Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: j56qpHKF4AJyf/Or3r7x7h5loPSRwNkqjE9L4Db+XrQ=
Subject key identifier: A1:04:93:73:EA:46:17:63:DC:F6:2C:6B:50:6D:68:4B:BB:6C:BA:CC
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 0197B6A251A8C33B338669DD833BC5708509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:03:00 +0000
Manifest this update: Sat 28 Jun 2025 13:03:00 +0000
Manifest next update: Sun 29 Jun 2025 13:03:00 +0000
Files and hashes: 1: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: ehLHQVcR5eY1y8yEoPOZLdPe7pSEue/9JYd2Ye17kAA=)
2: a9R4a72Ce3HtrFyUZj2Jrpn9DLE.roa (hash: lEQCssDpqykyZtTNm3b2/t+M2Xlx2R2hbaDbanTEKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:51:a8:c3:3b:33:86:69:dd:83:3b:c5:70:85:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Jun 28 13:03:00 2025 GMT
Not After : Jun 29 13:03:00 2025 GMT
Subject: CN=a1049373ea461763dcf62c6b506d684bbb6cbacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:cb:27:d7:a1:95:7f:67:f1:49:f6:1a:32:
0d:1d:29:e0:a6:cb:20:94:42:22:fd:5d:06:9e:28:
5a:d6:db:68:64:51:8e:ba:72:e8:e5:80:82:56:10:
84:e6:8f:1f:92:d7:97:bb:e0:b2:21:fb:1e:c4:f3:
5a:90:69:d9:f8:e3:a0:b6:41:16:f3:69:8e:e2:e8:
9c:fd:6d:96:f6:84:31:2e:9d:13:8c:92:b8:f9:0e:
07:98:cf:6f:cc:60:e4:18:df:9f:6c:fd:43:ec:28:
67:bd:54:8b:77:17:db:49:11:3a:af:85:d1:c5:cc:
86:d4:df:82:87:f3:a8:38:1d:e3:e8:37:83:17:9c:
ad:98:f2:93:a3:a0:42:70:b5:99:74:1c:3f:66:ac:
10:08:02:ba:ea:eb:5d:2c:63:30:e1:5b:30:aa:1c:
51:36:09:29:01:6e:b0:74:c7:13:25:59:f2:b7:c3:
71:43:cd:70:1a:ac:69:16:db:d5:9a:9d:1e:ab:c5:
06:96:54:d4:1d:d8:aa:27:db:51:5a:88:64:c6:8e:
ea:9c:89:f7:aa:e6:d2:6b:bb:c1:a8:03:26:52:50:
31:63:ce:31:c2:60:57:e6:90:b1:f3:f0:93:fd:e7:
43:fb:2e:a5:39:59:7d:80:04:a4:40:cd:af:7a:b7:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:04:93:73:EA:46:17:63:DC:F6:2C:6B:50:6D:68:4B:BB:6C:BA:CC
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:70:00:54:bd:2c:73:21:46:61:08:67:50:b2:cb:3b:f2:22:
de:fb:e4:17:cf:6d:42:b4:2e:90:b6:c1:ed:81:a3:d8:9c:81:
d6:03:9b:f8:90:73:c9:05:49:a6:7b:42:22:2f:29:6e:dd:74:
75:83:3f:4c:34:15:19:ee:6d:9a:9e:26:63:c6:fc:a3:ea:15:
9e:48:20:dd:09:71:bb:d9:0d:38:14:a5:dc:32:eb:9e:e6:d4:
2a:0c:b8:a3:f5:80:5c:08:c7:d9:90:73:75:a0:e6:f6:86:32:
44:da:f4:09:98:37:74:72:58:db:af:16:54:bc:6e:b6:11:83:
51:de:8f:0e:8b:e4:1f:08:c7:19:03:3f:2a:8e:db:ce:d3:c1:
b0:77:1b:6c:f8:bb:f3:01:75:9c:f6:fc:5b:93:41:d4:60:9b:
99:20:9f:7e:82:11:63:2e:79:7f:e7:f3:36:28:d4:c1:6a:26:
6e:d2:7f:ff:a3:ff:7f:0e:14:0c:bb:eb:a8:03:01:9d:23:16:
79:05:7b:55:68:62:f7:98:3c:67:ca:27:25:5b:ce:df:d5:98:
0f:e6:f1:7d:90:c5:43:91:ac:cd:95:e0:b3:0a:6f:5f:cb:10:
d0:a3:ac:08:63:06:9b:d7:b1:25:7b:95:fc:19:33:7b:bf:06:
63:29:50:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2olGowzszhmndgzvFcIUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWVmNDBmYWY0ODM0MzNiM2UzMzY5OGU0ZDFlZTk1ZjNj
OTRiZWMwHhcNMjUwNjI4MTMwMzAwWhcNMjUwNjI5MTMwMzAwWjAzMTEwLwYDVQQD
EyhhMTA0OTM3M2VhNDYxNzYzZGNmNjJjNmI1MDZkNjg0YmJiNmNiYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX/LJ9ehlX9n8Un2GjINHSngpssg
lEIi/V0Gniha1ttoZFGOunLo5YCCVhCE5o8fkteXu+CyIfsexPNakGnZ+OOgtkEW
82mO4uic/W2W9oQxLp0TjJK4+Q4HmM9vzGDkGN+fbP1D7ChnvVSLdxfbSRE6r4XR
xcyG1N+Ch/OoOB3j6DeDF5ytmPKTo6BCcLWZdBw/ZqwQCAK66utdLGMw4VswqhxR
NgkpAW6wdMcTJVnyt8NxQ81wGqxpFtvVmp0eq8UGllTUHdiqJ9tRWohkxo7qnIn3
qubSa7vBqAMmUlAxY84xwmBX5pCx8/CT/edD+y6lOVl9gASkQM2verd3LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEEk3PqRhdj3PYsa1BtaEu7bLrMMB8GA1UdIwQY
MBaAFFNe9A+vSDQzs+M2mOTR7pXzyUvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy83N2E5ZjEtZjFmYi00ODVmLTkyM2Yt
N2MzNzg5NDA1YmQ2LzEvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy83N2E5ZjEtZjFmYi00ODVmLTkyM2YtN2MzNzg5NDA1YmQ2
LzEvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnAAVL0s
cyFGYQhnULLLO/Ii3vvkF89tQrQukLbB7YGj2JyB1gOb+JBzyQVJpntCIi8pbt10
dYM/TDQVGe5tmp4mY8b8o+oVnkgg3Qlxu9kNOBSl3DLrnubUKgy4o/WAXAjH2ZBz
daDm9oYyRNr0CZg3dHJY268WVLxuthGDUd6PDovkHwjHGQM/Ko7bztPBsHcbbPi7
8wF1nPb8W5NB1GCbmSCffoIRYy55f+fzNijUwWombtJ//6P/fw4UDLvrqAMBnSMW
eQV7VWhi95g8Z8onJVvO39WYD+bxfZDFQ5GszZXgswpvX8sQ0KOsCGMGm9exJXuV
/Bkze78GYylQMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:10 2025 by rpki-client