Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: Vy2+gK1MsIw2BsVvMSbWtMb09EJAD2OFHtv2eqYzWdc=
Subject key identifier: E1:BE:C6:FD:19:AD:A4:C6:39:4B:AF:A3:BB:32:2D:9A:89:44:FB:C2
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 0197B70F0196E3EEEB3A2863AC2B9A712A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: /mfy4Fn3xGk2jzoRLBVGztVP6K3sDFVnoSUp1SAVnfU=)
2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:01:96:e3:ee:eb:3a:28:63:ac:2b:9a:71:2a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=e1bec6fd19ada4c6394bafa3bb322d9a8944fbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:45:0b:e6:7c:b9:36:36:8c:d5:ca:19:66:
cb:42:bb:b4:2b:27:b2:86:f8:0c:7e:55:a1:a5:b5:
7a:96:4a:14:7b:0b:3e:dd:df:1d:6d:45:1f:3d:09:
30:91:6c:4c:0e:fa:34:6f:69:ea:76:f2:c8:1e:09:
f8:8e:82:8c:0e:16:ce:93:88:35:f6:14:90:9b:8e:
04:c4:47:46:67:dc:32:d3:bf:2b:3e:0e:57:e6:87:
13:ca:fa:ef:0c:a7:1f:62:9a:b4:b9:68:e1:c2:4a:
49:92:1f:e3:88:c3:29:ce:5d:5b:a0:b1:5f:2c:d8:
6a:63:b9:a6:f7:10:92:66:ea:94:42:4b:d4:1d:18:
14:36:73:6f:34:25:d5:90:f6:91:55:9b:f3:68:8e:
b8:84:55:9f:5f:b5:5c:db:6d:65:d5:df:ff:42:23:
5a:0f:c9:ff:13:ac:34:71:71:01:d0:35:10:0e:e5:
8e:3f:4f:7c:0c:93:11:d9:e7:fb:5e:3b:6f:5e:b5:
10:ba:40:51:53:ee:69:1b:3c:bb:48:b3:b9:57:36:
26:69:d2:e5:94:9e:18:df:e8:d2:5e:48:58:f2:e1:
73:8c:28:d2:97:a2:a3:82:b0:77:fe:66:cf:b8:1e:
f9:2d:0c:c6:a7:b9:cc:b5:25:5e:6a:5f:81:71:d1:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BE:C6:FD:19:AD:A4:C6:39:4B:AF:A3:BB:32:2D:9A:89:44:FB:C2
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:97:08:7f:ac:47:10:b8:84:f5:21:09:8d:fd:31:de:92:
a4:5c:d6:93:cd:7b:90:33:a8:71:6e:ba:b9:fb:85:e5:34:b7:
f2:0f:74:3a:1e:2d:71:88:d5:aa:44:14:c4:4e:f0:d5:bb:b8:
c8:53:31:69:bd:03:d5:31:0a:c8:a5:7a:1e:27:d7:59:35:fe:
bb:24:ba:37:c4:cb:79:16:25:15:2d:68:4f:f2:c6:fc:d8:0d:
6f:d8:c7:f4:ff:be:2d:8d:61:bb:42:a0:9c:43:72:9b:cc:97:
1d:22:97:d6:8d:bb:3c:d5:72:f6:29:b2:a2:64:8e:77:2b:ac:
42:38:a7:f9:2e:c2:a5:81:cc:2f:1f:1e:67:74:60:45:48:36:
73:2b:ef:db:ec:36:ff:e9:e4:e6:c8:af:91:64:0d:49:fe:de:
78:95:b1:05:88:32:8d:ac:04:35:9d:e3:49:4b:ca:ad:5f:08:
76:86:eb:6b:65:ae:6e:11:8b:67:a7:7a:93:ce:a7:22:4f:70:
51:b4:7d:4c:7c:7c:38:e3:07:0f:5f:79:4e:16:2f:fc:ab:00:
72:67:8d:ed:91:23:2f:0b:e6:e2:88:67:c7:aa:1c:21:84:04:
f8:68:47:27:da:18:8f:1d:08:66:c1:d7:2a:45:c8:ac:d8:bf:
e2:44:84:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DwGW4+7rOihjrCuacSouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOGYxMGEyYzc5MmQwZDM2NTY3OGEzNmNhN2Y3ZjE0MDlj
YTNhZmQwHhcNMjUwNjI4MTUwMTQzWhcNMjUwNjI5MTUwMTQzWjAzMTEwLwYDVQQD
EyhlMWJlYzZmZDE5YWRhNGM2Mzk0YmFmYTNiYjMyMmQ5YTg5NDRmYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcVFC+Z8uTY2jNXKGWbLQru0Kyey
hvgMflWhpbV6lkoUews+3d8dbUUfPQkwkWxMDvo0b2nqdvLIHgn4joKMDhbOk4g1
9hSQm44ExEdGZ9wy078rPg5X5ocTyvrvDKcfYpq0uWjhwkpJkh/jiMMpzl1boLFf
LNhqY7mm9xCSZuqUQkvUHRgUNnNvNCXVkPaRVZvzaI64hFWfX7Vc221l1d//QiNa
D8n/E6w0cXEB0DUQDuWOP098DJMR2ef7XjtvXrUQukBRU+5pGzy7SLO5VzYmadLl
lJ4Y3+jSXkhY8uFzjCjSl6KjgrB3/mbPuB75LQzGp7nMtSVeal+BcdFlWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG+xv0ZraTGOUuvo7syLZqJRPvCMB8GA1UdIwQY
MBaAFOOPEKLHktDTZWeKNsp/fxQJyjr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjct
ODM1M2FhNDBiYWViLzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjctODM1M2FhNDBiYWVi
LzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoSXCH+s
RxC4hPUhCY39Md6SpFzWk817kDOocW66ufuF5TS38g90Oh4tcYjVqkQUxE7w1bu4
yFMxab0D1TEKyKV6HifXWTX+uyS6N8TLeRYlFS1oT/LG/NgNb9jH9P++LY1hu0Kg
nENym8yXHSKX1o27PNVy9imyomSOdyusQjin+S7CpYHMLx8eZ3RgRUg2cyvv2+w2
/+nk5sivkWQNSf7eeJWxBYgyjawENZ3jSUvKrV8Idobra2WubhGLZ6d6k86nIk9w
UbR9THx8OOMHD195ThYv/KsAcmeN7ZEjLwvm4ohnx6ocIYQE+GhHJ9oYjx0IZsHX
KkXIrNi/4kSE7A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:45 2025 by rpki-client