Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: 6L/coCNT1imIcdhJQMuTNyzvo3kzMpaOftxgDw4OZKA=
Subject key identifier: DE:DF:5F:12:DE:F3:FC:26:4B:98:00:6A:5F:B3:95:E2:B8:99:DF:09
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 0197B6A184A0B1A7BBD108AFDBCB12EEB3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:07 +0000
Manifest this update: Sat 28 Jun 2025 13:02:07 +0000
Manifest next update: Sun 29 Jun 2025 13:02:07 +0000
Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: bXRQWRW/dsCbuUghs1FsTas8kWCRFHO+V/uswqTrgsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:84:a0:b1:a7:bb:d1:08:af:db:cb:12:ee:b3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Jun 28 13:02:07 2025 GMT
Not After : Jun 29 13:02:07 2025 GMT
Subject: CN=dedf5f12def3fc264b98006a5fb395e2b899df09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:af:dc:ea:32:ea:8f:dc:65:7d:ab:c3:8f:
78:0a:ad:be:4f:3a:7b:48:18:a0:58:45:c1:4b:57:
45:ba:74:d1:ff:88:63:b3:f3:f2:a6:dd:4c:56:db:
0c:52:58:3a:bf:f5:92:6b:64:83:d0:d3:34:8a:e7:
bc:37:7a:59:02:58:ae:1d:61:19:be:1d:c0:95:47:
2e:0a:fa:cd:aa:6f:53:49:c9:79:c8:0c:cd:57:c1:
69:24:fe:fa:5c:c6:bd:d5:5b:28:70:c7:ac:92:92:
9c:4e:99:8c:af:9f:cd:2b:54:6c:f9:c7:b5:de:0b:
31:c1:5a:1e:94:a7:87:87:c4:65:48:29:5e:33:ea:
9d:a1:18:53:40:cf:3e:08:f1:4a:fa:48:25:44:0c:
1f:40:80:e4:2e:95:1e:3b:d7:b8:51:f8:ce:9e:9f:
ad:9a:7d:f3:fd:d0:d9:e8:85:22:89:03:5a:f6:65:
5e:6b:30:8c:0f:b0:18:2f:a0:5a:91:4c:bf:17:77:
56:17:9b:80:98:e9:a4:59:68:00:77:84:1b:e0:a1:
eb:66:36:76:f2:9a:a9:a2:df:bd:1c:df:da:75:ec:
5e:29:5d:a7:30:38:71:4b:40:15:1f:ea:57:bd:f8:
9e:53:09:46:c8:2a:f8:cc:1f:b7:4a:a3:8f:88:ad:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DF:5F:12:DE:F3:FC:26:4B:98:00:6A:5F:B3:95:E2:B8:99:DF:09
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b6:92:54:35:4c:d8:0a:0b:64:6b:ea:eb:88:30:db:d9:a8:
41:30:65:e9:d2:3c:73:33:b6:ba:53:43:1e:99:e5:7f:b9:f7:
94:9b:b1:46:b4:9a:a7:7d:4e:23:4b:cd:69:00:da:44:1f:66:
ad:e5:e7:fb:f2:6b:35:8d:4c:c7:37:66:7e:cb:5c:ed:74:d0:
7e:40:c1:74:09:e8:89:b4:38:86:f0:05:9e:89:a0:b4:f8:b2:
76:fa:f1:e0:f5:ee:d3:78:e0:63:df:c8:98:db:31:81:9b:77:
e9:a0:a2:07:fd:8f:f0:0b:22:34:30:bb:30:2b:49:a5:1d:28:
79:96:5c:17:12:ee:16:04:76:fa:b1:dc:84:01:3c:aa:cf:8f:
d0:e0:17:d0:ec:2c:3b:0e:a9:c6:6c:62:92:53:1d:55:5c:8f:
c1:8a:1c:d9:e8:83:8d:c1:71:a4:9e:fb:1f:f8:b4:51:dc:87:
3a:e1:e5:49:fd:83:ce:44:c2:d3:02:12:b6:b4:68:b3:68:9b:
0b:5b:06:ed:06:c5:28:98:2c:d7:c6:58:3d:35:27:cf:80:4b:
94:95:30:8b:38:cc:06:9d:15:0d:ad:03:fa:8b:ec:28:f1:6a:
19:a7:c8:08:48:4e:34:e4:17:6b:e6:ca:68:06:49:7c:6f:fe:
58:d1:80:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYSgsae70Qiv28sS7rPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl
ZjExMDIwHhcNMjUwNjI4MTMwMjA3WhcNMjUwNjI5MTMwMjA3WjAzMTEwLwYDVQQD
EyhkZWRmNWYxMmRlZjNmYzI2NGI5ODAwNmE1ZmIzOTVlMmI4OTlkZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ2v3Ooy6o/cZX2rw494Cq2+Tzp7
SBigWEXBS1dFunTR/4hjs/Pypt1MVtsMUlg6v/WSa2SD0NM0iue8N3pZAliuHWEZ
vh3AlUcuCvrNqm9TScl5yAzNV8FpJP76XMa91VsocMeskpKcTpmMr5/NK1Rs+ce1
3gsxwVoelKeHh8RlSCleM+qdoRhTQM8+CPFK+kglRAwfQIDkLpUeO9e4UfjOnp+t
mn3z/dDZ6IUiiQNa9mVeazCMD7AYL6BakUy/F3dWF5uAmOmkWWgAd4Qb4KHrZjZ2
8pqpot+9HN/adexeKV2nMDhxS0AVH+pXvfieUwlGyCr4zB+3SqOPiK0mhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7fXxLe8/wmS5gAal+zleK4md8JMB8GA1UdIwQY
MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt
YmM3NmNhZjA3ODYwLzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw
LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQraSVDVM
2AoLZGvq64gw29moQTBl6dI8czO2ulNDHpnlf7n3lJuxRrSap31OI0vNaQDaRB9m
reXn+/JrNY1Mxzdmfstc7XTQfkDBdAnoibQ4hvAFnomgtPiydvrx4PXu03jgY9/I
mNsxgZt36aCiB/2P8AsiNDC7MCtJpR0oeZZcFxLuFgR2+rHchAE8qs+P0OAX0Ows
Ow6pxmxiklMdVVyPwYoc2eiDjcFxpJ77H/i0UdyHOuHlSf2DzkTC0wIStrRos2ib
C1sG7QbFKJgs18ZYPTUnz4BLlJUwizjMBp0VDa0D+ovsKPFqGafICEhONOQXa+bK
aAZJfG/+WNGARw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:54 2025 by rpki-client