Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: Pa0kYS/sqbIJke1+s4INWDGoL4LtqiZrkLXjxTsfWlI=
Subject key identifier: 38:95:A5:67:99:2F:74:C9:91:37:29:CC:2F:E4:7B:9A:5F:B1:7C:AE
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 0197B745B617811CD1AF7EC4BC0455C35681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 09DE
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: 2JA-ZwNyhJfjy4iRgBz6O7qcilU.roa (hash: CuX1HDub6jnp4XmLQgh/JslHvidglBPgi73piILRqao=)
2: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: rq7B6sSDNGfS4VOfOUDWcuaECU7e7n0gpKh7WTGdHxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b6:17:81:1c:d1:af:7e:c4:bc:04:55:c3:56:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=3895a567992f74c9913729cc2fe47b9a5fb17cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6b:2c:fb:79:c5:b6:52:50:2d:7f:52:89:65:
07:65:eb:f1:60:81:49:b9:bc:df:58:27:81:8f:cd:
c1:c6:ea:89:a8:69:7b:44:04:06:90:46:9c:0c:78:
77:5e:33:78:ad:d1:97:e6:c3:e3:cc:9b:d3:42:a8:
af:fe:f3:05:b0:f4:24:9c:c1:e3:8e:b6:08:ac:36:
91:fb:75:ba:fb:14:44:b1:9c:e5:97:31:7d:55:0a:
d3:29:69:19:c6:b4:1d:e4:d5:47:12:85:5b:b5:98:
1a:9f:5a:7a:f1:53:3d:db:66:3e:66:14:95:03:28:
2e:4d:a7:47:52:61:5a:f7:96:75:28:9b:de:67:01:
24:3f:62:e3:01:56:dc:0c:92:c0:59:23:73:c7:98:
25:82:a1:ab:0a:cf:12:0f:68:4f:c9:e0:82:8e:c0:
ca:9e:c5:7a:a7:01:a2:e5:ed:f0:5f:92:13:9f:7c:
7c:c8:1f:0e:02:8b:d3:d8:da:ba:18:92:f9:16:18:
52:b0:e3:99:9a:17:b0:df:a0:f1:86:b6:4e:5d:0f:
0e:a1:3a:af:b2:0d:e2:40:b2:d6:4b:48:71:75:54:
50:29:97:da:78:ad:47:9c:46:5c:00:91:3d:44:d8:
79:63:e4:87:45:6f:95:6e:07:65:56:4b:01:96:b5:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:95:A5:67:99:2F:74:C9:91:37:29:CC:2F:E4:7B:9A:5F:B1:7C:AE
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:27:bb:d6:a4:46:d0:e2:7c:5a:e6:a2:63:35:57:9b:5c:a2:
12:82:a3:9d:33:2a:28:b1:80:01:51:70:1e:4a:45:27:9a:ea:
c5:ef:cb:c9:83:a4:90:4d:3b:25:9a:6e:8b:49:97:fe:d5:40:
78:4c:f6:31:2d:e1:83:51:04:48:f9:7e:05:7a:0e:d5:d4:00:
9e:00:ff:2a:aa:d4:4f:0e:58:71:c6:8e:d7:3c:9f:1e:31:c3:
80:d7:93:b5:e6:b3:e9:b7:82:d6:69:1e:34:3b:a0:88:91:7a:
50:ef:aa:2e:a3:ef:1f:a5:70:e8:7f:ae:81:23:35:97:57:21:
84:6c:cc:e1:c6:08:01:da:98:d4:55:4c:63:91:9f:22:b5:2d:
85:52:0d:a2:bc:7a:97:00:07:20:dc:3c:b8:84:d1:fe:1b:47:
06:66:7a:7a:4f:16:0a:84:8b:e1:37:df:42:fd:cd:c8:ef:6a:
90:93:3d:c1:86:9c:6c:1b:d1:5f:e1:6e:41:f8:b6:55:1a:fd:
13:f3:0e:d1:a5:3b:dd:b8:a0:fb:27:a1:bb:e2:68:0c:c0:ad:
a6:cc:a2:e1:f5:92:96:13:87:11:9b:33:66:58:36:d0:c1:5a:
52:7c:fb:ec:11:a8:60:26:06:84:96:ac:10:92:e4:69:30:ba:
16:53:b7:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RbYXgRzRr37EvARVw1aBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDljYWMxNTFkYjE1OGVkNmE4NTYzMzU4NTU1NTdmNGU3
NWY3MjUwHhcNMjUwNjI4MTYwMTI4WhcNMjUwNjI5MTYwMTI4WjAzMTEwLwYDVQQD
EygzODk1YTU2Nzk5MmY3NGM5OTEzNzI5Y2MyZmU0N2I5YTVmYjE3Y2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2ss+3nFtlJQLX9SiWUHZevxYIFJ
ubzfWCeBj83BxuqJqGl7RAQGkEacDHh3XjN4rdGX5sPjzJvTQqiv/vMFsPQknMHj
jrYIrDaR+3W6+xREsZzllzF9VQrTKWkZxrQd5NVHEoVbtZgan1p68VM922Y+ZhSV
AyguTadHUmFa95Z1KJveZwEkP2LjAVbcDJLAWSNzx5glgqGrCs8SD2hPyeCCjsDK
nsV6pwGi5e3wX5ITn3x8yB8OAovT2Nq6GJL5FhhSsOOZmhew36DxhrZOXQ8OoTqv
sg3iQLLWS0hxdVRQKZfaeK1HnEZcAJE9RNh5Y+SHRW+VbgdlVksBlrXAVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiVpWeZL3TJkTcpzC/ke5pfsXyuMB8GA1UdIwQY
MBaAFO9JysFR2xWO1qhWM1hVVX9OdfclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2It
ZDhhN2EyY2M4NzNiLzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2ItZDhhN2EyY2M4NzNi
LzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOie71qRG
0OJ8WuaiYzVXm1yiEoKjnTMqKLGAAVFwHkpFJ5rqxe/LyYOkkE07JZpui0mX/tVA
eEz2MS3hg1EESPl+BXoO1dQAngD/KqrUTw5YccaO1zyfHjHDgNeTteaz6beC1mke
NDugiJF6UO+qLqPvH6Vw6H+ugSM1l1chhGzM4cYIAdqY1FVMY5GfIrUthVINorx6
lwAHINw8uITR/htHBmZ6ek8WCoSL4TffQv3NyO9qkJM9wYacbBvRX+FuQfi2VRr9
E/MO0aU73big+yehu+JoDMCtpsyi4fWSlhOHEZszZlg20MFaUnz77BGoYCYGhJas
EJLkaTC6FlO3fw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:44 2025 by rpki-client