Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
File: V8H-gINkZ0mBatP6ZAmDRfth6fU.mft (raw, json)
Hash identifier: EEdrLbgSnBOXN2QukwSRj8K8bRo0Nd4kZ0etmIbIHZI=
Subject key identifier: 9A:4C:54:8A:F2:AE:09:CA:05:CB:C9:28:BA:0A:9D:B0:BB:96:13:BE
Authority key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Certificate issuer: /CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Certificate serial: 0197B70E4E1C7B108BFE0627CA94A1121DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: DtG9QHgbh6DEslt8mTDXVaxdqQ4.roa (hash: FeW6iqctyQqjdDbIjMhTvYTHZA4p9G/jqf5MmgvmOo4=)
2: V8H-gINkZ0mBatP6ZAmDRfth6fU.crl (hash: ZfZ3IO9IaE+IICstsDPQSN1kY23Bpl1Ea8KE1GF+1ZA=)
3: VtwjP8CmtTeLWVW9N6o-K_qnKwA.roa (hash: HsIDoGOSVnTIqa9qpiTR9Xg//0nmdy2yaZaBVdQZxQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4e:1c:7b:10:8b:fe:06:27:ca:94:a1:12:1d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=9a4c548af2ae09ca05cbc928ba0a9db0bb9613be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:37:0b:07:c3:bd:07:66:79:9e:f6:d0:d4:
80:2a:14:4f:90:04:f6:d0:2e:db:a4:bb:40:84:30:
be:58:56:b3:29:ab:f1:a5:fe:51:14:f5:94:1c:e5:
9b:ec:f0:70:ea:83:1a:83:15:25:ca:af:b4:c9:1a:
18:8d:5d:1b:db:00:e6:04:5e:79:01:0e:f8:cb:63:
30:1b:53:89:46:7d:f4:c0:49:23:ae:cc:67:88:08:
45:7f:34:55:75:5a:be:1f:3a:ff:2c:69:18:a3:25:
8c:bb:f3:8c:23:58:48:38:47:d3:cf:1f:ae:bf:4b:
b2:9c:a0:38:86:03:a9:57:36:98:a6:0a:8b:84:9b:
e2:d3:8f:16:32:f0:87:9b:54:90:8c:94:2c:94:23:
af:b0:73:2d:2b:1c:e1:ba:35:09:ba:42:e4:a4:5d:
cd:3a:ec:fd:dd:c6:3c:0d:c0:f7:84:ce:7f:8e:82:
16:1b:f6:1d:aa:dd:55:31:db:03:d3:5f:b5:a2:1e:
d6:eb:db:ab:d7:89:67:2d:1b:17:89:b9:a5:73:6c:
b1:7e:2a:4c:aa:e6:dc:06:4c:53:3a:9a:0f:07:16:
e5:a7:02:19:9e:61:52:75:8a:54:6e:03:8e:4c:6d:
bb:90:fc:2a:39:ad:af:d2:cf:48:78:7d:81:3d:83:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4C:54:8A:F2:AE:09:CA:05:CB:C9:28:BA:0A:9D:B0:BB:96:13:BE
X509v3 Authority Key Identifier:
keyid:57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:04:7c:63:99:1a:00:c9:b3:47:1a:4f:a4:1a:1a:f0:71:26:
3d:9e:c6:9a:55:c8:54:fd:58:de:6c:79:df:2d:0b:7f:4d:7d:
cc:09:17:d8:49:57:f3:fb:dd:28:4f:b9:9f:c5:26:39:8d:50:
97:85:81:01:70:cc:c9:2b:83:8c:95:22:52:40:c1:7d:f1:9b:
6e:89:f6:10:dd:e3:53:d8:d1:4c:9c:a2:8f:92:12:64:1f:51:
a2:7a:e8:6b:81:bf:0f:ed:d2:ce:da:be:1f:86:c7:c7:46:d1:
4d:74:f3:7e:85:46:bf:61:0c:e8:39:dd:71:2e:a6:68:bb:a2:
c8:aa:d2:64:9b:53:0e:73:1f:48:c5:7b:d9:62:da:ca:46:47:
f4:83:bd:97:5c:94:83:ae:af:dc:1f:32:65:30:32:01:61:2c:
15:6a:d4:04:9e:a5:bb:14:49:55:e6:43:28:05:27:b7:a0:24:
3b:40:f2:fd:56:92:e8:6d:91:64:47:52:5b:43:df:f8:db:01:
28:61:a3:85:98:27:be:94:02:b6:eb:51:9e:0d:95:6e:04:72:
b5:0a:39:1a:13:98:da:7b:90:e3:57:df:c4:08:75:5d:39:33:
2c:52:5b:de:5f:73:90:15:79:da:25:d4:be:36:c7:19:66:b8:
ae:3e:fb:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dk4cexCL/gYnypShEh3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzFmZTgwODM2NDY3NDk4MTZhZDNmYTY0MDk4MzQ1ZmI2
MWU5ZjUwHhcNMjUwNjI4MTUwMDU3WhcNMjUwNjI5MTUwMDU3WjAzMTEwLwYDVQQD
Eyg5YTRjNTQ4YWYyYWUwOWNhMDVjYmM5MjhiYTBhOWRiMGJiOTYxM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqw3CwfDvQdmeZ720NSAKhRPkAT2
0C7bpLtAhDC+WFazKavxpf5RFPWUHOWb7PBw6oMagxUlyq+0yRoYjV0b2wDmBF55
AQ74y2MwG1OJRn30wEkjrsxniAhFfzRVdVq+Hzr/LGkYoyWMu/OMI1hIOEfTzx+u
v0uynKA4hgOpVzaYpgqLhJvi048WMvCHm1SQjJQslCOvsHMtKxzhujUJukLkpF3N
Ouz93cY8DcD3hM5/joIWG/Ydqt1VMdsD01+1oh7W69ur14lnLRsXibmlc2yxfipM
qubcBkxTOpoPBxblpwIZnmFSdYpUbgOOTG27kPwqOa2v0s9IeH2BPYPIawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpMVIryrgnKBcvJKLoKnbC7lhO+MB8GA1UdIwQY
MBaAFFfB/oCDZGdJgWrT+mQJg0X7Yen1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjQ3MDgtZWVmOS00OWRlLWI4ODct
ZjMyMDY5ZWM0ZWU1LzEvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xYjQ3MDgtZWVmOS00OWRlLWI4ODctZjMyMDY5ZWM0ZWU1
LzEvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwR8Y5ka
AMmzRxpPpBoa8HEmPZ7GmlXIVP1Y3mx53y0Lf019zAkX2ElX8/vdKE+5n8UmOY1Q
l4WBAXDMySuDjJUiUkDBffGbbon2EN3jU9jRTJyij5ISZB9Ronroa4G/D+3Sztq+
H4bHx0bRTXTzfoVGv2EM6DndcS6maLuiyKrSZJtTDnMfSMV72WLaykZH9IO9l1yU
g66v3B8yZTAyAWEsFWrUBJ6luxRJVeZDKAUnt6AkO0Dy/VaS6G2RZEdSW0Pf+NsB
KGGjhZgnvpQCtutRng2VbgRytQo5GhOY2nuQ41ffxAh1XTkzLFJb3l9zkBV52iXU
vjbHGWa4rj77fA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:48 2025 by rpki-client