Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
File: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft (raw, json)
Hash identifier: Vk+wZjL0k8X9ucy5n15BPiI7io7jkueXfWwKYb+Wjd0=
Subject key identifier: 52:1E:B5:A8:55:4B:04:1E:1C:C8:CF:D5:73:9C:A4:29:95:B0:26:DE
Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
Certificate issuer: /CN=467350d5975a272a88bfb8810af45981cd55935a
Certificate serial: 019750EAD1FFF29B2D9DCBA2ED91CF2CBDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
Manifest number: 0E7B
Signing time: Sun 08 Jun 2025 19:00:55 +0000
Manifest this update: Sun 08 Jun 2025 19:00:55 +0000
Manifest next update: Mon 09 Jun 2025 19:00:55 +0000
Files and hashes: 1: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl (hash: rAL+YVOoNP6pOn+c+601zUX6L2EAHMlQH+MRShaRZRM=)
2: cM594o8l7Xh7Dw0EOXhcxgvWLYI.roa (hash: 1Ym4804A2QtxpGJhVDPpEbLS0giUeOdd5FG8xMIV330=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:d1:ff:f2:9b:2d:9d:cb:a2:ed:91:cf:2c:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a
Validity
Not Before: Jun 8 19:00:55 2025 GMT
Not After : Jun 9 19:00:55 2025 GMT
Subject: CN=521eb5a8554b041e1cc8cfd5739ca42995b026de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:48:68:8d:6e:fc:8d:fa:67:3b:10:ed:da:
25:16:6b:fa:24:95:d8:8c:02:3c:88:6c:81:51:33:
1e:8e:3d:87:18:26:d1:73:aa:00:7f:32:ed:91:5b:
b6:6b:95:d6:46:d1:68:66:01:69:8a:b2:b1:40:65:
c7:6a:9e:21:7c:7f:c1:18:94:6e:6e:64:3d:45:68:
78:8a:d1:4d:d1:5e:85:20:ad:16:02:bf:22:7b:e4:
3a:60:c2:e3:30:c3:7a:e3:a8:a8:84:a5:59:2d:af:
c7:ed:1c:cc:22:b3:6d:c9:c3:65:94:d6:ba:33:3e:
c7:01:8f:29:f0:d2:56:6c:b3:72:6a:23:2f:f8:43:
5e:2e:28:af:63:bf:a4:bc:1f:88:f1:3b:cf:b4:f1:
90:24:1f:97:23:74:57:ac:1a:63:33:7f:41:57:98:
36:b0:0d:e5:e2:f4:e8:12:05:07:9a:0a:43:4d:5a:
eb:31:52:79:27:14:95:3b:7d:5d:17:f9:da:e5:bd:
94:6e:42:c2:1e:49:c4:00:21:27:d1:1b:c6:28:f4:
c0:df:1a:c2:7d:f6:cc:ab:db:7f:df:00:73:be:55:
31:b5:2e:f7:bc:e6:64:73:e3:66:fb:81:01:b8:93:
a1:81:b3:62:10:83:21:b2:37:29:9f:41:e2:76:99:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:B5:A8:55:4B:04:1E:1C:C8:CF:D5:73:9C:A4:29:95:B0:26:DE
X509v3 Authority Key Identifier:
keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6c:49:11:a4:bf:e2:4b:44:d3:a6:68:11:b1:56:d2:69:98:
b8:af:4b:6b:82:9e:b1:a5:08:1c:84:e0:b3:33:2c:f6:06:3d:
8a:24:3f:28:b3:4a:ce:58:b6:47:72:26:ad:6d:34:13:1e:89:
2b:8e:88:2d:dc:73:55:d1:8b:2f:32:d8:ff:43:a8:bd:ea:b6:
a1:93:c4:55:08:31:35:88:5c:94:fb:ad:b2:cb:41:96:0c:17:
32:f6:b1:54:71:0d:ad:e4:ae:71:91:1e:80:26:1e:b7:52:0e:
6d:2f:c9:4f:f0:69:0a:fa:8a:50:ef:38:e5:23:c4:60:fe:bd:
b6:d0:66:0b:ed:a5:60:de:5e:f9:f3:6a:76:47:d9:b7:a8:a4:
c9:7a:2a:00:77:42:b1:a9:57:3e:57:d8:c7:4f:a1:1b:96:89:
dc:05:09:a1:31:a0:38:74:0f:7a:4d:fb:71:8e:8c:92:68:06:
e0:9f:2b:84:47:43:7b:fc:20:d6:68:c2:b0:8f:b3:d5:c9:8b:
40:72:45:65:bf:64:c8:90:d8:90:64:41:53:ea:80:54:ec:09:
30:88:4c:3f:a2:ad:79:07:ae:87:35:b4:c4:82:9f:e8:67:77:
0a:29:0e:78:c4:2a:84:ec:e9:da:9b:f9:2f:78:f8:db:0b:ac:
da:bd:5b:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6tH/8pstncui7ZHPLL2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NzM1MGQ1OTc1YTI3MmE4OGJmYjg4MTBhZjQ1OTgxY2Q1
NTkzNWEwHhcNMjUwNjA4MTkwMDU1WhcNMjUwNjA5MTkwMDU1WjAzMTEwLwYDVQQD
Eyg1MjFlYjVhODU1NGIwNDFlMWNjOGNmZDU3MzljYTQyOTk1YjAyNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbxIaI1u/I36ZzsQ7dolFmv6JJXY
jAI8iGyBUTMejj2HGCbRc6oAfzLtkVu2a5XWRtFoZgFpirKxQGXHap4hfH/BGJRu
bmQ9RWh4itFN0V6FIK0WAr8ie+Q6YMLjMMN646iohKVZLa/H7RzMIrNtycNllNa6
Mz7HAY8p8NJWbLNyaiMv+ENeLiivY7+kvB+I8TvPtPGQJB+XI3RXrBpjM39BV5g2
sA3l4vToEgUHmgpDTVrrMVJ5JxSVO31dF/na5b2UbkLCHknEACEn0RvGKPTA3xrC
ffbMq9t/3wBzvlUxtS73vOZkc+Nm+4EBuJOhgbNiEIMhsjcpn0Hidpl5RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIetahVSwQeHMjP1XOcpCmVsCbeMB8GA1UdIwQY
MBaAFEZzUNWXWicqiL+4gQr0WYHNVZNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm5OUTFaZGFKeXFJdjdpQkN2UlpnYzFWazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jNTdiNzUtMTBhNy00NzIzLTk0ZWEt
ZTg1NzQ3N2E3MDA4LzEvUm5OUTFaZGFKeXFJdjdpQkN2UlpnYzFWazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9jNTdiNzUtMTBhNy00NzIzLTk0ZWEtZTg1NzQ3N2E3MDA4
LzEvUm5OUTFaZGFKeXFJdjdpQkN2UlpnYzFWazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGxJEaS/
4ktE06ZoEbFW0mmYuK9La4KesaUIHITgszMs9gY9iiQ/KLNKzli2R3ImrW00Ex6J
K46ILdxzVdGLLzLY/0Ooveq2oZPEVQgxNYhclPutsstBlgwXMvaxVHENreSucZEe
gCYet1IObS/JT/BpCvqKUO845SPEYP69ttBmC+2lYN5e+fNqdkfZt6ikyXoqAHdC
salXPlfYx0+hG5aJ3AUJoTGgOHQPek37cY6MkmgG4J8rhEdDe/wg1mjCsI+z1cmL
QHJFZb9kyJDYkGRBU+qAVOwJMIhMP6KteQeuhzW0xIKf6Gd3CikOeMQqhOzp2pv5
L3j42wus2r1bdw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:53:03 2025 by rpki-client