Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: ckg3zwf28jfhVH+0/g3GhvvD1FZoraFGdLtOtQBfI/M=
Subject key identifier: 38:D9:F4:8F:F4:05:68:FE:CF:B5:AD:AA:AB:92:AE:B1:B4:02:A9:40
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 0197B7EAD7331200C4E864D575347E1987B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:50 +0000
Manifest this update: Sat 28 Jun 2025 19:01:50 +0000
Manifest next update: Sun 29 Jun 2025 19:01:50 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: BTLwvQJfs43oBoC4PlURKaJ0cQWzq9rWtyxTyeXfrIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d7:33:12:00:c4:e8:64:d5:75:34:7e:19:87:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Jun 28 19:01:50 2025 GMT
Not After : Jun 29 19:01:50 2025 GMT
Subject: CN=38d9f48ff40568fecfb5adaaab92aeb1b402a940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:4b:24:30:90:e4:90:02:9e:76:69:79:4e:
ad:dd:e2:d3:a1:5c:b9:f7:ad:93:93:c8:47:b5:06:
1e:7a:08:68:b4:dc:72:88:1e:86:09:63:36:99:4b:
88:ef:5b:4b:51:b6:6c:b1:75:30:62:eb:c5:97:a8:
a5:ee:df:d1:32:ae:4a:b2:49:0a:ff:19:71:7a:99:
4a:39:f9:88:4f:8d:df:4d:c2:f9:5d:39:d2:ee:9d:
e9:8a:65:1f:bc:dc:c7:b0:2d:49:f4:0b:2c:c6:a3:
32:f6:98:85:68:c4:18:0f:c7:14:97:e7:f7:9d:fb:
2e:68:e9:6f:c4:b2:ec:8b:01:9f:e6:07:fb:f8:3e:
c5:7d:43:88:e1:17:5b:94:4a:08:c7:5e:9d:45:9f:
b4:0d:0b:4b:cd:f7:9b:b9:0d:b6:70:ac:29:e4:f4:
36:34:44:9d:52:4c:59:66:ae:52:18:53:af:3e:6f:
21:f1:f8:90:01:a1:58:0f:f3:f2:72:0a:f9:8b:20:
67:c5:f8:97:46:59:a2:02:a8:83:3d:de:9d:2b:3e:
63:85:91:8c:85:1d:ee:9e:12:1d:b1:8c:89:ca:f7:
26:2e:e4:b7:ed:2f:8c:f5:65:1f:fd:b3:fa:e9:cb:
8a:59:df:f4:82:61:a9:24:2c:2e:70:43:64:e0:ed:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D9:F4:8F:F4:05:68:FE:CF:B5:AD:AA:AB:92:AE:B1:B4:02:A9:40
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:e7:0d:e6:d3:5a:a6:9f:17:9d:67:2e:ec:2c:43:e3:f6:
0c:5b:c9:b5:6c:56:b8:34:f6:41:be:0f:4f:6e:56:65:48:7f:
7b:04:9d:c9:df:36:a6:d3:34:49:11:18:18:fb:c2:06:99:e7:
96:0c:b5:2d:ad:73:2c:0d:5a:c4:98:22:18:9e:32:66:30:08:
27:ed:f8:80:d6:12:23:ee:20:40:db:ff:77:17:2f:1d:a6:be:
7c:97:91:7e:f7:15:2d:6f:51:08:30:e8:43:d6:00:57:dd:fc:
0a:e6:59:4a:65:39:7d:a8:84:4a:2d:29:d3:a3:dc:c6:84:3e:
17:38:21:e8:2d:89:ce:44:80:43:f9:f0:82:94:8b:61:76:0e:
91:c3:5c:69:4a:b3:1d:a3:a1:82:40:49:eb:ab:64:bb:5c:43:
28:e4:7c:e9:0c:4d:56:3a:31:a9:c2:e3:c1:0b:f3:98:39:3c:
b0:ae:4a:c6:c1:fa:82:6c:a6:dd:82:29:5e:27:9c:fa:ec:ee:
e9:c3:10:ef:a2:6d:84:cb:22:25:43:64:00:67:d5:80:ab:bd:
3b:a3:7e:92:49:38:6b:d8:78:00:e0:c0:a2:9b:48:c9:b7:37:
bf:ee:5e:36:c3:97:9d:6c:30:bc:ba:6e:86:5b:4c:b5:f0:cc:
e6:8d:da:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36tczEgDE6GTVdTR+GYe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDFiNWNiNmZiMDQyMzk4Njg3MWVmMDFlNjYzZjM2NWNl
MGQ4OTUwHhcNMjUwNjI4MTkwMTUwWhcNMjUwNjI5MTkwMTUwWjAzMTEwLwYDVQQD
EygzOGQ5ZjQ4ZmY0MDU2OGZlY2ZiNWFkYWFhYjkyYWViMWI0MDJhOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9RLJDCQ5JACnnZpeU6t3eLToVy5
962Tk8hHtQYeeghotNxyiB6GCWM2mUuI71tLUbZssXUwYuvFl6il7t/RMq5KskkK
/xlxeplKOfmIT43fTcL5XTnS7p3pimUfvNzHsC1J9AssxqMy9piFaMQYD8cUl+f3
nfsuaOlvxLLsiwGf5gf7+D7FfUOI4RdblEoIx16dRZ+0DQtLzfebuQ22cKwp5PQ2
NESdUkxZZq5SGFOvPm8h8fiQAaFYD/Pycgr5iyBnxfiXRlmiAqiDPd6dKz5jhZGM
hR3unhIdsYyJyvcmLuS37S+M9WUf/bP66cuKWd/0gmGpJCwucENk4O3uFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjZ9I/0BWj+z7WtqquSrrG0AqlAMB8GA1UdIwQY
MBaAFHLRtctvsEI5hoce8B5mPzZc4NiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUt
NjRkZTM0ZjFmNDY0LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUtNjRkZTM0ZjFmNDY0
LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwHnDebT
WqafF51nLuwsQ+P2DFvJtWxWuDT2Qb4PT25WZUh/ewSdyd82ptM0SREYGPvCBpnn
lgy1La1zLA1axJgiGJ4yZjAIJ+34gNYSI+4gQNv/dxcvHaa+fJeRfvcVLW9RCDDo
Q9YAV938CuZZSmU5faiESi0p06PcxoQ+Fzgh6C2JzkSAQ/nwgpSLYXYOkcNcaUqz
HaOhgkBJ66tku1xDKOR86QxNVjoxqcLjwQvzmDk8sK5KxsH6gmym3YIpXiec+uzu
6cMQ76JthMsiJUNkAGfVgKu9O6N+kkk4a9h4AODAoptIybc3v+5eNsOXnWwwvLpu
hltMtfDM5o3aiA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:31 2025 by rpki-client