Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: /e+Xtz2u6wVJSMqg12xj0Q5Y2uSZtWgijW8UgUsBmj8=
Subject key identifier: 2B:6E:A2:19:52:C7:F6:A5:89:82:7E:71:92:87:B3:AB:6F:79:98:36
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 0197B7B32ABBF89E1B0480BB8A620F215E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0BBE
Signing time: Sat 28 Jun 2025 18:01:01 +0000
Manifest this update: Sat 28 Jun 2025 18:01:01 +0000
Manifest next update: Sun 29 Jun 2025 18:01:01 +0000
Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: z2pApOb+wML4t7PtW9kUhmilr7d2n/BToJZr1FqZ6V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2a:bb:f8:9e:1b:04:80:bb:8a:62:0f:21:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Jun 28 18:01:01 2025 GMT
Not After : Jun 29 18:01:01 2025 GMT
Subject: CN=2b6ea21952c7f6a589827e719287b3ab6f799836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:c1:6b:32:78:b9:00:84:ff:2d:36:b2:65:
88:40:7a:76:37:29:a8:86:91:66:d6:d9:a0:8a:c5:
20:21:7f:a7:d9:bc:b7:6a:12:33:4e:15:63:fc:26:
e7:7a:73:b5:0b:98:b0:00:6f:07:df:43:d3:ef:f1:
4a:1d:9c:cf:60:ec:a8:8e:f5:ad:83:d0:ce:a9:05:
7e:6f:a7:f8:17:ca:c0:ac:e3:c8:5e:6a:c4:d6:c9:
19:00:8e:24:ab:a9:81:21:03:d7:d2:b1:82:fb:f2:
0f:b7:47:57:b2:f7:53:f0:81:df:7d:aa:a4:9e:f4:
b5:13:0c:ee:a3:f1:1b:27:0c:a3:84:1d:c0:ee:f3:
ab:65:54:de:91:4e:8a:54:05:ff:17:b3:26:c6:43:
7b:74:f6:98:b7:56:65:c5:b6:9d:68:89:b4:32:61:
b7:23:d5:42:77:ff:17:53:d7:5b:ff:65:ce:ac:ca:
ec:27:aa:99:63:47:cb:e8:58:79:c7:26:d0:d1:ab:
b2:aa:bd:a0:bd:ac:3a:25:6b:6b:8c:b2:6e:88:57:
00:ad:29:eb:c6:a9:4e:d0:6e:f4:93:c7:84:60:85:
6a:88:b5:83:50:56:d7:4d:86:2f:81:57:5c:a6:56:
13:ce:15:a8:8d:f5:2b:54:55:86:d2:e3:92:79:6c:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:A2:19:52:C7:F6:A5:89:82:7E:71:92:87:B3:AB:6F:79:98:36
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b4:6c:06:80:12:9e:6d:55:1e:16:db:98:6f:51:a2:97:27:
6e:4f:00:e5:1e:ca:11:09:e0:cb:a2:43:4a:d4:cc:11:69:c0:
e0:45:40:2f:4b:44:f7:84:54:e6:bc:78:09:b4:93:20:4c:6a:
c1:74:bc:b6:9a:9f:04:1d:2a:d3:9b:a8:fb:96:e3:0b:3d:8e:
00:8c:8e:55:5b:4d:7e:fd:41:fc:4f:63:e2:aa:da:91:82:c8:
e3:ac:10:b6:0e:49:1c:3e:28:7f:b7:3f:d9:8d:db:53:2f:5b:
76:db:8b:e2:04:25:35:31:62:cf:f3:76:51:cc:0b:7d:68:62:
f3:73:70:f8:f9:f8:5a:aa:a9:7a:2f:c9:57:27:de:7b:7c:bc:
c2:bd:ea:1b:17:a4:03:80:bb:ee:19:f0:dd:3d:52:40:91:8a:
19:aa:2f:35:f8:2c:7b:fd:8a:5d:1a:1f:e1:92:35:e6:39:f5:
9f:69:e5:25:8f:bb:83:9c:24:0b:ba:db:c5:e1:01:b9:c3:47:
32:0b:05:ef:d2:06:f0:25:e4:73:c1:6f:fb:28:7c:11:46:05:
20:06:62:8c:c2:c6:5b:4f:26:b2:38:e4:92:54:93:39:6e:eb:
46:39:b5:2c:b5:4d:ad:b9:90:bf:12:5e:dd:2d:08:f5:6e:66:
f3:a0:e2:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3syq7+J4bBIC7imIPIV5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNkZjI3ZDlkZTY1ZWIyNGU1Y2ZjOWQzMTBlNGM4YTAz
MDE0NjAwHhcNMjUwNjI4MTgwMTAxWhcNMjUwNjI5MTgwMTAxWjAzMTEwLwYDVQQD
EygyYjZlYTIxOTUyYzdmNmE1ODk4MjdlNzE5Mjg3YjNhYjZmNzk5ODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZPBazJ4uQCE/y02smWIQHp2Nymo
hpFm1tmgisUgIX+n2by3ahIzThVj/CbnenO1C5iwAG8H30PT7/FKHZzPYOyojvWt
g9DOqQV+b6f4F8rArOPIXmrE1skZAI4kq6mBIQPX0rGC+/IPt0dXsvdT8IHffaqk
nvS1Ewzuo/EbJwyjhB3A7vOrZVTekU6KVAX/F7MmxkN7dPaYt1ZlxbadaIm0MmG3
I9VCd/8XU9db/2XOrMrsJ6qZY0fL6Fh5xybQ0auyqr2gvaw6JWtrjLJuiFcArSnr
xqlO0G70k8eEYIVqiLWDUFbXTYYvgVdcplYTzhWojfUrVFWG0uOSeWzBNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtuohlSx/aliYJ+cZKHs6tveZg2MB8GA1UdIwQY
MBaAFK0s3yfZ3mXrJOXPydMQ5MigMBRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQt
MWU5MjM4Y2YwMjhjLzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQtMWU5MjM4Y2YwMjhj
LzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLRsBoAS
nm1VHhbbmG9Ropcnbk8A5R7KEQngy6JDStTMEWnA4EVAL0tE94RU5rx4CbSTIExq
wXS8tpqfBB0q05uo+5bjCz2OAIyOVVtNfv1B/E9j4qrakYLI46wQtg5JHD4of7c/
2Y3bUy9bdtuL4gQlNTFiz/N2UcwLfWhi83Nw+Pn4Wqqpei/JVyfee3y8wr3qGxek
A4C77hnw3T1SQJGKGaovNfgse/2KXRof4ZI15jn1n2nlJY+7g5wkC7rbxeEBucNH
MgsF79IG8CXkc8Fv+yh8EUYFIAZijMLGW08msjjkklSTOW7rRjm1LLVNrbmQvxJe
3S0I9W5m86DiwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:46 2025 by rpki-client