Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: 99sHl8XcvvZarPNV1zofBAnAD68oUo2ZIZx7WRDNeWs=
Subject key identifier: 6F:D8:5D:A3:15:1F:58:A7:93:69:91:C1:76:12:04:1C:92:25:89:26
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 0197B6D72758CE2F5F6851396F7A6EB51699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:00:42 +0000
Manifest this update: Sat 28 Jun 2025 14:00:42 +0000
Manifest next update: Sun 29 Jun 2025 14:00:42 +0000
Files and hashes: 1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: x8EaOzI8Cl7B1Xd5Xi/5SNvqdsAle53UW62SrKNVNy8=)
2: IQwej1LnyY7ETYPMzr0MBaKMJYU.roa (hash: m2Od1UXry84TfojxLTlOoi+R13MMd4A7opflyOM6uR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:27:58:ce:2f:5f:68:51:39:6f:7a:6e:b5:16:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Jun 28 14:00:42 2025 GMT
Not After : Jun 29 14:00:42 2025 GMT
Subject: CN=6fd85da3151f58a7936991c17612041c92258926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:f2:8d:9a:4a:16:2e:22:71:c0:23:02:21:
91:71:26:9f:6a:e1:25:6b:c1:5c:69:8a:dc:c9:c8:
99:91:81:ce:e2:47:fd:27:9c:cc:aa:f9:ed:93:78:
29:e0:3b:d7:85:c6:e4:06:84:62:92:05:3f:6f:68:
a3:13:53:34:29:dc:a1:d8:30:ca:70:21:ea:76:d6:
c7:56:08:40:59:45:63:45:c6:da:85:ff:c7:29:8c:
52:2e:65:30:73:03:8c:f4:8a:e3:a1:cc:f8:4b:1e:
8c:8b:42:b7:4a:92:02:03:56:6a:7e:5e:85:5e:92:
24:b8:4d:4c:77:85:98:76:38:3f:a6:6b:e8:b9:ba:
d6:b9:e7:bd:77:6d:b3:be:1c:87:24:42:5b:49:21:
f6:8d:35:f5:cf:84:ea:ab:93:58:27:ac:83:d9:d8:
58:f9:8e:39:8c:83:62:d3:f3:3f:0b:6f:1d:89:d7:
e5:98:3e:82:91:75:ec:d1:ed:3f:4e:91:e5:be:a7:
2b:e3:8f:4e:f4:27:3a:b3:15:9f:8f:98:d0:ea:02:
82:0b:2c:79:7b:a5:da:3f:29:8b:27:c7:7d:e3:e5:
26:6e:0d:fa:00:b6:6e:d3:38:0f:86:0b:c4:d5:e0:
a5:00:a9:8a:41:62:59:70:79:9b:2c:ec:5d:f6:01:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D8:5D:A3:15:1F:58:A7:93:69:91:C1:76:12:04:1C:92:25:89:26
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7d:11:9e:ad:3c:b6:86:c7:bd:0d:40:36:e7:df:b4:d6:9d:
33:71:43:c1:15:2d:91:e4:0a:a3:df:33:09:e5:9d:f6:a6:c2:
be:af:e4:05:ae:99:bb:47:09:73:15:f0:d0:d7:67:80:3d:55:
a5:73:0a:5b:1e:b4:20:b5:67:7b:f1:f6:10:18:04:12:86:ed:
e1:1e:bf:7c:2f:ee:41:28:29:c0:ab:08:99:7d:12:b0:77:cb:
b2:79:f8:98:6d:10:c9:47:50:3e:2b:e5:fb:9d:40:2d:91:d5:
46:6e:a5:3f:8c:c1:e1:d1:d1:9f:b3:13:3c:cc:7b:16:37:49:
f6:14:f7:7d:22:25:bf:02:0e:a4:9d:15:bf:9f:2a:76:41:38:
93:03:ed:bd:40:68:42:3f:21:01:39:d9:7a:98:f7:66:1e:e2:
5e:2c:80:6a:22:4b:bf:73:32:91:99:2d:6a:2a:91:5b:4f:10:
7f:c4:d6:7a:5c:93:2b:6a:34:cd:ad:7d:c2:6b:27:2c:50:63:
1a:ad:61:dd:2b:a0:25:3d:b4:5f:33:cd:53:91:26:f4:15:33:
ff:9c:95:df:fc:ce:05:49:4c:6f:2e:37:2b:ba:7a:14:56:6e:
dc:85:a6:09:fb:f2:68:dd:c5:28:18:a0:fd:c5:bb:65:0d:95:
80:aa:e5:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21ydYzi9faFE5b3putRaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTM0ODJlMWQ2NmQ4N2Y1YjlhNWVlYjljOGFmZDZiNWVj
MjMyMjQwHhcNMjUwNjI4MTQwMDQyWhcNMjUwNjI5MTQwMDQyWjAzMTEwLwYDVQQD
Eyg2ZmQ4NWRhMzE1MWY1OGE3OTM2OTkxYzE3NjEyMDQxYzkyMjU4OTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPXyjZpKFi4iccAjAiGRcSafauEl
a8FcaYrcyciZkYHO4kf9J5zMqvntk3gp4DvXhcbkBoRikgU/b2ijE1M0Kdyh2DDK
cCHqdtbHVghAWUVjRcbahf/HKYxSLmUwcwOM9Irjocz4Sx6Mi0K3SpICA1Zqfl6F
XpIkuE1Md4WYdjg/pmvoubrWuee9d22zvhyHJEJbSSH2jTX1z4Tqq5NYJ6yD2dhY
+Y45jINi0/M/C28didflmD6CkXXs0e0/TpHlvqcr449O9Cc6sxWfj5jQ6gKCCyx5
e6XaPymLJ8d94+Umbg36ALZu0zgPhgvE1eClAKmKQWJZcHmbLOxd9gE1SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/YXaMVH1ink2mRwXYSBBySJYkmMB8GA1UdIwQY
MBaAFCOjSC4dZth/W5pe65yK/WtewjIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQt
MTM4NTg3MWE5MDlkLzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQtMTM4NTg3MWE5MDlk
LzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbn0Rnq08
tobHvQ1ANufftNadM3FDwRUtkeQKo98zCeWd9qbCvq/kBa6Zu0cJcxXw0NdngD1V
pXMKWx60ILVne/H2EBgEEobt4R6/fC/uQSgpwKsImX0SsHfLsnn4mG0QyUdQPivl
+51ALZHVRm6lP4zB4dHRn7MTPMx7FjdJ9hT3fSIlvwIOpJ0Vv58qdkE4kwPtvUBo
Qj8hATnZepj3Zh7iXiyAaiJLv3MykZktaiqRW08Qf8TWelyTK2o0za19wmsnLFBj
Gq1h3SugJT20XzPNU5Em9BUz/5yV3/zOBUlMby43K7p6FFZu3IWmCfvyaN3FKBig
/cW7ZQ2VgKrlAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:55 2025 by rpki-client