Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier: Qq8MJrrs17i1x//M6sFHZHAhfwDtt/4p83O7KQH16F0=
Subject key identifier: B6:66:68:49:48:3A:1A:89:55:0C:4B:93:BF:2C:F9:1F:86:A0:E8:6C
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 0197B6D7AAEEC2987A8BB47F48F9A1FB5BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number: 0760
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: _3sIjV0NzBRBUXOfv_g2UXCkao8.roa (hash: cQ3AbgfUz8fqilC4hhCtVaH0mIMtsn/x+ig6JhvdshA=)
2: gzFSDIvuo1g8SYBgsWmT7skIWNo.roa (hash: D7BWQwJQV9C+IDJ4nn09iuxJOEha5Pi+Tmqs9uYeqYg=)
3: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: Q9tLfyBA9MZmjLAjOoqbV92p9mkW5YbT76zNLKgEh4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:aa:ee:c2:98:7a:8b:b4:7f:48:f9:a1:fb:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=b6666849483a1a89550c4b93bf2cf91f86a0e86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:06:ff:09:a3:9f:d5:c6:82:67:4f:e1:0e:
94:06:e0:1d:93:ae:17:d4:8d:d2:2b:80:7f:18:72:
f4:95:fe:ae:6d:a8:85:83:ab:a6:55:c8:5c:c3:29:
ba:4a:87:46:25:04:39:68:6b:39:84:25:81:12:1d:
b1:c0:16:ca:83:c0:ee:ab:19:7a:29:9a:f4:e4:b2:
39:62:fc:4f:3d:cf:3c:5b:32:4c:08:c3:f6:f9:5a:
e4:a9:c9:6d:86:35:d7:a2:05:d8:b1:86:9e:47:2f:
73:ee:0d:e6:cd:73:5a:38:1e:00:7b:97:c4:f6:60:
ed:12:fd:dc:88:ea:82:c1:7a:29:77:06:2b:28:22:
19:66:b0:5a:a7:df:ec:0d:7a:2b:13:cb:39:4e:35:
64:9d:2e:4a:da:c8:35:f0:cb:be:78:3a:81:b3:82:
21:c3:da:02:c1:c3:06:2e:78:e3:18:77:c1:bb:07:
bc:d1:35:c5:be:77:88:fd:06:5f:8a:a7:bf:d1:6f:
41:61:44:f7:9a:00:44:a4:ca:4f:a5:cc:c5:f6:03:
a6:a6:12:8a:67:aa:dd:f1:cd:f9:e6:98:ef:21:35:
79:7b:81:79:1c:e6:dc:f6:d1:2d:94:dd:85:c2:8b:
02:56:32:f7:ae:ec:dd:32:4b:ed:67:9a:8f:96:90:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:68:49:48:3A:1A:89:55:0C:4B:93:BF:2C:F9:1F:86:A0:E8:6C
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d8:94:17:b0:98:1a:5b:ac:6c:24:35:5c:74:1e:30:b3:29:
63:c9:30:9f:45:5b:36:79:25:c7:92:ac:7c:14:fc:67:bd:46:
df:e5:16:66:74:34:40:6f:80:7f:cb:9c:88:64:1b:54:6d:54:
81:50:a7:15:08:19:27:b6:24:36:c1:d0:09:bd:b3:2b:00:90:
ed:f5:5b:31:23:e5:56:88:26:79:9f:0d:d1:1b:28:81:68:7d:
e9:76:91:c4:0d:b4:29:c2:1d:ec:e8:8f:55:7a:d2:61:37:05:
57:a4:99:7a:c4:71:95:9a:86:d5:07:17:dc:f3:e6:15:de:cb:
4e:8a:ac:f9:e7:7b:9b:c1:24:2a:d5:15:93:53:b5:9a:bf:2b:
ea:6f:b0:19:dd:f8:3d:f6:a0:32:35:16:79:bc:c4:dd:8b:95:
32:75:1d:3c:61:ea:8c:38:d8:15:33:77:1c:f7:de:f2:37:a6:
d1:24:90:25:75:fa:8e:72:f2:50:e5:60:dc:6f:6f:50:14:16:
4e:23:bc:60:15:73:85:45:3e:f0:b3:c7:b0:0b:ce:06:c2:7f:
fe:31:6b:92:8d:35:df:f0:79:7f:0f:d0:1b:23:f9:ac:47:b3:
5d:1c:8d:68:d7:67:98:1c:77:3f:37:be:d8:e6:d3:4d:b1:6d:
56:c4:eb:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216ruwph6i7R/SPmh+1u3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0
YmY4MDAwHhcNMjUwNjI4MTQwMTE2WhcNMjUwNjI5MTQwMTE2WjAzMTEwLwYDVQQD
EyhiNjY2Njg0OTQ4M2ExYTg5NTUwYzRiOTNiZjJjZjkxZjg2YTBlODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsQG/wmjn9XGgmdP4Q6UBuAdk64X
1I3SK4B/GHL0lf6ubaiFg6umVchcwym6SodGJQQ5aGs5hCWBEh2xwBbKg8Duqxl6
KZr05LI5YvxPPc88WzJMCMP2+VrkqclthjXXogXYsYaeRy9z7g3mzXNaOB4Ae5fE
9mDtEv3ciOqCwXopdwYrKCIZZrBap9/sDXorE8s5TjVknS5K2sg18Mu+eDqBs4Ih
w9oCwcMGLnjjGHfBuwe80TXFvneI/QZfiqe/0W9BYUT3mgBEpMpPpczF9gOmphKK
Z6rd8c355pjvITV5e4F5HObc9tEtlN2FwosCVjL3ruzdMkvtZ5qPlpBHqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZmaElIOhqJVQxLk78s+R+GoOhsMB8GA1UdIwQY
MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt
NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1
LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdiUF7CY
GlusbCQ1XHQeMLMpY8kwn0VbNnklx5KsfBT8Z71G3+UWZnQ0QG+Af8uciGQbVG1U
gVCnFQgZJ7YkNsHQCb2zKwCQ7fVbMSPlVogmeZ8N0RsogWh96XaRxA20KcId7OiP
VXrSYTcFV6SZesRxlZqG1QcX3PPmFd7LToqs+ed7m8EkKtUVk1O1mr8r6m+wGd34
PfagMjUWebzE3YuVMnUdPGHqjDjYFTN3HPfe8jem0SSQJXX6jnLyUOVg3G9vUBQW
TiO8YBVzhUU+8LPHsAvOBsJ//jFrko013/B5fw/QGyP5rEezXRyNaNdnmBx3Pze+
2ObTTbFtVsTrQA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:25 2025 by rpki-client