Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File: Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier: vM/nIUkvb31dN2IZyoZee6kzljpr7oRjK9hCTS9vsJo=
Subject key identifier: 9D:1D:57:65:BD:03:85:FA:CA:A2:30:6D:86:98:8F:26:0A:46:98:1A
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 0197B6D7370ED8B3438C0F42DAA7DFC876D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number: 1447
Signing time: Sat 28 Jun 2025 14:00:47 +0000
Manifest this update: Sat 28 Jun 2025 14:00:47 +0000
Manifest next update: Sun 29 Jun 2025 14:00:47 +0000
Files and hashes: 1: Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa (hash: 4N+U7+PRWNjJVqJ2KygRwPrjK1Ien5sO5KXTSIsM0Ro=)
2: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: sltn+SIoiw5GvEIwWlyOVs0ZMDD7MZhK91U8uq3JMZU=)
3: jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa (hash: Lc1enY7HbrV71Kk7B0ntI6Fug2DvBrGWJwGE9EwyfTM=)
4: mbp15f0zxyh0dCrGSwd4xsonIIo.roa (hash: sfiOy/EdM6txH5f3xqJYHSVySCyvLRH3tGusFyVii6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:37:0e:d8:b3:43:8c:0f:42:da:a7:df:c8:76:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jun 28 14:00:47 2025 GMT
Not After : Jun 29 14:00:47 2025 GMT
Subject: CN=9d1d5765bd0385facaa2306d86988f260a46981a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:06:bb:69:45:a0:89:4d:d5:5d:43:52:76:
45:b5:8a:cd:ee:2b:18:64:7d:50:f1:78:e2:93:8d:
cd:9d:30:ab:5e:09:df:9b:ce:41:4b:a0:db:84:f4:
02:17:be:e8:f1:d1:cc:04:01:8f:be:2c:aa:6d:2e:
e2:23:d9:ae:d1:5d:cd:21:19:1f:43:aa:58:b7:38:
97:ac:ae:38:f6:b0:68:b4:36:ed:13:86:37:1f:6d:
ce:17:bf:21:db:37:f3:4c:16:5d:bf:c5:13:9a:9a:
de:22:b8:b5:62:e6:1c:f3:2b:92:04:ed:1e:ff:7a:
ff:3a:09:0a:3e:fd:60:38:24:fa:0f:1c:ef:91:bc:
da:ab:d8:d6:0e:d0:41:1b:d6:53:06:0a:59:4d:81:
6e:67:d8:ec:61:53:71:41:eb:47:43:98:a5:02:a3:
3c:67:e3:62:41:a4:20:4a:d1:d7:7c:fa:14:45:8d:
7f:a1:15:94:10:e6:a9:be:06:97:61:00:e2:bf:b3:
24:ed:3a:a9:40:24:34:98:a4:0e:d3:27:8f:b5:2b:
18:03:70:0e:be:03:1f:f6:99:c8:7c:47:a1:b6:dd:
6f:40:3b:c9:81:00:0a:89:98:56:b8:85:80:4e:18:
a1:75:b5:6f:76:88:fb:88:25:6c:42:1e:13:9c:cf:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1D:57:65:BD:03:85:FA:CA:A2:30:6D:86:98:8F:26:0A:46:98:1A
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a7:b2:ca:1b:d8:9d:8c:e5:7d:0a:3e:88:90:ce:32:69:5f:
53:d0:67:27:74:0e:93:1c:d1:e8:46:d9:44:20:87:c1:e0:05:
81:a0:75:47:41:90:8c:c5:76:f1:63:22:8a:e3:6f:7c:17:3c:
ef:5b:20:c7:54:0c:e7:04:b9:e4:9d:1c:80:b3:e8:8d:85:45:
0a:95:12:54:b5:29:cc:e5:3b:d9:c1:2d:af:e5:9e:9b:88:8d:
98:8d:92:81:a5:95:7e:05:04:73:60:72:1b:6c:03:09:bc:4d:
27:50:41:4b:3b:70:e4:f5:a4:01:8f:00:b4:20:5a:93:e3:e5:
b8:9a:f8:ed:45:9e:cd:02:13:d3:7a:a5:03:94:69:85:9d:f9:
49:22:6f:54:b5:52:6e:8f:cd:ac:f9:76:72:5d:e2:39:d5:2f:
99:ec:c1:ba:21:b5:78:15:78:56:a7:a6:d6:7c:0f:3b:55:d9:
a0:d6:39:3c:c5:53:42:c9:50:d4:2e:06:91:e3:db:96:74:56:
74:8a:5a:f0:4d:c0:f4:e7:f8:62:88:9f:45:a2:b2:fe:29:8d:
69:c2:7f:dc:c9:88:eb:7e:6f:3e:01:a1:00:a8:32:9f:7c:50:
1d:f5:8d:99:9f:2e:a0:77:76:97:e7:0d:09:fd:9f:37:21:81:
0f:43:e5:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21zcO2LNDjA9C2qffyHbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0
NTFmOGYwHhcNMjUwNjI4MTQwMDQ3WhcNMjUwNjI5MTQwMDQ3WjAzMTEwLwYDVQQD
Eyg5ZDFkNTc2NWJkMDM4NWZhY2FhMjMwNmQ4Njk4OGYyNjBhNDY5ODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoikGu2lFoIlN1V1DUnZFtYrN7isY
ZH1Q8Xjik43NnTCrXgnfm85BS6DbhPQCF77o8dHMBAGPviyqbS7iI9mu0V3NIRkf
Q6pYtziXrK449rBotDbtE4Y3H23OF78h2zfzTBZdv8UTmpreIri1YuYc8yuSBO0e
/3r/OgkKPv1gOCT6Dxzvkbzaq9jWDtBBG9ZTBgpZTYFuZ9jsYVNxQetHQ5ilAqM8
Z+NiQaQgStHXfPoURY1/oRWUEOapvgaXYQDiv7Mk7TqpQCQ0mKQO0yePtSsYA3AO
vgMf9pnIfEehtt1vQDvJgQAKiZhWuIWAThihdbVvdoj7iCVsQh4TnM94uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0dV2W9A4X6yqIwbYaYjyYKRpgaMB8GA1UdIwQY
MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct
YWYxZjM2ODExMDk4LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4
LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaeyyhvY
nYzlfQo+iJDOMmlfU9BnJ3QOkxzR6EbZRCCHweAFgaB1R0GQjMV28WMiiuNvfBc8
71sgx1QM5wS55J0cgLPojYVFCpUSVLUpzOU72cEtr+Wem4iNmI2SgaWVfgUEc2By
G2wDCbxNJ1BBSztw5PWkAY8AtCBak+PluJr47UWezQIT03qlA5RphZ35SSJvVLVS
bo/NrPl2cl3iOdUvmezBuiG1eBV4Vqem1nwPO1XZoNY5PMVTQslQ1C4GkePblnRW
dIpa8E3A9Of4YoifRaKy/imNacJ/3MmI635vPgGhAKgyn3xQHfWNmZ8uoHd2l+cN
Cf2fNyGBD0PlsA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:28 2025 by rpki-client