Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
File: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft (raw, json)
Hash identifier: Z9qcfDzxKQMgXyiIX+0D9b50m8PSRN4eq0FSA/J3tl0=
Subject key identifier: 60:F0:52:22:C0:AF:FE:1A:AE:EA:FB:B1:24:99:2A:02:1E:10:60:89
Authority key identifier: D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
Certificate issuer: /CN=d291741252bb9c4cda80047dfb01ce98c219d180
Certificate serial: 0197B70E5139434F5B1C69098970807C5C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
Manifest number: 1469
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl (hash: 3GlOSF9dsH0rA9HsBQVJ9zfBesgcaeKNMDOiKCsQOyg=)
2: 24F3NWEaUDo-ywzWotAmlAOE0aY.roa (hash: ERf1+Eo8kcPOcjF9iXtlxaEqblrqJRaC4jpu9Wj4DSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:51:39:43:4f:5b:1c:69:09:89:70:80:7c:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d291741252bb9c4cda80047dfb01ce98c219d180
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=60f05222c0affe1aaeeafbb124992a021e106089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a9:66:fa:8a:bf:47:76:5a:94:d0:90:80:92:
bf:f0:52:3c:5b:aa:22:d4:8f:cf:58:88:07:5b:ed:
3f:ad:95:f5:62:2f:82:85:44:8b:4e:d0:ff:51:89:
26:86:e0:6b:e4:6f:fc:5a:7b:a8:c2:4d:a0:2c:44:
f0:68:50:b1:68:8e:02:22:83:83:64:cf:ac:b9:47:
7e:90:66:84:44:1d:72:ae:52:23:23:cd:27:86:88:
ae:98:aa:90:ee:37:9e:4c:08:71:47:28:56:eb:56:
11:28:0f:ff:be:6a:26:01:9f:27:69:8b:c6:64:19:
5d:33:ea:c5:41:0e:d1:e2:85:03:ee:7b:f8:4e:7d:
c3:18:56:01:0b:19:48:c1:ce:2c:52:c1:0d:7f:9d:
62:a8:e3:46:32:d0:00:ae:ab:ce:ce:6e:78:06:bb:
c0:6c:4e:52:41:d3:71:9d:7c:b5:45:0e:1f:a7:56:
94:88:bb:dc:04:13:57:77:61:5d:44:3e:64:3c:a3:
6d:92:25:ed:bd:7c:ed:b2:16:da:9d:55:a8:ff:21:
c0:b2:5a:67:88:81:42:a7:65:f0:10:95:81:4f:9d:
da:dc:39:20:b2:87:8e:b2:32:d9:12:9d:1c:ac:c9:
8d:43:c2:59:ed:0e:d2:12:1f:53:58:9c:7d:f5:90:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F0:52:22:C0:AF:FE:1A:AE:EA:FB:B1:24:99:2A:02:1E:10:60:89
X509v3 Authority Key Identifier:
keyid:D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:73:a0:0f:6b:a6:47:1e:70:c1:ba:60:12:81:ea:04:27:9a:
a6:0a:0e:75:00:0b:c1:25:b9:ec:d9:9c:d3:66:05:84:83:27:
0a:a3:79:80:43:26:82:c3:80:76:15:05:9e:b5:e6:42:95:41:
2d:ba:2f:d5:93:51:80:a0:c9:7c:f4:18:60:39:4a:b1:a4:f4:
31:d2:02:42:6e:fc:49:dd:b1:6b:28:b5:b6:5b:38:bc:dd:be:
f9:83:19:43:9a:ca:89:bd:25:78:20:a7:95:0d:de:47:6d:29:
19:cb:16:50:a3:7a:63:4b:d1:d4:bc:c0:d9:1d:52:5e:e2:bd:
50:df:68:82:5a:56:ee:4d:25:b8:48:32:f3:02:38:bf:cc:ce:
98:02:4c:48:31:95:21:50:a0:f8:12:e0:76:4e:98:76:b4:89:
b9:ed:a9:90:4e:33:1a:87:f6:24:51:91:a6:60:92:a6:1a:5d:
9a:15:45:36:54:d8:27:f6:62:61:3f:65:a0:aa:8d:94:4f:3c:
72:3e:cd:98:3e:88:4c:2e:1f:d4:be:32:a0:59:42:ad:cf:d7:
a8:08:14:19:2c:fe:03:13:2a:a1:82:7c:b6:49:f6:32:bb:7b:
9a:13:e0:8f:88:70:6b:48:f8:7d:6c:fd:a7:b0:64:cf:a4:8a:
ea:46:ec:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DlE5Q09bHGkJiXCAfFyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOTE3NDEyNTJiYjljNGNkYTgwMDQ3ZGZiMDFjZTk4YzIx
OWQxODAwHhcNMjUwNjI4MTUwMDU4WhcNMjUwNjI5MTUwMDU4WjAzMTEwLwYDVQQD
Eyg2MGYwNTIyMmMwYWZmZTFhYWVlYWZiYjEyNDk5MmEwMjFlMTA2MDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Klm+oq/R3ZalNCQgJK/8FI8W6oi
1I/PWIgHW+0/rZX1Yi+ChUSLTtD/UYkmhuBr5G/8Wnuowk2gLETwaFCxaI4CIoOD
ZM+suUd+kGaERB1yrlIjI80nhoiumKqQ7jeeTAhxRyhW61YRKA//vmomAZ8naYvG
ZBldM+rFQQ7R4oUD7nv4Tn3DGFYBCxlIwc4sUsENf51iqONGMtAArqvOzm54BrvA
bE5SQdNxnXy1RQ4fp1aUiLvcBBNXd2FdRD5kPKNtkiXtvXztshbanVWo/yHAslpn
iIFCp2XwEJWBT53a3DkgsoeOsjLZEp0crMmNQ8JZ7Q7SEh9TWJx99ZAs/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDwUiLAr/4arur7sSSZKgIeEGCJMB8GA1UdIwQY
MBaAFNKRdBJSu5xM2oAEffsBzpjCGdGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHBGMEVsSzduRXphZ0FSOS13SE9tTUlaMFlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zYmE2ZmMtMmQ0OS00YWZmLTkyMjkt
NDhiOTU3MjY0YzI2LzEvMHBGMEVsSzduRXphZ0FSOS13SE9tTUlaMFlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zYmE2ZmMtMmQ0OS00YWZmLTkyMjktNDhiOTU3MjY0YzI2
LzEvMHBGMEVsSzduRXphZ0FSOS13SE9tTUlaMFlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXOgD2um
Rx5wwbpgEoHqBCeapgoOdQALwSW57Nmc02YFhIMnCqN5gEMmgsOAdhUFnrXmQpVB
Lbov1ZNRgKDJfPQYYDlKsaT0MdICQm78Sd2xayi1tls4vN2++YMZQ5rKib0leCCn
lQ3eR20pGcsWUKN6Y0vR1LzA2R1SXuK9UN9oglpW7k0luEgy8wI4v8zOmAJMSDGV
IVCg+BLgdk6YdrSJue2pkE4zGof2JFGRpmCSphpdmhVFNlTYJ/ZiYT9loKqNlE88
cj7NmD6ITC4f1L4yoFlCrc/XqAgUGSz+AxMqoYJ8tkn2Mrt7mhPgj4hwa0j4fWz9
p7Bkz6SK6kbs2A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:37 2025 by rpki-client