Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier: kVWjDoyurBftKXOE6ADLwhxeULgChMPiSVtbXXumvHc=
Subject key identifier: 86:E1:BE:2F:06:E2:DD:07:9D:42:2B:E2:31:A5:62:5C:67:E7:C9:6F
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer: /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial: 01974D0DE9548B4386D50575ADF2ED692FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number: 123F
Signing time: Sun 08 Jun 2025 01:00:46 +0000
Manifest this update: Sun 08 Jun 2025 01:00:46 +0000
Manifest next update: Mon 09 Jun 2025 01:00:46 +0000
Files and hashes: 1: H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa (hash: vyyHUtBQsEXAg98AdmKq411tDHnSJnqHMROP1JZFAyQ=)
2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: o+5va1u5yB7ar/1egx9v/e0Ct6Y5utnt3mDzt3joNHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:e9:54:8b:43:86:d5:05:75:ad:f2:ed:69:2f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Validity
Not Before: Jun 8 01:00:46 2025 GMT
Not After : Jun 9 01:00:46 2025 GMT
Subject: CN=86e1be2f06e2dd079d422be231a5625c67e7c96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:aa:6f:cd:1b:da:d4:81:43:60:2f:44:2b:8d:
a2:90:df:c8:55:ee:bc:45:83:07:92:65:88:02:1f:
d6:61:f5:9c:5c:f6:64:80:b0:3c:b9:cf:d7:dc:37:
a7:09:de:62:95:bd:80:52:f6:87:11:bf:a8:51:1e:
6e:d8:e4:3e:6b:27:f0:f7:56:b5:4a:9e:32:d8:81:
36:ec:70:bc:b8:38:f4:2f:60:ad:54:0a:0a:87:e4:
fb:52:3b:a5:0c:a6:1c:40:55:37:32:60:72:7a:ad:
81:bc:80:80:f6:c9:a1:90:29:fb:08:c3:34:6f:7d:
37:57:3f:74:01:bd:e4:81:aa:bb:7c:f2:43:36:9d:
72:d6:d4:1f:8e:09:9d:13:03:1f:1d:8b:02:63:6f:
01:15:9b:99:7c:df:87:9c:11:9d:fc:ea:83:29:22:
36:0e:af:e6:2c:5b:33:09:6d:23:93:bd:ec:49:c4:
ac:ed:4e:59:30:ac:7d:9e:68:6e:ce:89:ec:62:b8:
d9:ba:88:40:3c:ca:4d:74:e3:bd:e2:b2:6e:f2:77:
95:de:8c:1d:bb:d0:ef:05:e0:5e:ae:c4:bb:9d:e0:
a8:ac:d8:9a:11:c7:c9:a1:1f:26:b7:b9:e6:21:78:
c8:a0:a4:e4:e8:e2:8b:98:28:15:f3:28:42:26:05:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E1:BE:2F:06:E2:DD:07:9D:42:2B:E2:31:A5:62:5C:67:E7:C9:6F
X509v3 Authority Key Identifier:
keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:69:dc:62:af:eb:93:a2:d2:89:5a:47:18:32:1c:78:71:b2:
01:1f:eb:47:fb:61:0b:bc:4f:1f:46:6c:eb:8a:8e:ba:05:88:
3a:53:72:f6:ff:30:d6:4b:e2:69:e3:68:e3:53:6b:a0:80:3b:
33:ea:33:41:c1:78:b3:e4:44:6b:26:ad:9b:10:95:62:db:3b:
16:2d:9d:1e:7d:c4:39:2c:c6:1f:5d:44:55:56:2c:28:31:ff:
6e:62:44:d3:7e:97:2b:5d:ea:5d:a2:f4:d0:9c:75:8d:a9:0d:
6c:78:60:38:0d:4b:51:b4:57:e7:ed:2d:3e:d9:70:56:27:72:
b3:44:1b:b3:d2:ab:76:50:9e:61:e5:28:73:26:15:79:cc:e2:
ce:25:1e:a7:59:3d:a3:4d:41:8d:e5:f6:b7:b2:c6:e0:b0:21:
9d:8b:6d:25:ab:bd:04:6a:01:27:70:99:d8:f3:79:40:32:05:
bd:c9:11:5a:3a:fa:ae:99:66:40:69:2a:22:b8:97:cc:cb:86:
ab:dd:0f:6c:38:7c:f4:78:aa:7f:60:81:78:b9:34:20:fe:80:
9b:b1:fe:d5:a4:08:c4:78:89:f6:f1:a7:c5:5a:c5:ea:8e:6e:
73:36:0d:ce:ca:31:1f:72:52:1d:f1:1e:1b:a2:76:d4:88:ee:
f3:1b:46:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDelUi0OG1QV1rfLtaS/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNGVmMjBiYjZhODY3ZWNjZDg3ZmEwYWNhZTIyYzViZjYz
NGQ1MWIwHhcNMjUwNjA4MDEwMDQ2WhcNMjUwNjA5MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg4NmUxYmUyZjA2ZTJkZDA3OWQ0MjJiZTIzMWE1NjI1YzY3ZTdjOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7apvzRva1IFDYC9EK42ikN/IVe68
RYMHkmWIAh/WYfWcXPZkgLA8uc/X3DenCd5ilb2AUvaHEb+oUR5u2OQ+ayfw91a1
Sp4y2IE27HC8uDj0L2CtVAoKh+T7UjulDKYcQFU3MmByeq2BvICA9smhkCn7CMM0
b303Vz90Ab3kgaq7fPJDNp1y1tQfjgmdEwMfHYsCY28BFZuZfN+HnBGd/OqDKSI2
Dq/mLFszCW0jk73sScSs7U5ZMKx9nmhuzonsYrjZuohAPMpNdOO94rJu8neV3owd
u9DvBeBersS7neCorNiaEcfJoR8mt7nmIXjIoKTk6OKLmCgV8yhCJgVCwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbhvi8G4t0HnUIr4jGlYlxn58lvMB8GA1UdIwQY
MBaAFJ1O8gu2qGfszYf6CsriLFv2NNUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblU3eUM3YW9aLXpOaF9vS3l1SXNXX1kwMVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83MTgxYTYtN2ZmNC00MGJhLTkzZGYt
Nzg4NWI3YjgzNzFjLzEvblU3eUM3YW9aLXpOaF9vS3l1SXNXX1kwMVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83MTgxYTYtN2ZmNC00MGJhLTkzZGYtNzg4NWI3YjgzNzFj
LzEvblU3eUM3YW9aLXpOaF9vS3l1SXNXX1kwMVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmncYq/r
k6LSiVpHGDIceHGyAR/rR/thC7xPH0Zs64qOugWIOlNy9v8w1kviaeNo41NroIA7
M+ozQcF4s+REayatmxCVYts7Fi2dHn3EOSzGH11EVVYsKDH/bmJE036XK13qXaL0
0Jx1jakNbHhgOA1LUbRX5+0tPtlwVidys0Qbs9KrdlCeYeUocyYVecziziUep1k9
o01BjeX2t7LG4LAhnYttJau9BGoBJ3CZ2PN5QDIFvckRWjr6rplmQGkqIriXzMuG
q90PbDh89Hiqf2CBeLk0IP6Am7H+1aQIxHiJ9vGnxVrF6o5uczYNzsoxH3JSHfEe
G6J21Iju8xtGWw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:38:29 2025 by rpki-client