Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: 46Zx+7AJUpEchXuYUwSe+dzK1En7tc7GOypvU1WLOV0=
Subject key identifier: 77:2C:AE:73:15:85:CA:3F:1C:67:47:A6:4B:72:3D:61:21:0D:C2:27
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 0197B7450CC09DDA5685C5CFFDD529D6DD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 1248
Signing time: Sat 28 Jun 2025 16:00:44 +0000
Manifest this update: Sat 28 Jun 2025 16:00:44 +0000
Manifest next update: Sun 29 Jun 2025 16:00:44 +0000
Files and hashes: 1: F1LbGv2MkXWWefxkT_CtpriNBr4.roa (hash: RRHmy9X/CGJW+TnFMQF3NirLVJyyI3P64OOzvqQr238=)
2: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: eoY68gRq1gz9jBc6t7gRZswWm9sFXE85I7GS/umq9ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0c:c0:9d:da:56:85:c5:cf:fd:d5:29:d6:dd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Jun 28 16:00:44 2025 GMT
Not After : Jun 29 16:00:44 2025 GMT
Subject: CN=772cae731585ca3f1c6747a64b723d61210dc227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:83:c9:cf:73:0c:fa:29:c7:88:5b:d4:89:
68:bc:63:20:2d:84:55:50:db:38:62:4b:a4:aa:ec:
59:1e:47:1f:6d:97:59:9e:4f:5d:14:a6:15:f8:8f:
3d:bc:0d:87:27:fc:10:d5:ed:7a:72:b4:e1:70:c4:
ff:f8:b8:bf:7d:7b:a5:b9:df:e5:35:dc:30:d4:c9:
df:94:62:0d:87:f9:ad:b5:ae:21:d0:04:c7:5a:df:
71:76:4a:cc:c9:bf:9f:f2:4b:e2:16:eb:9d:25:ac:
91:f2:02:2b:17:32:44:fb:36:79:e3:4d:e2:77:3c:
55:2e:39:74:d6:82:49:a2:81:b1:ba:8d:a3:84:57:
da:ea:4e:a9:29:eb:c2:9e:f1:8e:a8:88:85:ba:06:
af:4f:d9:82:d2:8d:5e:f9:cc:29:bf:be:ff:20:80:
7b:10:3d:89:a3:81:64:7b:2d:54:79:06:34:15:f3:
60:12:eb:eb:de:12:a7:44:4d:6c:b4:d8:af:b7:8e:
20:67:f2:9c:cf:d4:9b:00:f1:9f:2e:c9:2b:fd:fd:
8a:e0:59:66:d6:f9:31:f2:7c:a6:d3:20:be:78:ee:
ec:5b:53:7f:b9:69:4e:05:f8:e3:7f:30:36:81:1b:
d6:84:39:bc:9d:61:69:ad:9b:54:be:ef:c5:82:1b:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2C:AE:73:15:85:CA:3F:1C:67:47:A6:4B:72:3D:61:21:0D:C2:27
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:50:a9:38:65:e7:f7:38:6d:1b:12:e4:02:21:bd:5d:b9:1b:
c1:e8:ec:d1:22:d6:62:db:8f:57:b4:ec:44:ee:bc:5c:e7:95:
20:42:f5:e6:fe:7e:a6:a4:0b:8d:89:48:03:e5:42:bb:78:a7:
44:85:2e:f5:95:6d:20:a3:c9:9a:ea:9e:d3:3f:af:70:7d:25:
02:3e:db:93:c6:bf:57:78:b6:58:92:4f:5d:70:67:bb:31:4f:
cc:76:4d:41:4c:ed:90:e4:1a:38:cb:43:3a:78:e6:9a:82:92:
9a:9c:b5:66:22:81:d4:69:cb:ee:f7:28:50:d0:50:f9:58:63:
10:73:c1:e5:12:1c:bf:67:74:fd:14:a5:7d:c3:88:b2:20:20:
06:5a:29:b6:d7:f9:5b:4f:e0:5d:11:23:75:6e:bc:d1:c7:9f:
94:e0:8c:1d:3a:63:71:2f:30:be:53:4e:80:06:ba:1b:e8:10:
72:88:50:a7:bd:51:b8:04:14:9f:6a:ea:e1:19:7f:43:e3:c6:
1d:b3:ae:e0:b8:04:62:6f:0e:01:be:cd:0a:57:33:ed:fb:29:
28:3a:91:92:b3:5e:7d:e8:e2:3f:61:21:ed:35:01:01:fa:ae:
8e:d6:78:51:de:1e:95:19:ef:30:69:2d:fd:7a:48:b3:79:22:
70:3c:c3:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RQzAndpWhcXP/dUp1t03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzODU1YzhlY2U5YmQ2ZjhlMzk0MDIwMjIxMmNlMDliMDVm
NWY4YTAwHhcNMjUwNjI4MTYwMDQ0WhcNMjUwNjI5MTYwMDQ0WjAzMTEwLwYDVQQD
Eyg3NzJjYWU3MzE1ODVjYTNmMWM2NzQ3YTY0YjcyM2Q2MTIxMGRjMjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra2Dyc9zDPopx4hb1IlovGMgLYRV
UNs4YkukquxZHkcfbZdZnk9dFKYV+I89vA2HJ/wQ1e16crThcMT/+Li/fXulud/l
Ndww1MnflGINh/mtta4h0ATHWt9xdkrMyb+f8kviFuudJayR8gIrFzJE+zZ5403i
dzxVLjl01oJJooGxuo2jhFfa6k6pKevCnvGOqIiFugavT9mC0o1e+cwpv77/IIB7
ED2Jo4Fkey1UeQY0FfNgEuvr3hKnRE1stNivt44gZ/Kcz9SbAPGfLskr/f2K4Flm
1vkx8nym0yC+eO7sW1N/uWlOBfjjfzA2gRvWhDm8nWFprZtUvu/FghsLtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcsrnMVhco/HGdHpktyPWEhDcInMB8GA1UdIwQY
MBaAFFOFXI7Om9b445QCAiEs4JsF9figMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MzM2YjAtY2JlNC00ZGEyLTg0MWIt
MWNlZmQxZmExMGE2LzEvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MzM2YjAtY2JlNC00ZGEyLTg0MWItMWNlZmQxZmExMGE2
LzEvVTRWY2pzNmIxdmpqbEFJQ0lTemdtd1gxLUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlCpOGXn
9zhtGxLkAiG9Xbkbwejs0SLWYtuPV7TsRO68XOeVIEL15v5+pqQLjYlIA+VCu3in
RIUu9ZVtIKPJmuqe0z+vcH0lAj7bk8a/V3i2WJJPXXBnuzFPzHZNQUztkOQaOMtD
OnjmmoKSmpy1ZiKB1GnL7vcoUNBQ+VhjEHPB5RIcv2d0/RSlfcOIsiAgBlopttf5
W0/gXREjdW680ceflOCMHTpjcS8wvlNOgAa6G+gQcohQp71RuAQUn2rq4Rl/Q+PG
HbOu4LgEYm8OAb7NClcz7fspKDqRkrNefejiP2Eh7TUBAfqujtZ4Ud4elRnvMGkt
/XpIs3kicDzDPA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:24 2025 by rpki-client