
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: RZyiXAirPbHjbx66LRwv8amu3EB9w2+fxXjNyxRAgzI=
Subject key identifier: 61:5A:7A:23:9F:B9:CC:23:34:78:2E:59:1C:E9:FE:2D:BA:26:20:73
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019758A470945ED802EA3C08E56AD1B0AF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 12BB
Signing time: Tue 10 Jun 2025 07:01:01 +0000
Manifest this update: Tue 10 Jun 2025 07:01:01 +0000
Manifest next update: Wed 11 Jun 2025 07:01:01 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: 4zWGbsV2KV7/nOj7FT3uEkRIukFr/9/iEkf1AnmPHGk=)
2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:70:94:5e:d8:02:ea:3c:08:e5:6a:d1:b0:af:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Jun 10 07:01:01 2025 GMT
Not After : Jun 11 07:01:01 2025 GMT
Subject: CN=615a7a239fb9cc2334782e591ce9fe2dba262073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:a6:33:0c:c1:13:61:09:81:77:e3:a5:65:
16:ea:fe:5b:08:e7:2c:16:76:7d:60:e3:e8:cc:e1:
3e:e2:57:1f:e0:9b:60:4f:6c:c7:8a:c2:76:03:57:
c9:b1:dc:43:50:23:52:26:15:b0:e9:b5:6e:a4:30:
e7:a7:85:b2:d8:ef:2f:c4:62:bb:40:b0:3b:ef:e8:
e2:da:35:14:07:82:97:68:56:d4:da:fe:93:db:07:
c4:8f:95:0b:4b:71:7e:16:c5:78:ad:d1:8a:23:88:
57:23:1a:d2:84:16:e2:d9:b4:ae:e8:f3:e8:48:63:
fe:9c:79:2d:65:76:73:56:f8:9a:9f:9c:f8:da:d6:
8d:32:fd:8c:38:83:98:88:79:69:32:e0:aa:5a:9b:
01:90:2a:4d:a7:01:5e:20:f1:de:6b:c0:15:9a:12:
70:5d:41:cf:dd:77:28:94:e1:14:81:d4:d5:c5:8a:
6f:aa:2c:75:be:ba:e7:3d:d5:f3:c9:14:51:4d:58:
ab:90:dd:5b:b7:56:c7:c5:f7:ff:2c:1f:10:92:1b:
57:98:9b:d1:5e:f6:55:80:41:17:70:63:b8:ec:d6:
4d:b0:c4:0e:75:e6:76:cc:7a:5e:76:10:7d:26:a1:
b9:5e:ad:62:24:1d:5a:62:92:f3:78:44:d5:34:ad:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5A:7A:23:9F:B9:CC:23:34:78:2E:59:1C:E9:FE:2D:BA:26:20:73
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9c:74:74:d8:a7:04:ee:d7:ea:fc:ff:c6:f5:2c:8e:2f:c2:
ee:8f:18:27:dc:db:86:d1:a1:cd:84:17:54:d6:61:a9:97:00:
ce:e1:da:1d:26:d7:4a:9e:23:14:3f:b1:8b:fd:1a:73:22:aa:
f2:1c:6f:5c:60:60:6a:78:39:37:30:d6:55:10:ef:84:f9:07:
c0:12:34:06:33:49:62:4b:8f:3f:1c:fe:be:d8:f6:3f:36:48:
9c:dd:8d:8e:07:20:a4:a0:de:20:cb:68:26:aa:0b:b5:9b:4f:
58:fe:bd:68:34:19:e2:04:f2:4d:9c:53:53:87:80:4c:eb:61:
e2:17:ef:e9:d5:5e:c6:e3:b6:1e:be:06:cc:01:5e:6d:b9:f9:
1e:29:97:52:1a:5f:5a:ca:a5:b4:55:e1:62:f7:05:ff:93:16:
08:54:39:ee:36:1f:b6:e5:df:17:b7:2c:e1:17:55:b9:d3:46:
94:fb:92:73:be:47:a4:d8:eb:98:35:5f:c5:0c:35:bd:8a:c0:
ec:cd:06:58:0c:6d:e8:1a:cb:d6:03:e0:35:e5:ff:96:13:f0:
7d:02:b7:ad:b3:41:62:f8:00:96:18:68:7b:4b:f6:a7:68:f4:
b5:2f:e1:15:c5:ab:02:51:04:5d:25:8a:93:00:09:52:2f:46:
13:c7:63:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYpHCUXtgC6jwI5WrRsK8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi
MTE5N2YwHhcNMjUwNjEwMDcwMTAxWhcNMjUwNjExMDcwMTAxWjAzMTEwLwYDVQQD
Eyg2MTVhN2EyMzlmYjljYzIzMzQ3ODJlNTkxY2U5ZmUyZGJhMjYyMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gOmMwzBE2EJgXfjpWUW6v5bCOcs
FnZ9YOPozOE+4lcf4JtgT2zHisJ2A1fJsdxDUCNSJhWw6bVupDDnp4Wy2O8vxGK7
QLA77+ji2jUUB4KXaFbU2v6T2wfEj5ULS3F+FsV4rdGKI4hXIxrShBbi2bSu6PPo
SGP+nHktZXZzVvian5z42taNMv2MOIOYiHlpMuCqWpsBkCpNpwFeIPHea8AVmhJw
XUHP3XcolOEUgdTVxYpvqix1vrrnPdXzyRRRTVirkN1bt1bHxff/LB8QkhtXmJvR
XvZVgEEXcGO47NZNsMQOdeZ2zHpedhB9JqG5Xq1iJB1aYpLzeETVNK1l4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFaeiOfucwjNHguWRzp/i26JiBzMB8GA1UdIwQY
MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt
YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4
LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZx0dNin
BO7X6vz/xvUsji/C7o8YJ9zbhtGhzYQXVNZhqZcAzuHaHSbXSp4jFD+xi/0acyKq
8hxvXGBgang5NzDWVRDvhPkHwBI0BjNJYkuPPxz+vtj2PzZInN2NjgcgpKDeIMto
JqoLtZtPWP69aDQZ4gTyTZxTU4eATOth4hfv6dVexuO2Hr4GzAFebbn5HimXUhpf
WsqltFXhYvcF/5MWCFQ57jYftuXfF7cs4RdVudNGlPuSc75HpNjrmDVfxQw1vYrA
7M0GWAxt6BrL1gPgNeX/lhPwfQK3rbNBYvgAlhhoe0v2p2j0tS/hFcWrAlEEXSWK
kwAJUi9GE8djPw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 14:24:39 2025 by rpki-client