Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
File: RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json)
Hash identifier: e/K0+p0AOaUDuEAV3JQBGOFyWV9jm9TYTqS0bBeYyxI=
Subject key identifier: 4A:A2:75:00:51:C5:EE:B3:98:48:FA:FB:47:F1:DE:7F:3E:10:84:33
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial: 0197B9D934175F139CB851AECC15170637E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 04:01:48 +0000
Manifest this update: Sun 29 Jun 2025 04:01:48 +0000
Manifest next update: Mon 30 Jun 2025 04:01:48 +0000
Files and hashes: 1: 5S9DzB-Zkm3msjgPAbdmsNofi_E.roa (hash: JVrfzyFqi2bm7cADIRU0rzxEk+g6lOHGxW3e0YIX/NA=)
2: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: Sm5/4XX7YUGU/LQfI4qcAs244uQmB1z5VhMSVhrgG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:34:17:5f:13:9c:b8:51:ae:cc:15:17:06:37:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
Validity
Not Before: Jun 29 04:01:48 2025 GMT
Not After : Jun 30 04:01:48 2025 GMT
Subject: CN=4aa2750051c5eeb39848fafb47f1de7f3e108433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:ed:c0:ae:38:68:d8:05:f0:e1:46:95:3e:
ce:47:ee:2b:24:67:c8:ab:c4:02:67:ac:9f:a8:95:
90:9b:01:20:a4:11:78:87:89:0f:a8:35:39:b1:44:
ad:c3:3b:03:74:47:51:f5:f9:78:4e:36:9b:27:57:
67:61:50:be:b5:29:3f:9a:ad:1e:27:65:78:3f:bb:
c3:cd:8c:be:d8:56:e6:fa:cf:c0:e2:1f:0d:f8:cc:
06:0b:8c:0c:a8:fe:1c:48:27:6b:98:66:a0:94:78:
22:b5:b0:0c:a1:60:26:84:3d:c6:40:0c:a2:c0:f8:
f4:c7:e2:63:e7:67:95:76:46:5e:b0:63:cb:5a:9e:
a5:d6:d6:88:7a:e7:32:cd:0c:c0:cf:f2:4b:b4:cd:
fa:90:61:e1:fb:fb:57:60:6a:1d:f6:1e:8f:42:c1:
c3:8a:9b:04:8f:54:0b:fc:76:09:84:8f:e5:ff:10:
80:a6:93:f1:47:75:33:58:be:70:19:60:d8:ee:32:
73:9f:c4:3a:ea:f5:e0:17:eb:d5:de:bc:db:05:60:
e8:5d:85:f1:e8:b2:8c:67:b2:7b:28:7b:d9:eb:38:
26:0a:b9:7a:31:cc:81:ae:dc:94:54:36:0b:6f:5e:
6f:4c:59:ae:69:e6:1c:35:f0:d3:55:a2:de:b2:8b:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A2:75:00:51:C5:EE:B3:98:48:FA:FB:47:F1:DE:7F:3E:10:84:33
X509v3 Authority Key Identifier:
keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d9:f3:8e:d5:32:f3:b1:29:ac:43:c8:c5:e3:c2:8b:19:67:
4d:70:c4:7b:c3:b3:26:c2:9e:57:74:8e:40:76:ab:4c:63:76:
fc:b5:47:e1:9d:52:b6:0d:7b:6f:fe:f4:c1:00:7d:ad:2b:01:
e1:e5:eb:80:2a:2c:ae:18:07:bd:45:f0:a9:b0:93:02:01:d2:
0f:67:04:36:b7:cd:bf:06:80:6f:d3:45:a2:dc:f9:8c:dc:88:
e7:24:02:db:6f:1f:b3:d4:0b:05:62:b0:00:ce:12:51:d7:83:
cc:23:28:96:d6:62:67:5a:f5:f7:39:e8:49:e3:64:20:f9:04:
e0:fd:bc:c5:6f:d6:57:53:29:5d:12:2f:13:ec:80:d0:c9:c9:
b5:8c:ad:45:3a:88:2a:a8:ad:b7:80:32:a8:d5:d2:6d:03:31:
9f:8b:cc:02:5d:02:16:4f:b4:5b:e8:83:78:3a:6d:79:82:d7:
9e:29:6e:71:aa:5d:65:6e:5a:b8:c2:f6:ab:14:ba:0b:a4:73:
ff:eb:c9:03:fc:16:a1:29:95:bb:e2:6f:dc:f1:0b:a5:89:96:
b6:58:d5:b4:37:73:50:2f:8f:79:79:07:e1:4e:6b:6f:ec:2a:
8e:29:0f:52:00:4e:fc:5c:f3:fb:42:4c:29:d1:ec:ee:b8:c6:
4a:90:cd:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52TQXXxOcuFGuzBUXBjfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTM1MDgxYzc3YTg3NDVlN2I2MmI5M2I4MmRhMjk2MjM3
OWIyZTIwHhcNMjUwNjI5MDQwMTQ4WhcNMjUwNjMwMDQwMTQ4WjAzMTEwLwYDVQQD
Eyg0YWEyNzUwMDUxYzVlZWIzOTg0OGZhZmI0N2YxZGU3ZjNlMTA4NDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJLtwK44aNgF8OFGlT7OR+4rJGfI
q8QCZ6yfqJWQmwEgpBF4h4kPqDU5sUStwzsDdEdR9fl4TjabJ1dnYVC+tSk/mq0e
J2V4P7vDzYy+2Fbm+s/A4h8N+MwGC4wMqP4cSCdrmGaglHgitbAMoWAmhD3GQAyi
wPj0x+Jj52eVdkZesGPLWp6l1taIeucyzQzAz/JLtM36kGHh+/tXYGod9h6PQsHD
ipsEj1QL/HYJhI/l/xCAppPxR3UzWL5wGWDY7jJzn8Q66vXgF+vV3rzbBWDoXYXx
6LKMZ7J7KHvZ6zgmCrl6McyBrtyUVDYLb15vTFmuaeYcNfDTVaLesov6swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqidQBRxe6zmEj6+0fx3n8+EIQzMB8GA1UdIwQY
MBaAFEaTUIHHeodF57Yrk7gtopYjebLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQt
YTM1YzI3ZDk1MTg2LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQtYTM1YzI3ZDk1MTg2
LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9nzjtUy
87EprEPIxePCixlnTXDEe8OzJsKeV3SOQHarTGN2/LVH4Z1Stg17b/70wQB9rSsB
4eXrgCosrhgHvUXwqbCTAgHSD2cENrfNvwaAb9NFotz5jNyI5yQC228fs9QLBWKw
AM4SUdeDzCMoltZiZ1r19znoSeNkIPkE4P28xW/WV1MpXRIvE+yA0MnJtYytRTqI
Kqitt4AyqNXSbQMxn4vMAl0CFk+0W+iDeDpteYLXnilucapdZW5auML2qxS6C6Rz
/+vJA/wWoSmVu+Jv3PELpYmWtljVtDdzUC+PeXkH4U5rb+wqjikPUgBO/Fzz+0JM
KdHs7rjGSpDNxA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:56:27 2025 by rpki-client