Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: eMg8DT3UHmDHBooe7RZrc0Wd3YXHOzrFur2eCVOuEw4=
Subject key identifier: D8:21:9A:4F:7C:E5:AA:0C:32:31:E5:5B:6B:1F:14:A2:57:13:0B:FB
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 0197B820DD64BF0C9B8D9C31C8BFCEA1A75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:00:50 +0000
Manifest this update: Sat 28 Jun 2025 20:00:50 +0000
Manifest next update: Sun 29 Jun 2025 20:00:50 +0000
Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=)
2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: STO0qKCJjeHQlmKaWALqQ7F+lJJcVUSOcaAA9g0W4h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:dd:64:bf:0c:9b:8d:9c:31:c8:bf:ce:a1:a7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Jun 28 20:00:50 2025 GMT
Not After : Jun 29 20:00:50 2025 GMT
Subject: CN=d8219a4f7ce5aa0c3231e55b6b1f14a257130bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:e9:aa:ba:64:8d:e6:ea:f2:ac:b0:c6:a2:
06:b3:b5:5a:13:ed:eb:22:8b:61:be:4c:2e:65:16:
00:47:89:9c:97:16:8d:7a:c0:32:f0:28:88:46:73:
42:4d:5c:ee:69:e5:0c:7e:71:b5:61:e1:e5:18:c9:
e5:b7:72:95:11:68:22:a2:a4:56:dc:ff:07:cc:92:
17:a4:f9:8e:63:8f:1e:a1:d2:a8:1f:cd:17:1a:20:
92:d2:5d:8c:49:7f:df:87:b8:28:db:4b:f4:ff:21:
d7:86:f7:e4:ab:72:f7:98:96:37:9f:de:46:bb:47:
c2:3e:0b:72:35:f7:69:aa:c0:9b:9e:45:07:7f:51:
0c:02:c4:53:01:7a:ac:88:86:f4:36:5d:57:0f:61:
ae:4f:41:f1:73:0f:60:b0:b7:83:19:ad:b9:2d:a7:
a8:2d:5b:9c:d1:f4:90:ae:5b:0a:65:43:fe:5d:0a:
1d:d5:02:96:51:0c:0a:da:47:25:e8:58:ab:c1:3d:
94:42:dd:ea:a4:57:c7:0d:98:50:c2:2e:f2:ca:a2:
7c:84:9a:82:d3:02:bd:ee:9a:ae:3a:9c:31:a9:d9:
7b:0f:0a:ca:17:67:ac:86:bf:34:35:27:32:d9:f4:
07:72:a6:78:73:98:15:eb:48:fe:eb:b4:5a:f1:47:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:9A:4F:7C:E5:AA:0C:32:31:E5:5B:6B:1F:14:A2:57:13:0B:FB
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:30:69:4a:cb:8f:6a:51:b8:b8:74:2c:86:54:c4:6e:bb:c5:
57:7e:33:dd:b2:df:a1:d4:b0:51:e6:ee:4d:2e:ca:3a:df:04:
e9:e7:f7:0a:f0:dd:82:b6:1b:e1:f7:1b:1e:f8:f9:fa:f6:8c:
27:93:02:6e:e2:b1:65:71:29:18:55:96:6a:32:76:5b:d1:4f:
3b:2c:56:45:c6:9d:eb:f2:4c:07:06:95:a0:88:f8:25:69:17:
bb:a2:a7:5d:d9:8c:65:a2:32:6b:f0:a1:9b:40:e7:38:28:ac:
1f:af:6d:ca:b7:20:28:35:26:63:a8:56:18:5c:11:14:92:b6:
51:5a:5e:3e:88:cd:f1:b8:b2:f3:4d:0d:cf:71:38:77:a0:ae:
f6:7f:3c:92:33:f7:7c:03:56:32:3e:2f:45:b2:4c:fc:0f:a9:
b0:9e:0d:f8:a6:60:0d:69:0b:cb:9a:f3:be:49:35:70:75:a0:
c2:35:4b:1c:d8:5a:bf:6d:95:0e:ae:a4:0d:e2:c4:50:6e:40:
6a:59:60:ce:1f:9b:d1:ed:5d:0b:49:c1:51:45:08:63:e9:43:
97:7e:49:61:3f:6f:ee:c4:99:67:4e:39:47:8b:c8:4c:8a:7b:
bc:b6:de:8b:26:ee:df:86:64:2c:92:b5:12:e9:f2:53:eb:58:
78:8d:9e:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IN1kvwybjZwxyL/OoadcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3
ODhlNmUwHhcNMjUwNjI4MjAwMDUwWhcNMjUwNjI5MjAwMDUwWjAzMTEwLwYDVQQD
EyhkODIxOWE0ZjdjZTVhYTBjMzIzMWU1NWI2YjFmMTRhMjU3MTMwYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkunpqrpkjebq8qywxqIGs7VaE+3r
IothvkwuZRYAR4mclxaNesAy8CiIRnNCTVzuaeUMfnG1YeHlGMnlt3KVEWgioqRW
3P8HzJIXpPmOY48eodKoH80XGiCS0l2MSX/fh7go20v0/yHXhvfkq3L3mJY3n95G
u0fCPgtyNfdpqsCbnkUHf1EMAsRTAXqsiIb0Nl1XD2GuT0Hxcw9gsLeDGa25Laeo
LVuc0fSQrlsKZUP+XQod1QKWUQwK2kcl6FirwT2UQt3qpFfHDZhQwi7yyqJ8hJqC
0wK97pquOpwxqdl7DwrKF2eshr80NScy2fQHcqZ4c5gV60j+67Ra8Uc5+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNghmk985aoMMjHlW2sfFKJXEwv7MB8GA1UdIwQY
MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt
YTY3ZGNhOGEwODhjLzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj
LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzBpSsuP
alG4uHQshlTEbrvFV34z3bLfodSwUebuTS7KOt8E6ef3CvDdgrYb4fcbHvj5+vaM
J5MCbuKxZXEpGFWWajJ2W9FPOyxWRcad6/JMBwaVoIj4JWkXu6KnXdmMZaIya/Ch
m0DnOCisH69tyrcgKDUmY6hWGFwRFJK2UVpePojN8biy800Nz3E4d6Cu9n88kjP3
fANWMj4vRbJM/A+psJ4N+KZgDWkLy5rzvkk1cHWgwjVLHNhav22VDq6kDeLEUG5A
allgzh+b0e1dC0nBUUUIY+lDl35JYT9v7sSZZ045R4vITIp7vLbeiybu34ZkLJK1
EunyU+tYeI2e8Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:35:44 2025 by rpki-client