Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier: zX8J+f3G8tfhxMYCbvrRsHkVVc2Xf/InqMpODsbNY0c=
Subject key identifier: D3:76:E0:3E:F2:A8:46:3F:75:28:FE:A2:A9:80:F5:3A:EF:77:E2:BD
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 0197B6D78757687087407F0717FB314BA130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number: 13FA
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: 1-mxTaqS9jnMIVzPA52AOuEvFZm4.roa (hash: 1RjRiQMb+qYiL+Zpi5jDEokqMnjDRUg4dGO0fKP7lfA=)
2: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: kZBDgTG7cnom5/lZ814myzER3gWqacgSq6EIgtnZsvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:87:57:68:70:87:40:7f:07:17:fb:31:4b:a1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=d376e03ef2a8463f7528fea2a980f53aef77e2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:81:ce:62:ef:db:60:21:44:56:7b:e0:ff:
3e:32:1b:a8:6f:95:fb:09:fd:37:0f:4f:88:a0:8c:
4c:0f:a8:81:b1:11:33:e7:f5:cf:8c:c0:2b:22:db:
c8:9a:f2:80:22:f0:b8:65:2f:29:56:c3:f6:46:ef:
12:03:df:b2:8b:77:ce:8c:40:68:d2:fe:e4:07:b8:
1b:9b:39:9e:85:4a:1a:d7:fc:0a:3b:8d:4f:f6:d5:
72:9c:39:24:47:48:04:e6:6e:50:f1:67:1b:89:cd:
8c:ba:26:90:57:b9:0d:20:33:96:a5:e2:dc:6e:1c:
68:74:41:b1:94:60:94:65:2f:c3:aa:60:92:eb:d6:
c1:48:99:6a:d3:88:d1:d1:85:70:1f:a2:5a:de:e9:
39:c8:0e:06:79:8a:a9:88:a8:22:80:52:d2:63:bb:
d7:92:57:14:ea:41:a5:28:c1:62:71:3a:59:c8:5d:
41:b9:2a:38:4a:59:26:fa:04:51:c1:71:55:a5:68:
b6:dd:cb:ca:c0:37:42:aa:ac:be:a7:23:bc:84:91:
01:15:81:da:f4:36:44:d5:e0:c7:bd:d1:8f:6f:e2:
6a:3f:97:a8:0a:fb:19:54:83:e4:1a:8d:50:c3:3e:
5e:13:20:44:8c:4d:b5:cd:c1:07:89:e6:81:1a:04:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:76:E0:3E:F2:A8:46:3F:75:28:FE:A2:A9:80:F5:3A:EF:77:E2:BD
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:24:30:07:ea:9e:30:86:c8:d8:85:da:9a:f2:a1:88:ef:9b:
fc:d1:f8:28:d0:58:6a:63:80:19:fe:56:7b:31:04:5a:d5:7f:
77:c9:ee:01:c0:eb:08:80:6c:7b:ae:d5:03:d1:8a:88:7c:85:
f6:43:8e:a3:66:a9:33:ff:c3:6f:c3:42:2b:01:eb:e1:f0:21:
25:ff:06:f8:78:15:aa:91:9b:41:39:3a:28:68:59:af:50:5c:
dd:82:de:a0:31:48:38:b3:d0:5c:ae:ee:6b:74:78:fa:5a:15:
29:04:ba:28:ef:d7:81:e4:1d:86:2c:34:19:40:b7:f5:1d:30:
c2:e1:c1:5e:17:d0:60:83:98:de:0f:da:be:c0:ef:d3:e5:d6:
65:cd:df:89:c3:e5:a9:ef:25:79:d3:64:db:b7:97:6a:77:f8:
14:73:d1:eb:b3:55:47:59:88:2b:84:d3:f1:88:58:9b:9d:a6:
90:0d:88:1d:3c:18:55:95:d2:44:ba:a0:f0:34:61:f8:67:7a:
68:b5:93:50:fb:47:a6:af:42:f1:9f:50:44:aa:bf:a4:3c:be:
05:2d:d0:58:c6:6f:b0:60:18:00:3f:c9:9f:9e:6c:51:da:66:
9f:fc:0b:47:0e:78:bb:58:c2:7b:03:e2:95:b2:7e:1f:e0:80:
50:82:d0:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214dXaHCHQH8HF/sxS6EwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDNlNDYzZjExY2NhZDA1NWQxNjYyZTAwOGMyYTk0ZjQy
ZGU5ZGUwHhcNMjUwNjI4MTQwMTA3WhcNMjUwNjI5MTQwMTA3WjAzMTEwLwYDVQQD
EyhkMzc2ZTAzZWYyYTg0NjNmNzUyOGZlYTJhOTgwZjUzYWVmNzdlMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmyBzmLv22AhRFZ74P8+Mhuob5X7
Cf03D0+IoIxMD6iBsREz5/XPjMArItvImvKAIvC4ZS8pVsP2Ru8SA9+yi3fOjEBo
0v7kB7gbmzmehUoa1/wKO41P9tVynDkkR0gE5m5Q8Wcbic2MuiaQV7kNIDOWpeLc
bhxodEGxlGCUZS/DqmCS69bBSJlq04jR0YVwH6Ja3uk5yA4GeYqpiKgigFLSY7vX
klcU6kGlKMFicTpZyF1BuSo4Slkm+gRRwXFVpWi23cvKwDdCqqy+pyO8hJEBFYHa
9DZE1eDHvdGPb+JqP5eoCvsZVIPkGo1Qwz5eEyBEjE21zcEHieaBGgS17QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNN24D7yqEY/dSj+oqmA9Trvd+K9MB8GA1UdIwQY
MBaAFOfT5GPxHMrQVdFmLgCMKpT0LeneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUt
MjJiODQ5OGI1MTViLzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUtMjJiODQ5OGI1MTVi
LzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSQwB+qe
MIbI2IXamvKhiO+b/NH4KNBYamOAGf5WezEEWtV/d8nuAcDrCIBse67VA9GKiHyF
9kOOo2apM//Db8NCKwHr4fAhJf8G+HgVqpGbQTk6KGhZr1Bc3YLeoDFIOLPQXK7u
a3R4+loVKQS6KO/XgeQdhiw0GUC39R0wwuHBXhfQYIOY3g/avsDv0+XWZc3ficPl
qe8ledNk27eXanf4FHPR67NVR1mIK4TT8YhYm52mkA2IHTwYVZXSRLqg8DRh+Gd6
aLWTUPtHpq9C8Z9QRKq/pDy+BS3QWMZvsGAYAD/Jn55sUdpmn/wLRw54u1jCewPi
lbJ+H+CAUILQWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:53 2025 by rpki-client