Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: Td6+uD7echsNxKBRo98Inl2chJr4V1DveVHbOP8m2q8=
Subject key identifier: B2:90:F8:DB:24:19:9E:9F:53:79:3B:40:63:8F:CA:71:47:3E:BF:4C
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 0197B7EA8B8BD1BD836FDE861DACA7E7F968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 08B0
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: 0O73PaTyLOlo4DtC-zfVh-so0po.roa (hash: 8d52pgK7PtxKWsBsAJptabjpB2sUfgsDROP6Cr/a/W0=)
2: 3cLja0Qn7ryI3brAvn_huolef7k.roa (hash: uL09pyaPRqlSpX4587/io6caQs2mRPwnhcXeei1t0Y8=)
3: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: NDOli9rFJUIKC7X2JYSmRvX0F+PI3hgnKXBXRoFuLS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8b:8b:d1:bd:83:6f:de:86:1d:ac:a7:e7:f9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=b290f8db24199e9f53793b40638fca71473ebf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:d7:83:d4:14:e8:27:6f:d2:fa:15:28:1c:
5c:5e:84:7e:f8:04:6c:c4:d9:eb:96:f4:7a:f3:a1:
00:d7:b4:43:f1:c9:02:bc:99:2d:44:fc:06:a9:10:
66:b5:93:f5:4c:3e:f5:87:ae:f5:88:9e:45:2f:e9:
76:93:36:18:27:b0:99:cc:f8:c3:e4:02:9d:fc:41:
e1:68:47:6f:f5:99:97:00:79:00:91:f3:a1:63:38:
d8:38:e6:7a:fd:ac:62:9a:01:95:36:74:cd:db:ba:
87:c1:7e:bf:40:40:3d:64:8e:c1:97:37:08:9e:fc:
d4:93:66:a5:54:70:9b:6e:ba:d1:b2:be:91:13:5d:
0e:2c:fe:4a:f4:61:ee:54:bc:fc:f5:23:41:23:7f:
54:4a:3a:b0:bf:19:42:0d:22:d2:47:69:f8:4f:ec:
d9:4e:cf:9f:41:ce:e8:56:84:ea:99:29:40:9b:42:
27:8e:c2:7d:41:c3:7f:9a:d7:5c:bb:85:15:14:97:
9c:dd:8e:56:d3:b2:b7:b1:e3:1a:59:74:d7:6f:d2:
3c:17:d4:ce:97:29:ad:09:d4:81:83:40:f2:d6:fa:
99:44:e5:ce:49:e8:b8:e4:d0:9b:69:c1:75:dd:4f:
1d:47:8f:8a:c6:d4:6f:1d:c0:ec:db:d2:f7:84:79:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:90:F8:DB:24:19:9E:9F:53:79:3B:40:63:8F:CA:71:47:3E:BF:4C
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8c:93:19:38:ca:0a:a7:76:68:27:05:df:64:9e:f8:9b:43:
b1:04:35:8d:5d:ca:9c:d0:4a:25:c6:81:38:52:34:a9:e2:6b:
cd:d1:a1:67:ab:ce:45:40:64:a7:98:44:77:ff:35:5e:3d:1f:
7b:da:97:0b:df:41:64:f2:37:5a:c4:4f:9e:b2:f4:41:1e:cf:
2d:64:ea:4b:56:0e:07:17:38:a2:46:a1:c5:6a:e0:eb:58:70:
4c:67:dd:5e:31:6e:9c:7e:5c:82:5a:d6:cf:41:db:a8:63:57:
98:50:bb:bc:cd:c7:74:f2:0d:7f:6d:12:ef:90:4f:90:8c:d1:
6e:3b:77:11:6c:a3:bb:31:db:18:8f:6d:bc:8d:dc:ed:b3:e7:
25:34:29:50:c7:4c:79:69:9b:41:c5:33:75:5b:b6:ea:0f:c7:
c7:08:0c:15:1a:f2:02:df:38:de:ba:9f:46:b6:8a:2a:5c:1a:
9b:63:f4:bf:bf:9a:f5:56:1e:15:84:bf:b4:d2:75:63:16:0a:
8a:c1:c5:cd:54:e5:6d:12:a1:f7:6f:f8:1a:f5:a7:01:e5:18:
02:a7:f9:d3:ff:0b:43:f1:15:41:8b:68:7d:fe:df:fa:37:29:
6e:fd:a6:78:61:d6:5d:b5:d6:a6:f5:41:24:b8:c8:ef:92:ef:
73:0c:9d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ouL0b2Db96GHayn5/loMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjIxMGUzOGIxNjkwOWE3ZWU4ZmUzYjhkMDY2NDdmMDY2
NTI5MmIwHhcNMjUwNjI4MTkwMTMxWhcNMjUwNjI5MTkwMTMxWjAzMTEwLwYDVQQD
EyhiMjkwZjhkYjI0MTk5ZTlmNTM3OTNiNDA2MzhmY2E3MTQ3M2ViZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAranXg9QU6Cdv0voVKBxcXoR++ARs
xNnrlvR686EA17RD8ckCvJktRPwGqRBmtZP1TD71h671iJ5FL+l2kzYYJ7CZzPjD
5AKd/EHhaEdv9ZmXAHkAkfOhYzjYOOZ6/aximgGVNnTN27qHwX6/QEA9ZI7BlzcI
nvzUk2alVHCbbrrRsr6RE10OLP5K9GHuVLz89SNBI39USjqwvxlCDSLSR2n4T+zZ
Ts+fQc7oVoTqmSlAm0InjsJ9QcN/mtdcu4UVFJec3Y5W07K3seMaWXTXb9I8F9TO
lymtCdSBg0Dy1vqZROXOSei45NCbacF13U8dR4+KxtRvHcDs29L3hHkjlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKQ+NskGZ6fU3k7QGOPynFHPr9MMB8GA1UdIwQY
MBaAFOdiEOOLFpCafuj+O40GZH8GZSkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZDZiNzYtYjRiNy00ZjdlLTg2Mjgt
Y2Y3OTQ2NThmNWJlLzEvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82ZDZiNzYtYjRiNy00ZjdlLTg2MjgtY2Y3OTQ2NThmNWJl
LzEvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIyTGTjK
Cqd2aCcF32Se+JtDsQQ1jV3KnNBKJcaBOFI0qeJrzdGhZ6vORUBkp5hEd/81Xj0f
e9qXC99BZPI3WsRPnrL0QR7PLWTqS1YOBxc4okahxWrg61hwTGfdXjFunH5cglrW
z0HbqGNXmFC7vM3HdPINf20S75BPkIzRbjt3EWyjuzHbGI9tvI3c7bPnJTQpUMdM
eWmbQcUzdVu26g/HxwgMFRryAt843rqfRraKKlwam2P0v7+a9VYeFYS/tNJ1YxYK
isHFzVTlbRKh92/4GvWnAeUYAqf50/8LQ/EVQYtoff7f+jcpbv2meGHWXbXWpvVB
JLjI75Lvcwydbg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:10 2025 by rpki-client