Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
File: R60fV24_cbT2wzkfL6ND1Qi2se4.mft (raw, json)
Hash identifier: SLjQUWpvzWqT3uUHdB6ebYVo2R7bEfLR9bTtUsoDoys=
Subject key identifier: FC:EA:08:61:0D:22:FD:0F:BD:72:41:F9:48:FF:09:93:89:1F:C7:64
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Certificate issuer: /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial: 0197B745888989652612F85E892445B2510E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: R60fV24_cbT2wzkfL6ND1Qi2se4.crl (hash: BuN8TnMN5wyHOYvN3UZGkyvkwL7KPQzEuEsRfypvE1Y=)
2: aO3r11e9FzxFIAvzci6U1ugRCX4.roa (hash: RN1LPTFZ9dixQeq/j0V0Euzw3FqtnyCrfR7culnL03E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:88:89:89:65:26:12:f8:5e:89:24:45:b2:51:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=fcea08610d22fd0fbd7241f948ff0993891fc764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:4c:c6:8e:95:59:43:05:c5:e6:6a:93:2e:
95:33:a6:29:6c:d5:a9:b3:43:9a:73:cb:b7:c5:1a:
bb:c9:ca:1a:b9:db:88:93:01:8d:bd:f3:e1:4a:18:
7e:f9:da:c6:96:30:5d:93:d1:9b:a4:4d:4d:da:82:
33:58:08:95:ed:24:12:9a:d2:f4:3e:e1:ed:b4:9a:
78:c9:f2:15:86:27:92:99:0b:d2:1b:b9:1b:d8:fd:
22:1f:a8:0b:4c:5f:ba:77:18:1b:63:c9:22:04:08:
01:11:ab:52:7a:c6:89:75:a8:f8:14:8b:45:f7:58:
70:f5:7d:ba:3c:48:09:57:9d:2a:12:52:1f:39:7e:
0f:86:f7:ac:80:18:76:28:54:89:20:33:d5:9c:b7:
ae:a8:fe:3f:ef:4f:27:d7:34:a7:70:9d:5b:71:1e:
b5:18:66:d0:7f:5c:82:35:6c:6f:4f:02:f3:25:67:
84:15:d2:14:42:8e:45:c3:1e:39:19:96:9a:09:10:
dc:37:8d:1c:3e:92:ad:06:bd:22:2a:9c:0e:9b:48:
4a:2e:e6:4a:e4:1e:28:02:f3:20:a5:b0:51:81:7a:
a0:6b:f3:e9:2d:86:08:9b:da:f2:d2:e4:00:13:c4:
ff:20:52:50:ad:20:98:fc:d4:b9:92:f0:83:d9:38:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EA:08:61:0D:22:FD:0F:BD:72:41:F9:48:FF:09:93:89:1F:C7:64
X509v3 Authority Key Identifier:
keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c0:15:a7:ae:e1:4e:36:b4:83:2e:44:0a:26:12:66:0b:37:
3c:b6:6d:c3:ca:b8:d4:a7:83:5d:95:c3:55:34:4e:34:bf:d7:
18:03:25:59:0a:a0:59:39:ec:77:eb:61:36:01:57:47:7e:17:
c6:64:20:e2:4c:58:d3:2f:97:b4:dd:d4:ce:0c:c0:53:7a:72:
4f:4a:f1:de:6f:7b:85:25:4b:d7:be:84:49:74:76:47:9b:1a:
d8:48:cb:d6:a1:98:30:09:7b:91:47:97:e9:01:96:a4:17:ac:
9d:cf:bb:26:66:97:51:c8:52:a6:d5:f6:c5:de:0c:5b:e7:f6:
68:ee:f8:bb:46:b2:48:74:71:5e:d6:8c:2d:75:f1:ea:04:21:
a1:24:3e:8f:00:b8:34:2a:aa:65:d0:f7:c9:d1:be:c1:7b:a6:
0b:7a:d5:8c:b4:fa:3f:f5:e3:de:ec:41:44:5d:45:af:00:03:
6f:43:8d:49:ee:6a:d5:20:eb:d0:d9:18:5b:ba:3e:76:30:84:
6c:05:03:f9:8a:8f:02:dd:10:43:8f:69:57:29:e9:b9:58:83:
be:ac:84:1c:96:0e:7e:4b:a1:d0:05:4f:0f:0c:f9:ea:13:55:
a4:97:3e:e7:13:65:02:70:08:eb:12:0d:72:6e:55:6d:ab:4e:
7d:2b:c5:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RYiJiWUmEvheiSRFslEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YWQxZjU3NmUzZjcxYjRmNmMzMzkxZjJmYTM0M2Q1MDhi
NmIxZWUwHhcNMjUwNjI4MTYwMTE2WhcNMjUwNjI5MTYwMTE2WjAzMTEwLwYDVQQD
EyhmY2VhMDg2MTBkMjJmZDBmYmQ3MjQxZjk0OGZmMDk5Mzg5MWZjNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRpMxo6VWUMFxeZqky6VM6YpbNWp
s0Oac8u3xRq7ycoauduIkwGNvfPhShh++drGljBdk9GbpE1N2oIzWAiV7SQSmtL0
PuHttJp4yfIVhieSmQvSG7kb2P0iH6gLTF+6dxgbY8kiBAgBEatSesaJdaj4FItF
91hw9X26PEgJV50qElIfOX4PhvesgBh2KFSJIDPVnLeuqP4/708n1zSncJ1bcR61
GGbQf1yCNWxvTwLzJWeEFdIUQo5Fwx45GZaaCRDcN40cPpKtBr0iKpwOm0hKLuZK
5B4oAvMgpbBRgXqga/PpLYYIm9ry0uQAE8T/IFJQrSCY/NS5kvCD2TjWuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzqCGENIv0PvXJB+Uj/CZOJH8dkMB8GA1UdIwQY
MBaAFEetH1duP3G09sM5Hy+jQ9UItrHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yZTAyODYtNTYzOS00YTFjLThiZjIt
M2NjYjMwNzQwMjBmLzEvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yZTAyODYtNTYzOS00YTFjLThiZjItM2NjYjMwNzQwMjBm
LzEvUjYwZlYyNF9jYlQyd3prZkw2TkQxUWkyc2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcAVp67h
Tja0gy5ECiYSZgs3PLZtw8q41KeDXZXDVTRONL/XGAMlWQqgWTnsd+thNgFXR34X
xmQg4kxY0y+XtN3UzgzAU3pyT0rx3m97hSVL176ESXR2R5sa2EjL1qGYMAl7kUeX
6QGWpBesnc+7JmaXUchSptX2xd4MW+f2aO74u0aySHRxXtaMLXXx6gQhoSQ+jwC4
NCqqZdD3ydG+wXumC3rVjLT6P/Xj3uxBRF1FrwADb0ONSe5q1SDr0NkYW7o+djCE
bAUD+YqPAt0QQ49pVynpuViDvqyEHJYOfkuh0AVPDwz56hNVpJc+5xNlAnAI6xIN
cm5VbatOfSvFew==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:21 2025 by rpki-client