Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
File: rKL3dI_jY9xZOem4VPwAQDEw66U.mft (raw, json)
Hash identifier: UN1/RlkbqBE5ovx4hHc/3gdzqC5Q1/Ty4Q7Ry+m8NUc=
Subject key identifier: 36:60:6B:2F:26:CE:92:AF:56:1F:E7:74:2B:2F:5B:52:AE:78:09:7C
Authority key identifier: AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
Certificate issuer: /CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Certificate serial: 0197C9146FF4D66C2F87B969495B288B98CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
Manifest number: 1234
Signing time: Wed 02 Jul 2025 03:00:49 +0000
Manifest this update: Wed 02 Jul 2025 03:00:49 +0000
Manifest next update: Thu 03 Jul 2025 03:00:49 +0000
Files and hashes: 1: j1MFNSh109TR4xhuIO7hEIzzLx0.roa (hash: m4Zoo8iLf6w6vYmDzKqVKXqfQB+bfWM+4JfQ0Ih+lSM=)
2: rKL3dI_jY9xZOem4VPwAQDEw66U.crl (hash: 7HvQeHRBOAAXg/RqYoeV82GXtLaIsBsQth+ywWh2QE4=)
3: u7VG8MqdZGcH4gUtF3RkiJXAbmg.roa (hash: 2LYlYxgKHIzR/5x4DJBXFV3DllJcEY1kUeTRo0v7v2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:6f:f4:d6:6c:2f:87:b9:69:49:5b:28:8b:98:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Validity
Not Before: Jul 2 03:00:49 2025 GMT
Not After : Jul 3 03:00:49 2025 GMT
Subject: CN=36606b2f26ce92af561fe7742b2f5b52ae78097c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:ad:4d:ea:d8:4b:00:b6:25:37:9c:4f:7e:
72:0f:ad:32:21:9b:0a:ef:b4:65:92:3e:63:6f:94:
87:23:bd:56:98:92:da:3e:6a:da:7c:e7:88:cd:1b:
2d:6e:28:19:3f:17:d7:a5:56:50:72:f7:2a:f5:ab:
19:18:28:2c:a2:0e:6a:b1:f6:8d:e8:2e:90:2d:ba:
30:98:fd:d9:32:3c:d6:af:3f:d6:72:5b:d2:c7:2b:
c1:ed:cd:cb:99:53:0c:6f:4f:d0:71:d4:c6:31:2a:
ae:b0:ef:45:12:ca:2f:81:e3:42:67:2f:2a:4c:6e:
f8:d4:d7:11:3e:00:f3:6c:e3:aa:e5:1e:71:28:dd:
27:34:0c:2f:e8:45:05:00:e1:2a:5e:c7:17:5b:cf:
ae:30:97:fe:41:39:4c:3f:d5:01:0b:4d:0a:fd:aa:
e0:ae:ed:d1:ef:c0:16:91:de:14:ec:80:f7:fa:be:
a5:3e:1b:2c:cd:4c:04:21:24:fb:14:e7:75:01:c3:
37:21:58:f2:9a:bd:00:db:8d:44:e0:49:c7:72:6b:
70:76:ec:12:ab:06:f5:71:4e:a1:7f:6b:7e:4f:33:
60:2a:59:59:fe:a4:22:62:7c:0e:dd:5d:4f:b2:6b:
9f:18:95:63:46:7d:ac:32:0c:71:6f:01:96:65:98:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:60:6B:2F:26:CE:92:AF:56:1F:E7:74:2B:2F:5B:52:AE:78:09:7C
X509v3 Authority Key Identifier:
keyid:AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:05:ff:f8:2a:be:6b:4e:8c:bc:43:15:a1:18:c5:24:ca:e3:
23:e5:0b:39:41:23:6a:85:db:15:66:65:59:06:00:6c:3c:36:
69:15:ac:9a:96:ec:cb:3c:43:db:e2:de:31:7d:21:5a:03:d9:
4d:df:08:a2:95:b8:ae:f1:5a:31:08:54:01:1e:44:e9:16:20:
8a:84:a9:41:9d:54:75:64:e5:00:63:8c:63:7b:ff:e8:78:18:
87:15:4e:14:91:86:3c:53:53:f6:7c:59:f9:bb:56:29:50:ef:
f6:4d:ac:28:7e:28:e6:01:3d:4f:d2:f2:29:9b:0b:d8:e2:c1:
54:8b:af:bf:a7:cc:be:9f:c8:cd:3c:58:1a:e6:26:cc:82:9c:
4a:88:4d:8d:26:1c:1c:84:b3:93:87:7b:0f:c9:1d:5c:c5:46:
67:59:f3:7c:61:fb:6b:d7:b3:69:7e:8c:b9:73:f9:84:ec:51:
35:bd:f4:90:da:ee:67:8d:f9:5a:40:74:0e:b4:43:a4:bb:9d:
42:ca:05:3a:d0:80:61:eb:95:9c:32:bd:05:40:0f:bd:26:ed:
f2:42:34:0d:ac:33:04:6b:4f:b4:2e:74:1a:e5:1b:b9:42:40:
ff:27:6f:f2:b2:2a:02:b9:e8:8a:02:f8:c5:24:85:ee:9e:73:
7e:90:9f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJFG/01mwvh7lpSVsoi5jMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTJmNzc0OGZlMzYzZGM1OTM5ZTliODU0ZmMwMDQwMzEz
MGViYTUwHhcNMjUwNzAyMDMwMDQ5WhcNMjUwNzAzMDMwMDQ5WjAzMTEwLwYDVQQD
EygzNjYwNmIyZjI2Y2U5MmFmNTYxZmU3NzQyYjJmNWI1MmFlNzgwOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj+tTerYSwC2JTecT35yD60yIZsK
77Rlkj5jb5SHI71WmJLaPmrafOeIzRstbigZPxfXpVZQcvcq9asZGCgsog5qsfaN
6C6QLbowmP3ZMjzWrz/WclvSxyvB7c3LmVMMb0/QcdTGMSqusO9FEsovgeNCZy8q
TG741NcRPgDzbOOq5R5xKN0nNAwv6EUFAOEqXscXW8+uMJf+QTlMP9UBC00K/arg
ru3R78AWkd4U7ID3+r6lPhsszUwEIST7FOd1AcM3IVjymr0A241E4EnHcmtwduwS
qwb1cU6hf2t+TzNgKllZ/qQiYnwO3V1PsmufGJVjRn2sMgxxbwGWZZjXfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZgay8mzpKvVh/ndCsvW1KueAl8MB8GA1UdIwQY
MBaAFKyi93SP42PcWTnpuFT8AEAxMOulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktMM2RJX2pZOXhaT2VtNFZQd0FRREV3NjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jY2NjNDEtZGQyYy00MWYwLTgyYmYt
ZTkyZGQ4ZmE2YWJiLzEvcktMM2RJX2pZOXhaT2VtNFZQd0FRREV3NjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jY2NjNDEtZGQyYy00MWYwLTgyYmYtZTkyZGQ4ZmE2YWJi
LzEvcktMM2RJX2pZOXhaT2VtNFZQd0FRREV3NjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgX/+Cq+
a06MvEMVoRjFJMrjI+ULOUEjaoXbFWZlWQYAbDw2aRWsmpbsyzxD2+LeMX0hWgPZ
Td8IopW4rvFaMQhUAR5E6RYgioSpQZ1UdWTlAGOMY3v/6HgYhxVOFJGGPFNT9nxZ
+btWKVDv9k2sKH4o5gE9T9LyKZsL2OLBVIuvv6fMvp/IzTxYGuYmzIKcSohNjSYc
HISzk4d7D8kdXMVGZ1nzfGH7a9ezaX6MuXP5hOxRNb30kNruZ435WkB0DrRDpLud
QsoFOtCAYeuVnDK9BUAPvSbt8kI0DawzBGtPtC50GuUbuUJA/ydv8rIqArnoigL4
xSSF7p5zfpCfqA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 11:45:45 2025 by rpki-client