Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: +vTrxhK16HHt//gDrBgxhQceRjLs4c39RjI9v1HL0oc=
Subject key identifier: 70:47:BD:0E:5E:00:0A:69:80:A7:32:67:02:37:4D:DA:33:26:8E:01
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 0197B77CC3F5063146317AB16E992EFF4FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0AD3
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=)
2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: k06iuSOthuJJv/nPMkYl+QRCZrWJtO23hREYLbJSVos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c3:f5:06:31:46:31:7a:b1:6e:99:2e:ff:4f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=7047bd0e5e000a6980a7326702374dda33268e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:b7:3e:b8:20:0f:f0:66:57:e7:c8:79:bc:
ac:06:d5:4b:1a:d2:8f:12:e1:cb:76:02:61:61:14:
12:61:8b:b6:3d:64:bd:40:72:d7:70:ae:20:35:ad:
80:77:97:d9:ea:64:57:84:a0:2c:de:53:3b:f7:9f:
d9:07:bc:70:b6:33:9f:c5:45:7b:bc:a4:55:84:b1:
95:5d:a7:3f:36:65:0d:fc:5a:28:ab:58:c5:e6:79:
b3:b2:18:3f:9c:d7:a5:1c:f2:bb:2a:67:1a:3e:79:
4f:f2:78:7b:e1:b3:85:41:da:24:2a:6d:a0:29:f3:
f9:1e:88:1a:fb:83:8d:58:b7:44:8f:e1:ba:49:de:
8e:16:57:2b:cb:49:9a:19:1e:9b:57:c9:0b:e9:80:
52:62:56:81:a2:27:1b:25:d5:a6:34:48:e0:62:06:
0e:27:8d:48:66:be:b5:05:23:9a:76:f8:a0:5d:08:
83:77:ce:ea:f1:80:d1:3a:f3:f7:44:62:1a:22:78:
f6:e2:d9:da:ac:48:7f:8f:c6:ba:fe:79:b6:27:dd:
ac:58:bd:3d:9d:5a:06:fc:a9:3e:88:64:bf:42:6b:
8f:5c:27:ac:c2:4d:56:2e:38:44:de:93:2d:e5:d7:
17:9e:91:54:b1:92:bd:ea:f8:17:a8:01:48:82:7b:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:47:BD:0E:5E:00:0A:69:80:A7:32:67:02:37:4D:DA:33:26:8E:01
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5e:37:8c:41:ee:e8:9a:2c:78:ee:3f:8d:7b:54:e7:97:52:
fc:de:09:5d:9a:33:b2:a7:bd:71:51:c4:39:20:56:e8:e3:e5:
13:5f:75:c9:59:91:88:14:ec:57:e8:d5:56:ee:74:0b:4d:d2:
24:b5:08:76:c8:a1:32:33:4c:cc:fe:06:18:42:12:5d:c8:cf:
26:43:64:15:eb:8f:a6:56:7f:88:02:1b:e9:b0:85:0b:48:64:
e8:22:fc:a6:2c:6b:69:10:d2:7c:92:e8:95:1a:90:87:f0:ac:
6d:50:d1:cb:ff:ba:d0:d8:31:94:29:ba:6a:2a:15:e1:d8:57:
8b:60:f8:76:02:ff:e7:a7:33:04:12:cf:75:19:61:fd:f3:bf:
bc:8b:45:ad:c1:11:f6:36:35:77:73:9d:4a:2a:f0:cb:c8:33:
ce:d9:8d:f3:9c:00:ba:2a:be:3b:6b:8e:a1:24:c8:91:cc:c5:
af:fb:43:5e:89:7e:7d:d5:4e:6a:2d:bf:f0:07:2b:ea:02:7c:
a4:f8:5d:1b:46:2c:2a:5c:87:41:7c:49:94:bf:58:0e:82:56:
0d:9e:76:f5:92:c2:54:71:3c:21:31:36:93:d9:fb:2b:f2:fc:
6e:6c:c7:d7:2b:eb:0a:13:3d:fa:9d:a1:b7:44:03:bb:1a:6e:
91:f8:b8:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fMP1BjFGMXqxbpku/0/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjExOTE3OGJmZDkyM2E0YjVlYzQwNmQ5ZmUxNDUyYjI3
NzZlZmEwHhcNMjUwNjI4MTcwMTM2WhcNMjUwNjI5MTcwMTM2WjAzMTEwLwYDVQQD
Eyg3MDQ3YmQwZTVlMDAwYTY5ODBhNzMyNjcwMjM3NGRkYTMzMjY4ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rS3PrggD/BmV+fIebysBtVLGtKP
EuHLdgJhYRQSYYu2PWS9QHLXcK4gNa2Ad5fZ6mRXhKAs3lM795/ZB7xwtjOfxUV7
vKRVhLGVXac/NmUN/Fooq1jF5nmzshg/nNelHPK7KmcaPnlP8nh74bOFQdokKm2g
KfP5Hoga+4ONWLdEj+G6Sd6OFlcry0maGR6bV8kL6YBSYlaBoicbJdWmNEjgYgYO
J41IZr61BSOadvigXQiDd87q8YDROvP3RGIaInj24tnarEh/j8a6/nm2J92sWL09
nVoG/Kk+iGS/QmuPXCeswk1WLjhE3pMt5dcXnpFUsZK96vgXqAFIgnu1XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBHvQ5eAAppgKcyZwI3TdozJo4BMB8GA1UdIwQY
MBaAFKwhGReL/ZI6S17EBtn+FFKyd276MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgt
ZjYwMGQwZmQwM2NlLzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgtZjYwMGQwZmQwM2Nl
LzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl43jEHu
6JoseO4/jXtU55dS/N4JXZozsqe9cVHEOSBW6OPlE191yVmRiBTsV+jVVu50C03S
JLUIdsihMjNMzP4GGEISXcjPJkNkFeuPplZ/iAIb6bCFC0hk6CL8pixraRDSfJLo
lRqQh/CsbVDRy/+60NgxlCm6aioV4dhXi2D4dgL/56czBBLPdRlh/fO/vItFrcER
9jY1d3OdSirwy8gzztmN85wAuiq+O2uOoSTIkczFr/tDXol+fdVOai2/8Acr6gJ8
pPhdG0YsKlyHQXxJlL9YDoJWDZ529ZLCVHE8ITE2k9n7K/L8bmzH1yvrChM9+p2h
t0QDuxpukfi40A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:32 2025 by rpki-client