Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: 8tG6hg+HHaOGMfzEfJ1wt4jR4n2iQjqjZSm/W0muets=
Subject key identifier: B3:E7:B9:FF:4F:CE:C0:06:DF:73:FD:BD:50:2E:74:70:89:E4:DE:E2
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 01974FD79E9B38CD87FD9AC0403EAD7E9AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 124D
Signing time: Sun 08 Jun 2025 14:00:19 +0000
Manifest this update: Sun 08 Jun 2025 14:00:19 +0000
Manifest next update: Mon 09 Jun 2025 14:00:19 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: 5hVsbjMCwMsDCWelsV8U9BtheeAznKC9VED2h7Akt0U=)
2: hqWXJdixoyBrN6tefJIPGEJ4XNw.roa (hash: jM1EQVCCuIqaZA8YHmIHlFvXnaAVW3MrjR0+9kCFwLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:9e:9b:38:cd:87:fd:9a:c0:40:3e:ad:7e:9a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Jun 8 14:00:19 2025 GMT
Not After : Jun 9 14:00:19 2025 GMT
Subject: CN=b3e7b9ff4fcec006df73fdbd502e747089e4dee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:12:e7:bc:97:ec:4f:fa:1f:9b:36:9d:50:
c0:df:6f:6d:9d:d3:9f:6f:56:7e:c4:11:aa:db:66:
db:44:a7:66:23:00:58:cb:f8:88:ff:40:94:0a:11:
39:93:dc:d8:92:4d:06:1c:4c:78:51:24:14:3f:bf:
4c:c5:86:1e:a4:cd:ce:8c:f9:41:5b:c1:d0:dd:35:
98:40:ad:b5:1e:de:bc:e4:75:d0:2c:2e:82:ec:cc:
58:3e:5b:71:f5:bd:01:8f:cd:fe:a1:d1:f9:ec:84:
32:8f:83:f2:0f:61:e0:4e:f9:a8:fc:b7:5e:ee:ed:
82:28:1e:a7:03:3f:20:cd:58:15:2c:f4:b9:6b:a1:
6b:fa:e0:70:aa:c8:8b:b7:d0:72:1f:75:e9:63:45:
46:b5:04:7c:2d:db:c4:b0:76:ad:81:76:56:01:b2:
3b:20:63:21:2e:b5:c9:fd:af:ca:d1:ac:07:83:ab:
6c:2b:64:b0:35:8d:7f:b9:f4:f6:9a:83:93:fe:fd:
2c:03:96:eb:b6:32:2e:75:59:fc:89:24:59:24:a0:
ba:ba:08:74:6f:95:a4:fd:32:d1:b8:43:3d:40:ab:
73:a2:dc:be:9b:a5:ca:54:ed:8c:5b:c9:cc:91:f9:
cc:f7:20:be:8d:f2:77:f2:24:49:25:da:8d:ef:a6:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E7:B9:FF:4F:CE:C0:06:DF:73:FD:BD:50:2E:74:70:89:E4:DE:E2
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:43:f7:53:7f:03:16:c1:ed:8f:e4:f3:2f:98:f9:e0:ed:b4:
f2:fa:14:a6:82:b7:08:ef:4e:68:dc:3d:af:35:41:6c:31:18:
c6:12:4c:08:c7:ff:24:56:81:db:c2:d1:4a:0e:72:a8:67:93:
ca:17:02:8b:80:19:af:2f:d5:6d:49:18:44:52:20:17:e0:12:
55:78:cd:01:3e:42:35:31:12:9d:f8:10:80:9e:39:ab:10:20:
ae:df:43:83:85:1a:82:f0:6a:87:6c:f3:d4:01:76:3c:99:99:
81:05:10:06:90:55:18:35:5e:54:82:6e:a7:d3:d0:ee:ce:b0:
bd:34:44:b8:9f:47:83:9b:ec:0e:0d:f9:09:fd:42:8d:6d:c8:
82:da:04:6c:4a:39:81:a9:05:c2:0b:c4:65:1e:a6:54:f9:ff:
93:07:db:39:cd:3b:c7:1b:b5:d7:ce:20:c6:e4:70:2f:11:c9:
3a:53:a6:9c:67:cd:75:49:53:d1:58:ed:df:db:4e:21:18:f0:
af:e7:8b:6b:62:6e:7d:dc:35:4f:bd:68:0b:81:27:6a:c0:93:
49:43:75:8f:9d:8b:72:3b:a2:21:c0:37:a2:c2:70:3f:0c:7e:
83:0b:ec:00:2c:09:1b:4d:48:ed:60:ea:21:0f:95:85:41:ed:
4e:7f:f0:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP156bOM2H/ZrAQD6tfprGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWYyZWY2ZGI1MDI5OTRkN2IwYzhlNDljZDRhNzc3YmRi
OTM1NzIwHhcNMjUwNjA4MTQwMDE5WhcNMjUwNjA5MTQwMDE5WjAzMTEwLwYDVQQD
EyhiM2U3YjlmZjRmY2VjMDA2ZGY3M2ZkYmQ1MDJlNzQ3MDg5ZTRkZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQYS57yX7E/6H5s2nVDA329tndOf
b1Z+xBGq22bbRKdmIwBYy/iI/0CUChE5k9zYkk0GHEx4USQUP79MxYYepM3OjPlB
W8HQ3TWYQK21Ht685HXQLC6C7MxYPltx9b0Bj83+odH57IQyj4PyD2HgTvmo/Lde
7u2CKB6nAz8gzVgVLPS5a6Fr+uBwqsiLt9ByH3XpY0VGtQR8LdvEsHatgXZWAbI7
IGMhLrXJ/a/K0awHg6tsK2SwNY1/ufT2moOT/v0sA5brtjIudVn8iSRZJKC6ugh0
b5Wk/TLRuEM9QKtzoty+m6XKVO2MW8nMkfnM9yC+jfJ38iRJJdqN76b8lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPnuf9PzsAG33P9vVAudHCJ5N7iMB8GA1UdIwQY
MBaAFAFfLvbbUCmU17DI5JzUp3e9uTVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNjcyMGUtZWJmMi00YjQxLThjYzIt
ZmFmZjIxMWVhNGM2LzEvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zNjcyMGUtZWJmMi00YjQxLThjYzItZmFmZjIxMWVhNGM2
LzEvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEP3U38D
FsHtj+TzL5j54O208voUpoK3CO9OaNw9rzVBbDEYxhJMCMf/JFaB28LRSg5yqGeT
yhcCi4AZry/VbUkYRFIgF+ASVXjNAT5CNTESnfgQgJ45qxAgrt9Dg4UagvBqh2zz
1AF2PJmZgQUQBpBVGDVeVIJup9PQ7s6wvTREuJ9Hg5vsDg35Cf1CjW3IgtoEbEo5
gakFwgvEZR6mVPn/kwfbOc07xxu1184gxuRwLxHJOlOmnGfNdUlT0Vjt39tOIRjw
r+eLa2Jufdw1T71oC4EnasCTSUN1j52LcjuiIcA3osJwPwx+gwvsACwJG01I7WDq
IQ+VhUHtTn/wkQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:42:45 2025 by rpki-client