Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
File: RwFMkm6nbVZunoqW1YYdR1fIsOo.mft (raw, json)
Hash identifier: 8FUtAauKsxMxGFb/wSeiMgLN5TyGCSgBlOP9YE/McwY=
Subject key identifier: FB:10:4A:CA:85:2A:A1:B2:1A:93:77:03:D3:EB:89:7F:76:4E:9E:8A
Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
Certificate issuer: /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Certificate serial: 0197B632926F5F3255F0858E99D72A065734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 11:00:56 +0000
Manifest this update: Sat 28 Jun 2025 11:00:56 +0000
Manifest next update: Sun 29 Jun 2025 11:00:56 +0000
Files and hashes: 1: RwFMkm6nbVZunoqW1YYdR1fIsOo.crl (hash: rArIwJp8DBFOPmic31YdvJ+BbbJrNDZr26NAGKtz6t8=)
2: pFLpzrM-iV1fQ_hTxX2xOEHMjt0.roa (hash: aLstNITfJuEBD1I0LdnhTrgtI2g65BeTn/qvRZrCSW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:92:6f:5f:32:55:f0:85:8e:99:d7:2a:06:57:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Validity
Not Before: Jun 28 11:00:56 2025 GMT
Not After : Jun 29 11:00:56 2025 GMT
Subject: CN=fb104aca852aa1b21a937703d3eb897f764e9e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:57:c6:c2:68:3f:ac:be:14:48:b6:1e:bd:
9a:1e:cf:52:2b:bb:c1:a1:ad:57:b4:a6:99:2b:86:
02:39:15:b5:f6:6f:31:9b:4c:f7:2e:ec:cf:b6:c4:
b5:0f:ba:fb:f7:28:ee:09:60:4a:2d:c3:b5:3b:b9:
ec:96:56:20:c2:bc:c5:4b:ee:d1:53:49:1a:c7:de:
43:04:1a:24:f6:15:26:05:d0:8e:94:96:24:5b:94:
cb:63:be:9c:90:af:dc:a6:de:38:b1:7f:e1:f2:3b:
ca:88:9f:12:39:88:db:ed:75:79:2f:38:3f:dd:72:
3d:e5:08:1f:ad:78:02:b2:cd:b4:06:2c:a5:a7:cf:
81:58:ff:f2:84:98:84:e7:59:21:53:eb:63:d3:27:
93:ef:ed:4b:8f:d5:de:1a:6c:d4:a4:53:6f:7d:24:
37:3c:12:de:83:7f:af:07:bc:9d:ef:7f:b9:48:85:
82:34:e2:6d:82:8e:34:7a:16:9a:b5:68:da:03:c5:
3b:33:8d:dd:b2:e0:de:49:70:8f:c1:0b:52:21:55:
0b:f0:f3:f2:37:bf:39:bb:ff:a4:b6:b4:1d:b5:8d:
3d:b8:54:c9:b2:11:85:e6:d2:ec:94:54:18:7d:79:
2f:b2:52:1e:21:aa:86:30:51:66:44:93:94:98:57:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:4A:CA:85:2A:A1:B2:1A:93:77:03:D3:EB:89:7F:76:4E:9E:8A
X509v3 Authority Key Identifier:
keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6e:b1:ea:37:23:34:49:32:e7:88:bd:3f:11:56:fa:e5:16:
cd:5e:ee:c4:7f:22:f3:4c:77:62:b6:b9:c9:71:ad:d7:a7:a0:
cf:af:2c:63:53:a7:f1:4e:86:3f:fa:da:17:7d:7b:1b:43:97:
08:34:55:5d:9a:f6:61:af:a6:23:44:54:4c:8d:3c:56:fd:2c:
22:ff:14:df:ba:d7:86:f3:d4:db:84:81:87:59:0e:b7:1d:5d:
60:35:dc:15:c7:cf:f1:fa:2d:ad:a0:b8:b6:a0:bd:44:77:31:
6a:56:72:eb:f7:52:b6:c6:06:5c:87:45:17:50:8c:e0:21:84:
c7:ec:be:72:c4:02:fa:c2:f9:6e:35:68:95:41:ef:41:54:81:
8a:40:24:34:ce:f9:6c:41:03:77:06:6a:d0:24:b5:99:60:ac:
00:18:b7:77:f8:cc:c5:38:9c:4f:a6:d2:40:97:27:76:3a:87:
2d:af:25:d0:37:94:e4:44:b6:d1:ce:b5:67:fe:73:3c:bf:ab:
38:bd:1d:84:80:fd:06:a7:fc:f2:73:b5:ff:f6:e9:2c:00:d9:
04:bb:48:a1:a8:cd:39:d4:e0:bf:56:60:a3:85:03:a5:c3:87:
cb:8c:23:ba:e0:63:fb:e6:94:40:d3:0d:01:e0:de:e1:e6:c9:
b5:d5:f1:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MpJvXzJV8IWOmdcqBlc0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDE0YzkyNmVhNzZkNTY2ZTllOGE5NmQ1ODYxZDQ3NTdj
OGIwZWEwHhcNMjUwNjI4MTEwMDU2WhcNMjUwNjI5MTEwMDU2WjAzMTEwLwYDVQQD
EyhmYjEwNGFjYTg1MmFhMWIyMWE5Mzc3MDNkM2ViODk3Zjc2NGU5ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTxXxsJoP6y+FEi2Hr2aHs9SK7vB
oa1XtKaZK4YCORW19m8xm0z3LuzPtsS1D7r79yjuCWBKLcO1O7nsllYgwrzFS+7R
U0kax95DBBok9hUmBdCOlJYkW5TLY76ckK/cpt44sX/h8jvKiJ8SOYjb7XV5Lzg/
3XI95QgfrXgCss20Biylp8+BWP/yhJiE51khU+tj0yeT7+1Lj9XeGmzUpFNvfSQ3
PBLeg3+vB7yd73+5SIWCNOJtgo40ehaatWjaA8U7M43dsuDeSXCPwQtSIVUL8PPy
N785u/+ktrQdtY09uFTJshGF5tLslFQYfXkvslIeIaqGMFFmRJOUmFc/jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsQSsqFKqGyGpN3A9PriX92Tp6KMB8GA1UdIwQY
MBaAFEcBTJJup21Wbp6KltWGHUdXyLDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMt
YWJhNGU2NDMwNThlLzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMtYWJhNGU2NDMwNThl
LzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaW6x6jcj
NEky54i9PxFW+uUWzV7uxH8i80x3Yra5yXGt16egz68sY1On8U6GP/raF317G0OX
CDRVXZr2Ya+mI0RUTI08Vv0sIv8U37rXhvPU24SBh1kOtx1dYDXcFcfP8fotraC4
tqC9RHcxalZy6/dStsYGXIdFF1CM4CGEx+y+csQC+sL5bjVolUHvQVSBikAkNM75
bEEDdwZq0CS1mWCsABi3d/jMxTicT6bSQJcndjqHLa8l0DeU5ES20c61Z/5zPL+r
OL0dhID9Bqf88nO1//bpLADZBLtIoajNOdTgv1Zgo4UDpcOHy4wjuuBj++aUQNMN
AeDe4ebJtdXx/w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:52 2025 by rpki-client