Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File: _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier: DL00yuEj+W08sruXM4xlo5Ax+rRr0Ze1YGt1iAgLkog=
Subject key identifier: FF:2C:BB:AC:4C:FD:59:C4:8B:F3:8F:5B:56:B7:7E:D7:9C:36:F1:65
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial: 0197B6A18CB5BF5826A9ACAE3863DC1B2382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number: 11B3
Signing time: Sat 28 Jun 2025 13:02:10 +0000
Manifest this update: Sat 28 Jun 2025 13:02:10 +0000
Manifest next update: Sun 29 Jun 2025 13:02:10 +0000
Files and hashes: 1: 27FHmyzi6Se6krMAx8iyaZkkui4.roa (hash: hxU0+n4GJmSaVALTik02VPB85RwSKnzwnJh1oS8Qx2Y=)
2: Vt65vwu21Gw3Ig_WCeQCArrV49M.roa (hash: JhPPfXj32nubKkCUS1s8L7cjVu7ayJ+kkjBpXd9CNao=)
3: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: N7bLwXASohpjcpRnlFjAVfVLy1WK0xvxcVVXcUwMpJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8c:b5:bf:58:26:a9:ac:ae:38:63:dc:1b:23:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Validity
Not Before: Jun 28 13:02:10 2025 GMT
Not After : Jun 29 13:02:10 2025 GMT
Subject: CN=ff2cbbac4cfd59c48bf38f5b56b77ed79c36f165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:6a:0a:03:0f:28:a3:ea:3a:30:49:da:1d:
9c:c3:41:0e:c4:07:f2:8d:fb:d1:e1:0d:c0:d4:a1:
df:39:43:1f:c1:9b:b5:ea:80:1f:e2:d0:7d:28:db:
d0:21:39:19:cd:b7:a1:ce:d3:6f:2a:d6:40:24:32:
21:12:51:57:7d:6d:e3:cb:66:1b:28:b0:67:73:57:
c5:5f:46:e8:41:03:de:00:a2:06:66:00:e8:89:f6:
ac:9b:03:b4:e3:84:94:1e:85:8b:29:28:e7:8f:b4:
e4:0a:8a:33:79:db:0f:75:be:32:73:b8:01:15:6a:
d0:ad:3b:e0:8f:14:5f:e3:b1:2b:58:c2:97:b0:fd:
4a:7a:9e:8f:26:ac:b4:be:85:01:be:d1:31:0b:83:
bf:9c:65:38:0f:63:8d:aa:30:c5:9c:67:a6:6b:ea:
8d:76:ca:ac:de:ab:cf:f9:c2:ea:d2:e1:c9:d3:0f:
fc:b1:24:5d:54:38:47:05:e3:91:3c:d4:5e:46:04:
11:ca:1c:16:41:ab:1b:e3:ce:4f:be:06:e5:8d:b1:
ca:d6:fa:2f:ca:c3:e0:52:7b:f1:20:60:71:61:cc:
86:53:1b:9b:84:59:26:cf:2a:fa:ce:73:d2:80:2a:
4d:0f:79:65:b0:e5:98:42:ee:44:62:34:a1:fe:6b:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2C:BB:AC:4C:FD:59:C4:8B:F3:8F:5B:56:B7:7E:D7:9C:36:F1:65
X509v3 Authority Key Identifier:
keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8c:bc:b2:96:8e:d6:a4:85:83:d7:a6:04:cf:5f:7c:6b:41:
51:81:ad:90:ad:57:3e:7a:71:76:ec:e8:c1:6e:58:88:1e:f3:
8d:e0:44:85:bb:33:b1:18:af:69:ed:35:db:31:f9:ee:58:9a:
1a:5a:a9:5e:7b:e8:a8:e6:94:d1:77:24:90:d6:ae:5b:03:3c:
10:90:62:78:38:63:f2:37:e9:5a:d6:8c:cb:7a:af:c4:9a:c8:
81:6f:bb:2f:f5:45:97:8b:8b:05:ac:05:ef:0d:5b:f2:f1:8e:
df:fb:23:c4:99:83:b7:09:b7:23:b0:98:6a:90:c4:f4:c2:92:
80:cb:21:c6:ca:87:4c:b7:65:4c:3d:c9:80:7c:83:38:ec:c1:
5b:95:51:a5:c8:98:8c:48:88:23:1e:82:9a:fd:c7:f0:e9:68:
d2:d6:73:7b:c6:7b:29:92:9a:80:6e:78:fd:ae:f4:d6:88:ea:
62:f2:2e:4e:85:68:59:bf:7a:c4:ac:44:98:cb:2a:8b:56:c6:
bf:c0:20:45:68:8d:66:81:f4:ef:9a:36:d4:01:94:17:b8:8c:
04:8a:2d:26:49:c7:32:71:58:62:b8:86:d9:4f:9e:df:aa:6c:
7d:96:3a:35:4e:e0:8c:02:86:9f:0b:40:f6:a6:75:43:d5:ff:
78:fb:7d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYy1v1gmqayuOGPcGyOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMTE5NmQ5OGRlY2QzOGViMDNmNWYwNmI0OGU1NTZjNzRm
MjMxZjQwHhcNMjUwNjI4MTMwMjEwWhcNMjUwNjI5MTMwMjEwWjAzMTEwLwYDVQQD
EyhmZjJjYmJhYzRjZmQ1OWM0OGJmMzhmNWI1NmI3N2VkNzljMzZmMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zdqCgMPKKPqOjBJ2h2cw0EOxAfy
jfvR4Q3A1KHfOUMfwZu16oAf4tB9KNvQITkZzbehztNvKtZAJDIhElFXfW3jy2Yb
KLBnc1fFX0boQQPeAKIGZgDoifasmwO044SUHoWLKSjnj7TkCoozedsPdb4yc7gB
FWrQrTvgjxRf47ErWMKXsP1Kep6PJqy0voUBvtExC4O/nGU4D2ONqjDFnGema+qN
dsqs3qvP+cLq0uHJ0w/8sSRdVDhHBeORPNReRgQRyhwWQasb485PvgbljbHK1vov
ysPgUnvxIGBxYcyGUxubhFkmzyr6znPSgCpND3llsOWYQu5EYjSh/mvh9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8su6xM/VnEi/OPW1a3ftecNvFlMB8GA1UdIwQY
MBaAFP0RltmN7NOOsD9fBrSOVWx08jH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUt
NGY4OTAyYmZlMTcyLzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUtNGY4OTAyYmZlMTcy
LzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4y8spaO
1qSFg9emBM9ffGtBUYGtkK1XPnpxduzowW5YiB7zjeBEhbszsRivae012zH57lia
GlqpXnvoqOaU0XckkNauWwM8EJBieDhj8jfpWtaMy3qvxJrIgW+7L/VFl4uLBawF
7w1b8vGO3/sjxJmDtwm3I7CYapDE9MKSgMshxsqHTLdlTD3JgHyDOOzBW5VRpciY
jEiIIx6Cmv3H8Olo0tZze8Z7KZKagG54/a701ojqYvIuToVoWb96xKxEmMsqi1bG
v8AgRWiNZoH075o21AGUF7iMBIotJknHMnFYYriG2U+e36psfZY6NU7gjAKGnwtA
9qZ1Q9X/ePt9rg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:19 2025 by rpki-client