Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
File: rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json)
Hash identifier: E+9JQEi35/Ugkl4721huI0MNRslTHcOUb247nTrIP0o=
Subject key identifier: 4C:FF:AB:E3:EB:FA:88:43:87:91:05:D6:EC:82:6C:AA:4D:9F:79:E5
Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
Certificate issuer: /CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Certificate serial: 0197C3B7238F33FFDC3284EEB8A28A4F8D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
Manifest number: 15B9
Signing time: Tue 01 Jul 2025 02:00:48 +0000
Manifest this update: Tue 01 Jul 2025 02:00:48 +0000
Manifest next update: Wed 02 Jul 2025 02:00:48 +0000
Files and hashes: 1: 3i8SziI4yOANwHuCoVeJUFIkDmY.roa (hash: ApwThwemagVAYGDz/BhbEY+AhYokJz7tAT0f3Qt4Pto=)
2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: CzzJ9IjlXG7W9fyOjd+74y2C3dl0dzB3mU9F4H+JXgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:23:8f:33:ff:dc:32:84:ee:b8:a2:8a:4f:8d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Validity
Not Before: Jul 1 02:00:48 2025 GMT
Not After : Jul 2 02:00:48 2025 GMT
Subject: CN=4cffabe3ebfa8843879105d6ec826caa4d9f79e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:04:5e:2f:81:70:5a:c5:f5:8b:74:c4:fc:
5f:5c:55:bf:43:89:6d:28:6f:e1:f6:a2:ca:4a:bf:
48:96:bb:be:d3:d0:7e:c4:9e:17:93:9d:da:19:36:
77:e5:02:66:5d:d6:0f:2f:e6:2c:e4:d6:cf:5d:0d:
7d:93:c6:f5:4d:63:7b:87:c2:4f:52:66:44:4c:47:
e1:47:c6:f8:50:d8:c8:2f:a3:03:0c:28:ab:cd:2f:
c0:3a:07:3d:76:70:9f:b6:21:38:da:53:a1:cd:12:
00:55:08:01:c2:38:54:99:f3:de:38:38:f9:81:6c:
2d:1d:45:0c:c6:a7:4c:df:38:b0:a8:ba:e6:9c:96:
82:94:ac:1d:3f:32:98:41:ac:da:67:c8:c8:07:89:
ed:b2:cf:2a:ac:bf:13:3b:10:99:a1:e7:59:f8:38:
01:38:9c:cc:59:1f:f8:be:c1:c7:9a:4c:d7:cb:38:
29:a9:ee:ac:5f:4d:2a:c2:5b:38:d8:b6:9c:de:38:
40:99:fb:2b:95:c2:06:70:08:b0:ca:5f:ff:50:01:
85:27:c6:2f:d1:28:39:41:c0:e7:50:7d:4d:60:31:
88:20:21:12:68:b0:02:8a:04:f2:97:93:6e:a3:65:
b2:0d:5f:5e:2e:f4:0d:c9:45:f3:b4:e2:5b:b9:38:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FF:AB:E3:EB:FA:88:43:87:91:05:D6:EC:82:6C:AA:4D:9F:79:E5
X509v3 Authority Key Identifier:
keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:b5:e3:26:a5:cd:cf:68:f6:97:f4:05:3b:1b:21:73:8b:2f:
24:74:4b:ae:ac:14:d9:27:2d:0c:bf:28:26:f8:47:39:b1:49:
b4:a1:b4:ae:76:85:6a:bd:32:76:b4:6e:31:67:f1:3a:6e:c6:
07:24:f3:ba:09:1c:76:65:c5:52:07:02:21:26:18:cf:b0:35:
59:d9:05:7e:8a:9e:a7:e1:2e:cb:c0:a0:82:fd:de:81:64:03:
85:86:61:4c:67:ba:7d:95:81:2b:4c:83:30:32:39:bc:a9:7e:
00:04:78:19:3e:56:e1:e8:c8:0c:80:45:43:4b:f6:10:fa:ad:
a0:1d:0a:e7:2f:1a:16:2c:38:0c:f7:cc:57:df:08:d8:b5:11:
fa:ed:de:4d:89:97:3c:77:00:f8:d9:9c:b4:70:c3:9b:5c:39:
16:2e:af:80:8d:04:0b:a4:b3:ba:8b:9e:76:4e:2b:57:ca:f7:
4d:08:8c:08:e7:78:46:5e:6d:2d:1b:74:29:51:64:2d:4b:a6:
54:ba:14:ea:b7:66:84:64:01:2d:a8:17:77:ab:22:d4:4d:5d:
bd:e1:dd:08:7a:06:9f:ea:6e:41:47:f1:35:37:ef:83:56:de:
68:7a:d9:b1:99:7f:ce:65:7d:f7:ce:a8:bc:95:ae:5b:71:a4:
9b:d0:d2:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDtyOPM//cMoTuuKKKT41+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZmVhY2VhNWQ4MTJmMzAzMGM1NTdlNDhjNTM3NTg3NTNm
YjZjNmIwHhcNMjUwNzAxMDIwMDQ4WhcNMjUwNzAyMDIwMDQ4WjAzMTEwLwYDVQQD
Eyg0Y2ZmYWJlM2ViZmE4ODQzODc5MTA1ZDZlYzgyNmNhYTRkOWY3OWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA214EXi+BcFrF9Yt0xPxfXFW/Q4lt
KG/h9qLKSr9Ilru+09B+xJ4Xk53aGTZ35QJmXdYPL+Ys5NbPXQ19k8b1TWN7h8JP
UmZETEfhR8b4UNjIL6MDDCirzS/AOgc9dnCftiE42lOhzRIAVQgBwjhUmfPeODj5
gWwtHUUMxqdM3ziwqLrmnJaClKwdPzKYQazaZ8jIB4ntss8qrL8TOxCZoedZ+DgB
OJzMWR/4vsHHmkzXyzgpqe6sX00qwls42Lac3jhAmfsrlcIGcAiwyl//UAGFJ8Yv
0Sg5QcDnUH1NYDGIICESaLACigTyl5Nuo2WyDV9eLvQNyUXztOJbuThVxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz/q+Pr+ohDh5EF1uyCbKpNn3nlMB8GA1UdIwQY
MBaAFKz+rOpdgS8wMMVX5IxTdYdT+2xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzI3YjUtNWVjYi00ODVmLWI3ZDkt
YTJmZDI4ODQwYTAzLzEvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yNzI3YjUtNWVjYi00ODVmLWI3ZDktYTJmZDI4ODQwYTAz
LzEvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA47XjJqXN
z2j2l/QFOxshc4svJHRLrqwU2SctDL8oJvhHObFJtKG0rnaFar0ydrRuMWfxOm7G
ByTzugkcdmXFUgcCISYYz7A1WdkFfoqep+Euy8Cggv3egWQDhYZhTGe6fZWBK0yD
MDI5vKl+AAR4GT5W4ejIDIBFQ0v2EPqtoB0K5y8aFiw4DPfMV98I2LUR+u3eTYmX
PHcA+NmctHDDm1w5Fi6vgI0EC6Szuouedk4rV8r3TQiMCOd4Rl5tLRt0KVFkLUum
VLoU6rdmhGQBLagXd6si1E1dveHdCHoGn+puQUfxNTfvg1beaHrZsZl/zmV9986o
vJWuW3Gkm9DSnA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:20:10 2025 by rpki-client