Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File: exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier: NINzg2+9KDgyN3rLu0vCPh6l3FBqe1vU7jWyvfeiV3Y=
Subject key identifier: 7E:46:D7:31:94:B9:BB:E7:67:0F:C5:69:6C:F3:3B:28:35:B3:84:A8
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 0197B7B354FA4E38B190E5A997B670BD3A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: 4RKif-sVDnQcBzYwPxTkoab85KM.roa (hash: SrOlgyMeJ89vYHgpHfX8GmpEUx/qSwc8CkZHX0V14Kg=)
2: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: L33yOhgRYP1xrExEk2utE0LhCXfj8LwpVt4SBakAmTQ=)
3: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (hash: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:54:fa:4e:38:b1:90:e5:a9:97:b6:70:bd:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=7e46d73194b9bbe7670fc5696cf33b2835b384a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:80:1d:fe:d2:48:8b:b5:b9:7b:43:2e:f7:
f8:cd:a4:4a:6e:2d:0d:8d:f3:ad:06:60:f5:9a:ff:
45:15:09:4e:b8:b7:e9:71:07:a6:5a:b1:f0:d8:36:
72:fe:02:c7:81:1f:e0:b3:70:a4:1c:59:5c:15:7d:
01:8b:af:38:2e:f2:bc:9d:2f:f0:a4:e2:de:5f:a3:
95:83:ef:77:c0:78:c2:1e:4b:59:e6:a0:a4:5d:5e:
2c:70:b4:d0:6e:f8:58:e0:d4:9f:e9:3c:f5:44:43:
8a:8a:71:ca:2a:a7:12:b9:6a:cb:ce:09:0a:6a:6a:
91:2d:68:3b:aa:d7:8f:a9:40:cb:4e:39:fb:c2:bf:
78:71:2a:85:6f:4c:ef:32:e7:39:e8:30:2f:86:26:
47:a3:7e:88:ee:13:6e:0b:16:58:67:1a:03:f8:ab:
a3:c5:f0:95:69:24:d4:87:5e:7e:8f:09:4f:e6:69:
c0:61:66:9b:04:5b:6d:8a:56:a1:48:14:27:6f:bd:
21:3f:5e:4c:8b:47:59:5a:36:40:d3:1e:ab:5d:ee:
6f:e1:bc:ef:d3:3b:db:9b:52:38:98:81:9a:04:8b:
c6:4a:ca:52:d0:7c:b0:81:97:29:ac:09:56:8e:52:
a1:93:2c:3c:60:ad:aa:1c:8c:e0:cc:de:98:da:ab:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:46:D7:31:94:B9:BB:E7:67:0F:C5:69:6C:F3:3B:28:35:B3:84:A8
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4c:13:e0:d6:11:72:43:d7:4d:d2:da:c6:e0:eb:85:f6:d3:
ae:4e:f3:8d:2c:f9:f9:7a:0f:b8:5f:fa:03:8a:d4:01:1a:8e:
f9:b2:4e:f7:0c:b5:2d:fd:2e:d0:9d:69:40:f6:f5:03:91:73:
1e:32:a1:24:86:d1:17:5f:85:ce:f1:e1:c5:0a:39:0b:17:0c:
ba:f3:98:f9:64:f7:5c:ef:e5:2f:28:04:3f:9f:3a:3e:80:de:
c6:55:67:21:fc:ec:56:4c:42:2d:90:5f:47:6e:d1:6c:2c:16:
73:df:fa:f5:1d:95:1a:9d:e4:06:24:33:93:42:a4:69:eb:38:
75:ea:fa:8b:f2:2f:0b:8f:4d:ce:d2:21:e4:2b:08:e3:63:61:
5a:1e:c4:00:19:b9:b6:db:f7:05:2f:fa:2a:3f:d8:61:71:20:
59:3f:f9:3c:e8:f0:e2:87:9e:a6:59:7c:7a:19:2c:0d:98:10:
43:1e:e6:75:67:c3:da:25:d2:14:30:ba:8b:c5:9b:47:ba:ec:
0a:10:84:fd:3a:60:9a:63:1e:52:0f:41:80:66:c9:6c:bf:26:
0d:ec:3a:2f:2b:b8:ca:58:58:ed:90:98:4c:5c:3c:b9:e3:65:
f2:24:6b:e7:43:5d:7f:e7:e7:b4:43:10:ec:ab:de:7f:6b:93:
cb:37:96:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1T6TjixkOWpl7ZwvTogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMTQ4ZGI0MmY5MGU5NjQ0N2JkN2Y2M2VkZDhhN2NjYmVl
YWE4NDIwHhcNMjUwNjI4MTgwMTEyWhcNMjUwNjI5MTgwMTEyWjAzMTEwLwYDVQQD
Eyg3ZTQ2ZDczMTk0YjliYmU3NjcwZmM1Njk2Y2YzM2IyODM1YjM4NGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO+AHf7SSIu1uXtDLvf4zaRKbi0N
jfOtBmD1mv9FFQlOuLfpcQemWrHw2DZy/gLHgR/gs3CkHFlcFX0Bi684LvK8nS/w
pOLeX6OVg+93wHjCHktZ5qCkXV4scLTQbvhY4NSf6Tz1REOKinHKKqcSuWrLzgkK
amqRLWg7qtePqUDLTjn7wr94cSqFb0zvMuc56DAvhiZHo36I7hNuCxZYZxoD+Kuj
xfCVaSTUh15+jwlP5mnAYWabBFttilahSBQnb70hP15Mi0dZWjZA0x6rXe5v4bzv
0zvbm1I4mIGaBIvGSspS0HywgZcprAlWjlKhkyw8YK2qHIzgzN6Y2qv7vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5G1zGUubvnZw/FaWzzOyg1s4SoMB8GA1UdIwQY
MBaAFHsUjbQvkOlkR71/Y+3Yp8y+6qhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQt
ODZkNmMxMzA1MzU3LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQtODZkNmMxMzA1MzU3
LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUwT4NYR
ckPXTdLaxuDrhfbTrk7zjSz5+XoPuF/6A4rUARqO+bJO9wy1Lf0u0J1pQPb1A5Fz
HjKhJIbRF1+FzvHhxQo5CxcMuvOY+WT3XO/lLygEP586PoDexlVnIfzsVkxCLZBf
R27RbCwWc9/69R2VGp3kBiQzk0Kkaes4der6i/IvC49NztIh5CsI42NhWh7EABm5
ttv3BS/6Kj/YYXEgWT/5POjw4oeepll8ehksDZgQQx7mdWfD2iXSFDC6i8WbR7rs
ChCE/TpgmmMeUg9BgGbJbL8mDew6Lyu4ylhY7ZCYTFw8ueNl8iRr50Ndf+fntEMQ
7Kvef2uTyzeWUw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:22 2025 by rpki-client