Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: iM6voMGeEIcT4Ag40GrQR0CFmxYCFnL8gi9YJHCHyes=
Subject key identifier: 61:2D:52:7A:22:D1:F4:99:D9:BA:5B:58:67:36:88:E9:8A:3F:3B:0F
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 0197B77C3108F41E1C383B217AC35DC4E9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 15C4
Signing time: Sat 28 Jun 2025 17:00:58 +0000
Manifest this update: Sat 28 Jun 2025 17:00:58 +0000
Manifest next update: Sun 29 Jun 2025 17:00:58 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: 9CLn8C7vifAUkQANI+/cGpPJFtPEnvq7XbpiA0WR3yg=)
2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:31:08:f4:1e:1c:38:3b:21:7a:c3:5d:c4:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jun 28 17:00:58 2025 GMT
Not After : Jun 29 17:00:58 2025 GMT
Subject: CN=612d527a22d1f499d9ba5b58673688e98a3f3b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:8c:2b:a1:0c:4f:6e:83:dd:5f:d0:8b:3b:
9a:f1:13:6c:9d:ad:f3:fd:b2:92:ce:80:2d:fc:cf:
c5:60:81:40:80:c1:0d:80:41:a6:10:b3:3b:15:d9:
89:6a:cb:2f:4f:ae:c5:da:d5:fa:f7:b4:57:06:2f:
a2:0c:56:f4:61:74:ef:47:46:88:9e:ec:db:e3:2b:
e7:16:b2:ba:8e:77:4f:15:36:51:e3:f7:50:46:2a:
c5:21:63:3e:c0:d1:3f:99:aa:07:cb:36:c4:0e:06:
47:6c:37:c8:06:fb:8e:64:1d:46:d9:e0:e4:c9:92:
30:e6:d8:ca:6e:08:ee:cb:b1:c3:d0:90:22:49:10:
aa:da:88:9f:7f:33:d8:ef:1a:a8:78:10:91:1a:f1:
c0:dc:22:42:0a:dd:b3:ae:d1:52:2d:a7:91:a4:f7:
13:a6:79:4d:75:e1:13:35:a1:46:1b:79:fa:16:75:
b2:af:b6:cb:ab:98:52:1a:c8:ba:67:c8:2a:45:4c:
38:15:6e:aa:4b:36:35:13:23:83:01:1a:dd:b2:75:
bc:f1:51:e5:63:3d:fa:30:e4:1a:fd:9c:08:2c:04:
72:07:8f:5a:c3:a6:e1:aa:26:f5:82:e7:92:6c:90:
19:1e:60:8b:59:47:07:5f:c7:1b:28:30:71:9e:a2:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2D:52:7A:22:D1:F4:99:D9:BA:5B:58:67:36:88:E9:8A:3F:3B:0F
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7c:01:b6:aa:3b:c9:be:ae:c5:25:4b:b6:44:c9:21:ea:94:
81:fb:93:a5:e7:cd:7d:6c:ae:50:08:bd:d0:51:2b:03:fe:28:
3d:3b:53:23:dd:a9:49:1f:b9:42:18:d4:43:20:42:0b:c1:80:
17:28:a5:6c:09:72:2a:5b:ab:4e:b1:71:0b:b6:3a:a5:6a:86:
50:d6:15:7e:ac:b5:04:31:a7:1d:01:dd:75:5e:a1:63:ea:bc:
7c:63:5b:a0:ec:cf:cb:f3:57:fb:25:6b:49:43:c1:6f:68:19:
d4:cc:31:60:f2:28:fa:df:0c:0b:c5:95:d4:9b:0b:78:b4:9c:
67:88:83:a5:ea:a0:78:49:ce:6e:7d:2d:41:fb:d6:c8:e0:a1:
c1:37:0b:de:6d:c6:1e:eb:3d:43:af:d7:07:76:38:a7:96:9b:
3e:05:2a:b9:d5:22:7e:9f:a9:bc:87:a0:4e:2d:f4:76:81:a1:
50:5a:3f:ad:33:5b:03:6a:95:ac:34:35:61:9e:3e:f0:a9:fc:
82:4e:03:b4:8c:5b:b0:84:82:2d:28:4a:ae:1c:4a:53:50:28:
d8:3c:c1:bd:8f:e9:92:2f:fa:8a:b2:2f:a8:83:84:0c:7c:b4:
b6:f0:d5:4d:20:8c:66:1b:8c:27:3a:97:a9:23:12:77:1c:29:
85:4d:6e:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDEI9B4cODshesNdxOmxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjZmYzZmMWI4ZTJiNjA0ZjdmYjczYzI5ZmQ1ZDY4OWEw
ZWE4MWQwHhcNMjUwNjI4MTcwMDU4WhcNMjUwNjI5MTcwMDU4WjAzMTEwLwYDVQQD
Eyg2MTJkNTI3YTIyZDFmNDk5ZDliYTViNTg2NzM2ODhlOThhM2YzYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FOMK6EMT26D3V/Qizua8RNsna3z
/bKSzoAt/M/FYIFAgMENgEGmELM7FdmJassvT67F2tX697RXBi+iDFb0YXTvR0aI
nuzb4yvnFrK6jndPFTZR4/dQRirFIWM+wNE/maoHyzbEDgZHbDfIBvuOZB1G2eDk
yZIw5tjKbgjuy7HD0JAiSRCq2oiffzPY7xqoeBCRGvHA3CJCCt2zrtFSLaeRpPcT
pnlNdeETNaFGG3n6FnWyr7bLq5hSGsi6Z8gqRUw4FW6qSzY1EyODARrdsnW88VHl
Yz36MOQa/ZwILARyB49aw6bhqib1gueSbJAZHmCLWUcHX8cbKDBxnqL02QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEtUnoi0fSZ2bpbWGc2iOmKPzsPMB8GA1UdIwQY
MBaAFNdm/G8bjitgT3+3PCn9XWiaDqgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzIt
M2VmM2ZkOTY5OTU3LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzItM2VmM2ZkOTY5OTU3
LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXwBtqo7
yb6uxSVLtkTJIeqUgfuTpefNfWyuUAi90FErA/4oPTtTI92pSR+5QhjUQyBCC8GA
FyilbAlyKlurTrFxC7Y6pWqGUNYVfqy1BDGnHQHddV6hY+q8fGNboOzPy/NX+yVr
SUPBb2gZ1MwxYPIo+t8MC8WV1JsLeLScZ4iDpeqgeEnObn0tQfvWyOChwTcL3m3G
Hus9Q6/XB3Y4p5abPgUqudUifp+pvIegTi30doGhUFo/rTNbA2qVrDQ1YZ4+8Kn8
gk4DtIxbsISCLShKrhxKU1Ao2DzBvY/pki/6irIvqIOEDHy0tvDVTSCMZhuMJzqX
qSMSdxwphU1uqQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:46 2025 by rpki-client