Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: Kc564Tyu8WFAEs8xQEh6/5pPwZdezrbHy6mxyHiJYKM=
Subject key identifier: 74:A7:E6:A6:C9:CB:E7:42:67:71:89:A5:20:0E:2C:16:54:F0:F3:12
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 01974E57C472DE60111179A3AD12FCB7158C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0400
Signing time: Sun 08 Jun 2025 07:01:04 +0000
Manifest this update: Sun 08 Jun 2025 07:01:04 +0000
Manifest next update: Mon 09 Jun 2025 07:01:04 +0000
Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: 10Qek9IlZKFC0MkLC4J9ngggamd7qWJfsO0JcjmEUUk=)
3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:c4:72:de:60:11:11:79:a3:ad:12:fc:b7:15:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jun 8 07:01:04 2025 GMT
Not After : Jun 9 07:01:04 2025 GMT
Subject: CN=74a7e6a6c9cbe742677189a5200e2c1654f0f312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:df:75:e0:7f:8e:11:db:6f:54:35:a1:1f:
1d:19:24:cb:bd:bd:af:2f:ca:00:8b:df:f7:21:11:
85:31:7e:e3:95:04:aa:1b:82:75:14:c9:a1:71:93:
c1:34:84:35:4c:51:89:61:b9:f8:3e:c1:7a:e4:15:
eb:ca:f1:9d:42:84:d4:bf:44:c3:42:2a:91:dd:58:
3f:fd:54:73:75:f6:65:cd:5d:ae:f0:60:17:72:7b:
c1:b0:e7:7d:58:6d:fd:20:d8:10:fb:82:34:50:1e:
62:26:98:f1:c8:b6:dc:97:45:55:2d:ae:44:0f:25:
e6:74:b3:df:a0:93:46:dd:64:67:8b:72:09:5e:d0:
4c:cb:7e:87:e1:91:59:38:94:38:bb:1f:db:dc:6d:
55:60:3b:f4:bc:71:8a:7d:f6:06:0a:5a:e4:fe:ec:
a0:64:97:bc:67:3f:e0:68:e6:26:1a:3b:b9:c9:a9:
80:9f:ed:da:f0:5e:8e:a7:34:34:7b:48:c0:55:2d:
ae:a9:1e:7f:9a:8f:3b:e9:1e:5e:18:46:6f:23:23:
02:37:cd:58:68:59:b4:fc:ee:65:fd:05:ef:94:05:
d1:41:3d:d6:bb:c7:7b:39:28:56:d8:a4:42:dc:e9:
de:48:23:2d:ea:8d:a4:ba:fc:aa:8e:58:fd:48:83:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A7:E6:A6:C9:CB:E7:42:67:71:89:A5:20:0E:2C:16:54:F0:F3:12
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6a:6d:d6:f6:73:54:89:78:a9:93:8e:70:fc:e7:ee:fd:38:
06:66:aa:24:f9:cb:95:5a:af:4a:4d:8a:2e:07:8e:0e:49:26:
ea:99:6f:90:9a:1e:8a:b3:a5:cd:8e:be:6d:af:39:d9:9a:90:
e0:be:57:87:a9:c5:89:59:52:11:de:73:10:cd:8e:6f:b9:55:
c2:d1:f3:6c:1b:24:68:c1:b7:e5:db:f9:b3:e0:14:0a:e7:d2:
df:05:e8:48:63:69:2d:47:55:f8:c4:4b:53:23:ac:e1:28:9e:
76:91:64:dc:21:f2:bc:9e:3f:87:83:bc:57:13:b4:48:ac:1a:
39:19:63:6e:c5:be:90:23:2c:f1:47:c7:85:cf:f0:1d:2c:54:
39:dc:bf:91:ce:35:77:d4:78:f2:d2:01:4c:a2:0d:a0:f8:47:
93:b0:b3:1e:b9:54:74:87:d0:99:c8:eb:ae:17:09:d7:a3:8d:
b7:bd:ac:4e:e6:cc:87:8b:87:02:bf:ba:96:63:b9:57:ff:40:
32:fe:f7:2a:10:10:1d:89:f2:1b:06:f1:17:42:22:82:05:5f:
e2:b7:63:75:b2:ed:f8:54:9e:a4:bd:4c:16:b2:2c:85:27:63:
0b:14:22:22:fd:a6:bb:c1:51:b9:13:df:0b:35:8a:99:11:d4:
f1:d2:37:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV8Ry3mAREXmjrRL8txWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi
ODU0ODEwHhcNMjUwNjA4MDcwMTA0WhcNMjUwNjA5MDcwMTA0WjAzMTEwLwYDVQQD
Eyg3NGE3ZTZhNmM5Y2JlNzQyNjc3MTg5YTUyMDBlMmMxNjU0ZjBmMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF/fdeB/jhHbb1Q1oR8dGSTLvb2v
L8oAi9/3IRGFMX7jlQSqG4J1FMmhcZPBNIQ1TFGJYbn4PsF65BXryvGdQoTUv0TD
QiqR3Vg//VRzdfZlzV2u8GAXcnvBsOd9WG39INgQ+4I0UB5iJpjxyLbcl0VVLa5E
DyXmdLPfoJNG3WRni3IJXtBMy36H4ZFZOJQ4ux/b3G1VYDv0vHGKffYGClrk/uyg
ZJe8Zz/gaOYmGju5yamAn+3a8F6OpzQ0e0jAVS2uqR5/mo876R5eGEZvIyMCN81Y
aFm0/O5l/QXvlAXRQT3Wu8d7OShW2KRC3OneSCMt6o2kuvyqjlj9SIMkfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSn5qbJy+dCZ3GJpSAOLBZU8PMSMB8GA1UdIwQY
MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt
NGFlNWZmOWY0ZmM2LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2
LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGpt1vZz
VIl4qZOOcPzn7v04BmaqJPnLlVqvSk2KLgeODkkm6plvkJoeirOlzY6+ba852ZqQ
4L5Xh6nFiVlSEd5zEM2Ob7lVwtHzbBskaMG35dv5s+AUCufS3wXoSGNpLUdV+MRL
UyOs4SiedpFk3CHyvJ4/h4O8VxO0SKwaORljbsW+kCMs8UfHhc/wHSxUOdy/kc41
d9R48tIBTKINoPhHk7CzHrlUdIfQmcjrrhcJ16ONt72sTubMh4uHAr+6lmO5V/9A
Mv73KhAQHYnyGwbxF0IiggVf4rdjdbLt+FSepL1MFrIshSdjCxQiIv2mu8FRuRPf
CzWKmRHU8dI3iA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:36:48 2025 by rpki-client