Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: R1pnMBBpsbWs2GMFUpay1ZIAKmKv9u/MGkFmj2cY0W8=
Subject key identifier: 5F:FF:CB:9C:63:AA:B3:05:9D:8B:F5:27:48:02:9D:66:99:F8:78:CB
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 01975422452A13FE120B749C631E7BE27E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0660
Signing time: Mon 09 Jun 2025 10:00:21 +0000
Manifest this update: Mon 09 Jun 2025 10:00:21 +0000
Manifest next update: Tue 10 Jun 2025 10:00:21 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: Qe+r83dZj2sMOwrBZ1t3isfZ0xRJHOZ++4hehmASQOA=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:45:2a:13:fe:12:0b:74:9c:63:1e:7b:e2:7e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Jun 9 10:00:21 2025 GMT
Not After : Jun 10 10:00:21 2025 GMT
Subject: CN=5fffcb9c63aab3059d8bf52748029d6699f878cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:70:64:93:ec:c5:fb:5b:72:e8:7f:da:59:
44:2a:8f:01:59:95:90:ad:60:48:f5:85:bf:64:b4:
b2:64:39:24:78:f6:2d:83:4f:6b:21:86:6b:ad:0a:
df:ac:46:24:3a:30:d6:52:bf:10:3a:fa:26:fc:cc:
f4:d5:c8:6f:39:be:00:a4:f8:c2:95:83:08:34:9e:
3c:f0:d0:54:e8:17:84:39:94:4b:63:71:22:cc:85:
96:0d:be:fc:87:bc:73:68:48:0e:f9:96:9b:e5:1e:
e2:c6:a7:6d:56:35:d1:ec:65:cf:9c:f9:ec:85:3a:
6c:de:0d:85:77:6b:0d:a6:74:b5:78:a9:4b:22:00:
5a:6c:e1:3f:a4:aa:cf:ed:a5:f6:db:af:ce:a3:f8:
90:ca:95:e3:6e:de:c9:ff:71:c4:50:bd:94:32:01:
5f:fc:1f:25:66:71:47:bc:56:d3:6d:9b:7f:99:0c:
dc:4a:d3:72:30:87:e2:49:59:76:87:7a:d7:21:cb:
77:55:dd:7f:ef:03:ad:57:ad:c7:31:3c:fe:4c:21:
02:42:30:52:eb:4c:69:c7:76:5f:1c:6b:b3:69:e5:
93:ca:18:61:46:df:cf:1f:7d:59:27:12:f5:e7:99:
bd:d9:59:6e:75:a5:64:b2:db:d2:9a:bb:43:41:33:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:CB:9C:63:AA:B3:05:9D:8B:F5:27:48:02:9D:66:99:F8:78:CB
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:eb:bc:ae:88:fd:26:67:58:96:04:67:04:00:35:11:7a:73:
7f:b0:ee:fa:00:b6:90:c9:57:01:fd:23:3e:64:57:4f:07:14:
48:60:1a:82:9b:50:47:6b:c6:49:48:97:e4:a4:3a:21:17:a8:
44:40:39:2a:18:00:d9:32:ad:79:a7:d9:42:26:b2:be:51:1a:
6a:e2:8f:85:5a:a3:6e:3d:a5:e8:74:16:77:7e:49:fc:92:ea:
6b:a5:a1:de:f2:bd:ee:60:d1:a8:de:37:0b:48:6e:fe:37:47:
55:f7:81:0d:31:4c:3e:49:3f:da:52:04:52:34:c0:cc:b6:b9:
2a:7f:89:74:e1:54:c2:99:2e:62:1b:a7:98:76:6b:1f:7f:28:
a0:e2:cc:9b:ca:83:1f:1d:61:5f:6a:b7:b0:5d:b0:55:72:75:
8f:ba:3f:e0:45:70:10:ee:23:7b:ef:76:0b:d5:d7:88:ee:75:
8f:0e:b5:08:b2:ae:1d:24:bb:62:b6:96:05:10:20:46:98:ed:
9c:b9:03:97:6a:1d:3d:69:65:b2:6e:aa:44:b9:84:89:19:ec:
78:46:c2:13:38:54:7e:aa:45:9a:90:f0:97:93:aa:54:80:4c:
6d:10:89:7f:44:ed:ac:6d:53:7c:ee:99:4e:d3:15:be:d2:d6:
12:7c:08:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUIkUqE/4SC3ScYx574n5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYWQ2MzY1MjMxZWQ3OTM5Njk0MDkyMDE0OWRmNzFjMGFh
MDhlMWYwHhcNMjUwNjA5MTAwMDIxWhcNMjUwNjEwMTAwMDIxWjAzMTEwLwYDVQQD
Eyg1ZmZmY2I5YzYzYWFiMzA1OWQ4YmY1Mjc0ODAyOWQ2Njk5Zjg3OGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa1wZJPsxftbcuh/2llEKo8BWZWQ
rWBI9YW/ZLSyZDkkePYtg09rIYZrrQrfrEYkOjDWUr8QOvom/Mz01chvOb4ApPjC
lYMINJ488NBU6BeEOZRLY3EizIWWDb78h7xzaEgO+Zab5R7ixqdtVjXR7GXPnPns
hTps3g2Fd2sNpnS1eKlLIgBabOE/pKrP7aX226/Oo/iQypXjbt7J/3HEUL2UMgFf
/B8lZnFHvFbTbZt/mQzcStNyMIfiSVl2h3rXIct3Vd1/7wOtV63HMTz+TCECQjBS
60xpx3ZfHGuzaeWTyhhhRt/PH31ZJxL155m92VludaVkstvSmrtDQTPFCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF//y5xjqrMFnYv1J0gCnWaZ+HjLMB8GA1UdIwQY
MBaAFAOtY2UjHteTlpQJIBSd9xwKoI4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTkt
NDE0OWRlNTI4ODMzLzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTktNDE0OWRlNTI4ODMz
LzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+u8roj9
JmdYlgRnBAA1EXpzf7Du+gC2kMlXAf0jPmRXTwcUSGAagptQR2vGSUiX5KQ6IReo
REA5KhgA2TKteafZQiayvlEaauKPhVqjbj2l6HQWd35J/JLqa6Wh3vK97mDRqN43
C0hu/jdHVfeBDTFMPkk/2lIEUjTAzLa5Kn+JdOFUwpkuYhunmHZrH38ooOLMm8qD
Hx1hX2q3sF2wVXJ1j7o/4EVwEO4je+92C9XXiO51jw61CLKuHSS7YraWBRAgRpjt
nLkDl2odPWllsm6qRLmEiRnseEbCEzhUfqpFmpDwl5OqVIBMbRCJf0TtrG1TfO6Z
TtMVvtLWEnwIVw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 17:04:55 2025 by rpki-client