Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
File: SiHJG2O7vaiASnSfPWEOiyF_m3M.mft (raw, json)
Hash identifier: zvNeds0eZP4SxD0hI0ETB4y4UaFWzxc7p4pKiIWDGOg=
Subject key identifier: 6A:83:7B:F1:91:C6:38:E5:E5:84:D5:55:C0:DD:12:A0:1C:34:CA:2C
Authority key identifier: 4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
Certificate issuer: /CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Certificate serial: 0197B7454B6BB51CD0B9B3AAF7F809089070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
Manifest number: 11B3
Signing time: Sat 28 Jun 2025 16:01:01 +0000
Manifest this update: Sat 28 Jun 2025 16:01:01 +0000
Manifest next update: Sun 29 Jun 2025 16:01:01 +0000
Files and hashes: 1: 1Z1yWNgRSnqR3pt5WlApDelQe4o.roa (hash: 7G52qXZFDFq0XDjJ+/lW8m4SCa70rkFS2r1Ec1zORA4=)
2: SiHJG2O7vaiASnSfPWEOiyF_m3M.crl (hash: 9s65j1wau+5RuRsh8n4eUMFdsyi+4OEFs2AJK4W+HEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4b:6b:b5:1c:d0:b9:b3:aa:f7:f8:09:08:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Validity
Not Before: Jun 28 16:01:01 2025 GMT
Not After : Jun 29 16:01:01 2025 GMT
Subject: CN=6a837bf191c638e5e584d555c0dd12a01c34ca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:44:12:5a:9e:1b:88:b5:dc:06:fa:f8:2f:
3e:92:6e:ec:53:6e:95:72:92:30:66:ce:ee:84:5a:
70:de:3d:6f:aa:c3:ec:4f:02:9e:3c:3c:13:31:ee:
2f:ff:34:de:f1:8a:89:5b:73:05:7e:d7:df:b2:cf:
6b:3b:d5:97:80:22:af:86:3e:1c:48:8a:dd:e1:a3:
28:00:4e:53:15:52:bd:10:54:5f:58:6c:9a:34:90:
70:7f:e1:a5:3a:af:6c:07:22:a0:6d:d7:73:90:fc:
18:a2:91:68:ec:c1:1d:14:e9:17:11:97:7b:7c:cc:
c3:76:6c:c7:6d:39:d8:c5:1d:75:d4:ee:48:a4:80:
cc:fc:9a:e0:63:06:56:d8:77:66:a5:bd:97:1c:b4:
ae:8e:5e:35:50:bb:72:cf:c4:f0:0c:e2:07:62:9c:
bd:fd:f1:1f:20:89:3d:5e:95:b6:e6:4e:cd:27:f7:
b9:cb:76:e2:d9:3d:cc:34:cd:17:84:34:c0:bd:59:
fd:6b:b0:fe:1a:8b:41:fa:06:d3:2d:17:f6:5c:c0:
6b:de:0d:fb:ca:b0:7a:d7:e9:2c:cb:26:19:de:ae:
00:af:05:1f:67:8e:9c:da:e8:25:30:63:01:8e:ae:
29:b4:0e:9e:ac:e9:7d:cc:33:81:87:48:d9:c3:8d:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:83:7B:F1:91:C6:38:E5:E5:84:D5:55:C0:DD:12:A0:1C:34:CA:2C
X509v3 Authority Key Identifier:
keyid:4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a9:61:f4:cc:f2:cf:59:39:26:75:32:02:11:d6:3a:07:aa:
2d:b3:96:2c:dd:60:5c:76:60:ff:4f:a7:98:5f:93:9e:cc:69:
80:3f:5c:f0:da:2a:1e:24:5f:4e:66:0d:ac:1a:ca:75:9d:33:
30:6a:b4:57:26:00:e8:2a:71:bf:87:3f:db:da:f0:0c:18:19:
b3:82:fa:fb:01:64:90:27:b7:81:c1:c1:ca:52:2d:6a:cc:81:
b6:01:31:9b:2c:ef:aa:72:c3:b1:f9:cb:1e:9c:f9:a3:60:b7:
dc:32:5a:b3:f3:df:25:d3:4a:26:67:18:45:9d:92:7a:a4:a7:
38:c6:87:bb:59:02:2f:8f:16:2f:38:ce:1b:0a:16:8f:ca:61:
8f:3f:e3:6b:1d:57:ae:9a:79:40:fb:2c:b5:d1:21:0a:73:af:
92:96:c4:b6:9b:f2:2a:25:63:e6:b8:c0:d2:08:a6:1e:a4:39:
01:63:d6:e3:ba:34:6f:f2:ea:48:f4:f2:a2:49:cf:6b:72:83:
32:f3:11:4d:0c:7d:9b:eb:1a:b9:7c:80:23:f4:1b:82:54:ed:
25:59:e0:92:33:18:60:16:e7:4b:f6:f9:3a:5f:26:03:aa:78:
66:8f:da:ec:bc:20:b5:e9:98:24:ff:75:94:a6:c2:9c:8e:3c:
5c:68:e3:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RUtrtRzQubOq9/gJCJBwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMjFjOTFiNjNiYmJkYTg4MDRhNzQ5ZjNkNjEwZThiMjE3
ZjliNzMwHhcNMjUwNjI4MTYwMTAxWhcNMjUwNjI5MTYwMTAxWjAzMTEwLwYDVQQD
Eyg2YTgzN2JmMTkxYzYzOGU1ZTU4NGQ1NTVjMGRkMTJhMDFjMzRjYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHtEElqeG4i13Ab6+C8+km7sU26V
cpIwZs7uhFpw3j1vqsPsTwKePDwTMe4v/zTe8YqJW3MFftffss9rO9WXgCKvhj4c
SIrd4aMoAE5TFVK9EFRfWGyaNJBwf+GlOq9sByKgbddzkPwYopFo7MEdFOkXEZd7
fMzDdmzHbTnYxR111O5IpIDM/JrgYwZW2Hdmpb2XHLSujl41ULtyz8TwDOIHYpy9
/fEfIIk9XpW25k7NJ/e5y3bi2T3MNM0XhDTAvVn9a7D+GotB+gbTLRf2XMBr3g37
yrB61+ksyyYZ3q4ArwUfZ46c2uglMGMBjq4ptA6erOl9zDOBh0jZw40KaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqDe/GRxjjl5YTVVcDdEqAcNMosMB8GA1UdIwQY
MBaAFEohyRtju72ogEp0nz1hDoshf5tzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2lISkcyTzd2YWlBU25TZlBXRU9peUZfbTNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82ZThjYTAtY2Q0MC00NmZkLThlZTQt
NDdmYmU0YzRhNGZkLzEvU2lISkcyTzd2YWlBU25TZlBXRU9peUZfbTNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS82ZThjYTAtY2Q0MC00NmZkLThlZTQtNDdmYmU0YzRhNGZk
LzEvU2lISkcyTzd2YWlBU25TZlBXRU9peUZfbTNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwqlh9Mzy
z1k5JnUyAhHWOgeqLbOWLN1gXHZg/0+nmF+TnsxpgD9c8NoqHiRfTmYNrBrKdZ0z
MGq0VyYA6Cpxv4c/29rwDBgZs4L6+wFkkCe3gcHBylItasyBtgExmyzvqnLDsfnL
Hpz5o2C33DJas/PfJdNKJmcYRZ2SeqSnOMaHu1kCL48WLzjOGwoWj8phjz/jax1X
rpp5QPsstdEhCnOvkpbEtpvyKiVj5rjA0gimHqQ5AWPW47o0b/LqSPTyoknPa3KD
MvMRTQx9m+sauXyAI/QbglTtJVngkjMYYBbnS/b5Ol8mA6p4Zo/a7LwgtemYJP91
lKbCnI48XGjjFw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:56 2025 by rpki-client