Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: Jl8SnsQmcE1mhu938IevY1g/Qnvgk98kHWvlXRxbIuE=
Subject key identifier: EB:21:C9:2D:22:ED:1E:11:A4:31:F2:80:A8:F5:9B:B1:90:8B:32:E7
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 0197B6A11BFC869B1DE0713451B739D17926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 5F
Signing time: Sat 28 Jun 2025 13:01:41 +0000
Manifest this update: Sat 28 Jun 2025 13:01:41 +0000
Manifest next update: Sun 29 Jun 2025 13:01:41 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: 0IRXswU4D4JpL6Azft8xDQQbKiHlVE1ELIhJ1fIq80E=)
2: JJIvfjZzCLr-eY_LSqlGpsRo7hw.roa (hash: bxgw5cMXPreloYfdhoWhuj5SGkwaDHEoqsrDfOC485Y=)
3: gLRqMg9LH0l3Bvm_1EaM6nJMhBU.roa (hash: tozY0cG4yyw1J4sRnJzdlyQ67yOL3u+re3wAKQtu0HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1b:fc:86:9b:1d:e0:71:34:51:b7:39:d1:79:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Jun 28 13:01:41 2025 GMT
Not After : Jun 29 13:01:41 2025 GMT
Subject: CN=eb21c92d22ed1e11a431f280a8f59bb1908b32e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5b:0d:73:23:5c:20:a6:40:44:6e:17:11:e1:
a5:85:0a:f0:cd:d5:65:c3:3f:be:1a:12:62:69:6e:
f4:47:fb:a6:2b:ee:1b:7b:27:76:97:b1:ee:ec:ab:
01:e8:6d:e4:cc:7b:2e:80:cf:78:6c:f6:36:0b:0a:
c3:02:80:b8:0d:eb:5d:e3:c8:e7:3a:34:f7:5d:cf:
b9:77:cb:0f:da:75:54:83:5a:1c:b1:4d:fb:7b:79:
97:9a:c7:5c:08:c7:48:ca:26:92:03:dc:fa:d2:1f:
49:0a:94:39:65:53:a1:c7:1d:3e:fd:55:4a:1b:49:
b1:88:07:17:3e:69:fc:ed:12:16:4c:e1:0a:33:53:
4a:62:3d:a9:88:a2:d7:fe:86:09:85:53:e7:46:39:
10:5d:ec:68:a5:d3:91:b6:e6:7c:be:6a:d9:85:e6:
ea:03:48:54:3d:df:f0:7f:ef:d6:d0:46:56:5b:34:
0c:ef:f0:59:a1:fa:02:ba:79:87:ee:25:6b:7c:41:
f7:af:2f:43:00:01:86:dc:64:67:b0:95:3c:36:68:
cd:fc:88:bf:5c:51:56:a7:04:46:72:fb:5d:1e:ea:
22:2f:52:fb:7c:2f:65:36:42:86:58:60:93:0c:f3:
7e:8e:d8:af:f5:d5:8c:fd:0f:91:6f:00:bf:e5:e5:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:21:C9:2D:22:ED:1E:11:A4:31:F2:80:A8:F5:9B:B1:90:8B:32:E7
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b0:37:99:65:c8:de:bf:5c:be:d6:e5:bd:b6:9b:0d:e1:a1:
e3:70:d5:b1:8d:be:8b:7e:88:34:19:23:36:e9:2f:ab:11:79:
54:c3:de:ab:27:eb:81:e9:6c:27:af:dd:64:e1:4f:91:09:3f:
76:8e:1b:b4:5d:62:0a:bb:a0:c5:d9:1a:c3:cb:92:2b:ef:c6:
81:77:c6:dc:eb:54:3a:a7:c6:97:9e:3e:34:54:66:1b:70:bc:
d3:c4:01:c1:85:4e:ae:c6:3c:9a:93:80:a2:61:90:05:21:d2:
f1:a8:f0:b9:e7:c8:b3:c1:25:4e:94:43:e3:2a:ac:e0:c4:fa:
b5:ea:71:4f:a2:d0:b7:f1:31:8e:35:dc:de:0a:70:c8:5d:25:
62:d5:27:01:fe:d5:c9:f9:90:09:0a:1d:87:65:07:63:92:2e:
69:64:24:3c:f4:47:5a:98:a2:f2:98:fe:1d:8a:15:bd:3a:e7:
72:69:e7:a2:e7:93:67:d3:b4:62:3c:a1:a3:f4:4b:40:53:31:
32:26:7e:b9:2d:51:c3:d9:65:26:ed:71:ba:6d:fe:75:be:54:
5c:17:5a:33:72:5c:95:a9:02:b2:9e:08:6e:8a:5f:0e:ac:20:
cc:2c:84:90:8c:41:d0:fd:45:06:bf:75:80:df:13:fb:db:6f:
a2:8d:24:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRv8hpsd4HE0Ubc50XkmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2YyZGI3MmFhYjQzNWI5ZGFhMmIxZjdlMWE4YTMyNzY3
Nzg4YmUwHhcNMjUwNjI4MTMwMTQxWhcNMjUwNjI5MTMwMTQxWjAzMTEwLwYDVQQD
EyhlYjIxYzkyZDIyZWQxZTExYTQzMWYyODBhOGY1OWJiMTkwOGIzMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVsNcyNcIKZARG4XEeGlhQrwzdVl
wz++GhJiaW70R/umK+4beyd2l7Hu7KsB6G3kzHsugM94bPY2CwrDAoC4Detd48jn
OjT3Xc+5d8sP2nVUg1ocsU37e3mXmsdcCMdIyiaSA9z60h9JCpQ5ZVOhxx0+/VVK
G0mxiAcXPmn87RIWTOEKM1NKYj2piKLX/oYJhVPnRjkQXexopdORtuZ8vmrZhebq
A0hUPd/wf+/W0EZWWzQM7/BZofoCunmH7iVrfEH3ry9DAAGG3GRnsJU8NmjN/Ii/
XFFWpwRGcvtdHuoiL1L7fC9lNkKGWGCTDPN+jtiv9dWM/Q+RbwC/5eWzqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOshyS0i7R4RpDHygKj1m7GQizLnMB8GA1UdIwQY
MBaAFPM/Lbcqq0NbnaorH34aijJ2d4i+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEt
YzZjMDZlMmIzYTlmLzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEtYzZjMDZlMmIzYTlm
LzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7A3mWXI
3r9cvtblvbabDeGh43DVsY2+i36INBkjNukvqxF5VMPeqyfrgelsJ6/dZOFPkQk/
do4btF1iCrugxdkaw8uSK+/GgXfG3OtUOqfGl54+NFRmG3C808QBwYVOrsY8mpOA
omGQBSHS8ajwuefIs8ElTpRD4yqs4MT6tepxT6LQt/ExjjXc3gpwyF0lYtUnAf7V
yfmQCQodh2UHY5IuaWQkPPRHWpii8pj+HYoVvTrncmnnoueTZ9O0Yjyho/RLQFMx
MiZ+uS1Rw9llJu1xum3+db5UXBdaM3JclakCsp4IbopfDqwgzCyEkIxB0P1FBr91
gN8T+9tvoo0kWA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:09:04 2025 by rpki-client