Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: sxaVXDV5oCZ643MPc+J3DmVEK2zCuut97TO9jPvbpuI=
Subject key identifier: 3B:DF:6F:16:93:1D:1D:F2:36:FF:40:6C:74:11:EC:F8:AA:2B:05:E1
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 0197B93373C95199B4DE6A62A3604AB3B54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 02D4
Signing time: Sun 29 Jun 2025 01:00:46 +0000
Manifest this update: Sun 29 Jun 2025 01:00:46 +0000
Manifest next update: Mon 30 Jun 2025 01:00:46 +0000
Files and hashes: 1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: M060kmS+i+2u2drhy9oZqlaO+0q6ObfIrmeDs0keF7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:73:c9:51:99:b4:de:6a:62:a3:60:4a:b3:b5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Jun 29 01:00:46 2025 GMT
Not After : Jun 30 01:00:46 2025 GMT
Subject: CN=3bdf6f16931d1df236ff406c7411ecf8aa2b05e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:24:b6:b1:c0:16:9f:e8:60:fb:ab:71:3d:
ba:dd:b8:de:e1:07:14:c1:fd:0b:9a:82:1d:25:fc:
88:c9:3e:82:ba:90:df:91:ad:ed:ad:69:b1:e5:0d:
21:88:5a:b4:9e:4d:a9:fd:89:10:3c:8f:c5:23:0c:
99:cd:e4:10:29:cb:d2:b7:50:1b:a7:28:66:0a:43:
bf:b8:5c:39:0f:37:51:74:03:1a:b5:54:5f:88:56:
5c:02:fc:7e:9a:05:91:22:33:ab:c4:9f:56:15:ed:
e5:84:96:a2:99:c2:3c:4c:8f:1b:a6:11:fc:6a:0e:
c3:16:46:17:69:dc:1f:ab:aa:5c:ad:51:b7:d3:44:
a0:39:5d:63:c0:34:bb:29:d8:e2:c7:0f:bc:bd:88:
7e:03:fa:f1:fe:f3:37:16:54:a1:1b:4c:0b:98:ae:
be:43:24:a0:59:be:28:5b:37:3e:91:58:d5:e3:b4:
da:b8:d9:cb:80:3e:06:77:ef:92:58:4c:15:52:f9:
44:d6:68:64:bb:f6:07:55:57:f1:a9:4c:fe:b9:c5:
84:eb:0a:df:c2:70:11:8c:a5:f4:06:f2:8b:2f:4a:
43:f1:53:5d:0a:5e:27:b3:78:c1:c4:06:e0:e5:4b:
00:4b:dd:62:8b:63:42:dc:54:72:77:8b:1c:47:bb:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DF:6F:16:93:1D:1D:F2:36:FF:40:6C:74:11:EC:F8:AA:2B:05:E1
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:49:ca:c3:7a:47:b2:1b:7b:b8:c2:57:21:db:54:47:e1:00:
53:62:e6:8d:7b:01:0a:ed:08:e1:c7:cf:39:00:4b:74:09:dc:
b1:dd:64:5f:d3:76:40:88:2c:42:3f:0b:c3:65:32:bc:1d:6c:
33:06:c1:84:7d:69:ad:bc:ff:24:69:39:b9:6a:bc:ed:cd:8e:
0f:16:cc:be:76:7e:43:09:eb:39:e1:0d:bd:34:d4:b9:3e:bb:
2d:5e:9c:e2:72:ab:7b:1b:db:f2:e1:77:de:f8:3c:b5:e7:50:
85:9b:02:ac:80:e9:6b:ea:29:0c:37:99:67:5b:df:17:bc:35:
1f:64:f2:18:5a:39:93:d0:4e:c0:65:71:7c:9e:25:be:57:55:
e2:4a:80:a9:14:7b:e3:ea:c1:e7:d6:d8:53:0d:db:e2:ad:22:
c2:f7:f8:8e:cd:5e:7c:14:49:2d:56:3d:6f:0e:51:d6:5c:c7:
97:8c:93:b9:1f:9d:99:5e:28:f3:e4:c3:ee:5a:37:c8:9a:14:
1e:bc:db:1b:05:aa:f6:77:f9:98:92:9e:b8:eb:26:f6:89:32:
41:5c:7c:63:49:74:dd:0b:1e:a6:50:89:9b:be:05:7d:38:d1:
f1:65:b6:31:16:51:6d:29:d6:00:69:f2:c2:3c:cd:d1:86:60:
07:49:04:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M3PJUZm03mpio2BKs7VMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzRlZjIwMGJjOWQyN2U5ZWQ3ZjNiYzZiNWMwNTI5MmQ4
NDMyYmEwHhcNMjUwNjI5MDEwMDQ2WhcNMjUwNjMwMDEwMDQ2WjAzMTEwLwYDVQQD
EygzYmRmNmYxNjkzMWQxZGYyMzZmZjQwNmM3NDExZWNmOGFhMmIwNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZIktrHAFp/oYPurcT263bje4QcU
wf0LmoIdJfyIyT6CupDfka3trWmx5Q0hiFq0nk2p/YkQPI/FIwyZzeQQKcvSt1Ab
pyhmCkO/uFw5DzdRdAMatVRfiFZcAvx+mgWRIjOrxJ9WFe3lhJaimcI8TI8bphH8
ag7DFkYXadwfq6pcrVG300SgOV1jwDS7Kdjixw+8vYh+A/rx/vM3FlShG0wLmK6+
QySgWb4oWzc+kVjV47TauNnLgD4Gd++SWEwVUvlE1mhku/YHVVfxqUz+ucWE6wrf
wnARjKX0BvKLL0pD8VNdCl4ns3jBxAbg5UsAS91ii2NC3FRyd4scR7vVJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvfbxaTHR3yNv9AbHQR7PiqKwXhMB8GA1UdIwQY
MBaAFP7E7yALydJ+ntfzvGtcBSkthDK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMt
NWVjY2VjOGQ5M2I0LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMtNWVjY2VjOGQ5M2I0
LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0nKw3pH
sht7uMJXIdtUR+EAU2LmjXsBCu0I4cfPOQBLdAncsd1kX9N2QIgsQj8Lw2UyvB1s
MwbBhH1prbz/JGk5uWq87c2ODxbMvnZ+QwnrOeENvTTUuT67LV6c4nKrexvb8uF3
3vg8tedQhZsCrIDpa+opDDeZZ1vfF7w1H2TyGFo5k9BOwGVxfJ4lvldV4kqAqRR7
4+rB59bYUw3b4q0iwvf4js1efBRJLVY9bw5R1lzHl4yTuR+dmV4o8+TD7lo3yJoU
HrzbGwWq9nf5mJKeuOsm9okyQVx8Y0l03QseplCJm74FfTjR8WW2MRZRbSnWAGny
wjzN0YZgB0kEUg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:11:07 2025 by rpki-client