Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: wFyi4keUqE1Xa+KHb9RVY0iEwyCnhfall1HPD7/qP4E=
Subject key identifier: 9A:C2:17:72:8F:0D:85:D5:95:92:86:C2:F6:0E:58:FD:7D:AC:DF:F2
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 0197B820DEF7FDF4E346363AD9EC9329744D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 0DB9
Signing time: Sat 28 Jun 2025 20:00:51 +0000
Manifest this update: Sat 28 Jun 2025 20:00:51 +0000
Manifest next update: Sun 29 Jun 2025 20:00:51 +0000
Files and hashes: 1: WE4vStdUw7e2RexA2uVQrcHSC4Y.roa (hash: UJ9it5wcaDKphifUsLvzyU+8UhqAc1r+2HZRVAecKf8=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: bcDbyTMxD8X2KqHj9gXXyrm3m+gEAsF9ZwTtv4jrvp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:de:f7:fd:f4:e3:46:36:3a:d9:ec:93:29:74:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Jun 28 20:00:51 2025 GMT
Not After : Jun 29 20:00:51 2025 GMT
Subject: CN=9ac217728f0d85d5959286c2f60e58fd7dacdff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:6a:3a:e0:91:27:7e:8a:b4:71:bf:25:60:
64:f1:06:7b:7f:8c:98:12:8c:a6:09:76:5a:fb:27:
5f:aa:3c:21:50:8f:cb:0d:7b:e5:d9:e4:03:cf:37:
81:17:66:29:17:ae:30:10:50:25:72:cb:bb:c2:db:
5a:40:20:7f:34:05:11:ba:58:cd:73:ac:da:56:6f:
d4:89:66:2c:93:10:b4:61:8a:c0:f6:c4:7f:2e:a3:
6f:f4:e8:83:54:e9:e3:1c:fa:3c:cb:6c:08:62:d5:
96:07:c0:18:67:be:fb:60:79:c7:1c:fc:5c:76:76:
19:e1:d3:4e:72:6b:22:02:0e:f1:31:0d:c6:39:b2:
aa:31:bd:73:e3:9b:4e:9d:55:7f:f8:f9:c8:a7:9a:
8c:f8:02:2f:48:28:35:c2:34:02:3a:22:c8:a7:06:
21:67:ea:de:ce:8e:6c:12:02:d2:8a:85:3a:c0:23:
ba:5c:d7:0b:a5:3b:3a:9c:4d:1e:77:6a:19:3f:71:
be:8d:da:52:fc:5b:1d:5b:1d:b8:84:78:41:a3:87:
8c:a2:fb:e8:cf:e2:d1:9e:21:08:52:72:df:5c:4a:
7d:6c:97:a4:e9:76:e1:28:cf:80:5d:bc:c6:17:6e:
a7:40:0c:1d:50:17:fb:4d:7c:10:7a:b5:8b:51:5f:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C2:17:72:8F:0D:85:D5:95:92:86:C2:F6:0E:58:FD:7D:AC:DF:F2
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:27:60:d3:e4:bf:56:f3:27:ea:81:52:94:ab:e1:0d:ea:c8:
3a:83:10:d5:76:68:53:49:a1:83:c0:9a:22:26:6f:0b:6d:b0:
e6:c2:06:e2:97:00:00:e6:fa:29:14:55:64:2d:1c:a3:c6:e4:
0f:fe:ee:ee:48:e6:94:e1:a9:d5:e6:2b:87:ca:7b:d6:f5:11:
2e:0e:c3:99:fe:35:df:71:a8:5c:82:cb:2a:9f:87:b4:86:d9:
e5:b1:35:ce:57:55:fe:39:f8:69:8f:3b:ed:42:cf:e5:a2:42:
f3:e5:b9:7e:a9:f9:aa:0b:97:77:2d:c4:6c:86:e3:ad:64:7d:
11:4e:d9:21:e7:4d:e7:9c:01:b5:4f:0a:ee:ed:6c:f4:d3:b0:
b3:df:dd:85:87:23:a9:ea:5f:02:c2:94:09:78:9e:b0:78:90:
64:63:72:9d:ad:85:d2:d3:ea:1a:7a:05:31:6e:24:55:7d:c2:
40:17:09:fe:85:c2:03:55:b7:02:19:0c:74:35:83:5b:d1:27:
9d:9a:f3:00:fb:5c:50:1d:17:cb:ce:74:43:60:45:e8:50:ab:
94:fc:27:cb:54:b8:21:d2:ae:b7:12:ca:40:49:fd:dc:b3:97:
51:99:9d:88:cd:ac:7c:a9:2c:e6:ba:53:d1:9a:1e:6d:cd:b3:
89:06:c0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IN73/fTjRjY62eyTKXRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjA5YzkyNjQ2YWUzNDJjYWE1ZDQ2ZGMxZDM3MzVhMGQy
ZTdiMTQwHhcNMjUwNjI4MjAwMDUxWhcNMjUwNjI5MjAwMDUxWjAzMTEwLwYDVQQD
Eyg5YWMyMTc3MjhmMGQ4NWQ1OTU5Mjg2YzJmNjBlNThmZDdkYWNkZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZJqOuCRJ36KtHG/JWBk8QZ7f4yY
EoymCXZa+ydfqjwhUI/LDXvl2eQDzzeBF2YpF64wEFAlcsu7wttaQCB/NAURuljN
c6zaVm/UiWYskxC0YYrA9sR/LqNv9OiDVOnjHPo8y2wIYtWWB8AYZ777YHnHHPxc
dnYZ4dNOcmsiAg7xMQ3GObKqMb1z45tOnVV/+PnIp5qM+AIvSCg1wjQCOiLIpwYh
Z+rezo5sEgLSioU6wCO6XNcLpTs6nE0ed2oZP3G+jdpS/FsdWx24hHhBo4eMovvo
z+LRniEIUnLfXEp9bJek6XbhKM+AXbzGF26nQAwdUBf7TXwQerWLUV/HcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrCF3KPDYXVlZKGwvYOWP19rN/yMB8GA1UdIwQY
MBaAFK4gnJJkauNCyqXUbcHTc1oNLnsUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgt
ZTBhMjNkYTVlNjI4LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgtZTBhMjNkYTVlNjI4
LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALydg0+S/
VvMn6oFSlKvhDerIOoMQ1XZoU0mhg8CaIiZvC22w5sIG4pcAAOb6KRRVZC0co8bk
D/7u7kjmlOGp1eYrh8p71vURLg7Dmf4133GoXILLKp+HtIbZ5bE1zldV/jn4aY87
7ULP5aJC8+W5fqn5qguXdy3EbIbjrWR9EU7ZIedN55wBtU8K7u1s9NOws9/dhYcj
qepfAsKUCXiesHiQZGNyna2F0tPqGnoFMW4kVX3CQBcJ/oXCA1W3AhkMdDWDW9En
nZrzAPtcUB0Xy850Q2BF6FCrlPwny1S4IdKutxLKQEn93LOXUZmdiM2sfKks5rpT
0Zoebc2ziQbAYw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:31:16 2025 by rpki-client