Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File: RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier: pQxzUYP0OcIxmQmlq7wk6DZWe59AjcsLfRxrA07tx1g=
Subject key identifier: 9E:88:7E:A2:E4:73:3D:11:4E:85:47:29:68:E1:32:C7:3B:0B:D2:B8
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 0197B77C4DB3AD45D90A799DED3B7EC26544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:06 +0000
Manifest this update: Sat 28 Jun 2025 17:01:06 +0000
Manifest next update: Sun 29 Jun 2025 17:01:06 +0000
Files and hashes: 1: CgYapJdE3lATpkmQavkm2MlhTAs.roa (hash: leTUYkK/UbPoz5ypT99weLoqPEKtLynpZc0EJfzHDjs=)
2: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: 8zgek7pTAUTMKsFWeagw9HAHv5PMDdFCutj30+BhQI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4d:b3:ad:45:d9:0a:79:9d:ed:3b:7e:c2:65:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: Jun 28 17:01:06 2025 GMT
Not After : Jun 29 17:01:06 2025 GMT
Subject: CN=9e887ea2e4733d114e85472968e132c73b0bd2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:c0:16:3b:e4:6e:91:19:22:87:3e:20:bb:
90:4e:42:27:26:91:07:d3:c5:84:8a:82:f5:2d:8a:
8d:9e:dd:ca:77:54:67:5d:c5:1e:c3:6f:bb:12:42:
bb:01:63:e0:e5:65:a0:4c:c3:32:c7:d1:0b:42:aa:
98:f3:fe:5a:4c:ca:e0:d9:f5:a2:0f:80:a4:e9:d5:
c1:c7:32:56:b9:6f:1e:de:1f:f3:ee:3e:87:3a:ce:
3c:c5:ec:62:04:c5:32:20:85:cf:b0:3d:65:99:8d:
5c:40:51:42:e9:e6:74:19:46:aa:02:10:2d:d6:16:
b9:24:32:d6:7f:82:a6:3c:77:42:c5:0d:ef:06:f3:
58:ac:66:df:f7:d2:00:33:2d:4f:b9:05:b9:06:74:
3d:6b:28:14:f3:a9:6e:73:60:05:46:65:21:63:22:
8e:13:b7:08:ad:d6:15:c4:25:a9:9c:68:bc:03:96:
e3:b8:2e:2e:79:14:1d:b3:b0:40:ca:cf:ca:cd:cc:
25:eb:3e:ec:a4:03:13:ba:4f:43:c5:81:6d:54:3d:
b2:86:40:40:1b:e4:69:55:01:9c:95:b0:1c:d3:f3:
88:db:67:5b:2a:ab:2d:46:37:b9:58:9b:83:96:76:
62:ca:8f:b6:7a:dd:27:08:fe:1e:70:d2:ef:84:c0:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:88:7E:A2:E4:73:3D:11:4E:85:47:29:68:E1:32:C7:3B:0B:D2:B8
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:84:22:f2:de:39:14:8a:5d:3c:aa:7c:9e:6b:8a:aa:00:9a:
b8:29:e9:e4:fa:20:69:cb:46:ef:4b:e8:47:e9:09:27:8a:80:
28:93:44:5f:07:96:67:d4:3d:97:17:b6:2c:54:6b:2a:29:0d:
39:91:f3:c7:1d:95:c6:44:a3:1c:23:9f:5a:bf:a6:ae:32:9a:
96:77:d5:eb:7f:f6:f8:c9:dc:0a:23:27:93:6c:34:5e:74:43:
82:f3:dc:4a:3d:8d:05:0f:04:3f:f4:74:6a:d2:56:0e:03:f1:
56:d7:6e:8c:ab:50:5d:63:a8:cf:cb:1d:02:1a:dd:bf:d4:92:
cd:23:76:3d:87:2a:d8:0e:fd:dc:b0:cb:3d:73:ac:4e:b6:9a:
2a:16:01:75:31:c2:ca:8b:fe:bc:d5:9b:1a:f6:1a:f4:2c:43:
69:b6:f5:58:b4:9c:26:24:95:0d:a1:de:7a:22:de:22:c2:a1:
59:c0:03:b8:1a:82:38:5d:9b:9e:4b:10:b4:c2:67:66:08:8c:
c2:5a:c0:f2:b9:6f:ac:53:5a:fc:c6:1e:98:bf:e1:80:21:ab:
b4:1b:81:da:6f:d6:ad:9a:4d:8b:b2:0a:3d:02:56:54:26:e0:
ce:13:f4:39:bb:4c:17:38:bf:f5:43:11:47:13:44:ab:50:53:
65:6d:f7:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fE2zrUXZCnmd7Tt+wmVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzUyOGM1NDBhNmQ1NzdjMmQxY2MxYTZlZWExNzEyNGIz
OTIzODYwHhcNMjUwNjI4MTcwMTA2WhcNMjUwNjI5MTcwMTA2WjAzMTEwLwYDVQQD
Eyg5ZTg4N2VhMmU0NzMzZDExNGU4NTQ3Mjk2OGUxMzJjNzNiMGJkMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMzAFjvkbpEZIoc+ILuQTkInJpEH
08WEioL1LYqNnt3Kd1RnXcUew2+7EkK7AWPg5WWgTMMyx9ELQqqY8/5aTMrg2fWi
D4Ck6dXBxzJWuW8e3h/z7j6HOs48xexiBMUyIIXPsD1lmY1cQFFC6eZ0GUaqAhAt
1ha5JDLWf4KmPHdCxQ3vBvNYrGbf99IAMy1PuQW5BnQ9aygU86luc2AFRmUhYyKO
E7cIrdYVxCWpnGi8A5bjuC4ueRQds7BAys/Kzcwl6z7spAMTuk9DxYFtVD2yhkBA
G+RpVQGclbAc0/OI22dbKqstRje5WJuDlnZiyo+2et0nCP4ecNLvhMAolQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6IfqLkcz0RToVHKWjhMsc7C9K4MB8GA1UdIwQY
MBaAFEY1KMVAptV3wtHMGm7qFxJLOSOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpVb3hVQ20xWGZDMGN3YWJ1b1hFa3M1STRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jOTYyOTEtNWVmYi00MWIzLWJjZmIt
OTJiMGZkNWQ3NjQ0LzEvUmpVb3hVQ20xWGZDMGN3YWJ1b1hFa3M1STRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jOTYyOTEtNWVmYi00MWIzLWJjZmItOTJiMGZkNWQ3NjQ0
LzEvUmpVb3hVQ20xWGZDMGN3YWJ1b1hFa3M1STRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIQi8t45
FIpdPKp8nmuKqgCauCnp5PogactG70voR+kJJ4qAKJNEXweWZ9Q9lxe2LFRrKikN
OZHzxx2VxkSjHCOfWr+mrjKalnfV63/2+MncCiMnk2w0XnRDgvPcSj2NBQ8EP/R0
atJWDgPxVtdujKtQXWOoz8sdAhrdv9SSzSN2PYcq2A793LDLPXOsTraaKhYBdTHC
yov+vNWbGvYa9CxDabb1WLScJiSVDaHeeiLeIsKhWcADuBqCOF2bnksQtMJnZgiM
wlrA8rlvrFNa/MYemL/hgCGrtBuB2m/WrZpNi7IKPQJWVCbgzhP0ObtMFzi/9UMR
RxNEq1BTZW33/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:11 2025 by rpki-client