Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: omRg6wYq8MX1q8i+xlxQdm53zzPdNknUX8FXFUIG/ug=
Subject key identifier: 10:7D:E9:65:E0:38:E5:CC:BB:04:FC:7E:CB:06:59:93:55:95:8D:DC
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 0197B70F22BE9AC22448ECEF311D414715DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
2: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: t4cES86Rmwap/iwFkTX/nXaECcJ0fUo0FrmE1NVsc88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:22:be:9a:c2:24:48:ec:ef:31:1d:41:47:15:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=107de965e038e5ccbb04fc7ecb06599355958ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:bb:28:aa:ae:81:58:01:71:76:e8:bb:f4:
15:42:de:e9:64:d1:d6:00:7a:89:7d:b7:e9:37:71:
41:0b:89:f0:60:06:3d:88:0e:b6:3c:0f:3b:4c:77:
2c:9c:50:82:f3:f1:9f:8b:99:ac:22:22:02:77:2a:
d7:d2:37:df:ca:4a:35:32:e1:90:a9:17:35:30:be:
cc:1b:db:75:9e:ad:10:89:a9:f7:18:81:14:dc:d3:
c7:53:59:60:18:0c:a5:98:f0:60:3a:f8:38:57:51:
96:4c:56:33:af:14:85:9f:ee:76:1e:d2:b7:0f:11:
32:f6:fa:ca:e3:51:67:fa:d9:7e:24:cf:86:2f:73:
08:f3:61:1c:42:88:68:18:0f:7c:d4:00:e7:54:36:
cc:f9:2f:7c:d0:e0:c8:ea:58:bf:32:e0:d3:28:75:
13:3a:28:f3:c1:a1:66:d6:e3:93:90:f1:14:43:90:
15:d5:dd:31:d9:8e:7e:b6:88:62:84:7b:b4:b8:38:
f4:9f:b6:c8:ac:a1:ba:4b:4e:42:5b:34:8a:6b:d7:
64:9a:ab:22:39:55:c0:9b:a8:8e:54:e7:7c:db:a4:
eb:b8:45:60:6a:a3:5b:f7:a4:e7:0b:94:d9:82:c6:
1b:86:79:88:d2:7f:fb:0c:88:f7:32:6c:15:35:9f:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:E9:65:E0:38:E5:CC:BB:04:FC:7E:CB:06:59:93:55:95:8D:DC
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:d1:1c:ae:ec:df:dc:d1:d8:6a:39:db:85:52:34:27:87:
8d:41:bb:36:79:b9:80:da:c2:34:8e:44:b4:28:3f:0e:2c:e2:
74:a6:3f:db:49:24:d7:05:57:e0:49:6f:8a:7c:c4:44:53:d4:
7a:0c:bb:ae:08:e6:97:03:f7:dc:74:64:e7:66:80:3f:11:8d:
42:00:26:2a:f1:89:72:c0:68:4c:29:8b:d6:90:56:14:51:83:
05:e1:b9:e3:1a:b2:49:c8:e2:8f:15:cf:2a:8b:ae:db:91:ee:
ac:b1:e4:8d:2c:92:d6:42:6c:a6:3e:67:46:93:40:f2:61:d7:
27:cd:71:b6:7e:0b:70:d7:85:c9:31:e1:fe:f5:2c:37:63:59:
7d:b8:58:5a:4f:16:61:f3:23:c1:d2:5b:a4:60:9e:d1:bb:61:
b7:88:db:d6:ce:3d:29:0d:f1:7c:4a:db:a2:41:08:2d:f9:9a:
60:e2:c0:fb:0b:41:6b:3c:05:d1:a4:37:dd:19:d1:37:cb:c5:
ad:87:9f:9b:77:52:e5:57:95:74:84:cc:65:ca:44:7b:9a:0a:
11:12:ea:1a:5f:70:7c:41:bd:e3:19:84:f4:27:74:d0:41:35:
a8:11:bc:dd:6c:4c:63:f4:dc:07:99:9b:5b:da:ca:66:c7:82:
6f:10:03:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DyK+msIkSOzvMR1BRxXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmFmOTA2MGMxZjQyYzYyOGZjZmI4ZjA3ODFkN2E1YmMy
MWZjMDIwHhcNMjUwNjI4MTUwMTUxWhcNMjUwNjI5MTUwMTUxWjAzMTEwLwYDVQQD
EygxMDdkZTk2NWUwMzhlNWNjYmIwNGZjN2VjYjA2NTk5MzU1OTU4ZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArla7KKqugVgBcXbou/QVQt7pZNHW
AHqJfbfpN3FBC4nwYAY9iA62PA87THcsnFCC8/Gfi5msIiICdyrX0jffyko1MuGQ
qRc1ML7MG9t1nq0Qian3GIEU3NPHU1lgGAylmPBgOvg4V1GWTFYzrxSFn+52HtK3
DxEy9vrK41Fn+tl+JM+GL3MI82EcQohoGA981ADnVDbM+S980ODI6li/MuDTKHUT
OijzwaFm1uOTkPEUQ5AV1d0x2Y5+tohihHu0uDj0n7bIrKG6S05CWzSKa9dkmqsi
OVXAm6iOVOd826TruEVgaqNb96TnC5TZgsYbhnmI0n/7DIj3MmwVNZ9LDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB96WXgOOXMuwT8fssGWZNVlY3cMB8GA1UdIwQY
MBaAFP0q+QYMH0LGKPz7jweB16W8IfwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDct
YmZjZjlhOTIyYThiLzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDctYmZjZjlhOTIyYThi
LzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQXRHK7s
39zR2Go524VSNCeHjUG7Nnm5gNrCNI5EtCg/DizidKY/20kk1wVX4ElvinzERFPU
egy7rgjmlwP33HRk52aAPxGNQgAmKvGJcsBoTCmL1pBWFFGDBeG54xqyScjijxXP
Kouu25HurLHkjSyS1kJspj5nRpNA8mHXJ81xtn4LcNeFyTHh/vUsN2NZfbhYWk8W
YfMjwdJbpGCe0btht4jb1s49KQ3xfErbokEILfmaYOLA+wtBazwF0aQ33RnRN8vF
rYefm3dS5VeVdITMZcpEe5oKERLqGl9wfEG94xmE9Cd00EE1qBG83WxMY/TcB5mb
W9rKZseCbxADwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:14 2025 by rpki-client