Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: X+uOcLRnt4xtDYXJdtyooZJare62X080XNnuT+4TuAg=
Subject key identifier: BF:7B:60:79:E4:25:D9:25:0D:A7:A5:B0:C9:94:F6:5A:E1:90:4F:67
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 0197B7B33A36393994DA5F7AB170C663869F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0B60
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: vFLK0hLd9MT30suMNv5NAYlh6csjft39VIoSt2IWiPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:3a:36:39:39:94:da:5f:7a:b1:70:c6:63:86:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=bf7b6079e425d9250da7a5b0c994f65ae1904f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:7d:40:88:fa:c2:b8:40:02:22:8a:ff:c1:
2b:3d:dc:09:b5:90:b4:3a:eb:c5:1c:13:c2:7d:50:
a4:2c:61:de:bf:01:5a:0c:ac:c7:73:fe:9c:a0:a3:
25:30:28:34:00:cc:44:92:71:9c:26:82:73:44:3f:
51:39:5f:c5:bb:d7:f7:da:5d:42:8d:e4:95:46:c0:
14:70:4a:e4:25:2f:97:e0:81:9a:48:d7:1a:6e:7d:
51:7a:ed:7d:06:fc:27:c5:1f:dd:23:46:b9:d3:19:
d9:1a:93:0d:73:ac:06:1c:18:1a:d0:f5:04:f1:02:
fc:2f:7e:0a:9b:28:e1:27:06:98:80:0a:29:73:1d:
ca:7b:b9:c2:7f:23:5d:f7:cd:ea:5f:41:49:74:c6:
b0:6d:8e:7f:9a:f3:d1:fa:26:2a:bd:6e:e2:15:ec:
1d:15:be:c3:c7:d4:a0:5d:69:9e:9c:37:3b:51:38:
ee:a4:3b:5f:dd:75:70:8e:a7:99:9f:1a:54:92:b1:
bf:12:d0:3b:67:a0:a6:95:6d:7a:14:3a:e2:89:74:
c2:bb:78:bb:7a:24:e7:a5:ae:a7:61:62:32:0a:e7:
a2:18:a9:c2:e0:98:66:2c:06:9b:a3:34:6f:0d:bf:
af:e7:b1:2b:53:32:a1:49:4d:8c:bb:7a:ec:8a:29:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7B:60:79:E4:25:D9:25:0D:A7:A5:B0:C9:94:F6:5A:E1:90:4F:67
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:64:f5:4e:41:c9:60:ec:59:e1:4c:f4:88:5d:be:fb:13:de:
e4:09:0d:89:91:89:60:84:f0:c0:2f:51:fb:aa:d6:c7:0c:04:
dd:86:a2:3d:b0:5f:74:c8:a6:ea:b7:09:25:22:ec:03:fd:7b:
b2:b7:e0:61:41:84:ad:0e:b9:f4:9a:db:42:c5:bc:f9:88:12:
e5:1a:e4:92:37:d6:2e:32:42:e8:8d:cb:e7:b6:62:55:eb:d3:
b5:5a:53:05:d2:b1:ec:4e:3c:ea:20:25:06:87:90:08:f1:10:
1f:b1:8a:76:1f:a8:cf:4a:f8:82:e2:08:6f:48:59:5d:5e:5c:
87:56:2e:4d:9e:2d:1b:7b:fa:4b:84:20:da:1f:5a:f3:9f:1d:
9a:c2:18:94:4d:db:6b:e6:e0:5b:de:bf:5a:14:71:d8:07:ee:
7c:25:cc:1f:21:c5:a1:a5:fb:e9:e0:5e:78:61:eb:b9:ed:ba:
43:ce:e5:d1:24:c7:46:d0:f5:b6:fc:c9:42:9e:9b:f8:18:14:
f7:90:05:1e:3e:c4:60:d0:0a:f2:40:95:18:81:40:84:7f:45:
af:d8:fa:f6:1e:ae:0c:e7:61:55:71:76:85:a3:d7:47:63:3a:
f4:8d:e0:b8:99:ca:af:22:71:c4:af:de:64:76:be:51:93:11:
2c:7d:94:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3szo2OTmU2l96sXDGY4afMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YWY2Y2EzMzUzNGI4NTMwYjlmMjE0ZWM4ZWE5M2RkMjVi
ZDFmY2YwHhcNMjUwNjI4MTgwMTA1WhcNMjUwNjI5MTgwMTA1WjAzMTEwLwYDVQQD
EyhiZjdiNjA3OWU0MjVkOTI1MGRhN2E1YjBjOTk0ZjY1YWUxOTA0ZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5J9QIj6wrhAAiKK/8ErPdwJtZC0
OuvFHBPCfVCkLGHevwFaDKzHc/6coKMlMCg0AMxEknGcJoJzRD9ROV/Fu9f32l1C
jeSVRsAUcErkJS+X4IGaSNcabn1Reu19BvwnxR/dI0a50xnZGpMNc6wGHBga0PUE
8QL8L34KmyjhJwaYgAopcx3Ke7nCfyNd983qX0FJdMawbY5/mvPR+iYqvW7iFewd
Fb7Dx9SgXWmenDc7UTjupDtf3XVwjqeZnxpUkrG/EtA7Z6CmlW16FDriiXTCu3i7
eiTnpa6nYWIyCueiGKnC4JhmLAabozRvDb+v57ErUzKhSU2Mu3rsiimIvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL97YHnkJdklDaelsMmU9lrhkE9nMB8GA1UdIwQY
MBaAFEavbKM1NLhTC58hTsjqk90lvR/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZTgwYWYtMmQ2NC00Nzg0LTgxMTUt
YzVjZWZkOThmNjIxLzEvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84ZTgwYWYtMmQ2NC00Nzg0LTgxMTUtYzVjZWZkOThmNjIx
LzEvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGT1TkHJ
YOxZ4Uz0iF2++xPe5AkNiZGJYITwwC9R+6rWxwwE3YaiPbBfdMim6rcJJSLsA/17
srfgYUGErQ659JrbQsW8+YgS5RrkkjfWLjJC6I3L57ZiVevTtVpTBdKx7E486iAl
BoeQCPEQH7GKdh+oz0r4guIIb0hZXV5ch1YuTZ4tG3v6S4Qg2h9a858dmsIYlE3b
a+bgW96/WhRx2AfufCXMHyHFoaX76eBeeGHrue26Q87l0STHRtD1tvzJQp6b+BgU
95AFHj7EYNAK8kCVGIFAhH9Fr9j69h6uDOdhVXF2haPXR2M69I3guJnKryJxxK/e
ZHa+UZMRLH2UyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:36 2025 by rpki-client