Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier: 0JrgY9qOmoyYOY/oBpq715wt2odswK2vYu8zC1BNNf0=
Subject key identifier: AB:A9:B1:13:DA:5C:F9:3B:86:CF:09:11:EF:03:26:67:FB:06:DD:91
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 0197C0ED8EDBFE88C4D1687DB6EFCBB1578C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number: 1530
Signing time: Mon 30 Jun 2025 13:01:23 +0000
Manifest this update: Mon 30 Jun 2025 13:01:23 +0000
Manifest next update: Tue 01 Jul 2025 13:01:23 +0000
Files and hashes: 1: TcxQ_LIgSlnQjiSbvcx7DOq2_Zc.roa (hash: v9utTlGogD+SmAb7nxAo7ersLZspEGf0TY5tMFbjRB8=)
2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: 9QuOIibF3uqPspo8qLRK8G1AT8sRF6kIh9ktfSz8Lpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:8e:db:fe:88:c4:d1:68:7d:b6:ef:cb:b1:57:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: Jun 30 13:01:23 2025 GMT
Not After : Jul 1 13:01:23 2025 GMT
Subject: CN=aba9b113da5cf93b86cf0911ef032667fb06dd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:88:c0:b6:14:b9:76:96:4c:75:a6:fe:88:e2:
be:35:e2:ed:4e:bc:9a:3c:4c:22:0d:92:ea:34:06:
2a:44:1d:89:35:ab:b5:48:61:b4:ee:09:03:7c:96:
53:03:1e:4d:86:6e:cd:1d:49:c3:89:35:cd:36:d7:
8c:de:43:24:60:45:e1:cd:31:92:ed:42:4b:17:80:
6e:33:1b:bc:55:8a:18:52:e7:53:c9:bb:af:e2:27:
d0:88:66:0e:12:84:08:6a:e5:6c:46:6b:1b:13:ab:
f4:ea:62:85:a6:e1:b3:51:cd:47:d9:ff:8c:31:7b:
16:e1:f0:ac:49:bd:0d:e3:b1:55:b9:2c:89:92:6b:
f7:97:18:40:d2:65:a2:03:93:99:64:91:a5:af:f9:
18:c3:3c:0b:36:5d:ee:b5:a2:df:16:d1:d6:99:ed:
36:ec:b0:83:3f:b3:24:fd:3e:f9:90:07:d8:7e:8f:
7b:7f:fd:a3:71:d3:d0:b8:69:a5:f6:e1:7f:50:cd:
eb:36:58:69:38:19:a8:3d:6c:d8:c5:5b:74:a4:4b:
23:10:3d:07:b4:61:3e:cd:cd:5c:c4:79:5e:74:25:
1c:f8:b1:1a:10:64:05:1b:90:3f:f0:e2:65:f3:7f:
32:09:b5:9c:a5:f5:55:68:31:e2:59:de:85:8b:e4:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A9:B1:13:DA:5C:F9:3B:86:CF:09:11:EF:03:26:67:FB:06:DD:91
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:93:9c:58:84:7d:22:29:83:2d:ab:43:fa:b7:25:df:56:9c:
d6:60:04:0c:18:c1:14:15:94:c4:cc:20:e9:9c:d8:38:a8:19:
f5:f3:46:94:a3:68:47:b9:98:a2:53:e4:ac:9a:46:2f:d8:4e:
c2:66:92:9f:78:3b:1d:26:4c:1e:f0:8c:6e:cb:88:7f:16:67:
0b:e1:e4:f0:ea:b1:b4:f2:54:0e:06:e5:6a:f3:cf:6c:99:ba:
22:9b:18:c1:3e:e3:e3:cf:80:b4:b2:98:f4:1d:a7:68:5d:58:
a0:13:7f:09:59:c4:a6:91:7a:53:57:b3:ec:ae:fa:c3:0e:5e:
d3:81:4e:05:8f:ed:63:dd:fe:65:a1:5c:57:8c:a8:14:09:e8:
19:d0:23:4c:92:0a:d7:8c:8b:25:76:cd:e4:e1:e2:35:e0:37:
bb:90:2c:24:95:1d:65:d0:0f:7c:67:49:60:e5:17:9d:e5:69:
43:42:98:da:d9:59:13:3e:96:09:9f:db:ad:94:ed:9f:05:cb:
06:f0:85:a0:b4:df:af:69:82:7d:be:1d:82:78:c8:27:c4:c4:
b6:93:d1:b5:c6:4d:69:5b:f7:ce:67:ad:b5:63:55:37:03:ca:
27:41:75:0e:0c:72:d2:86:73:c8:35:d2:d3:cc:d4:02:a3:d9:
4c:f2:ed:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfA7Y7b/ojE0Wh9tu/LsVeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWVmY2E4NmRlYTcwZDNlZTkwMTgxNjc4YzhlYjMwZTY5
MTZkMWQwHhcNMjUwNjMwMTMwMTIzWhcNMjUwNzAxMTMwMTIzWjAzMTEwLwYDVQQD
EyhhYmE5YjExM2RhNWNmOTNiODZjZjA5MTFlZjAzMjY2N2ZiMDZkZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IjAthS5dpZMdab+iOK+NeLtTrya
PEwiDZLqNAYqRB2JNau1SGG07gkDfJZTAx5Nhm7NHUnDiTXNNteM3kMkYEXhzTGS
7UJLF4BuMxu8VYoYUudTybuv4ifQiGYOEoQIauVsRmsbE6v06mKFpuGzUc1H2f+M
MXsW4fCsSb0N47FVuSyJkmv3lxhA0mWiA5OZZJGlr/kYwzwLNl3utaLfFtHWme02
7LCDP7Mk/T75kAfYfo97f/2jcdPQuGml9uF/UM3rNlhpOBmoPWzYxVt0pEsjED0H
tGE+zc1cxHledCUc+LEaEGQFG5A/8OJl838yCbWcpfVVaDHiWd6Fi+QRywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKupsRPaXPk7hs8JEe8DJmf7Bt2RMB8GA1UdIwQY
MBaAFLqe/Kht6nDT7pAYFnjI6zDmkW0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXA3OHFHM3FjTlB1a0JnV2VNanJNT2FSYlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWI4MzgtNGVjZS00OTk4LThhZDgt
MTdkMzFkZWU4ZTEyLzEvdXA3OHFHM3FjTlB1a0JnV2VNanJNT2FSYlIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NWI4MzgtNGVjZS00OTk4LThhZDgtMTdkMzFkZWU4ZTEy
LzEvdXA3OHFHM3FjTlB1a0JnV2VNanJNT2FSYlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJOcWIR9
IimDLatD+rcl31ac1mAEDBjBFBWUxMwg6ZzYOKgZ9fNGlKNoR7mYolPkrJpGL9hO
wmaSn3g7HSZMHvCMbsuIfxZnC+Hk8OqxtPJUDgblavPPbJm6IpsYwT7j48+AtLKY
9B2naF1YoBN/CVnEppF6U1ez7K76ww5e04FOBY/tY93+ZaFcV4yoFAnoGdAjTJIK
14yLJXbN5OHiNeA3u5AsJJUdZdAPfGdJYOUXneVpQ0KY2tlZEz6WCZ/brZTtnwXL
BvCFoLTfr2mCfb4dgnjIJ8TEtpPRtcZNaVv3zmettWNVNwPKJ0F1Dgxy0oZzyDXS
08zUAqPZTPLtMg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:09:42 2025 by rpki-client