Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: 9+nYK02PjE5uwhtX1EOCgwy7k3g6dLaS2HDSmlLu98w=
Subject key identifier: 59:D5:2A:0F:E1:F3:FF:92:AC:A4:B1:5C:7A:23:E2:6F:0E:9F:08:F4
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 0197B8214D1C0EA3027160E4A04BDFEEEF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 20:01:19 +0000
Manifest this update: Sat 28 Jun 2025 20:01:19 +0000
Manifest next update: Sun 29 Jun 2025 20:01:19 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: c8n+sIRVP7si2Uv9NN0A8znE4wJivuMU4PDae7FP/Fs=)
2: Tci-duFHvWMEGttKQ92T_aViR_A.roa (hash: TNMB/iEiiWHvlZINV0FtcnUi3rWiLmL/5woKI9WyM90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4d:1c:0e:a3:02:71:60:e4:a0:4b:df:ee:ef:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Jun 28 20:01:19 2025 GMT
Not After : Jun 29 20:01:19 2025 GMT
Subject: CN=59d52a0fe1f3ff92aca4b15c7a23e26f0e9f08f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:d0:aa:08:39:fb:00:36:6c:31:55:fd:04:
7b:2b:86:97:d3:b3:f9:d1:b1:ed:ea:e4:d6:e9:c9:
ed:b4:8d:fe:85:99:fb:7b:14:2c:d8:3c:1a:aa:4d:
0e:58:c9:e1:da:8f:2f:06:8a:8d:d7:35:18:96:be:
c4:20:95:65:35:84:58:12:22:f4:b6:b0:0c:72:ae:
6a:5c:e7:a3:02:87:56:bb:0a:fd:ec:96:2f:5f:30:
42:19:62:be:25:e8:5e:b6:e3:bf:e4:4e:73:ae:4b:
85:59:91:c1:20:e9:a1:f0:ad:d9:5f:4c:94:65:fb:
ac:50:20:d2:c0:8d:01:7a:9d:2a:43:15:41:de:69:
18:b0:e0:b6:a1:e2:04:de:32:7e:82:37:c4:ee:be:
22:16:64:27:1d:50:ef:03:44:fa:3f:c8:a1:48:58:
c6:f1:15:33:c9:30:f3:81:01:d5:26:d9:24:3b:9a:
69:0f:26:cc:29:78:f7:89:84:72:ce:7a:0c:7b:22:
83:74:1b:61:c0:ae:7e:63:04:10:d3:e9:83:2a:aa:
09:5a:1a:96:02:37:0e:c2:ff:80:a3:8a:e9:2b:3a:
e2:5d:9c:a2:d7:9c:ff:18:0c:8f:25:39:96:34:a4:
73:64:ba:71:a0:f5:52:9a:c9:b7:8e:3e:72:67:ea:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D5:2A:0F:E1:F3:FF:92:AC:A4:B1:5C:7A:23:E2:6F:0E:9F:08:F4
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:04:d1:5c:96:35:aa:0e:2d:3c:af:d3:02:f4:92:5f:41:fe:
45:7b:61:42:f1:86:e5:fb:6b:c0:a7:a5:2c:0e:ae:75:e3:64:
b5:31:c8:04:8b:64:dc:c3:e8:16:fb:bb:c6:11:b5:9c:04:cd:
c4:4d:11:48:c5:04:a1:d9:48:b5:48:f2:37:71:c6:a9:0f:4a:
eb:03:fa:24:10:1e:a0:99:f0:28:43:91:48:a2:d1:3c:2a:88:
4e:d5:c7:c3:a1:97:02:00:15:83:c0:e3:68:0d:02:7e:69:43:
21:c9:55:4f:52:16:30:44:fb:a8:3d:91:20:2f:e0:cd:18:bb:
3b:28:5a:5c:87:c0:e5:f7:69:67:14:fa:7f:bb:71:62:77:6e:
0e:52:9d:a5:6c:89:18:92:8e:33:28:58:78:2a:a7:cd:6c:f7:
ac:bb:10:e3:65:5f:95:3d:ff:52:c9:e2:df:e8:a0:80:f1:7a:
36:cf:9a:5f:b2:d1:07:d8:8c:4e:f3:94:03:8c:58:17:b6:b8:
17:0c:e7:0f:dc:f7:99:20:15:9e:75:92:ad:e0:83:2c:ba:82:
7f:57:59:7f:49:03:03:a3:e6:c9:e4:b8:d3:39:8f:88:43:60:
23:f4:8e:1f:6e:e6:01:52:2e:4d:5c:d9:a3:23:99:87:d2:d7:
35:66:be:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IU0cDqMCcWDkoEvf7u+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZmRmY2RjMzI2MWI1N2FmYWRmZWQ3MzBmYjJkZWRiMjg2
NDlmY2YwHhcNMjUwNjI4MjAwMTE5WhcNMjUwNjI5MjAwMTE5WjAzMTEwLwYDVQQD
Eyg1OWQ1MmEwZmUxZjNmZjkyYWNhNGIxNWM3YTIzZTI2ZjBlOWYwOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5LQqgg5+wA2bDFV/QR7K4aX07P5
0bHt6uTW6cnttI3+hZn7exQs2Dwaqk0OWMnh2o8vBoqN1zUYlr7EIJVlNYRYEiL0
trAMcq5qXOejAodWuwr97JYvXzBCGWK+JehetuO/5E5zrkuFWZHBIOmh8K3ZX0yU
ZfusUCDSwI0Bep0qQxVB3mkYsOC2oeIE3jJ+gjfE7r4iFmQnHVDvA0T6P8ihSFjG
8RUzyTDzgQHVJtkkO5ppDybMKXj3iYRyznoMeyKDdBthwK5+YwQQ0+mDKqoJWhqW
AjcOwv+Ao4rpKzriXZyi15z/GAyPJTmWNKRzZLpxoPVSmsm3jj5yZ+r+5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnVKg/h8/+SrKSxXHoj4m8Onwj0MB8GA1UdIwQY
MBaAFOn9/NwyYbV6+t/tcw+y3tsoZJ/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmYzODNESmh0WHI2My0xekQ3TGUyeWhrbjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xYmExOTEtYTQyYS00NTA5LWJiMjgt
MGJjN2U3ZWYwNzYzLzEvNmYzODNESmh0WHI2My0xekQ3TGUyeWhrbjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8xYmExOTEtYTQyYS00NTA5LWJiMjgtMGJjN2U3ZWYwNzYz
LzEvNmYzODNESmh0WHI2My0xekQ3TGUyeWhrbjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQTRXJY1
qg4tPK/TAvSSX0H+RXthQvGG5ftrwKelLA6udeNktTHIBItk3MPoFvu7xhG1nATN
xE0RSMUEodlItUjyN3HGqQ9K6wP6JBAeoJnwKEORSKLRPCqITtXHw6GXAgAVg8Dj
aA0CfmlDIclVT1IWMET7qD2RIC/gzRi7OyhaXIfA5fdpZxT6f7txYnduDlKdpWyJ
GJKOMyhYeCqnzWz3rLsQ42VflT3/Usni3+iggPF6Ns+aX7LRB9iMTvOUA4xYF7a4
FwznD9z3mSAVnnWSreCDLLqCf1dZf0kDA6PmyeS40zmPiENgI/SOH27mAVIuTVzZ
oyOZh9LXNWa+Tg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:55 2025 by rpki-client