Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: eB9vDFLh/OVw/8YHuY/CgJqSBVdUvsD/YhPohOEn2sw=
Subject key identifier: 4B:A3:ED:AA:0C:CB:46:14:2A:5D:DB:36:46:D3:47:96:C9:7D:2C:F8
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 0197B74578B23A1E8C8465C1336FA5479E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 63
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: 3p06VFscLArX78Pht8tWK7Dria1AGAP4vX2Pnq/Idkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:78:b2:3a:1e:8c:84:65:c1:33:6f:a5:47:9e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=4ba3edaa0ccb46142a5ddb3646d34796c97d2cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:de:1c:03:ec:1d:d0:35:cf:07:4c:c3:13:
97:f8:f6:ec:35:a8:19:ca:b2:4a:db:95:2b:92:45:
06:82:88:6d:00:41:b8:23:2f:1c:bb:50:70:4e:42:
c2:a5:40:1d:2a:62:59:44:cd:0f:5a:f4:2d:2c:5e:
cf:02:3d:1e:22:20:b1:fb:0a:92:73:21:d2:16:fb:
ef:e3:78:a0:a1:d2:dc:f4:e2:16:41:85:a6:be:e4:
4f:43:c4:98:f5:a0:f5:30:cb:9c:75:a3:36:66:79:
33:ea:e0:1e:1f:d4:34:a5:d6:2c:f5:39:62:7f:2b:
4f:41:1b:e8:f1:77:a2:19:38:c6:9d:a2:bd:31:c9:
a7:4e:e4:fb:0c:59:fe:35:30:1b:f7:00:20:bd:5a:
4e:92:e8:a5:fb:89:bb:b2:40:23:03:cc:d4:8e:51:
22:58:d1:30:5a:71:56:0e:f0:c8:93:a2:57:a4:5c:
17:ed:f1:f3:24:c5:70:5f:30:f1:0f:27:48:4c:9a:
87:c1:13:ab:59:1b:ef:80:58:66:2d:48:9c:4e:a9:
74:82:dc:44:12:2c:9e:33:5b:df:5e:f4:33:a4:bc:
a2:ee:59:c9:54:69:7d:56:b0:c4:c9:96:c7:f8:9d:
ca:c8:da:32:a7:ca:54:40:7d:6e:d1:97:c3:4a:ef:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A3:ED:AA:0C:CB:46:14:2A:5D:DB:36:46:D3:47:96:C9:7D:2C:F8
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:32:ca:2e:b0:2a:c6:db:54:af:81:12:77:50:9a:31:84:8a:
af:2a:fc:51:0e:af:1d:c4:7c:f3:64:a0:64:d9:20:7b:2a:16:
e6:79:ed:d7:0e:14:89:cf:9c:38:1a:8f:69:75:64:40:3b:47:
59:60:1b:d5:a7:e0:0b:bf:c2:b9:46:3b:b5:4f:26:f6:bc:93:
24:81:b4:03:73:81:df:9f:cd:4f:f9:ec:27:cb:13:4f:a0:75:
60:6b:ce:3d:6b:a9:91:8e:81:fe:2e:d1:3a:25:b3:38:13:db:
aa:d7:c3:13:ab:70:74:b0:a4:8b:90:05:a6:88:69:0b:8b:97:
6c:f2:b9:50:af:6a:d6:f1:6f:8a:87:2d:34:00:1a:8d:fa:e2:
ca:4b:d1:e9:2b:15:e8:e1:37:cb:77:0a:68:f4:0e:54:27:31:
7f:2d:94:0e:76:f1:e8:5e:c6:35:3a:12:bf:e2:cf:0e:4d:c8:
ee:85:d5:fa:47:d5:7b:31:7a:48:a5:f9:40:17:27:61:02:ad:
3b:ff:20:a9:a4:6d:43:ad:52:b7:78:47:a9:9e:bc:8c:16:82:
57:ae:cc:20:de:81:6c:44:f7:6a:d7:1b:b5:66:1d:f7:31:74:
c5:53:89:00:48:bf:76:72:ca:0e:0b:51:7c:22:6c:97:c3:12:
8b:8e:86:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RXiyOh6MhGXBM2+lR54ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNGRiODdhNDk3YTE1YmE3OWE3MDZkMTJlZTkwNGM0NDQ5
ZDFiNTUwHhcNMjUwNjI4MTYwMTEyWhcNMjUwNjI5MTYwMTEyWjAzMTEwLwYDVQQD
Eyg0YmEzZWRhYTBjY2I0NjE0MmE1ZGRiMzY0NmQzNDc5NmM5N2QyY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwveHAPsHdA1zwdMwxOX+PbsNagZ
yrJK25UrkkUGgohtAEG4Iy8cu1BwTkLCpUAdKmJZRM0PWvQtLF7PAj0eIiCx+wqS
cyHSFvvv43igodLc9OIWQYWmvuRPQ8SY9aD1MMucdaM2Znkz6uAeH9Q0pdYs9Tli
fytPQRvo8XeiGTjGnaK9McmnTuT7DFn+NTAb9wAgvVpOkuil+4m7skAjA8zUjlEi
WNEwWnFWDvDIk6JXpFwX7fHzJMVwXzDxDydITJqHwROrWRvvgFhmLUicTql0gtxE
EiyeM1vfXvQzpLyi7lnJVGl9VrDEyZbH+J3KyNoyp8pUQH1u0ZfDSu9+owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuj7aoMy0YUKl3bNkbTR5bJfSz4MB8GA1UdIwQY
MBaAFItNuHpJehW6eacG0S7pBMREnRtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYt
MTYwMWQ0MWZkYzFmLzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYtMTYwMWQ0MWZkYzFm
LzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDLKLrAq
xttUr4ESd1CaMYSKryr8UQ6vHcR882SgZNkgeyoW5nnt1w4Uic+cOBqPaXVkQDtH
WWAb1afgC7/CuUY7tU8m9ryTJIG0A3OB35/NT/nsJ8sTT6B1YGvOPWupkY6B/i7R
OiWzOBPbqtfDE6twdLCki5AFpohpC4uXbPK5UK9q1vFvioctNAAajfriykvR6SsV
6OE3y3cKaPQOVCcxfy2UDnbx6F7GNToSv+LPDk3I7oXV+kfVezF6SKX5QBcnYQKt
O/8gqaRtQ61St3hHqZ68jBaCV67MIN6BbET3atcbtWYd9zF0xVOJAEi/dnLKDgtR
fCJsl8MSi46Gpw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:19 2025 by rpki-client