Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier: PyDJT4Pxe9xc6U7uuhU399u1qPV7aKr2oRW++5/rws4=
Subject key identifier: 7C:CE:E6:F3:01:5D:D3:A3:B5:02:B0:60:E0:1C:5E:92:93:61:3D:06
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 0197B77C37E67E6E96CC02DD1D77FC8A6CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number: 0BE9
Signing time: Sat 28 Jun 2025 17:01:00 +0000
Manifest this update: Sat 28 Jun 2025 17:01:00 +0000
Manifest next update: Sun 29 Jun 2025 17:01:00 +0000
Files and hashes: 1: 3GJal5BlkwMpqI0aUPXNpdisEd0.roa (hash: N1IIZPB15h65xX22ALfpxQG++svVYLQW4hUhjHJNwow=)
2: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: uvtNu5sxgSXeI2v4vZZ1MEPS5eFpLeDmxviEq9DaYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:37:e6:7e:6e:96:cc:02:dd:1d:77:fc:8a:6c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Jun 28 17:01:00 2025 GMT
Not After : Jun 29 17:01:00 2025 GMT
Subject: CN=7ccee6f3015dd3a3b502b060e01c5e9293613d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:87:db:9f:50:ae:a6:d9:6f:fd:c6:49:53:
5b:4f:fb:0f:e1:65:9c:3e:9b:f6:dd:3c:90:e9:74:
45:6b:bf:14:e5:6b:24:cf:a7:ed:53:0b:c8:c4:c5:
95:d8:65:44:ee:f6:3c:8a:33:48:b0:6f:4b:09:45:
70:cd:60:a7:b5:b5:9e:85:53:c8:fe:77:6f:72:db:
dc:6e:8b:07:a6:a7:e0:eb:20:16:bb:53:3c:f5:54:
3e:cf:bc:c4:5b:85:0f:ae:a2:69:f7:99:4f:0d:13:
c5:52:20:44:2a:e0:f9:b8:f8:9a:4c:4e:61:e5:a7:
00:9c:40:b0:3a:9b:d9:77:11:f4:d9:ca:9d:ef:42:
11:c6:c2:1f:16:12:ea:c2:20:ea:62:a5:0c:56:b3:
4e:b5:94:37:15:ae:dc:2f:c4:ea:4e:f6:76:26:2b:
47:0b:28:9d:9a:dc:0d:d7:29:77:79:9e:55:c0:be:
dd:94:64:81:65:10:00:36:01:20:14:d8:c5:2c:04:
e8:e5:dd:51:e0:18:e0:7a:d4:a5:e3:b6:18:5d:03:
9c:45:9c:94:6c:de:06:de:a1:a8:e2:9e:70:95:b7:
59:fe:0b:73:49:9a:8e:70:1d:36:f7:ba:27:45:a2:
b7:5e:4d:90:d5:5c:af:19:e3:74:71:89:a1:2d:bc:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CE:E6:F3:01:5D:D3:A3:B5:02:B0:60:E0:1C:5E:92:93:61:3D:06
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:78:63:b3:70:e3:1a:eb:89:a6:f6:0d:3f:57:b3:3f:ee:28:
6f:dc:af:cf:50:ed:d8:e5:d4:15:92:d0:13:cf:62:3c:e7:90:
41:9e:c6:39:1c:eb:1b:8c:3e:f5:a8:18:cb:9e:58:40:e5:f8:
11:7e:bf:73:a0:44:b3:17:34:67:71:58:e9:55:7e:87:a5:1c:
55:23:83:1b:5b:e4:f8:c4:d7:5d:33:f2:fa:09:46:a0:3a:a3:
73:16:23:54:da:7b:2f:2b:0a:28:b6:be:08:4d:c3:bf:ca:96:
29:09:04:9e:0c:04:6e:17:0c:3a:4a:c7:e4:15:a9:91:59:6f:
a9:d4:4c:69:b2:e5:ba:67:ca:6c:fc:69:f7:5f:cd:c4:5f:18:
a7:35:19:4b:b3:37:f8:20:5f:89:91:57:38:7b:b6:4e:8b:a4:
ae:a8:13:94:58:71:86:fa:60:6c:4f:71:79:04:33:23:00:29:
41:b9:ce:9e:03:4f:ae:d1:8a:ad:dc:45:6b:8a:af:c7:f9:e3:
2b:48:6a:e0:08:4d:be:78:db:0f:96:39:c4:89:7a:5f:11:f3:
89:60:4b:a6:17:68:e6:d3:61:10:7c:9e:63:9b:50:53:aa:d5:
0d:d0:2f:98:e5:a4:ff:45:9a:71:e4:0e:31:01:09:b6:79:f8:
8e:cb:4e:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDfmfm6WzALdHXf8imz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMmUyMmNjMTU4NTllZDRhMDc4NGJmZDA4NTg0YjNjOGZi
MjlmOWEwHhcNMjUwNjI4MTcwMTAwWhcNMjUwNjI5MTcwMTAwWjAzMTEwLwYDVQQD
Eyg3Y2NlZTZmMzAxNWRkM2EzYjUwMmIwNjBlMDFjNWU5MjkzNjEzZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDyH259QrqbZb/3GSVNbT/sP4WWc
Ppv23TyQ6XRFa78U5Wskz6ftUwvIxMWV2GVE7vY8ijNIsG9LCUVwzWCntbWehVPI
/ndvctvcbosHpqfg6yAWu1M89VQ+z7zEW4UPrqJp95lPDRPFUiBEKuD5uPiaTE5h
5acAnECwOpvZdxH02cqd70IRxsIfFhLqwiDqYqUMVrNOtZQ3Fa7cL8TqTvZ2JitH
CyidmtwN1yl3eZ5VwL7dlGSBZRAANgEgFNjFLATo5d1R4BjgetSl47YYXQOcRZyU
bN4G3qGo4p5wlbdZ/gtzSZqOcB0297onRaK3Xk2Q1VyvGeN0cYmhLbwvvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzO5vMBXdOjtQKwYOAcXpKTYT0GMB8GA1UdIwQY
MBaAFP4uIswVhZ7UoHhL/QhYSzyPsp+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQt
ODA2MGM1MDNkODZlLzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQtODA2MGM1MDNkODZl
LzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnhjs3Dj
GuuJpvYNP1ezP+4ob9yvz1Dt2OXUFZLQE89iPOeQQZ7GORzrG4w+9agYy55YQOX4
EX6/c6BEsxc0Z3FY6VV+h6UcVSODG1vk+MTXXTPy+glGoDqjcxYjVNp7LysKKLa+
CE3Dv8qWKQkEngwEbhcMOkrH5BWpkVlvqdRMabLlumfKbPxp91/NxF8YpzUZS7M3
+CBfiZFXOHu2ToukrqgTlFhxhvpgbE9xeQQzIwApQbnOngNPrtGKrdxFa4qvx/nj
K0hq4AhNvnjbD5Y5xIl6XxHziWBLphdo5tNhEHyeY5tQU6rVDdAvmOWk/0WaceQO
MQEJtnn4jstOLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:16 2025 by rpki-client