLqFn8cTppXyGVuR9BBfNxveRdQUPKRbuirdreu0AJYE
dlAkjMgUJCtAGtJfJ0BLyMaUbd1yJ4RG6jCTrlIpvLz8+sLsr2yoJYLeWyLRU40a
FzJtgCYNJoAXvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:37 2025 by rpki-client