Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: xcfzv5XncqGEDINq8NM6jJhm5+9nuNPAE+ZFxHIuJaI=
Subject key identifier: 45:5E:E4:1E:DD:50:45:27:5C:E9:E7:01:7C:16:25:1B:88:4F:CC:CC
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 0197B6D758917637FE90586CBC1F856FD4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 0E79
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: Kwfk3P61mJi3pfNw1M4qdKeBAYqVUZHt+ZTRVotfmn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:58:91:76:37:fe:90:58:6c:bc:1f:85:6f:d4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=455ee41edd5045275ce9e7017c16251b884fcccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:83:0e:5e:ab:88:59:50:61:72:83:b9:5c:
36:6d:84:13:f5:67:af:f4:32:65:6d:41:2d:88:84:
6c:a8:78:c5:ce:fe:bf:04:c7:a8:8e:f0:4d:6b:bd:
d0:07:da:af:d8:1c:0f:bb:8d:ba:ad:7e:79:57:ab:
04:e5:e1:76:69:62:08:2f:30:66:a7:84:c9:13:23:
6a:34:26:69:46:8a:67:55:86:36:74:62:01:e6:79:
fb:4b:86:db:9f:59:f0:a5:53:8d:de:54:93:87:97:
f9:1f:14:58:e3:bf:f6:69:4d:3e:f6:27:f0:33:5a:
fc:bc:ee:4e:a8:83:e3:c2:41:83:58:1b:08:0e:16:
49:7d:c3:82:08:c0:d2:32:fa:84:bf:6d:81:88:f0:
68:e3:5b:ac:c3:73:41:2b:6b:55:af:82:dd:9c:45:
2b:e8:93:dc:24:ba:36:32:f6:05:f6:09:42:53:ce:
8f:c5:87:ba:13:f1:2b:db:59:ff:03:5a:3c:32:37:
e8:83:49:0d:73:a2:3f:c5:8f:c9:29:63:6e:dc:79:
dc:2c:31:1f:07:3e:af:e2:54:7d:5c:91:81:69:32:
02:6b:16:39:ac:2c:15:a0:89:aa:bb:ae:e5:dd:61:
70:75:c0:07:70:aa:65:3a:ec:25:18:36:6d:6e:07:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5E:E4:1E:DD:50:45:27:5C:E9:E7:01:7C:16:25:1B:88:4F:CC:CC
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6d:dc:37:a5:cb:0d:4f:42:ea:56:f2:14:50:86:c6:02:72:
c8:96:f5:81:51:cc:21:79:bd:4b:72:a0:6e:24:28:84:46:0a:
a8:75:1e:19:ed:03:f8:35:c6:1c:ad:17:f5:95:80:5a:e9:b0:
5f:ff:dd:94:eb:64:1e:e3:89:3f:ca:8a:73:5d:e3:39:3c:1e:
4f:93:3d:72:8d:8b:4f:92:96:62:99:3e:16:26:f9:3d:4b:a0:
61:c0:1c:73:2d:98:67:39:f0:45:67:c1:22:0e:e2:18:64:ad:
bf:a1:ba:1f:e3:e9:d1:df:83:3f:34:ad:df:b8:18:23:a9:49:
d6:31:e1:8a:00:f1:9d:c5:5b:73:96:ff:45:1e:d8:dc:ff:72:
62:e3:36:70:86:62:69:cb:3d:6a:13:6b:7d:14:d3:2b:c2:b1:
22:87:45:ab:94:38:ee:28:21:b5:6a:26:75:30:24:6e:00:9f:
22:cf:f1:a7:ad:7f:48:88:d3:5f:24:a5:e7:e6:e0:27:eb:f3:
a0:08:98:0b:f0:d6:70:9e:e4:f2:f4:57:16:5a:20:60:1f:64:
32:eb:54:64:40:b0:dc:c4:d0:74:40:b7:13:18:da:76:20:2d:
72:53:78:17:3c:53:90:da:b7:0f:d7:57:28:10:2e:cc:da:37:
f5:5a:92:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe211iRdjf+kFhsvB+Fb9TeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjY2ZhYjhiODkzMDEwYTFiNWUyNTA3MmUxZDQ1NjkwNDQ5
M2Y1MmQwHhcNMjUwNjI4MTQwMDU1WhcNMjUwNjI5MTQwMDU1WjAzMTEwLwYDVQQD
Eyg0NTVlZTQxZWRkNTA0NTI3NWNlOWU3MDE3YzE2MjUxYjg4NGZjY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7mDDl6riFlQYXKDuVw2bYQT9Wev
9DJlbUEtiIRsqHjFzv6/BMeojvBNa73QB9qv2BwPu426rX55V6sE5eF2aWIILzBm
p4TJEyNqNCZpRopnVYY2dGIB5nn7S4bbn1nwpVON3lSTh5f5HxRY47/2aU0+9ifw
M1r8vO5OqIPjwkGDWBsIDhZJfcOCCMDSMvqEv22BiPBo41usw3NBK2tVr4LdnEUr
6JPcJLo2MvYF9glCU86PxYe6E/Er21n/A1o8Mjfog0kNc6I/xY/JKWNu3HncLDEf
Bz6v4lR9XJGBaTICaxY5rCwVoImqu67l3WFwdcAHcKplOuwlGDZtbgdzPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVe5B7dUEUnXOnnAXwWJRuIT8zMMB8GA1UdIwQY
MBaAFKzPq4uJMBChteJQcuHUVpBEk/UtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80Mjg5MTEtODgxNi00ZjExLTk3YTYt
NDg4MmU2YjU2OGIyLzEvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80Mjg5MTEtODgxNi00ZjExLTk3YTYtNDg4MmU2YjU2OGIy
LzEvck0tcmk0a3dFS0cxNGxCeTRkUldrRVNUOVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADG3cN6XL
DU9C6lbyFFCGxgJyyJb1gVHMIXm9S3KgbiQohEYKqHUeGe0D+DXGHK0X9ZWAWumw
X//dlOtkHuOJP8qKc13jOTweT5M9co2LT5KWYpk+Fib5PUugYcAccy2YZznwRWfB
Ig7iGGStv6G6H+Pp0d+DPzSt37gYI6lJ1jHhigDxncVbc5b/RR7Y3P9yYuM2cIZi
acs9ahNrfRTTK8KxIodFq5Q47ightWomdTAkbgCfIs/xp61/SIjTXySl5+bgJ+vz
oAiYC/DWcJ7k8vRXFlogYB9kMutUZECw3MTQdEC3ExjadiAtclN4FzxTkNq3D9dX
KBAuzNo39VqSpg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:35 2025 by rpki-client