Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: NaHgCPoZSwVNhB4dDg6Fl1ADgDv0Z8XaMcKalzGu0Ig=
Subject key identifier: A4:0F:D7:F4:50:33:9B:A1:66:6B:E5:67:35:C0:8B:CA:C9:6E:8A:14
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 0197B88F035E647B88F111826A3E2BE7BA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 069D
Signing time: Sat 28 Jun 2025 22:01:09 +0000
Manifest this update: Sat 28 Jun 2025 22:01:09 +0000
Manifest next update: Sun 29 Jun 2025 22:01:09 +0000
Files and hashes: 1: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (hash: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=)
2: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: r/8SedDzvJZuuWC9xgadG0CKqfQeaUUUVyvBwnDAgsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:03:5e:64:7b:88:f1:11:82:6a:3e:2b:e7:ba:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Jun 28 22:01:09 2025 GMT
Not After : Jun 29 22:01:09 2025 GMT
Subject: CN=a40fd7f450339ba1666be56735c08bcac96e8a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:ff:88:78:b5:1f:87:46:21:51:cd:11:30:
c5:1c:07:91:c9:60:62:6d:3d:dd:00:d7:65:f8:01:
0f:1e:08:fe:1b:aa:ee:b6:f8:cb:e3:4a:e0:8b:e1:
b1:d8:00:fe:b2:e0:c4:d3:5f:02:55:2f:0c:bf:3a:
90:93:b0:34:fe:eb:99:27:72:ad:5d:36:7e:87:e5:
9c:41:01:ca:10:23:f2:4c:f5:2b:b3:00:08:17:f9:
ac:0d:01:90:7b:10:ea:0f:89:76:4a:60:03:4c:70:
34:12:c5:64:cb:b3:10:27:fe:9f:6a:2b:21:28:68:
c2:9b:29:78:1d:61:ec:64:66:9e:b3:47:c2:e9:07:
db:1d:c1:7f:35:f8:b8:fa:5d:01:7b:19:c0:68:b1:
54:8b:94:18:a3:6c:1a:61:1d:75:d3:16:f0:eb:5c:
58:71:75:98:8f:b3:7f:35:78:2c:35:fb:5a:1e:76:
a9:c3:e1:de:e4:42:54:68:42:19:4e:af:9e:1a:de:
4e:d6:c6:e4:fb:5b:f5:aa:c0:05:da:d9:d2:4f:53:
5a:7d:d9:37:63:b3:ce:25:b8:34:b9:db:82:e0:95:
f5:32:d8:86:95:15:a4:4b:f4:52:b4:60:c4:4f:39:
96:d3:2c:bd:d5:e4:76:cb:eb:ca:b9:58:9e:dc:f2:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0F:D7:F4:50:33:9B:A1:66:6B:E5:67:35:C0:8B:CA:C9:6E:8A:14
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a3:a9:ab:15:ae:93:f7:0e:ab:7f:c4:d1:b4:31:77:51:35:
01:89:b1:96:3f:dd:38:4b:ea:90:45:43:e5:97:d2:90:17:a2:
97:d9:dd:aa:fc:54:99:16:8b:b2:e4:e0:f3:41:33:3e:c7:d1:
9f:7e:b8:67:74:01:27:a6:5d:d8:e0:c2:59:2d:96:64:b3:ad:
8c:fa:09:6b:44:0b:cc:cc:5e:6a:4a:e7:6d:06:32:d4:3e:7e:
90:c5:89:c0:f9:88:34:11:b9:64:87:e9:af:33:50:6c:70:31:
ea:92:1b:d5:69:b7:44:b7:f6:17:c0:73:7c:20:07:c1:27:b2:
dd:a1:ba:16:41:50:20:34:d9:8c:e2:05:45:66:d4:84:c4:29:
25:93:c2:dd:36:a7:3c:c0:11:ee:52:15:e8:59:87:a5:42:c5:
9e:55:20:03:57:23:a2:9d:dd:a1:2b:45:57:e8:7c:1e:af:0a:
44:2d:a8:74:9f:70:5a:7e:92:50:7a:20:bc:30:0a:11:ec:35:
32:b2:ab:aa:ee:d0:b8:0b:38:99:99:41:5c:e6:b7:77:95:30:
b2:5e:75:45:7b:40:eb:b9:24:c5:54:64:d0:a3:bc:0e:7c:26:
f1:f7:70:11:5a:bd:3e:7a:7c:5e:a2:9a:72:95:55:07:d2:95:
f7:47:2c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jwNeZHuI8RGCaj4r57orMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NTdkZjNlNTQ2ZDU2ZGJiNWQyMzBmNjExYzcyNGM1OTlh
NzIyNTEwHhcNMjUwNjI4MjIwMTA5WhcNMjUwNjI5MjIwMTA5WjAzMTEwLwYDVQQD
EyhhNDBmZDdmNDUwMzM5YmExNjY2YmU1NjczNWMwOGJjYWM5NmU4YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg3/iHi1H4dGIVHNETDFHAeRyWBi
bT3dANdl+AEPHgj+G6rutvjL40rgi+Gx2AD+suDE018CVS8MvzqQk7A0/uuZJ3Kt
XTZ+h+WcQQHKECPyTPUrswAIF/msDQGQexDqD4l2SmADTHA0EsVky7MQJ/6faish
KGjCmyl4HWHsZGaes0fC6QfbHcF/Nfi4+l0BexnAaLFUi5QYo2waYR110xbw61xY
cXWYj7N/NXgsNftaHnapw+He5EJUaEIZTq+eGt5O1sbk+1v1qsAF2tnST1Nafdk3
Y7POJbg0uduC4JX1MtiGlRWkS/RStGDETzmW0yy91eR2y+vKuVie3PLtNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQP1/RQM5uhZmvlZzXAi8rJbooUMB8GA1UdIwQY
MBaAFEVX3z5UbVbbtdIw9hHHJMWZpyJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQt
MGE4OTJhYjQ3ZGIzLzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQtMGE4OTJhYjQ3ZGIz
LzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKOpqxWu
k/cOq3/E0bQxd1E1AYmxlj/dOEvqkEVD5ZfSkBeil9ndqvxUmRaLsuTg80EzPsfR
n364Z3QBJ6Zd2ODCWS2WZLOtjPoJa0QLzMxeakrnbQYy1D5+kMWJwPmINBG5ZIfp
rzNQbHAx6pIb1Wm3RLf2F8BzfCAHwSey3aG6FkFQIDTZjOIFRWbUhMQpJZPC3Tan
PMAR7lIV6FmHpULFnlUgA1cjop3doStFV+h8Hq8KRC2odJ9wWn6SUHogvDAKEew1
MrKrqu7QuAs4mZlBXOa3d5Uwsl51RXtA67kkxVRk0KO8Dnwm8fdwEVq9Pnp8XqKa
cpVVB9KV90cs7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:10 2025 by rpki-client