Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier: P3bDdnYs+ujbc1N1XCFV9pF4jbEMYWj3mFiBrtx5Q3E=
Subject key identifier: 52:D0:04:3A:3F:09:A8:5A:A6:88:9E:9A:47:AA:86:D6:E9:39:BB:A3
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 0197C75CFD862820680215C718AD9C820EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number: 0B0B
Signing time: Tue 01 Jul 2025 19:00:49 +0000
Manifest this update: Tue 01 Jul 2025 19:00:49 +0000
Manifest next update: Wed 02 Jul 2025 19:00:49 +0000
Files and hashes: 1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=)
2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: MvH4PrHrvoGGSI4dtr9LSKXDYnMoeBVktnEN0lZu7gg=)
3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5c:fd:86:28:20:68:02:15:c7:18:ad:9c:82:0e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Jul 1 19:00:49 2025 GMT
Not After : Jul 2 19:00:49 2025 GMT
Subject: CN=52d0043a3f09a85aa6889e9a47aa86d6e939bba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:31:0f:de:d5:70:7b:2b:fd:f9:02:48:db:
e3:38:3f:f2:11:2c:c0:de:05:a0:ab:95:7f:31:42:
8a:8b:df:b7:1e:e5:07:07:d3:7a:23:45:a8:ee:26:
1f:ec:d8:a0:c0:2b:72:88:b9:65:72:78:a2:8d:cf:
35:ce:f3:14:8d:a7:bf:d3:dc:d4:07:76:77:41:4a:
89:46:85:8a:76:5f:af:f1:8d:cb:3f:d8:5c:db:a1:
8d:9b:72:58:89:d4:7d:f2:80:fb:ff:3a:50:b6:26:
e4:ea:63:be:01:9b:9d:11:79:5c:d7:3c:67:a6:8c:
55:8e:61:11:e5:6b:a5:f8:5c:35:cd:fa:29:b9:a0:
77:57:14:97:31:2b:8c:fa:18:19:3e:95:64:23:87:
c9:9f:2d:00:e0:e5:2b:f4:e6:e4:0a:ed:9f:33:b2:
c3:f3:9b:d1:ef:40:ca:72:d0:a2:b0:a7:3a:27:ee:
ec:00:82:fb:16:7e:9c:15:33:d2:8e:7e:c6:90:8a:
ac:01:d9:88:78:99:72:25:d1:00:46:0a:f2:f9:8e:
6b:85:33:8a:2e:9c:07:7b:f3:54:a0:d2:22:83:41:
2c:3b:bb:73:9b:0a:08:e7:28:3c:07:05:a0:65:f3:
c2:29:d7:e7:2f:c0:66:27:bf:18:5b:7b:7b:a6:c3:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D0:04:3A:3F:09:A8:5A:A6:88:9E:9A:47:AA:86:D6:E9:39:BB:A3
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:6f:4f:dd:42:ab:ee:c3:86:78:5a:78:3d:5e:a1:c9:02:8d:
1f:25:0f:a8:fe:04:52:bd:69:af:31:46:36:76:d1:2d:45:46:
41:cd:16:b7:2c:b8:3c:bf:d8:02:47:47:c6:f2:0d:bd:49:0b:
83:ec:64:a9:fd:bb:eb:f6:16:9b:da:76:8d:0a:0c:37:2e:84:
2a:9e:c7:9b:1f:6c:04:34:94:f3:c6:db:a5:7d:08:70:94:3b:
33:5c:0e:53:d7:47:c9:e7:74:b5:be:9e:fa:32:d7:8b:ed:32:
1d:b5:95:ea:ac:d1:de:61:ac:f0:23:cf:7a:32:99:39:51:fe:
64:2d:1e:94:cf:dc:27:05:de:9c:24:17:84:95:6e:94:30:39:
8e:9b:35:f4:ba:39:db:83:2c:9a:69:a4:12:0c:25:9c:dc:d0:
89:ec:fa:58:c5:86:7b:c9:7a:ff:ea:d2:f5:e6:f3:c3:25:73:
93:0d:c9:dd:c4:68:fa:37:df:74:95:63:3f:0e:08:be:c2:cd:
30:f4:36:0a:2b:73:83:7e:9c:ce:f6:b4:b5:f3:52:55:28:95:
47:26:f0:d1:6a:46:72:c5:47:70:d4:7f:a4:9d:12:fe:e6:73:
a9:6f:15:41:ed:59:ed:0d:9b:8f:d3:39:c0:c9:78:57:d6:e0:
a1:1c:40:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfHXP2GKCBoAhXHGK2cgg7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGY1YjIyMWY2YWYzMjA5OGYzMDY0ZDY4MjUxYjYxNzg5
MmFjOTIwHhcNMjUwNzAxMTkwMDQ5WhcNMjUwNzAyMTkwMDQ5WjAzMTEwLwYDVQQD
Eyg1MmQwMDQzYTNmMDlhODVhYTY4ODllOWE0N2FhODZkNmU5MzliYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA194xD97VcHsr/fkCSNvjOD/yESzA
3gWgq5V/MUKKi9+3HuUHB9N6I0Wo7iYf7NigwCtyiLllcniijc81zvMUjae/09zU
B3Z3QUqJRoWKdl+v8Y3LP9hc26GNm3JYidR98oD7/zpQtibk6mO+AZudEXlc1zxn
poxVjmER5Wul+Fw1zfopuaB3VxSXMSuM+hgZPpVkI4fJny0A4OUr9ObkCu2fM7LD
85vR70DKctCisKc6J+7sAIL7Fn6cFTPSjn7GkIqsAdmIeJlyJdEARgry+Y5rhTOK
LpwHe/NUoNIig0EsO7tzmwoI5yg8BwWgZfPCKdfnL8BmJ78YW3t7psNvxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLQBDo/CahapoiemkeqhtbpObujMB8GA1UdIwQY
MBaAFOoPWyIfavMgmPMGTWglG2F4kqySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgt
NTdlOTBjNTZhMGUyLzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgtNTdlOTBjNTZhMGUy
LzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv29P3UKr
7sOGeFp4PV6hyQKNHyUPqP4EUr1przFGNnbRLUVGQc0Wtyy4PL/YAkdHxvINvUkL
g+xkqf276/YWm9p2jQoMNy6EKp7Hmx9sBDSU88bbpX0IcJQ7M1wOU9dHyed0tb6e
+jLXi+0yHbWV6qzR3mGs8CPPejKZOVH+ZC0elM/cJwXenCQXhJVulDA5jps19Lo5
24MsmmmkEgwlnNzQiez6WMWGe8l6/+rS9ebzwyVzkw3J3cRo+jffdJVjPw4IvsLN
MPQ2Citzg36czva0tfNSVSiVRybw0WpGcsVHcNR/pJ0S/uZzqW8VQe1Z7Q2bj9M5
wMl4V9bgoRxAWg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:15:38 2025 by rpki-client