Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: MvMSIclI+p6YQJlby5s2TpbJYwUNnJJ2ef9NkgfBz64=
Subject key identifier: A6:37:E7:9F:A9:BF:D1:FB:DF:CB:1F:A6:83:1D:57:AF:70:39:4D:75
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 0197B7451EB32F5648469125102DF5D9892B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 06DA
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: FW2FR4TLU3mEl3cCPF+xR6oP1rY0E3fB7B/Wn/KMMYY=)
2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=)
3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1e:b3:2f:56:48:46:91:25:10:2d:f5:d9:89:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=a637e79fa9bfd1fbdfcb1fa6831d57af70394d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:32:51:ca:f0:f5:14:1a:f5:cc:c4:28:31:
b1:90:45:07:ff:5e:34:25:3e:13:97:7f:93:ba:0b:
2a:a0:5b:6b:c1:60:3e:95:8d:f4:0a:7b:b6:3c:07:
65:5b:59:3c:d6:70:95:d9:38:8d:68:42:80:b9:46:
73:6c:ca:b0:32:3e:34:9f:c0:ec:17:2f:81:b8:c3:
5f:60:a0:53:ba:67:3f:c3:80:2f:cb:54:70:96:98:
42:36:7b:e4:d1:9f:cf:f0:ae:11:b7:18:64:0b:76:
6f:e3:a7:03:31:5e:d8:5c:a6:69:ae:17:96:f2:9e:
ce:54:33:88:32:ea:fb:f6:60:b1:6d:49:9c:e5:46:
e4:90:7a:e3:89:8d:a3:39:b9:9f:98:19:0d:d0:b5:
f2:c8:9b:cd:8f:72:08:ab:16:38:dc:4f:16:db:21:
6b:0c:6d:78:af:56:04:50:7a:f3:8b:9d:6b:e8:92:
57:04:23:e8:a7:55:ef:9d:1d:cb:82:55:1a:cf:9c:
cc:fd:9e:e2:6e:e6:d4:06:31:52:e1:a7:72:43:75:
c4:8c:b9:ad:71:59:bd:89:a8:b6:0a:34:1f:08:12:
ab:3a:0f:a5:6c:c1:fd:d0:c7:1e:75:ce:72:03:14:
fe:ca:5a:4a:f8:9a:89:7b:01:e1:85:ad:19:b9:dd:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:37:E7:9F:A9:BF:D1:FB:DF:CB:1F:A6:83:1D:57:AF:70:39:4D:75
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d5:7c:b9:66:5f:44:d8:38:bc:e1:7c:86:67:4a:0f:bf:18:
6b:3c:c2:cd:56:43:f7:22:9d:2b:0a:ac:d1:ae:ca:e7:10:25:
70:57:64:c0:f0:70:0f:a1:c3:1a:f1:5c:d5:42:b3:96:36:a5:
49:24:f1:a6:5d:e5:19:c8:bf:5f:a4:de:8b:bf:4a:c4:af:85:
30:04:3b:7c:63:77:7b:d8:a3:23:44:f3:ff:ac:d8:5f:b1:46:
6b:d3:2c:be:91:a1:33:f4:8e:59:39:08:55:71:94:bc:80:57:
5b:26:12:36:5e:09:32:2c:84:9d:e6:fa:f3:be:36:4c:57:8e:
18:24:cc:c9:10:cd:27:82:36:15:8b:10:9f:ad:c7:78:e4:a6:
80:c8:fe:3a:05:b8:66:a5:2e:e7:11:af:f2:f0:86:15:b0:17:
23:7c:b1:d0:49:62:57:d4:c0:b9:78:2f:ff:ed:83:a6:18:09:
4d:13:c3:69:87:4b:9b:3d:79:21:a0:af:d1:1e:bb:aa:3c:2e:
0f:84:8a:62:ae:0a:d6:59:00:d4:65:b1:10:b8:5b:2c:6a:1f:
d2:d6:66:3f:47:6a:af:f4:ed:4d:e7:e0:a9:a3:49:98:6e:bc:
f5:05:7f:4e:70:50:71:e7:9c:3f:76:80:2a:1f:4d:f9:70:b1:
ae:fa:b7:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RR6zL1ZIRpElEC312YkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk
NTkwNmIwHhcNMjUwNjI4MTYwMDQ5WhcNMjUwNjI5MTYwMDQ5WjAzMTEwLwYDVQQD
EyhhNjM3ZTc5ZmE5YmZkMWZiZGZjYjFmYTY4MzFkNTdhZjcwMzk0ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGoyUcrw9RQa9czEKDGxkEUH/140
JT4Tl3+TugsqoFtrwWA+lY30Cnu2PAdlW1k81nCV2TiNaEKAuUZzbMqwMj40n8Ds
Fy+BuMNfYKBTumc/w4Avy1RwlphCNnvk0Z/P8K4RtxhkC3Zv46cDMV7YXKZprheW
8p7OVDOIMur79mCxbUmc5UbkkHrjiY2jObmfmBkN0LXyyJvNj3IIqxY43E8W2yFr
DG14r1YEUHrzi51r6JJXBCPop1XvnR3LglUaz5zM/Z7ibubUBjFS4adyQ3XEjLmt
cVm9iai2CjQfCBKrOg+lbMH90Mcedc5yAxT+ylpK+JqJewHhha0Zud08uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY355+pv9H738sfpoMdV69wOU11MB8GA1UdIwQY
MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt
ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw
LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9V8uWZf
RNg4vOF8hmdKD78YazzCzVZD9yKdKwqs0a7K5xAlcFdkwPBwD6HDGvFc1UKzljal
SSTxpl3lGci/X6Tei79KxK+FMAQ7fGN3e9ijI0Tz/6zYX7FGa9MsvpGhM/SOWTkI
VXGUvIBXWyYSNl4JMiyEneb68742TFeOGCTMyRDNJ4I2FYsQn63HeOSmgMj+OgW4
ZqUu5xGv8vCGFbAXI3yx0EliV9TAuXgv/+2DphgJTRPDaYdLmz15IaCv0R67qjwu
D4SKYq4K1lkA1GWxELhbLGof0tZmP0dqr/TtTefgqaNJmG689QV/TnBQceecP3aA
Kh9N+XCxrvq3QQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:35 2025 by rpki-client