Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier: vr8V2VedpHwoh3XD7xR4CoDTkIWJ1JVJ+RB7jL+f97w=
Subject key identifier: 4E:5E:69:B3:9C:C4:D5:0E:61:2D:79:E7:EF:76:77:0D:06:AD:EB:33
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 0197B7451B42E435133A8A65376EB2F85341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number: 04BF
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: Ahr6LttvoQ/tScjd+gUZUHpm4T9q4N9BkPk9f40jZXQ=)
2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1b:42:e4:35:13:3a:8a:65:37:6e:b2:f8:53:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=4e5e69b39cc4d50e612d79e7ef76770d06adeb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:3d:0d:2c:9b:5b:27:8c:53:f0:d8:32:14:
83:c6:d7:1b:8a:5b:78:4d:7e:95:34:d2:eb:ba:f6:
fb:35:12:63:01:9a:56:a3:ba:4d:b6:1c:be:de:30:
3a:d8:52:a5:50:fc:c8:6e:9b:de:c7:77:95:be:9f:
33:a7:25:5d:b5:9d:12:4d:eb:ba:87:e3:d9:e6:7c:
db:8c:02:cc:6e:fb:4d:cb:c8:62:24:77:59:4c:a7:
30:af:77:dc:db:08:9a:23:2c:bd:7b:f5:1d:77:3c:
9c:81:b7:ee:0c:b8:a9:b8:20:4b:13:90:3b:68:18:
4b:85:68:e4:b1:1f:da:ce:63:72:51:5a:62:22:c3:
62:4c:e7:ef:be:83:61:a3:fb:b3:b4:33:bd:96:55:
c3:2d:e1:8d:04:9d:b0:e2:33:d8:4f:d2:e9:ae:f6:
91:8d:24:09:47:e9:85:c7:3b:a7:12:b2:b7:61:eb:
6a:12:22:af:fc:98:a6:84:36:74:ac:e2:10:5a:54:
35:5b:53:ea:25:bf:7a:f2:1e:c2:e6:ef:68:db:55:
89:f9:4c:cf:78:df:55:2b:a0:0f:64:d5:c6:c5:7a:
0c:66:91:28:d5:1d:8e:30:de:10:b7:17:12:3b:99:
d5:dd:f2:0d:34:0d:22:64:3a:1c:69:6f:52:bf:79:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5E:69:B3:9C:C4:D5:0E:61:2D:79:E7:EF:76:77:0D:06:AD:EB:33
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:17:9c:84:39:af:70:89:5f:37:0a:df:68:71:26:23:70:48:
a3:31:0c:c7:b6:44:5a:92:35:81:dd:2d:72:ac:83:02:cb:ca:
11:72:40:9f:dd:0b:7a:15:ab:6e:d8:b8:e5:b9:5b:a2:3c:39:
ab:94:ed:8a:cb:62:61:e1:b6:5c:2e:6e:a7:02:72:9e:14:0f:
b6:c9:79:d7:09:4d:a3:56:f7:a7:89:94:3a:26:48:56:c9:1b:
b8:01:66:6b:67:47:ce:98:f2:a3:ee:77:0b:d9:32:c1:ae:3f:
84:4b:05:8e:39:5a:61:40:00:c5:55:45:d5:fa:97:93:8e:b0:
ce:cd:f2:cf:d8:b4:30:22:f5:f4:96:f7:cc:a8:a5:a1:08:0d:
14:6c:ee:c3:76:cb:6e:57:a9:36:bb:fc:29:d6:af:1d:a8:19:
54:f6:de:8c:b8:05:5c:51:c7:0e:f3:fd:63:1b:ae:5a:ac:60:
12:cb:82:16:11:99:9e:07:9c:40:cf:f9:8a:09:55:c4:8f:1e:
8b:d1:d7:9f:8d:bb:9a:d8:0b:f2:ae:cc:3d:5d:3b:21:f3:3f:
85:8a:96:ae:9b:8b:22:ae:5a:dc:75:3e:a2:37:bd:57:14:42:
23:69:4c:8d:ce:04:94:8a:72:1b:7b:3f:84:27:1b:88:8e:7d:
68:43:42:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RRtC5DUTOoplN26y+FNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTBiMzU3ZGNkZWU2OGZiZWJkYzU1NTNkYjMyNDljNmU4
Mjk2YzcwHhcNMjUwNjI4MTYwMDQ4WhcNMjUwNjI5MTYwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZTVlNjliMzljYzRkNTBlNjEyZDc5ZTdlZjc2NzcwZDA2YWRlYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/09DSybWyeMU/DYMhSDxtcbilt4
TX6VNNLruvb7NRJjAZpWo7pNthy+3jA62FKlUPzIbpvex3eVvp8zpyVdtZ0STeu6
h+PZ5nzbjALMbvtNy8hiJHdZTKcwr3fc2wiaIyy9e/UddzycgbfuDLipuCBLE5A7
aBhLhWjksR/azmNyUVpiIsNiTOfvvoNho/uztDO9llXDLeGNBJ2w4jPYT9LprvaR
jSQJR+mFxzunErK3YetqEiKv/JimhDZ0rOIQWlQ1W1PqJb968h7C5u9o21WJ+UzP
eN9VK6APZNXGxXoMZpEo1R2OMN4QtxcSO5nV3fINNA0iZDocaW9Sv3lXHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5eabOcxNUOYS155+92dw0GreszMB8GA1UdIwQY
MBaAFNNQs1fc3uaPvr3FVT2zJJxugpbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYt
ZmZlZDUzZjQ1ZGVkLzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYtZmZlZDUzZjQ1ZGVk
LzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuxechDmv
cIlfNwrfaHEmI3BIozEMx7ZEWpI1gd0tcqyDAsvKEXJAn90LehWrbti45blbojw5
q5TtistiYeG2XC5upwJynhQPtsl51wlNo1b3p4mUOiZIVskbuAFma2dHzpjyo+53
C9kywa4/hEsFjjlaYUAAxVVF1fqXk46wzs3yz9i0MCL19Jb3zKiloQgNFGzuw3bL
blepNrv8KdavHagZVPbejLgFXFHHDvP9YxuuWqxgEsuCFhGZngecQM/5iglVxI8e
i9HXn427mtgL8q7MPV07IfM/hYqWrpuLIq5a3HU+oje9VxRCI2lMjc4ElIpyG3s/
hCcbiI59aENC0g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:54 2025 by rpki-client