Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File: snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier: MbuoL9ZCo6PaweHQFZutjRP5G42IDhG+0iEjg0YxzHc=
Subject key identifier: 93:52:8C:E7:43:32:F8:6A:7C:6F:FD:CC:14:C6:78:69:F8:6E:D9:B3
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer: /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial: 0197BA7D3D3D39B163C91A40EBD1C302B9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number: 100F
Signing time: Sun 29 Jun 2025 07:00:59 +0000
Manifest this update: Sun 29 Jun 2025 07:00:59 +0000
Manifest next update: Mon 30 Jun 2025 07:00:59 +0000
Files and hashes: 1: Q2ddpl6C3V4vYBl0I3228luG5oU.roa (hash: gKtH3NhXGtSIchcMlB2GM3eSMYDb2zE1qytNooqyMO0=)
2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: rlGozQIRZtZuaxaInmhwfFtGInV7ZCSgqW8rf0bWoDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:3d:3d:39:b1:63:c9:1a:40:eb:d1:c3:02:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Validity
Not Before: Jun 29 07:00:59 2025 GMT
Not After : Jun 30 07:00:59 2025 GMT
Subject: CN=93528ce74332f86a7c6ffdcc14c67869f86ed9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:d6:00:2a:6f:66:46:44:af:1f:8f:ce:90:
f7:90:8c:eb:1c:68:7c:93:18:d9:25:d1:0f:8b:a6:
7e:ef:ae:f9:33:8e:e5:fa:7a:c8:ef:72:94:05:3b:
aa:1d:d0:29:b5:dd:b6:01:01:4a:f7:79:32:e6:4c:
0a:67:05:c7:65:67:6f:35:9d:dd:95:10:85:f0:17:
4b:6b:8c:bb:0c:8e:c7:e9:5d:84:0d:0a:b3:c1:a8:
1b:d2:e4:9a:3c:f5:30:06:cf:9f:0a:6a:99:d5:98:
71:8f:16:1c:13:7d:c8:29:64:3e:df:c6:cf:bd:18:
70:80:81:f4:20:0d:ba:57:34:9a:8f:31:a3:d7:52:
c7:36:49:ed:ba:f6:a5:0c:fa:70:40:33:e1:02:26:
58:ae:d0:63:2f:b7:f9:96:39:17:33:28:fb:5f:e5:
8b:7f:f4:e9:99:2f:ff:af:2e:59:4a:5c:82:6a:11:
ce:7b:85:f7:69:f9:3a:a3:5f:e2:14:23:e1:dc:e2:
0a:73:50:c5:d4:5c:9e:fd:c7:cb:50:5c:42:41:50:
65:80:c1:52:40:84:75:f8:85:9f:78:ea:f2:71:d2:
7a:d3:b1:3b:8b:c0:98:dd:a9:25:7b:2b:69:a2:90:
01:fd:9f:c2:2c:99:eb:dd:a8:7c:15:39:2d:dd:80:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:52:8C:E7:43:32:F8:6A:7C:6F:FD:CC:14:C6:78:69:F8:6E:D9:B3
X509v3 Authority Key Identifier:
keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:13:f9:f8:02:4e:e6:3c:7e:8c:86:40:0c:42:46:d3:67:0b:
f5:ff:6f:8f:06:5b:02:ac:5b:2f:77:b2:12:23:74:3e:4e:f8:
ce:f2:23:ee:40:8b:93:fa:54:a5:e1:6f:3d:b3:d6:85:84:06:
43:86:bc:da:54:d1:c5:1b:8d:df:19:f1:45:83:26:e2:4b:f1:
f8:9c:31:ab:44:7b:7b:39:a6:26:07:ff:68:33:4b:76:b5:7d:
e0:46:31:a0:ae:8d:33:9e:79:1b:66:b4:d9:fc:de:14:b5:28:
ef:77:85:1c:fc:71:27:e8:63:42:16:67:26:dc:5f:c6:44:22:
47:d1:d8:67:ff:92:49:67:f4:94:f6:41:f9:7c:0a:40:08:bf:
93:69:fa:9c:61:72:85:36:e5:5a:8f:7b:7f:5b:51:dd:39:fd:
4d:8b:c5:3d:d6:b4:97:26:9c:a2:cd:05:cf:cf:82:3d:29:0f:
7a:36:41:84:75:81:1b:f2:f4:95:c0:4d:ab:8d:bc:74:d1:1d:
43:de:db:fd:b6:a9:66:9e:34:14:bb:8b:e4:bd:04:41:43:a7:
ef:fb:10:b6:7d:82:22:05:76:6b:ad:1b:3f:60:b1:75:ac:96:
a9:a9:09:35:7e:a4:8f:4e:c5:09:65:32:d9:77:5b:25:7b:64:
86:3f:7d:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fT09ObFjyRpA69HDArnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzhlZDhmOTc4MGYyOWRhZmEyMmY5ZmRmMDMzNzRkYTQ5
ODBlOTQwHhcNMjUwNjI5MDcwMDU5WhcNMjUwNjMwMDcwMDU5WjAzMTEwLwYDVQQD
Eyg5MzUyOGNlNzQzMzJmODZhN2M2ZmZkY2MxNGM2Nzg2OWY4NmVkOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxabWACpvZkZErx+PzpD3kIzrHGh8
kxjZJdEPi6Z+7675M47l+nrI73KUBTuqHdAptd22AQFK93ky5kwKZwXHZWdvNZ3d
lRCF8BdLa4y7DI7H6V2EDQqzwagb0uSaPPUwBs+fCmqZ1ZhxjxYcE33IKWQ+38bP
vRhwgIH0IA26VzSajzGj11LHNkntuvalDPpwQDPhAiZYrtBjL7f5ljkXMyj7X+WL
f/TpmS//ry5ZSlyCahHOe4X3afk6o1/iFCPh3OIKc1DF1Fye/cfLUFxCQVBlgMFS
QIR1+IWfeOrycdJ607E7i8CY3akleytpopAB/Z/CLJnr3ah8FTkt3YAC9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNSjOdDMvhqfG/9zBTGeGn4btmzMB8GA1UdIwQY
MBaAFLJ47Y+XgPKdr6Ivn98DN02kmA6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25qdGo1ZUE4cDJ2b2ktZjN3TTNUYVNZRHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xZTIzMTYtMWI1Yi00YmE1LTkzN2Qt
MDI4NjRjNTg1MTljLzEvc25qdGo1ZUE4cDJ2b2ktZjN3TTNUYVNZRHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xZTIzMTYtMWI1Yi00YmE1LTkzN2QtMDI4NjRjNTg1MTlj
LzEvc25qdGo1ZUE4cDJ2b2ktZjN3TTNUYVNZRHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBP5+AJO
5jx+jIZADEJG02cL9f9vjwZbAqxbL3eyEiN0Pk74zvIj7kCLk/pUpeFvPbPWhYQG
Q4a82lTRxRuN3xnxRYMm4kvx+Jwxq0R7ezmmJgf/aDNLdrV94EYxoK6NM555G2a0
2fzeFLUo73eFHPxxJ+hjQhZnJtxfxkQiR9HYZ/+SSWf0lPZB+XwKQAi/k2n6nGFy
hTblWo97f1tR3Tn9TYvFPda0lyacos0Fz8+CPSkPejZBhHWBG/L0lcBNq428dNEd
Q97b/bapZp40FLuL5L0EQUOn7/sQtn2CIgV2a60bP2CxdayWqakJNX6kj07FCWUy
2XdbJXtkhj991Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:33:08 2025 by rpki-client