Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: GmFTtsoETun44R8eGwPTuhxkaLoceB7am3W/xCXNp74=
Subject key identifier: 90:D3:80:35:F5:B7:44:D5:4C:44:60:C4:79:7A:A6:EF:75:B4:79:3D
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 0197B6D7B111720563BDCC502C50C5D3BB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: FXtl59TcJR3/Dt1a5XdB8knL5tORexGxOSY4hdn0EuY=)
3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b1:11:72:05:63:bd:cc:50:2c:50:c5:d3:bb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=90d38035f5b744d54c4460c4797aa6ef75b4793d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:d5:c9:71:94:11:c8:0c:8b:25:f2:8d:b0:
91:57:c5:33:c7:83:0b:0c:62:46:07:ca:1e:a4:7f:
fd:0e:27:28:10:36:ea:b4:2c:60:e4:af:64:f8:54:
88:b3:da:4c:15:4e:04:3a:b5:6a:48:b6:8f:e0:a6:
64:2a:b6:33:28:89:eb:cb:56:75:07:ef:67:ae:bf:
0e:04:57:b2:cb:30:95:f5:2d:d1:e4:c5:9f:a4:dd:
dd:98:cf:d2:7a:a7:ae:ac:f6:82:9f:ba:e9:2e:ae:
96:db:25:70:d2:b6:7f:19:c9:eb:c7:e0:a0:08:be:
d1:b6:a3:60:43:af:bf:86:ce:6e:98:19:44:62:a6:
07:4e:af:c5:e9:d3:50:bf:3c:dc:26:0d:2a:a1:c6:
4f:58:08:a1:d5:54:ef:ca:97:c0:5f:fc:f0:16:e0:
33:6d:8f:f7:0d:a5:8e:86:4b:b1:57:17:4e:db:b6:
b0:a8:73:90:89:f5:5e:a5:c7:e9:3c:67:45:b2:71:
b1:69:8b:11:d1:bd:e9:7b:02:92:fe:30:2b:99:6e:
3a:db:58:85:2d:10:6b:fb:d5:67:f2:58:46:4d:c1:
99:80:c6:67:8b:7a:79:fc:a0:6d:b6:cf:ef:5b:ab:
24:87:93:e5:54:7a:ee:7a:37:b0:33:88:4e:74:1e:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:80:35:F5:B7:44:D5:4C:44:60:C4:79:7A:A6:EF:75:B4:79:3D
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:87:cb:99:4c:fa:f2:ba:24:cc:f7:0e:45:cb:88:d3:ec:ce:
10:34:4a:c7:7b:4e:b6:70:9c:ef:30:51:eb:9a:e9:9a:7a:0a:
25:38:15:48:56:4c:b1:8e:a9:ad:b0:2f:b3:64:c9:f1:fa:ef:
43:ab:81:2e:96:91:86:fc:79:9a:b5:5c:ef:d4:0c:44:61:f1:
31:e7:85:72:34:1e:15:26:86:f1:69:3c:65:34:ab:2c:01:c7:
6d:2f:23:b9:f9:c4:8d:ce:73:a5:3f:de:ca:5d:99:8d:1c:52:
e1:a7:c5:f5:2d:b1:54:6d:b7:e8:94:eb:ac:2b:ff:4b:6b:f7:
ad:c5:bd:f6:02:bc:db:6a:52:5d:ff:13:06:48:f5:8b:3f:7f:
93:ac:84:08:6e:8c:d3:93:0b:0c:71:1e:63:7a:46:80:9e:dd:
a4:a9:36:4a:3a:7e:2e:a1:ea:8f:05:91:05:12:d6:21:46:cc:
66:54:b5:4f:51:8b:89:ab:53:ea:1f:bb:3f:36:d5:8d:87:4f:
d6:75:17:1b:48:1a:cb:1b:5c:d1:cd:f3:4b:4f:78:9d:12:84:
ee:54:99:a3:1e:74:38:0b:ca:b6:1c:f3:7e:d4:d6:71:b1:4b:
4a:fd:aa:c3:0d:6f:c7:b5:34:46:01:e2:45:ec:5f:9b:01:a7:
20:97:0e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe217ERcgVjvcxQLFDF07ubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YWFhNTU1YTMyOWVkZDg2NjA2Y2MwZTNlMjk2YmQ0Nzhh
YzczZGUwHhcNMjUwNjI4MTQwMTE4WhcNMjUwNjI5MTQwMTE4WjAzMTEwLwYDVQQD
Eyg5MGQzODAzNWY1Yjc0NGQ1NGM0NDYwYzQ3OTdhYTZlZjc1YjQ3OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3TVyXGUEcgMiyXyjbCRV8Uzx4ML
DGJGB8oepH/9DicoEDbqtCxg5K9k+FSIs9pMFU4EOrVqSLaP4KZkKrYzKInry1Z1
B+9nrr8OBFeyyzCV9S3R5MWfpN3dmM/SeqeurPaCn7rpLq6W2yVw0rZ/Gcnrx+Cg
CL7RtqNgQ6+/hs5umBlEYqYHTq/F6dNQvzzcJg0qocZPWAih1VTvypfAX/zwFuAz
bY/3DaWOhkuxVxdO27awqHOQifVepcfpPGdFsnGxaYsR0b3pewKS/jArmW4621iF
LRBr+9Vn8lhGTcGZgMZni3p5/KBtts/vW6skh5PlVHruejewM4hOdB7mpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDTgDX1t0TVTERgxHl6pu91tHk9MB8GA1UdIwQY
MBaAFJeqpVWjKe3YZgbMDj4pa9R4rHPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xMTk1YWItZWQ0MS00NTJmLWJjMjIt
N2ZkMGRlYWUzMmM1LzEvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xMTk1YWItZWQ0MS00NTJmLWJjMjItN2ZkMGRlYWUzMmM1
LzEvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYfLmUz6
8rokzPcORcuI0+zOEDRKx3tOtnCc7zBR65rpmnoKJTgVSFZMsY6prbAvs2TJ8frv
Q6uBLpaRhvx5mrVc79QMRGHxMeeFcjQeFSaG8Wk8ZTSrLAHHbS8jufnEjc5zpT/e
yl2ZjRxS4afF9S2xVG236JTrrCv/S2v3rcW99gK822pSXf8TBkj1iz9/k6yECG6M
05MLDHEeY3pGgJ7dpKk2Sjp+LqHqjwWRBRLWIUbMZlS1T1GLiatT6h+7PzbVjYdP
1nUXG0gayxtc0c3zS094nRKE7lSZox50OAvKthzzftTWcbFLSv2qww1vx7U0RgHi
RexfmwGnIJcOcg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:55 2025 by rpki-client