Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: m90Nacx2ESPIyswDfG0ea/lYPw72ZktHUWL9oS5wCfo=
Subject key identifier: 94:F7:19:4D:D9:B3:C0:3D:6C:70:C0:46:3F:AD:AE:BA:FF:87:9D:3B
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 0197B7455A446569C072048E770135140685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: oeGd2l3cdX6yrdtyNL3nLJU/VYK6ZRdsHqcMWbO0gIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5a:44:65:69:c0:72:04:8e:77:01:35:14:06:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=94f7194dd9b3c03d6c70c0463fadaebaff879d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:17:0e:a8:14:a9:d0:3f:e7:3d:c1:b2:78:
56:b4:cf:e4:34:f2:ac:89:9d:8d:28:93:28:b2:b2:
64:92:cf:8c:16:20:da:37:27:7c:bf:01:82:4a:06:
49:2e:f1:e0:d1:1b:50:61:5d:38:51:6b:a7:5a:70:
d4:08:13:76:1d:86:b4:73:e2:12:c7:2c:b6:7e:88:
aa:2c:62:62:9c:5a:7a:16:50:b7:b4:51:73:9c:e2:
07:07:25:8a:43:ef:1b:40:3e:32:18:a6:23:5b:da:
d8:23:24:9b:67:59:ca:02:6e:a3:fb:95:8a:c1:82:
64:e8:ba:0f:4f:23:cb:d3:c6:86:01:47:65:ca:52:
ae:04:ab:47:7d:a3:d1:dd:b8:0b:d1:a8:66:43:61:
77:1f:a5:e1:1e:38:71:d1:8d:eb:68:94:ee:d1:3f:
2d:6a:1b:13:23:d5:8b:62:6d:da:28:f9:8f:84:a0:
5d:b2:78:a5:06:0f:44:11:87:a4:97:7b:48:1c:5b:
70:6f:2f:b9:79:4f:6e:96:c0:61:56:c0:22:9e:e9:
db:29:2a:a1:a4:50:08:5a:94:7a:b5:0f:f5:23:d0:
fc:7d:2c:0a:6b:2a:dc:52:6c:d0:39:d8:e4:40:d6:
bf:44:c7:5b:7d:70:f0:aa:2b:e0:1b:63:2a:1d:27:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:19:4D:D9:B3:C0:3D:6C:70:C0:46:3F:AD:AE:BA:FF:87:9D:3B
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:34:30:20:a1:54:f3:8d:56:d5:43:ff:5b:6e:46:36:04:2f:
d5:61:97:a5:fa:6d:45:b0:e1:bc:9b:a2:ed:a0:20:b0:a5:fa:
0b:d0:0c:1b:b3:b8:95:7c:05:ca:0c:7a:37:1f:7f:f4:c2:92:
8f:14:58:0d:f6:9c:0c:c0:97:b0:82:4b:b0:e2:47:03:f4:52:
4d:86:80:dc:00:bc:6a:55:c7:05:3d:27:cd:5f:21:53:8c:91:
0a:62:0d:e2:df:ee:bc:69:05:70:91:07:9e:ca:ec:66:22:7b:
38:e8:e5:91:4d:eb:7d:16:01:c0:0e:9a:6c:cb:ba:76:b4:8d:
ba:bb:ce:fd:03:58:c8:2a:2c:2d:d0:6c:05:61:70:dc:45:6a:
a8:b3:60:99:5c:e8:e2:5b:3c:5c:06:45:45:9f:a5:67:40:9b:
42:84:b5:9b:f3:0c:eb:f4:f3:da:6a:13:ac:9a:b2:9e:28:64:
82:6b:7b:18:d8:cc:7b:b9:7f:d1:d4:3a:2e:d6:31:b9:37:05:
60:bc:23:40:e5:e8:03:bc:e5:1a:43:2d:3c:44:4d:16:dc:f3:
b6:49:3f:aa:0d:68:52:e9:6e:33:44:9f:49:f4:6e:2f:90:7b:
2c:2a:51:26:60:ac:8a:d4:52:fb:b3:ce:0d:f4:51:f3:25:97:
f7:63:e3:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVpEZWnAcgSOdwE1FAaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDQ5NGI4YjI3MWFmYjdjNjJmMTM5N2Y3MTJjZjJkY2Qz
NjQxODUwHhcNMjUwNjI4MTYwMTA0WhcNMjUwNjI5MTYwMTA0WjAzMTEwLwYDVQQD
Eyg5NGY3MTk0ZGQ5YjNjMDNkNmM3MGMwNDYzZmFkYWViYWZmODc5ZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFQXDqgUqdA/5z3BsnhWtM/kNPKs
iZ2NKJMosrJkks+MFiDaNyd8vwGCSgZJLvHg0RtQYV04UWunWnDUCBN2HYa0c+IS
xyy2foiqLGJinFp6FlC3tFFznOIHByWKQ+8bQD4yGKYjW9rYIySbZ1nKAm6j+5WK
wYJk6LoPTyPL08aGAUdlylKuBKtHfaPR3bgL0ahmQ2F3H6XhHjhx0Y3raJTu0T8t
ahsTI9WLYm3aKPmPhKBdsnilBg9EEYekl3tIHFtwby+5eU9ulsBhVsAinunbKSqh
pFAIWpR6tQ/1I9D8fSwKayrcUmzQOdjkQNa/RMdbfXDwqivgG2MqHSdXRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJT3GU3Zs8A9bHDARj+trrr/h507MB8GA1UdIwQY
MBaAFPPUlLiyca+3xi8Tl/cSzy3NNkGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2Mt
Zjc5YWQ4MTIyZWY1LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2MtZjc5YWQ4MTIyZWY1
LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjQwIKFU
841W1UP/W25GNgQv1WGXpfptRbDhvJui7aAgsKX6C9AMG7O4lXwFygx6Nx9/9MKS
jxRYDfacDMCXsIJLsOJHA/RSTYaA3AC8alXHBT0nzV8hU4yRCmIN4t/uvGkFcJEH
nsrsZiJ7OOjlkU3rfRYBwA6abMu6drSNurvO/QNYyCosLdBsBWFw3EVqqLNgmVzo
4ls8XAZFRZ+lZ0CbQoS1m/MM6/Tz2moTrJqynihkgmt7GNjMe7l/0dQ6LtYxuTcF
YLwjQOXoA7zlGkMtPERNFtzztkk/qg1oUuluM0SfSfRuL5B7LCpRJmCsitRS+7PO
DfRR8yWX92Pjlw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:44 2025 by rpki-client