Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: ql8v2xD/qQelry2Ljcel1aMk2+fAwFhGvbMVjGHN1Zk=
Subject key identifier: 57:0B:F8:03:CC:71:45:3A:63:86:CC:A1:08:86:9C:9A:01:D5:BE:BE
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 0197B8C60F804E9C9CA25F5EB322E1515D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 23:01:17 +0000
Manifest this update: Sat 28 Jun 2025 23:01:17 +0000
Manifest next update: Sun 29 Jun 2025 23:01:17 +0000
Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: OkRJdhjNixNN5hTXYNUr3TFipoWf4WP2Ckv0hYZONKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:0f:80:4e:9c:9c:a2:5f:5e:b3:22:e1:51:5d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Jun 28 23:01:17 2025 GMT
Not After : Jun 29 23:01:17 2025 GMT
Subject: CN=570bf803cc71453a6386cca108869c9a01d5bebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:02:02:e6:04:47:69:09:a3:cb:4b:a6:a0:
8c:16:8e:93:9f:91:ee:d2:0d:d5:ca:8f:b4:67:98:
42:5d:76:e3:2c:71:a7:f5:ce:ff:18:b4:8c:ae:22:
48:f9:69:79:6d:96:0d:aa:01:5c:51:4d:a2:dd:5d:
a2:90:98:84:25:1d:f3:c4:d3:c4:20:a7:7b:cd:10:
2e:24:51:40:55:a5:9c:d7:82:84:df:07:7a:56:6c:
29:04:f6:fc:cb:cb:f0:e5:0a:88:7c:3e:f3:19:49:
91:5a:10:dd:a4:a6:ad:69:14:3f:90:71:0a:c6:52:
80:ea:82:5a:ee:f9:3c:28:c8:16:7d:87:91:00:9f:
aa:00:3f:49:65:7e:eb:9f:3b:fa:76:d4:eb:e7:0d:
be:f6:0a:cc:36:8c:54:f6:61:39:63:cd:35:d3:3d:
8f:2a:59:b2:ab:55:41:ea:53:c8:5e:83:a3:4b:27:
37:4e:46:ab:e3:38:94:e2:2b:26:14:6b:07:c3:29:
82:c4:6c:4d:df:13:85:20:62:b3:d9:51:c0:79:cc:
01:ef:7e:30:75:e1:5a:6a:c6:96:aa:1a:b4:f5:03:
8f:ae:a3:aa:78:c9:e5:62:74:4c:1e:71:56:8f:a0:
85:13:15:9b:56:85:bf:b2:d4:93:6f:5b:d2:e8:60:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:F8:03:CC:71:45:3A:63:86:CC:A1:08:86:9C:9A:01:D5:BE:BE
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:12:18:b2:36:d9:4c:6d:6e:b5:fe:c6:be:15:8f:b8:7b:b6:
bb:81:17:75:78:72:9e:9e:5a:0e:bf:b3:c7:5a:d9:3d:f8:9f:
bb:e4:b6:a2:96:f4:8f:74:b9:99:70:df:ce:c3:8f:06:c5:69:
dc:a6:87:82:20:8f:3b:79:9a:f5:8e:68:f1:87:1b:d4:96:5f:
ed:55:d8:be:86:75:68:4b:20:23:d0:61:ab:a3:d7:b3:72:41:
ed:c7:4e:3a:4a:b4:26:2e:e0:f4:b5:60:1e:2c:59:7f:40:ed:
9f:c2:65:32:93:f6:af:ff:cd:19:6b:f4:42:a7:ba:3e:e7:68:
9b:00:91:0e:f6:39:c1:59:d9:99:9f:54:0f:d2:38:5e:17:97:
56:7c:94:53:b6:d7:f3:e2:17:83:61:24:0f:47:d8:a5:2a:47:
dc:f0:fc:ac:03:bf:64:20:b9:33:bd:6d:0b:a4:20:3c:a6:ba:
86:3e:30:1c:c9:ba:c4:d6:f8:d6:20:2b:b6:11:e2:e1:11:87:
45:42:a3:13:81:3f:c0:aa:bb:ee:d0:38:0a:0b:29:8b:98:7b:
79:f9:5f:00:79:95:dc:5d:51:cb:70:c7:8c:8f:a6:aa:65:1e:
97:45:65:43:95:db:be:92:11:c7:74:dc:1c:87:a0:2c:83:71:
74:07:58:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xg+ATpycol9esyLhUV1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNjQ5NzlhYWVkNGU3ODhlNDUxMGVkZjhiNjk2YmQ5NmNh
Yzc3MzIwHhcNMjUwNjI4MjMwMTE3WhcNMjUwNjI5MjMwMTE3WjAzMTEwLwYDVQQD
Eyg1NzBiZjgwM2NjNzE0NTNhNjM4NmNjYTEwODg2OWM5YTAxZDViZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllkCAuYER2kJo8tLpqCMFo6Tn5Hu
0g3Vyo+0Z5hCXXbjLHGn9c7/GLSMriJI+Wl5bZYNqgFcUU2i3V2ikJiEJR3zxNPE
IKd7zRAuJFFAVaWc14KE3wd6VmwpBPb8y8vw5QqIfD7zGUmRWhDdpKataRQ/kHEK
xlKA6oJa7vk8KMgWfYeRAJ+qAD9JZX7rnzv6dtTr5w2+9grMNoxU9mE5Y8010z2P
Klmyq1VB6lPIXoOjSyc3Tkar4ziU4ismFGsHwymCxGxN3xOFIGKz2VHAecwB734w
deFaasaWqhq09QOPrqOqeMnlYnRMHnFWj6CFExWbVoW/stSTb1vS6GBLBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcL+APMcUU6Y4bMoQiGnJoB1b6+MB8GA1UdIwQY
MBaAFL9kl5qu1OeI5FEO34tpa9lsrHcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTIt
MTMzZjg1OTk0YjFiLzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTItMTMzZjg1OTk0YjFi
LzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBIYsjbZ
TG1utf7GvhWPuHu2u4EXdXhynp5aDr+zx1rZPfifu+S2opb0j3S5mXDfzsOPBsVp
3KaHgiCPO3ma9Y5o8Ycb1JZf7VXYvoZ1aEsgI9Bhq6PXs3JB7cdOOkq0Ji7g9LVg
HixZf0Dtn8JlMpP2r//NGWv0Qqe6PudomwCRDvY5wVnZmZ9UD9I4XheXVnyUU7bX
8+IXg2EkD0fYpSpH3PD8rAO/ZCC5M71tC6QgPKa6hj4wHMm6xNb41iArthHi4RGH
RUKjE4E/wKq77tA4Cgspi5h7eflfAHmV3F1Ry3DHjI+mqmUel0VlQ5XbvpIRx3Tc
HIegLINxdAdYgg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:24 2025 by rpki-client