Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
File: c21yTiOe-38ve-pSap4MXn_Im74.mft (raw, json)
Hash identifier: RRsOg58X5D289/A5G+oIZ9Wgwt8xDm5UzEBJcL3EdaY=
Subject key identifier: 32:3A:A8:EA:AB:9D:0B:FE:F2:46:56:4E:5C:45:D7:A6:8F:D5:60:16
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 0197B7EAC8532106934FDFAF49E210F517AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: 1fA5PORVd3jPdWz7xA5f_vnyxD0.roa (hash: ykI4OL9fWsgYZNYcziWcElBypDNzSjFchoDv23Mnzrs=)
2: c21yTiOe-38ve-pSap4MXn_Im74.crl (hash: UyjoY3XJDxmkQS8Icx1rlzgLEkXHvlB7HgwQk4pxvBc=)
3: uy61Z_8RU66-jPuUHYoqaPIOhik.roa (hash: L9o3XCU/iUGm+BZYXWE1H2NgYx1sjgSieqKtDG+tWqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c8:53:21:06:93:4f:df:af:49:e2:10:f5:17:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=323aa8eaab9d0bfef246564e5c45d7a68fd56016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:af:4b:7c:15:54:05:f1:e2:87:fc:d7:ba:
ac:13:0a:a2:86:f3:80:fb:f1:5b:e8:43:82:1e:93:
bb:95:ff:65:54:90:6d:4a:ee:27:cc:73:1c:cc:9d:
88:cd:d5:43:70:8c:cb:73:09:5f:6f:bb:de:7b:80:
13:d4:a1:51:db:15:fe:5f:aa:50:65:70:36:bd:dc:
66:8c:16:15:7c:37:b8:0d:86:3d:f6:de:72:c0:85:
9f:ac:6e:45:27:83:69:e1:8a:a0:0f:01:ca:d2:86:
4c:3e:a4:ac:17:0b:1f:f1:84:43:8a:e2:73:c0:46:
bb:fc:26:a7:92:03:d3:9f:2f:98:69:bc:b0:c5:a3:
0c:1b:c0:b4:1a:e0:48:05:12:f3:ea:db:c3:30:6e:
d2:c3:36:b5:86:a7:71:e1:d3:d9:92:b6:0b:b5:4d:
7e:79:ee:b6:90:25:d3:0f:c5:a8:40:53:52:3b:81:
9e:23:ee:d9:0e:34:2f:6f:34:05:25:e2:1b:19:1a:
a6:c5:dc:11:aa:f5:07:14:f0:00:e0:fa:69:20:86:
90:70:d3:c4:77:fd:77:ec:aa:40:2b:c9:8d:67:9b:
bc:89:76:12:66:05:20:9a:41:75:0d:07:e4:56:bc:
48:1e:9c:52:98:b9:4c:91:56:26:92:0e:0e:67:5a:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3A:A8:EA:AB:9D:0B:FE:F2:46:56:4E:5C:45:D7:A6:8F:D5:60:16
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:51:6d:c4:c5:ab:34:96:83:f8:c5:c3:06:43:5b:39:00:99:
de:75:2a:44:6a:49:c2:fa:65:23:ed:26:05:24:7d:3e:e1:5e:
4e:fb:4b:43:5c:1f:9c:3f:45:42:cc:89:75:70:e8:b9:9d:da:
2d:0a:24:24:dc:72:36:39:9d:00:6f:97:78:0e:1c:cc:f1:65:
12:30:62:71:4f:04:d7:80:a1:7a:4a:b7:1f:53:51:cf:50:19:
7a:03:4e:a2:5c:f2:9e:c4:cb:4c:77:f5:b1:0d:90:8a:87:d1:
9e:1b:a3:02:fb:42:a0:47:a4:ea:d5:d3:b6:d2:6a:f3:b3:40:
a0:cc:bb:60:6d:a9:47:c7:3f:6e:d2:32:92:06:5a:e2:d0:b9:
14:92:7c:19:44:4a:34:5b:7c:b3:47:63:55:dd:29:f7:e0:5c:
50:04:59:ec:81:93:5f:85:78:ce:0c:92:03:aa:f2:ce:70:d8:
5f:41:63:42:b6:55:f7:e4:2b:0e:8f:aa:b6:2c:83:91:46:eb:
c0:2b:be:81:90:ad:fb:3b:11:e7:9b:53:32:b0:b4:ff:b0:06:
07:79:92:95:f9:63:64:76:6f:05:1a:8b:e9:a0:b6:39:14:31:
a5:45:6c:aa:34:b3:ba:cc:97:62:ab:29:0f:7f:03:da:1d:38:
5e:85:69:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36shTIQaTT9+vSeIQ9ReuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmQ3MjRlMjM5ZWZiN2YyZjdiZWE1MjZhOWUwYzVlN2Zj
ODliYmUwHhcNMjUwNjI4MTkwMTQ2WhcNMjUwNjI5MTkwMTQ2WjAzMTEwLwYDVQQD
EygzMjNhYThlYWFiOWQwYmZlZjI0NjU2NGU1YzQ1ZDdhNjhmZDU2MDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBKvS3wVVAXx4of817qsEwqihvOA
+/Fb6EOCHpO7lf9lVJBtSu4nzHMczJ2IzdVDcIzLcwlfb7vee4AT1KFR2xX+X6pQ
ZXA2vdxmjBYVfDe4DYY99t5ywIWfrG5FJ4Np4YqgDwHK0oZMPqSsFwsf8YRDiuJz
wEa7/CankgPTny+YabywxaMMG8C0GuBIBRLz6tvDMG7Swza1hqdx4dPZkrYLtU1+
ee62kCXTD8WoQFNSO4GeI+7ZDjQvbzQFJeIbGRqmxdwRqvUHFPAA4PppIIaQcNPE
d/137KpAK8mNZ5u8iXYSZgUgmkF1DQfkVrxIHpxSmLlMkVYmkg4OZ1pTgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI6qOqrnQv+8kZWTlxF16aP1WAWMB8GA1UdIwQY
MBaAFHNtck4jnvt/L3vqUmqeDF5/yJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kZmMxMTAtNzkyNC00OWE5LTg1NjQt
MGJlYmZjYmRlMWYzLzEvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kZmMxMTAtNzkyNC00OWE5LTg1NjQtMGJlYmZjYmRlMWYz
LzEvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1FtxMWr
NJaD+MXDBkNbOQCZ3nUqRGpJwvplI+0mBSR9PuFeTvtLQ1wfnD9FQsyJdXDouZ3a
LQokJNxyNjmdAG+XeA4czPFlEjBicU8E14Chekq3H1NRz1AZegNOolzynsTLTHf1
sQ2QiofRnhujAvtCoEek6tXTttJq87NAoMy7YG2pR8c/btIykgZa4tC5FJJ8GURK
NFt8s0djVd0p9+BcUARZ7IGTX4V4zgySA6ryznDYX0FjQrZV9+QrDo+qtiyDkUbr
wCu+gZCt+zsR55tTMrC0/7AGB3mSlfljZHZvBRqL6aC2ORQxpUVsqjSzusyXYqsp
D38D2h04XoVp9A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:28 2025 by rpki-client