Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: ifjvh5iV4JJHs+7oWF2tG03o2PdLzdNTt0uyKlRdnwo=
Subject key identifier: FE:FA:A4:E3:D4:75:B4:46:A9:F5:B1:D6:BA:54:FC:3B:01:3E:D5:AC
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 0197B8FD3A95B6E021072F21610ED7F0843E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 00:01:32 +0000
Manifest this update: Sun 29 Jun 2025 00:01:32 +0000
Manifest next update: Mon 30 Jun 2025 00:01:32 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: lBkRf5zizu8gHfD+W8K2v/nLd8g91UpemP6UuMa8QiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:3a:95:b6:e0:21:07:2f:21:61:0e:d7:f0:84:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Jun 29 00:01:32 2025 GMT
Not After : Jun 30 00:01:32 2025 GMT
Subject: CN=fefaa4e3d475b446a9f5b1d6ba54fc3b013ed5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:ab:c8:b1:42:9f:c3:79:b8:de:0e:92:b9:
95:ec:a3:42:bd:c1:3b:f1:17:e3:8c:97:33:b5:e7:
89:34:b0:1f:83:bf:df:f3:d2:3c:f1:b9:52:31:2c:
de:79:30:f5:90:29:37:3b:bb:75:aa:97:cd:a5:24:
9c:59:b9:e1:40:e1:d8:e2:6c:45:e0:fd:cc:da:44:
4d:37:19:63:69:6f:13:1a:39:14:98:52:a4:a2:a8:
f9:7d:ae:bd:56:42:81:b3:2d:f7:bd:89:91:17:d1:
42:83:71:1a:d9:3c:ab:53:4b:4e:b4:19:b1:3d:9a:
27:43:78:1d:d2:7c:f6:05:ee:09:cc:88:96:9c:0c:
27:30:be:a8:c5:ed:e4:8e:de:10:3a:d9:9e:c9:4c:
be:7c:c3:b8:1e:20:f0:e9:02:4d:ca:1e:4e:a1:6c:
be:1a:32:6e:b6:0b:10:64:54:de:a4:2b:24:70:bc:
7f:7a:ef:cd:a7:f5:1f:9b:1e:06:8e:fe:60:47:25:
80:dc:c5:f4:61:96:39:4b:57:13:05:ef:77:e2:d4:
e8:d1:a9:a9:b8:01:06:20:a8:61:e5:7e:d6:e5:6d:
52:73:d3:7f:15:43:23:58:25:d4:d2:80:8f:59:64:
24:f9:81:29:c1:a9:99:21:19:85:25:80:ae:c0:48:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:A4:E3:D4:75:B4:46:A9:F5:B1:D6:BA:54:FC:3B:01:3E:D5:AC
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ef:88:bf:0d:d9:4f:eb:e3:2e:f4:6b:0c:ba:7c:8f:be:0a:
2d:99:c6:45:2e:65:87:a1:88:3e:3e:83:62:ad:1d:5e:39:67:
ea:1a:81:4a:af:8d:59:42:32:78:b4:d1:f4:e1:a2:04:ac:09:
a6:af:10:07:1f:cb:10:12:20:e9:0d:78:f3:33:86:03:71:36:
94:a5:27:91:e0:4f:17:2c:89:24:5f:ec:79:ca:d9:9c:8b:02:
dc:0f:4b:b7:9c:63:93:60:5e:45:1d:88:36:e4:79:14:dc:9e:
5c:74:fa:c6:f9:84:50:a4:da:45:64:a1:fb:44:1e:97:ee:d4:
be:2e:46:51:02:de:01:f3:51:18:b4:7f:b4:a7:f7:e5:0b:c1:
6d:dc:c1:72:14:d6:0d:6c:d7:d5:ea:42:19:34:93:f0:53:b2:
0d:e3:26:94:8f:d5:19:44:28:31:c0:ee:a8:d0:d5:4c:20:16:
52:33:a6:fe:3f:4a:36:9f:31:0b:35:a2:6a:25:19:59:97:41:
01:f0:85:6f:e3:98:1f:7b:6e:97:40:f6:29:a2:79:8e:01:52:
ed:f5:55:e3:b8:24:b3:b1:9a:6c:27:82:7e:ea:94:a9:32:ed:
ed:e7:32:2c:37:04:96:d1:5a:eb:b8:f9:c7:4a:b5:11:d6:f9:
ff:74:59:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/TqVtuAhBy8hYQ7X8IQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNTNiMDI5NGQzYzhkYjE1MzA2YWIxMDlkNTA2ZGE3NGFl
NzA5NzkwHhcNMjUwNjI5MDAwMTMyWhcNMjUwNjMwMDAwMTMyWjAzMTEwLwYDVQQD
EyhmZWZhYTRlM2Q0NzViNDQ2YTlmNWIxZDZiYTU0ZmMzYjAxM2VkNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaKryLFCn8N5uN4OkrmV7KNCvcE7
8RfjjJczteeJNLAfg7/f89I88blSMSzeeTD1kCk3O7t1qpfNpSScWbnhQOHY4mxF
4P3M2kRNNxljaW8TGjkUmFKkoqj5fa69VkKBsy33vYmRF9FCg3Ea2TyrU0tOtBmx
PZonQ3gd0nz2Be4JzIiWnAwnML6oxe3kjt4QOtmeyUy+fMO4HiDw6QJNyh5OoWy+
GjJutgsQZFTepCskcLx/eu/Np/Ufmx4Gjv5gRyWA3MX0YZY5S1cTBe934tTo0amp
uAEGIKhh5X7W5W1Sc9N/FUMjWCXU0oCPWWQk+YEpwamZIRmFJYCuwEglJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP76pOPUdbRGqfWx1rpU/DsBPtWsMB8GA1UdIwQY
MBaAFHFTsClNPI2xUwarEJ1QbadK5wl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjIt
MjI5NGNkZGE2YTQwLzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjItMjI5NGNkZGE2YTQw
LzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWe+Ivw3Z
T+vjLvRrDLp8j74KLZnGRS5lh6GIPj6DYq0dXjln6hqBSq+NWUIyeLTR9OGiBKwJ
pq8QBx/LEBIg6Q148zOGA3E2lKUnkeBPFyyJJF/secrZnIsC3A9Lt5xjk2BeRR2I
NuR5FNyeXHT6xvmEUKTaRWSh+0Qel+7Uvi5GUQLeAfNRGLR/tKf35QvBbdzBchTW
DWzX1epCGTST8FOyDeMmlI/VGUQoMcDuqNDVTCAWUjOm/j9KNp8xCzWiaiUZWZdB
AfCFb+OYH3tul0D2KaJ5jgFS7fVV47gks7GabCeCfuqUqTLt7ecyLDcEltFa67j5
x0q1Edb5/3RZvw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:33:51 2025 by rpki-client