Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: l8ObU0d57wJXn7BfI4yv6ncccy2UISlr5Iuqhn+QLTY=
Subject key identifier: 31:BC:80:10:FF:B4:28:D8:AD:7F:5D:7B:13:DE:5D:01:CC:EF:DF:DF
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 0197B70F30FDB0C9D5A992FC5EFBFCEDC952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 14C5
Signing time: Sat 28 Jun 2025 15:01:55 +0000
Manifest this update: Sat 28 Jun 2025 15:01:55 +0000
Manifest next update: Sun 29 Jun 2025 15:01:55 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: jl6Yvn1QWfqEet94fBdeCZ8t2qANxTZLEun8j3MjvbY=)
2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:30:fd:b0:c9:d5:a9:92:fc:5e:fb:fc:ed:c9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Jun 28 15:01:55 2025 GMT
Not After : Jun 29 15:01:55 2025 GMT
Subject: CN=31bc8010ffb428d8ad7f5d7b13de5d01ccefdfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:19:e5:15:4b:c7:83:a3:a1:c6:6e:2e:5a:
e8:6e:bb:a2:8c:86:1e:b3:72:21:7b:29:ee:b1:b0:
4e:25:ed:66:e2:5a:cc:30:1f:af:16:bf:47:bf:70:
73:59:8e:6d:6e:b1:cc:72:51:dc:87:b0:13:01:fc:
33:4b:3e:d6:5f:13:7f:38:3e:0c:ae:8d:7f:59:71:
4b:d7:2a:74:16:8e:25:b2:b3:59:fc:d9:a5:7f:a1:
2c:90:81:c3:9f:c6:d1:6e:c8:5e:af:ce:f7:c6:b5:
d0:1e:c5:ef:03:0c:0f:c5:30:fd:7a:05:87:a6:e4:
74:f4:d0:28:e4:16:68:a4:be:3f:fb:f5:b5:6c:a4:
be:09:fd:c7:ac:de:4e:4b:e9:42:d2:66:01:ad:bc:
5d:b7:e7:ef:b5:29:80:e5:f1:4b:46:07:66:55:c3:
46:1c:af:b9:e7:81:d0:4b:3b:85:0b:3b:cf:a7:3a:
48:dc:2c:b9:98:52:d6:7b:c5:c3:19:d7:e8:6a:8f:
9f:41:a4:f6:3c:fa:b0:10:b3:fd:bc:3f:90:69:ae:
55:1a:11:16:59:89:7d:73:fa:7a:2c:ff:be:5c:b4:
4e:80:dd:e6:8f:77:46:91:70:28:07:44:18:ce:21:
10:ca:19:8e:e8:b2:71:0a:97:f5:b8:56:0e:07:2a:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BC:80:10:FF:B4:28:D8:AD:7F:5D:7B:13:DE:5D:01:CC:EF:DF:DF
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:73:e6:96:9f:46:2b:bb:40:39:35:c7:3f:8a:2c:1f:be:01:
86:13:7c:4f:bd:15:51:58:c7:1e:3f:ec:0d:ff:65:de:14:c6:
22:fb:cc:a6:ce:4e:8f:5f:53:4b:ee:c8:77:46:34:a5:63:20:
12:00:d1:87:97:52:62:c4:65:2a:a2:fb:6b:5c:31:f2:54:4c:
b7:c4:9b:fa:55:bb:2e:fa:73:f3:98:26:89:d9:89:a4:b5:67:
79:e5:3c:d7:70:dc:82:20:da:4c:d0:89:bc:f3:33:83:90:cc:
c1:a1:7f:cc:bc:09:64:5b:c0:b4:83:86:61:b7:4b:76:f9:f1:
a1:a1:80:26:5b:07:c8:1f:fb:7d:dc:5c:c8:5f:7a:ae:77:6e:
43:b9:e8:b3:36:a4:66:22:7e:c1:bc:1b:a8:fd:c4:10:c6:fd:
8d:c5:24:46:ea:da:c0:8f:cb:d5:40:b9:f9:25:32:6e:ea:75:
11:96:b7:5d:e0:64:01:61:4d:30:ff:ed:c5:2c:df:d4:b0:c8:
d5:a6:1a:2a:91:9b:a1:cb:04:1d:e9:fc:ac:6d:97:c4:16:9d:
04:bf:b9:a9:92:a6:29:19:9f:2a:73:52:5c:6f:b3:ad:d4:81:
7b:03:31:a3:08:50:99:2b:83:27:27:db:ea:4e:2e:36:79:85:
0f:46:d3:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DzD9sMnVqZL8Xvv87clSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MjIzMWU3MTNmMGY4MzRiZDA5YzNmNzZlMTJlMjUwZTc3
M2MyOTAwHhcNMjUwNjI4MTUwMTU1WhcNMjUwNjI5MTUwMTU1WjAzMTEwLwYDVQQD
EygzMWJjODAxMGZmYjQyOGQ4YWQ3ZjVkN2IxM2RlNWQwMWNjZWZkZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7EZ5RVLx4OjocZuLlrobruijIYe
s3IheynusbBOJe1m4lrMMB+vFr9Hv3BzWY5tbrHMclHch7ATAfwzSz7WXxN/OD4M
ro1/WXFL1yp0Fo4lsrNZ/Nmlf6EskIHDn8bRbsher873xrXQHsXvAwwPxTD9egWH
puR09NAo5BZopL4/+/W1bKS+Cf3HrN5OS+lC0mYBrbxdt+fvtSmA5fFLRgdmVcNG
HK+554HQSzuFCzvPpzpI3Cy5mFLWe8XDGdfoao+fQaT2PPqwELP9vD+Qaa5VGhEW
WYl9c/p6LP++XLROgN3mj3dGkXAoB0QYziEQyhmO6LJxCpf1uFYOByo2JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDG8gBD/tCjYrX9dexPeXQHM79/fMB8GA1UdIwQY
MBaAFEYiMecT8Pg0vQnD924S4lDnc8KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5Mzct
YWQ0YmQ3ZjIzY2U0LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5MzctYWQ0YmQ3ZjIzY2U0
LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXPmlp9G
K7tAOTXHP4osH74BhhN8T70VUVjHHj/sDf9l3hTGIvvMps5Oj19TS+7Id0Y0pWMg
EgDRh5dSYsRlKqL7a1wx8lRMt8Sb+lW7Lvpz85gmidmJpLVneeU813DcgiDaTNCJ
vPMzg5DMwaF/zLwJZFvAtIOGYbdLdvnxoaGAJlsHyB/7fdxcyF96rnduQ7noszak
ZiJ+wbwbqP3EEMb9jcUkRurawI/L1UC5+SUybup1EZa3XeBkAWFNMP/txSzf1LDI
1aYaKpGbocsEHen8rG2XxBadBL+5qZKmKRmfKnNSXG+zrdSBewMxowhQmSuDJyfb
6k4uNnmFD0bTQg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:47 2025 by rpki-client