Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
File: 6SnD2lr0FZyTY3duwz3FuscKMk0.mft (raw, json)
Hash identifier: 0RlRamlN3LY8yhQw1d02nmb39BfR2fd5fvw/coZT0QA=
Subject key identifier: C2:E2:23:13:F0:DC:A3:A9:19:57:64:B1:7C:78:CB:8C:44:DC:17:CD
Authority key identifier: E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
Certificate issuer: /CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Certificate serial: 0197B6D72F75993BE59C0A5A70DA5D711CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
Manifest number: 0256
Signing time: Sat 28 Jun 2025 14:00:44 +0000
Manifest this update: Sat 28 Jun 2025 14:00:44 +0000
Manifest next update: Sun 29 Jun 2025 14:00:44 +0000
Files and hashes: 1: 6SnD2lr0FZyTY3duwz3FuscKMk0.crl (hash: WQnKYF/N64jxPw7YnQIhyp2W8ivHLlx1dJ0uSwZUlzY=)
2: h7PFRK9JVEjEeYKLwrOpI4thEoU.roa (hash: I2CraLnGlKelMJHEzdxSGPPTjEK/b4QFtKA7mGsY/DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2f:75:99:3b:e5:9c:0a:5a:70:da:5d:71:1c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Validity
Not Before: Jun 28 14:00:44 2025 GMT
Not After : Jun 29 14:00:44 2025 GMT
Subject: CN=c2e22313f0dca3a9195764b17c78cb8c44dc17cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1a:76:19:a3:77:0f:60:a3:ee:b8:8a:7e:90:
20:8a:09:5f:da:dd:e3:37:1b:99:81:8f:60:2d:33:
7d:92:3c:1a:fe:5b:66:83:b1:e4:c5:d0:3c:b5:af:
a4:33:c7:6f:19:45:a3:ec:78:39:8b:23:91:1c:72:
f8:8c:ff:04:14:3d:7a:06:57:73:ee:a7:63:ba:85:
77:3d:99:8b:b2:7b:72:4d:4e:ce:e7:05:4d:87:dd:
83:f0:63:ac:04:1f:0b:3f:2d:db:93:51:72:b3:85:
0c:48:60:7c:28:e9:dd:f6:f1:00:e8:13:13:27:da:
2a:19:47:94:e2:00:87:cc:d8:16:e9:2c:e8:30:eb:
b1:4b:5c:53:3b:20:74:43:e7:8c:cf:53:1a:e0:8e:
98:ff:38:60:8d:1a:4d:cc:2f:eb:12:b1:3e:39:1c:
90:5d:af:1e:74:2a:16:1b:73:7c:d6:45:d8:44:16:
d0:ef:b3:fc:34:26:82:e0:2b:32:f4:57:d2:3c:7d:
6a:91:f2:6b:62:ce:b2:88:33:df:37:ef:7a:67:6e:
de:41:ed:fe:44:a5:4a:2c:ea:bd:fa:e0:4f:8c:ee:
21:24:aa:4c:60:ae:a4:5a:6f:5c:45:ed:33:df:61:
7c:8d:43:db:4f:29:b5:ef:d2:c9:2a:c3:a1:bc:87:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E2:23:13:F0:DC:A3:A9:19:57:64:B1:7C:78:CB:8C:44:DC:17:CD
X509v3 Authority Key Identifier:
keyid:E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:30:f9:07:39:c3:bd:41:68:07:4b:6b:ce:28:ed:04:2b:84:
3f:0b:99:64:98:fd:32:5f:a3:a4:c2:0b:62:48:9e:86:1b:b0:
b8:94:6b:02:bb:0f:55:1a:03:1c:7f:ee:b8:23:d6:a9:a0:17:
b5:f7:fc:53:d6:10:95:53:42:f9:fd:0e:b6:ca:b3:de:57:2e:
52:71:71:57:a0:22:63:24:1a:b3:4f:59:a9:ff:2a:62:a2:26:
63:c1:04:64:d3:ad:59:0b:4a:c8:18:42:4a:d3:d3:09:39:db:
61:eb:da:cf:ec:ed:ca:62:16:70:1c:38:fb:e0:94:d7:c1:8d:
49:1f:71:8c:a3:76:35:93:bc:56:ea:a4:14:b3:e2:50:4d:f7:
ab:f9:e4:a0:04:71:7e:db:e3:0a:e0:5b:b3:71:67:ae:41:df:
a7:72:f2:a8:7a:3b:9f:1c:10:27:f7:74:f4:90:ee:83:40:36:
8f:7d:4a:59:85:dc:7f:12:76:9e:a1:2e:30:bf:62:07:89:92:
31:43:14:4c:90:55:6c:45:e8:1d:ff:f4:3a:0e:39:50:37:40:
0d:9d:56:75:bd:c8:9e:ca:f0:01:ac:c6:18:e9:3d:50:e3:13:
e2:8a:0c:4c:33:41:96:ea:e4:93:00:92:23:0d:4c:91:26:c8:
f1:7c:0a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21y91mTvlnApacNpdcRy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MjljM2RhNWFmNDE1OWM5MzYzNzc2ZWMzM2RjNWJhYzcw
YTMyNGQwHhcNMjUwNjI4MTQwMDQ0WhcNMjUwNjI5MTQwMDQ0WjAzMTEwLwYDVQQD
EyhjMmUyMjMxM2YwZGNhM2E5MTk1NzY0YjE3Yzc4Y2I4YzQ0ZGMxN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hp2GaN3D2Cj7riKfpAgiglf2t3j
NxuZgY9gLTN9kjwa/ltmg7HkxdA8ta+kM8dvGUWj7Hg5iyORHHL4jP8EFD16Bldz
7qdjuoV3PZmLsntyTU7O5wVNh92D8GOsBB8LPy3bk1Fys4UMSGB8KOnd9vEA6BMT
J9oqGUeU4gCHzNgW6SzoMOuxS1xTOyB0Q+eMz1Ma4I6Y/zhgjRpNzC/rErE+ORyQ
Xa8edCoWG3N81kXYRBbQ77P8NCaC4Csy9FfSPH1qkfJrYs6yiDPfN+96Z27eQe3+
RKVKLOq9+uBPjO4hJKpMYK6kWm9cRe0z32F8jUPbTym179LJKsOhvIcoRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLiIxPw3KOpGVdksXx4y4xE3BfNMB8GA1UdIwQY
MBaAFOkpw9pa9BWck2N3bsM9xbrHCjJNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlNuRDJscjBGWnlUWTNkdXd6M0Z1c2NLTWswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84MzhhNzgtN2E3MC00NDhlLThlNDMt
M2MzYmUyYzI5Zjc5LzEvNlNuRDJscjBGWnlUWTNkdXd6M0Z1c2NLTWswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC84MzhhNzgtN2E3MC00NDhlLThlNDMtM2MzYmUyYzI5Zjc5
LzEvNlNuRDJscjBGWnlUWTNkdXd6M0Z1c2NLTWswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDD5BznD
vUFoB0trzijtBCuEPwuZZJj9Ml+jpMILYkiehhuwuJRrArsPVRoDHH/uuCPWqaAX
tff8U9YQlVNC+f0Otsqz3lcuUnFxV6AiYyQas09Zqf8qYqImY8EEZNOtWQtKyBhC
StPTCTnbYevaz+ztymIWcBw4++CU18GNSR9xjKN2NZO8VuqkFLPiUE33q/nkoARx
ftvjCuBbs3FnrkHfp3LyqHo7nxwQJ/d09JDug0A2j31KWYXcfxJ2nqEuML9iB4mS
MUMUTJBVbEXoHf/0Og45UDdADZ1Wdb3InsrwAazGGOk9UOMT4ooMTDNBlurkkwCS
Iw1MkSbI8XwK9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:23 2025 by rpki-client