Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: uPojCI1P/P/13YAje0OC9sWVZGwkF6SD6RMm0QuGzBI=
Subject key identifier: CF:3E:33:42:16:6B:24:DA:7C:B6:71:40:B3:A3:98:D7:14:B6:B0:48
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 0197B70ED480886F07D55E516A496C743351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 106A
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=)
2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: /51ld/Nf9vko/IPlDZLV1GYZ7jEhwPDloVT7oB5B9jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d4:80:88:6f:07:d5:5e:51:6a:49:6c:74:33:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=cf3e3342166b24da7cb67140b3a398d714b6b048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:44:10:e3:f1:b6:7c:eb:c2:43:5c:65:40:
9d:41:e1:93:22:23:ad:f8:33:85:59:ed:1f:34:b3:
3f:87:7d:89:ae:f2:51:5b:67:0c:9c:dc:16:62:c6:
d6:20:e7:7e:4b:13:53:09:72:3e:c0:a9:d0:94:06:
a1:1c:82:ff:96:04:01:ab:05:55:3c:72:cb:8d:54:
4f:a8:3b:f6:3f:f4:bf:b0:6f:b2:20:58:f4:8c:37:
c9:12:63:c2:78:dd:3b:4f:ff:cf:51:af:13:c6:2f:
d1:13:a5:dd:4a:3c:6e:26:9d:fa:cb:f8:6c:71:35:
26:f1:4c:c7:f8:fd:d3:66:6d:2f:ec:68:c7:7d:7a:
63:e0:ae:b8:c4:e2:13:e7:0c:15:fa:fa:6e:bb:97:
ad:31:be:9d:ec:25:07:91:bb:a4:55:58:40:42:c5:
eb:3c:a5:a6:fe:4a:49:c3:1f:18:1d:7d:a2:de:8f:
e2:0d:5e:a1:b2:87:65:2b:be:08:99:60:6c:c6:03:
67:9a:d7:92:da:d5:76:53:19:40:7d:3c:2a:75:38:
b5:5b:6f:da:6e:e1:ad:16:12:85:5b:26:fe:bc:a0:
5c:28:28:50:e0:c6:20:c8:f6:38:8b:36:b0:06:c8:
44:72:10:89:8d:ba:92:c5:f5:72:53:76:39:66:44:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3E:33:42:16:6B:24:DA:7C:B6:71:40:B3:A3:98:D7:14:B6:B0:48
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:76:e4:8a:1a:02:dd:e0:c5:c6:4a:2a:89:36:72:e8:0f:d0:
e4:7a:df:4e:cc:2b:bf:4f:65:a2:e4:c8:32:d0:37:8d:4f:aa:
50:79:0a:56:13:8f:6c:1f:6b:bd:1b:ed:42:cc:d8:4b:34:35:
fb:5e:e3:fe:7c:28:f8:2d:f6:ad:3e:13:2f:d2:ab:4e:9f:46:
7d:ae:9a:32:9d:3d:27:a9:75:07:ed:fa:2c:54:94:22:fc:46:
1e:a2:4e:bf:e4:94:f9:65:20:38:40:f8:32:98:08:75:7f:9c:
6c:39:0d:96:be:89:71:fc:86:f6:59:ed:ca:b3:47:73:11:ab:
ab:7c:6a:f3:c2:64:b4:7e:d4:fd:36:e9:f2:21:1e:03:cd:59:
3c:81:26:49:db:58:53:51:f1:a8:7d:27:4b:dd:81:2c:61:c7:
d4:1f:a2:a2:0e:2f:74:29:53:3c:9b:0c:90:54:5c:99:4d:2c:
6e:d8:a7:fe:95:41:66:d0:6d:c5:fa:37:0e:6e:e4:dc:a6:1d:
ea:78:a8:54:b0:f7:a8:2f:dc:aa:e1:c5:e9:b3:8d:a9:c8:8a:
6e:b5:28:3b:78:93:14:69:67:e1:0b:78:41:a7:19:75:36:ba:
47:2b:32:ee:b0:6a:32:c8:e3:fb:e2:55:7f:9b:d3:1c:37:54:
9e:73:c7:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DtSAiG8H1V5RaklsdDNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NzBkMjhmYzQ5YWEwYWU4MDhjMzgzZjU4N2YzZWE0Y2Zl
YjA0OWQwHhcNMjUwNjI4MTUwMTMxWhcNMjUwNjI5MTUwMTMxWjAzMTEwLwYDVQQD
EyhjZjNlMzM0MjE2NmIyNGRhN2NiNjcxNDBiM2EzOThkNzE0YjZiMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrFEEOPxtnzrwkNcZUCdQeGTIiOt
+DOFWe0fNLM/h32JrvJRW2cMnNwWYsbWIOd+SxNTCXI+wKnQlAahHIL/lgQBqwVV
PHLLjVRPqDv2P/S/sG+yIFj0jDfJEmPCeN07T//PUa8Txi/RE6XdSjxuJp36y/hs
cTUm8UzH+P3TZm0v7GjHfXpj4K64xOIT5wwV+vpuu5etMb6d7CUHkbukVVhAQsXr
PKWm/kpJwx8YHX2i3o/iDV6hsodlK74ImWBsxgNnmteS2tV2UxlAfTwqdTi1W2/a
buGtFhKFWyb+vKBcKChQ4MYgyPY4izawBshEchCJjbqSxfVyU3Y5ZkT5IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8+M0IWayTafLZxQLOjmNcUtrBIMB8GA1UdIwQY
MBaAFEVw0o/EmqCugIw4P1h/PqTP6wSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjct
ZWIwNzM3OTdhYzY2LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjctZWIwNzM3OTdhYzY2
LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXbkihoC
3eDFxkoqiTZy6A/Q5HrfTswrv09louTIMtA3jU+qUHkKVhOPbB9rvRvtQszYSzQ1
+17j/nwo+C32rT4TL9KrTp9Gfa6aMp09J6l1B+36LFSUIvxGHqJOv+SU+WUgOED4
MpgIdX+cbDkNlr6JcfyG9lntyrNHcxGrq3xq88JktH7U/Tbp8iEeA81ZPIEmSdtY
U1HxqH0nS92BLGHH1B+iog4vdClTPJsMkFRcmU0sbtin/pVBZtBtxfo3Dm7k3KYd
6nioVLD3qC/cquHF6bONqciKbrUoO3iTFGln4Qt4QacZdTa6Rysy7rBqMsjj++JV
f5vTHDdUnnPHZA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:42 2025 by rpki-client