Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: oVMs4tFx93Rybc3wA0YP4PFddtCspq5V1cvTRlhuRDc=
Subject key identifier: F4:25:90:BE:99:69:BD:4F:2D:60:AC:A4:FD:82:E4:10:C2:E8:4F:94
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 0197B632757B6A82B5AB4F1C4B8CF1987365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 11:00:49 +0000
Manifest this update: Sat 28 Jun 2025 11:00:49 +0000
Manifest next update: Sun 29 Jun 2025 11:00:49 +0000
Files and hashes: 1: Sk4x_HD1LPLgRyf7btPjY4ncmxU.roa (hash: +rugmwU9Eq5brIUvEJKCQXzHVBLNVvEt2u6gto3U47Q=)
2: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: howifkSZfkv8KQOl55SoZmMyzRe/uEG1leXtxGFt56s=)
3: xNwSYwAbBI1je8GEBcLJwVabZvM.roa (hash: rsROgVJBvuKbZk2mF1z0pX159BnG002ygt7Nhxzcdxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:75:7b:6a:82:b5:ab:4f:1c:4b:8c:f1:98:73:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Jun 28 11:00:49 2025 GMT
Not After : Jun 29 11:00:49 2025 GMT
Subject: CN=f42590be9969bd4f2d60aca4fd82e410c2e84f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:af:6e:25:21:14:1d:61:08:99:db:4b:5f:
49:fe:17:4f:5f:88:67:ac:b9:b3:8c:31:89:76:7d:
9d:86:4c:55:45:bc:c8:90:b9:7c:c7:d5:5c:fe:97:
d3:12:2a:f4:0a:eb:fd:01:99:5e:10:31:02:61:5e:
7a:4b:16:88:cc:50:c5:bf:ff:81:35:d2:93:89:47:
6c:2d:a3:a0:4f:5d:d4:db:22:28:a7:77:ca:2d:fb:
53:c5:48:7a:33:95:fb:cb:f1:04:d5:7a:02:03:e5:
e8:15:6f:1f:e9:89:7e:a6:69:23:bc:33:f6:2f:f7:
ad:53:98:c4:64:1a:92:4c:b2:76:71:16:26:03:78:
5a:b1:4f:b7:d4:70:b3:59:24:ee:dd:91:ac:f6:ef:
8b:85:33:61:b1:c2:91:26:c7:fe:1b:ea:6d:d6:00:
c3:be:15:3d:f1:a3:32:26:aa:81:ac:c7:32:51:09:
8f:9b:80:72:d9:7e:8d:95:ae:23:e5:8f:10:05:f3:
84:3a:bd:b9:af:90:58:7f:cb:6e:f5:33:de:a4:d4:
3d:f6:69:e9:e1:f2:f7:e1:9f:06:81:bf:e2:c6:70:
30:72:7b:de:5c:28:7a:52:28:50:9a:c5:39:84:61:
65:26:6b:3e:32:20:e7:d4:1e:b9:c7:3b:48:f9:b0:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:90:BE:99:69:BD:4F:2D:60:AC:A4:FD:82:E4:10:C2:E8:4F:94
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0c:1b:d1:a4:f3:5c:4c:7e:90:d6:6f:40:21:55:98:e1:8c:
85:91:57:f8:a9:21:83:43:d1:d2:a7:c2:1f:47:14:d7:53:58:
94:c8:2f:7f:90:ca:c8:09:a5:68:86:4b:3f:48:7a:5c:e6:ef:
a4:0d:e4:39:0c:d5:35:86:05:bc:7e:b2:8e:fb:eb:a5:29:3a:
8e:bc:5d:a2:65:12:eb:5b:bd:45:6b:b2:3f:33:4f:25:d6:55:
6f:28:1a:bd:de:59:e0:45:2f:2f:bb:43:d1:89:1d:f4:af:81:
83:8e:38:1f:f0:51:97:e6:80:d7:12:14:57:99:ea:29:cc:43:
d9:34:68:dd:e6:43:3f:91:80:e3:49:1f:c1:5b:a1:70:0c:0f:
46:7c:62:70:7d:9b:e2:8a:84:d0:31:e0:1d:41:9e:b3:71:6f:
16:fd:dc:20:20:34:f0:e9:4b:5e:50:fb:b4:d1:35:7f:8d:b8:
7d:c3:66:87:c5:d5:4b:72:f7:48:b3:7a:f5:9a:22:dc:8f:60:
df:d0:99:22:a5:dd:b5:40:5b:f3:4d:5f:d4:40:99:6a:1a:86:
f5:f3:bb:d5:ca:61:14:7a:65:3f:0b:a3:60:13:f8:d1:1d:6b:
7d:7a:a6:c4:52:19:3f:11:f2:a3:92:53:a9:ad:02:98:ee:fb:
2f:26:4d:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MnV7aoK1q08cS4zxmHNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3
YmQwNTQwHhcNMjUwNjI4MTEwMDQ5WhcNMjUwNjI5MTEwMDQ5WjAzMTEwLwYDVQQD
EyhmNDI1OTBiZTk5NjliZDRmMmQ2MGFjYTRmZDgyZTQxMGMyZTg0Zjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8ivbiUhFB1hCJnbS19J/hdPX4hn
rLmzjDGJdn2dhkxVRbzIkLl8x9Vc/pfTEir0Cuv9AZleEDECYV56SxaIzFDFv/+B
NdKTiUdsLaOgT13U2yIop3fKLftTxUh6M5X7y/EE1XoCA+XoFW8f6Yl+pmkjvDP2
L/etU5jEZBqSTLJ2cRYmA3hasU+31HCzWSTu3ZGs9u+LhTNhscKRJsf+G+pt1gDD
vhU98aMyJqqBrMcyUQmPm4By2X6Nla4j5Y8QBfOEOr25r5BYf8tu9TPepNQ99mnp
4fL34Z8Ggb/ixnAwcnveXCh6UihQmsU5hGFlJms+MiDn1B65xztI+bD5TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQlkL6Zab1PLWCspP2C5BDC6E+UMB8GA1UdIwQY
MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt
NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3
LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagwb0aTz
XEx+kNZvQCFVmOGMhZFX+Kkhg0PR0qfCH0cU11NYlMgvf5DKyAmlaIZLP0h6XObv
pA3kOQzVNYYFvH6yjvvrpSk6jrxdomUS61u9RWuyPzNPJdZVbygavd5Z4EUvL7tD
0Ykd9K+Bg444H/BRl+aA1xIUV5nqKcxD2TRo3eZDP5GA40kfwVuhcAwPRnxicH2b
4oqE0DHgHUGes3FvFv3cICA08OlLXlD7tNE1f424fcNmh8XVS3L3SLN69Zoi3I9g
39CZIqXdtUBb801f1ECZahqG9fO71cphFHplPwujYBP40R1rfXqmxFIZPxHyo5JT
qa0CmO77LyZNog==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:25:12 2025 by rpki-client