Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: zaWLra9UyZM/IYipIza5ifivxruD00yL0g5zz9fWZWY=
Subject key identifier: B3:95:98:FC:7F:1E:57:03:EB:F3:BD:9E:44:3A:42:5C:D6:DA:CB:93
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 0197B6D7BC4EEEAE6484E67E313ECA9C0071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 069F
Signing time: Sat 28 Jun 2025 14:01:21 +0000
Manifest this update: Sat 28 Jun 2025 14:01:21 +0000
Manifest next update: Sun 29 Jun 2025 14:01:21 +0000
Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: BKBrcSgoXK/FX4GiHq0nSDIb8kGuk/5aa12+n+reyOE=)
2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:bc:4e:ee:ae:64:84:e6:7e:31:3e:ca:9c:00:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Jun 28 14:01:21 2025 GMT
Not After : Jun 29 14:01:21 2025 GMT
Subject: CN=b39598fc7f1e5703ebf3bd9e443a425cd6dacb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:52:a0:48:05:c4:bd:24:18:4f:2c:b9:b3:
40:21:67:86:fc:de:a0:4f:8c:19:95:8b:41:ca:b5:
f2:c4:1a:e0:1e:17:83:61:62:42:4e:d7:5e:a7:f3:
b6:68:76:82:25:40:1e:98:8e:ee:34:8a:e7:e6:cc:
ff:76:73:1b:a2:99:06:ad:c8:e5:47:01:57:1a:7d:
6e:5e:54:1b:b2:f6:4e:39:c7:56:f7:8d:c7:7f:cb:
a6:84:48:97:22:c7:d0:c1:a8:92:90:74:c7:86:5b:
49:c1:18:40:7c:15:5f:3e:83:72:c4:e2:5b:61:2e:
ea:ad:8f:82:ef:08:a1:04:81:9d:e7:39:c6:3f:e6:
ed:02:69:9e:9d:0d:4b:46:aa:c1:ae:0a:b4:23:20:
24:d6:8f:84:e0:e7:83:ba:af:12:8e:e1:e7:65:dd:
c0:52:6a:a5:53:6a:d8:f5:68:46:a1:e1:0f:65:9e:
95:9c:35:43:b5:e5:45:e8:40:a9:66:f1:1b:45:dd:
f8:36:ac:4d:7e:d4:e1:3f:88:a8:ca:1f:ef:02:1e:
2c:d4:49:01:d8:7d:d4:e1:bb:7c:57:95:7f:af:45:
96:9f:ad:aa:74:c8:d8:d0:b1:a3:d3:b4:3c:af:bf:
a6:b8:71:38:e0:72:c6:a2:5c:89:7b:33:25:0a:a3:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:95:98:FC:7F:1E:57:03:EB:F3:BD:9E:44:3A:42:5C:D6:DA:CB:93
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:84:7a:83:cf:8d:b9:cb:d4:c9:84:28:62:47:e9:37:b8:0b:
5f:0c:f6:6e:6b:59:62:87:10:46:92:c1:eb:d3:3f:b8:f6:75:
2f:65:ba:93:4e:6a:3e:5e:d5:3f:27:e3:b7:f9:50:3e:36:8c:
ff:33:33:24:88:9e:e6:c4:08:d5:39:e9:e9:84:6c:b9:bf:df:
f6:c2:7b:a7:0b:01:e1:0c:51:8d:ff:e5:48:7a:3b:13:49:b3:
21:ea:b2:46:97:9b:67:ad:b1:75:77:36:68:39:a6:0a:9f:86:
5f:73:d1:0b:e2:8d:c6:e4:26:0d:f1:1b:1e:68:29:93:49:9f:
06:f9:4a:a6:35:e9:6c:46:22:06:a9:89:c3:7f:b9:97:da:36:
1f:58:f7:b4:d2:90:19:a4:c5:2d:f0:95:94:30:ac:d9:8a:87:
bf:1c:65:af:cc:93:df:43:51:2b:73:81:f4:e9:85:18:e9:53:
f3:c3:df:0a:91:95:32:db:3f:6d:12:41:ac:20:4a:14:15:84:
9e:10:22:ca:d0:f5:86:22:bc:45:0c:db:70:80:6d:09:14:ba:
7b:9d:b1:24:0f:14:4f:ed:6e:d5:52:b0:ac:95:fd:9b:09:e7:
a6:67:17:7b:72:bf:76:c3:e6:2b:16:f9:0c:c5:8e:85:a3:9a:
9d:e0:65:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe217xO7q5khOZ+MT7KnABxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZjJmNGIwMjI0NmU2MDRlMjM3ZjM3OTQ1YTM4MmJmYWRh
MTI3N2YwHhcNMjUwNjI4MTQwMTIxWhcNMjUwNjI5MTQwMTIxWjAzMTEwLwYDVQQD
EyhiMzk1OThmYzdmMWU1NzAzZWJmM2JkOWU0NDNhNDI1Y2Q2ZGFjYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyVSoEgFxL0kGE8subNAIWeG/N6g
T4wZlYtByrXyxBrgHheDYWJCTtdep/O2aHaCJUAemI7uNIrn5sz/dnMbopkGrcjl
RwFXGn1uXlQbsvZOOcdW943Hf8umhEiXIsfQwaiSkHTHhltJwRhAfBVfPoNyxOJb
YS7qrY+C7wihBIGd5znGP+btAmmenQ1LRqrBrgq0IyAk1o+E4OeDuq8SjuHnZd3A
UmqlU2rY9WhGoeEPZZ6VnDVDteVF6ECpZvEbRd34NqxNftThP4ioyh/vAh4s1EkB
2H3U4bt8V5V/r0WWn62qdMjY0LGj07Q8r7+muHE44HLGolyJezMlCqNVmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOVmPx/HlcD6/O9nkQ6QlzW2suTMB8GA1UdIwQY
MBaAFJny9LAiRuYE4jfzeUWjgr+toSd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTct
NmY0ZDgxODk0MWE4LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTctNmY0ZDgxODk0MWE4
LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4R6g8+N
ucvUyYQoYkfpN7gLXwz2bmtZYocQRpLB69M/uPZ1L2W6k05qPl7VPyfjt/lQPjaM
/zMzJIie5sQI1Tnp6YRsub/f9sJ7pwsB4QxRjf/lSHo7E0mzIeqyRpebZ62xdXc2
aDmmCp+GX3PRC+KNxuQmDfEbHmgpk0mfBvlKpjXpbEYiBqmJw3+5l9o2H1j3tNKQ
GaTFLfCVlDCs2YqHvxxlr8yT30NRK3OB9OmFGOlT88PfCpGVMts/bRJBrCBKFBWE
nhAiytD1hiK8RQzbcIBtCRS6e52xJA8UT+1u1VKwrJX9mwnnpmcXe3K/dsPmKxb5
DMWOhaOaneBlaA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:44 2025 by rpki-client