Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: mgFGnl60Wyj2Rkj0pIY6BkvJL9kZem0ydKC2/GKNdbc=
Subject key identifier: 0E:64:1C:A9:0E:75:75:C0:D7:DF:15:88:4B:4E:3A:18:1D:24:9E:88
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019750B38C96AF994091CF9959E0E93D5CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 0204
Signing time: Sun 08 Jun 2025 18:00:33 +0000
Manifest this update: Sun 08 Jun 2025 18:00:33 +0000
Manifest next update: Mon 09 Jun 2025 18:00:33 +0000
Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: 4dzNkJIxTTH3UDAZh9aM+fT9X9intyNt+zvp2+hvBy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:8c:96:af:99:40:91:cf:99:59:e0:e9:3d:5c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Jun 8 18:00:33 2025 GMT
Not After : Jun 9 18:00:33 2025 GMT
Subject: CN=0e641ca90e7575c0d7df15884b4e3a181d249e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:1a:59:c2:a4:e3:fc:00:c2:bc:e4:de:9e:
da:69:f6:fe:3d:85:14:f7:a2:a0:fa:f5:d0:93:33:
54:75:bc:42:fc:fc:8f:e2:28:e5:1a:93:4f:02:19:
b3:9d:65:5b:b9:e3:4d:15:fd:26:0d:5d:54:0e:67:
48:87:27:1e:93:d5:a6:11:98:db:de:6c:e0:a2:3b:
20:64:3f:b0:67:66:83:9f:07:a3:43:b8:c7:57:f0:
00:c5:44:ee:e8:73:c7:07:d6:83:6d:70:72:7d:f6:
e8:b0:27:14:35:1f:9c:fe:5a:4f:ae:fc:00:55:d3:
94:99:f6:7d:08:4f:87:b9:94:72:22:79:04:7f:36:
7f:9c:6e:7f:f9:f1:b0:c1:06:3a:ef:fa:d4:dc:21:
d8:fd:c3:50:0a:af:a3:da:8d:f4:29:c4:d5:0a:fc:
02:3b:ef:90:26:ab:86:a5:ef:23:50:07:ba:20:cc:
05:94:e6:b2:31:41:63:61:16:94:fa:e9:55:f6:da:
b0:3a:77:90:07:ac:c9:88:fc:1c:ef:ec:72:52:5a:
f7:02:e8:f1:c1:27:27:cc:0e:48:04:b2:81:ca:15:
2e:08:0f:a0:6b:61:8d:5c:8b:f9:a0:ac:37:4e:f8:
d2:c2:fa:d9:d5:fd:3a:a4:55:71:ec:3b:f7:02:2d:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:1C:A9:0E:75:75:C0:D7:DF:15:88:4B:4E:3A:18:1D:24:9E:88
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:26:67:4d:cc:7b:ae:20:8c:f9:24:2f:9d:05:a0:0f:5f:f0:
b6:1c:a8:ad:60:e9:f6:02:a9:a8:65:c8:48:c7:9d:63:8c:2b:
bb:7a:a9:3e:ca:9a:ca:ba:1e:f8:51:0b:84:e3:67:6f:88:c3:
ea:0c:f2:a3:d8:ca:96:2f:73:54:e9:40:2b:6c:dd:0a:a6:34:
0b:cd:42:b1:97:76:fe:59:88:35:af:37:4b:24:f2:6e:c1:9f:
62:6e:fe:d5:c5:5a:1e:3e:d1:e6:4f:8d:59:a1:47:06:1e:6f:
0a:39:8b:ad:93:3c:26:4a:60:5e:13:a5:5f:22:4b:fc:63:73:
d3:16:d5:86:9a:bb:65:e7:fe:94:18:a4:5f:65:30:24:d4:99:
d9:6a:66:a9:5c:ff:77:2b:a9:a4:20:74:f3:09:bc:7c:09:0a:
17:82:81:57:99:8c:1e:9d:d0:5b:dd:54:e8:cd:a9:34:b6:f4:
44:fd:76:29:dd:22:d7:5c:f8:87:65:7f:ac:6c:f6:8d:00:be:
d6:28:f2:d9:67:b9:fb:f8:b5:79:a6:1e:34:2a:7d:23:90:75:
9f:6f:4e:4c:b7:a3:c1:d9:5b:2e:6f:b6:0a:07:94:15:14:cf:
83:c0:ed:be:ab:40:39:4e:65:4f:49:8f:8e:33:00:54:fa:5d:
c6:d7:c7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQs4yWr5lAkc+ZWeDpPVy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWJmY2UzNTgyNGY2ZWM5YjVjOWYzOWE4MTE1MGNlMTYx
ODEyMjcwHhcNMjUwNjA4MTgwMDMzWhcNMjUwNjA5MTgwMDMzWjAzMTEwLwYDVQQD
EygwZTY0MWNhOTBlNzU3NWMwZDdkZjE1ODg0YjRlM2ExODFkMjQ5ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3oaWcKk4/wAwrzk3p7aafb+PYUU
96Kg+vXQkzNUdbxC/PyP4ijlGpNPAhmznWVbueNNFf0mDV1UDmdIhycek9WmEZjb
3mzgojsgZD+wZ2aDnwejQ7jHV/AAxUTu6HPHB9aDbXByffbosCcUNR+c/lpPrvwA
VdOUmfZ9CE+HuZRyInkEfzZ/nG5/+fGwwQY67/rU3CHY/cNQCq+j2o30KcTVCvwC
O++QJquGpe8jUAe6IMwFlOayMUFjYRaU+ulV9tqwOneQB6zJiPwc7+xyUlr3Aujx
wScnzA5IBLKByhUuCA+ga2GNXIv5oKw3TvjSwvrZ1f06pFVx7Dv3Ai3SawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5kHKkOdXXA198ViEtOOhgdJJ6IMB8GA1UdIwQY
MBaAFNub/ONYJPbsm1yfOagRUM4WGBInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAt
OWI3MGQ2MGM0ODAwLzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAtOWI3MGQ2MGM0ODAw
LzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApiZnTcx7
riCM+SQvnQWgD1/wthyorWDp9gKpqGXISMedY4wru3qpPsqayroe+FELhONnb4jD
6gzyo9jKli9zVOlAK2zdCqY0C81CsZd2/lmINa83SyTybsGfYm7+1cVaHj7R5k+N
WaFHBh5vCjmLrZM8JkpgXhOlXyJL/GNz0xbVhpq7Zef+lBikX2UwJNSZ2WpmqVz/
dyuppCB08wm8fAkKF4KBV5mMHp3QW91U6M2pNLb0RP12Kd0i11z4h2V/rGz2jQC+
1ijy2We5+/i1eaYeNCp9I5B1n29OTLejwdlbLm+2CgeUFRTPg8DtvqtAOU5lT0mP
jjMAVPpdxtfHFg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:55:58 2025 by rpki-client