Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: ZVJywvx1XOkGFmJ6daELsfvyM5fopebBYpp5ZyfGFs4=
Subject key identifier: 1D:9B:65:27:11:3B:6C:CB:7E:F0:56:A6:C5:57:6D:73:BF:56:F4:E7
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 0197B77C6814933C5E6C3181C40CA7892C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: 7sdwUrzGK/8jrds3TFJRoq+IfAgNX6fYvDtvmPphtyA=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:68:14:93:3c:5e:6c:31:81:c4:0c:a7:89:2c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=1d9b6527113b6ccb7ef056a6c5576d73bf56f4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:98:3a:e7:be:2e:48:df:3d:19:ef:08:5a:63:
3d:74:ee:28:26:2c:7a:3c:c6:86:29:e5:f2:a4:e8:
3f:ce:f4:81:6e:cf:85:9d:cc:33:4c:ae:ba:5c:c7:
84:4d:e4:2d:69:9e:b9:11:8c:5f:04:6c:51:04:86:
c5:07:13:10:67:e1:64:4b:3e:4d:fa:75:87:2d:db:
b4:a7:94:f7:a2:5e:d3:84:96:ee:c4:63:d9:14:05:
26:d2:ac:56:1e:ba:b9:97:cf:af:0d:2a:6a:ba:9b:
85:37:23:fe:f7:6b:99:40:41:37:a3:16:c5:25:b4:
5a:45:ce:0e:6f:6b:fd:f0:71:ef:9a:46:50:3e:78:
99:c1:e1:9d:8f:84:85:aa:8b:09:5a:41:fa:5d:c7:
23:be:fc:07:0c:31:ec:04:97:0c:83:05:02:f8:98:
4f:01:df:cc:19:1a:ff:1c:a9:f3:11:73:0f:eb:1c:
0d:2c:2f:2f:45:92:27:d5:c5:40:07:1a:59:53:62:
87:d1:11:15:21:3d:13:b0:d0:d6:96:6d:78:11:63:
22:1e:96:a7:05:fe:39:5a:db:e5:4b:c1:5f:af:0b:
05:f9:47:e3:8b:62:5a:16:65:43:f3:ef:6d:55:70:
35:2c:28:f2:1a:6d:a0:44:92:87:3b:d9:f2:fa:99:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:65:27:11:3B:6C:CB:7E:F0:56:A6:C5:57:6D:73:BF:56:F4:E7
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:09:1c:85:1d:98:49:ef:ec:0e:9b:d3:c8:dc:30:70:61:a6:
54:a3:16:7a:94:35:26:b3:0f:02:9c:5c:51:b1:28:76:9a:a5:
10:12:7c:c9:22:1d:ec:92:c0:58:34:36:f1:59:c8:27:4e:de:
8e:c8:3e:73:d6:14:22:5e:78:d4:c8:61:23:ec:c6:60:7e:75:
80:6d:c0:d0:20:6a:13:7e:18:77:d2:29:0d:9a:a6:47:a5:72:
6d:f1:6f:e0:76:fc:1f:b2:10:97:09:5b:d4:b3:47:f9:b0:5f:
7d:7b:25:68:ce:29:eb:02:60:b1:b7:93:dd:bc:3e:2a:5a:cb:
55:85:a9:c8:07:cc:1b:34:dc:59:08:43:98:c9:69:af:df:16:
a8:49:70:8c:56:1c:cb:ec:a9:e8:8e:c8:6f:42:0a:fb:e3:e0:
4c:0f:ae:83:bd:de:87:aa:8b:52:7c:da:4c:5f:c2:c4:1d:87:
af:13:b2:61:5b:c7:88:06:14:77:e9:01:b9:55:52:00:33:7b:
44:a6:a0:93:e1:7e:8f:af:c3:dc:1b:b7:ec:d1:ba:0a:03:b1:
a0:3a:57:c9:58:f3:ff:8b:74:a2:23:a2:63:fb:b7:cc:cf:00:
12:0a:9c:8e:3e:f0:65:81:38:59:2c:78:05:8c:06:be:83:b8:
b3:ee:38:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fGgUkzxebDGBxAyniSwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmVmNTczMDA1MGM3MjBmOGM3OTA0NjZlYjhiOGE0OGVm
YmU3NDkwHhcNMjUwNjI4MTcwMTEyWhcNMjUwNjI5MTcwMTEyWjAzMTEwLwYDVQQD
EygxZDliNjUyNzExM2I2Y2NiN2VmMDU2YTZjNTU3NmQ3M2JmNTZmNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Zg6574uSN89Ge8IWmM9dO4oJix6
PMaGKeXypOg/zvSBbs+FncwzTK66XMeETeQtaZ65EYxfBGxRBIbFBxMQZ+FkSz5N
+nWHLdu0p5T3ol7ThJbuxGPZFAUm0qxWHrq5l8+vDSpqupuFNyP+92uZQEE3oxbF
JbRaRc4Ob2v98HHvmkZQPniZweGdj4SFqosJWkH6XccjvvwHDDHsBJcMgwUC+JhP
Ad/MGRr/HKnzEXMP6xwNLC8vRZIn1cVABxpZU2KH0REVIT0TsNDWlm14EWMiHpan
Bf45WtvlS8FfrwsF+Ufji2JaFmVD8+9tVXA1LCjyGm2gRJKHO9ny+pmj7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2bZScRO2zLfvBWpsVXbXO/VvTnMB8GA1UdIwQY
MBaAFHNu9XMAUMcg+MeQRm64uKSO++dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMt
M2FlNGY5Y2YyNjgzLzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMtM2FlNGY5Y2YyNjgz
LzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwkchR2Y
Se/sDpvTyNwwcGGmVKMWepQ1JrMPApxcUbEodpqlEBJ8ySId7JLAWDQ28VnIJ07e
jsg+c9YUIl541MhhI+zGYH51gG3A0CBqE34Yd9IpDZqmR6VybfFv4Hb8H7IQlwlb
1LNH+bBffXslaM4p6wJgsbeT3bw+KlrLVYWpyAfMGzTcWQhDmMlpr98WqElwjFYc
y+yp6I7Ib0IK++PgTA+ug73eh6qLUnzaTF/CxB2HrxOyYVvHiAYUd+kBuVVSADN7
RKagk+F+j6/D3Bu37NG6CgOxoDpXyVjz/4t0oiOiY/u3zM8AEgqcjj7wZYE4WSx4
BYwGvoO4s+44OQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:18 2025 by rpki-client