Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier: kvfuE1MGC2vC0w2DvIQN0JNRnmbxPPBcIZerxJfFMzU=
Subject key identifier: 72:7E:C8:75:80:96:20:AF:CF:9B:F5:45:E0:E0:B6:8B:D0:EA:48:91
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 019757240DEB1C39E2ECE41579D2F1FCF9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number: 06F7
Signing time: Tue 10 Jun 2025 00:01:09 +0000
Manifest this update: Tue 10 Jun 2025 00:01:09 +0000
Manifest next update: Wed 11 Jun 2025 00:01:09 +0000
Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: LACI7vTlBRyIplluPfPYAdiaH5ijJo+N898pTKtmWqs=)
2: gACLFbYoQuKSwULuZch33ylGIws.roa (hash: Y3WJDNbjsbnqFHsgE1qqfoHZxL80KWaLyz825fwkstQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:24:0d:eb:1c:39:e2:ec:e4:15:79:d2:f1:fc:f9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Jun 10 00:01:09 2025 GMT
Not After : Jun 11 00:01:09 2025 GMT
Subject: CN=727ec875809620afcf9bf545e0e0b68bd0ea4891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:bd:5e:16:68:76:fe:18:53:57:0d:95:63:
90:9d:1d:eb:e5:e0:61:55:7c:2f:aa:a3:83:a8:ec:
41:be:3f:d5:f9:ee:8f:ec:40:c9:a5:ff:aa:63:40:
87:db:fa:50:3a:c6:99:57:16:0e:48:ed:09:d9:15:
c4:40:29:ad:92:85:76:0e:84:7d:4c:54:ce:1b:60:
a5:2b:5a:2a:e6:31:36:47:3e:a4:7c:96:63:c4:82:
0d:39:5e:4b:2b:09:24:c5:4a:5b:62:b7:73:53:a8:
80:5d:be:e4:67:5a:a2:43:8b:eb:a4:e0:02:80:9b:
f4:88:a1:f3:30:af:91:b2:32:4d:50:ca:d0:8c:83:
b3:2c:b2:c1:e1:9a:76:b6:7d:e0:69:17:f7:0c:aa:
26:e6:e6:6f:5c:f3:08:30:39:9e:07:75:53:c5:56:
8d:80:61:6e:45:c0:87:89:7d:9c:d4:0c:9a:38:48:
1f:6f:f1:17:4d:4b:ca:e8:4f:73:02:f9:35:32:50:
a3:6c:dc:41:3c:e0:3e:f4:66:b2:0b:d9:d6:a9:90:
ff:e9:38:37:06:6c:f4:48:05:9c:17:f5:fc:ae:07:
ff:57:57:e7:d5:93:d9:0e:a9:b3:8e:c5:2f:4f:1e:
e2:1b:94:b7:ac:f4:49:f4:b7:b6:1f:47:92:96:2c:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7E:C8:75:80:96:20:AF:CF:9B:F5:45:E0:E0:B6:8B:D0:EA:48:91
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f3:47:b1:e3:60:39:1a:6b:c8:03:27:65:1d:25:df:1f:82:
b3:aa:92:ef:a3:b9:14:dd:0d:72:41:0f:3c:2d:5d:98:d1:95:
fa:34:32:70:f5:e7:5f:e7:85:6d:71:36:29:ae:ef:fd:a0:4c:
e2:91:19:59:a1:dc:84:39:9b:c0:85:95:d2:22:93:3a:94:fd:
f1:fd:11:ab:95:c4:80:1b:59:c1:4f:70:1b:da:bf:57:f1:67:
5f:a0:d6:e9:c6:af:92:57:dc:f3:5d:52:c0:0e:7a:1e:53:bd:
05:e0:9d:33:08:8d:f6:e9:f3:ab:a2:6b:51:8d:a1:59:fa:c4:
2d:13:95:ad:80:33:7e:37:33:7c:34:a2:17:28:7e:43:a6:d9:
cc:4e:c6:ee:d1:b8:4d:36:b2:df:ee:b5:09:24:5f:90:31:b6:
2c:90:71:8b:a5:9f:09:d3:fc:e2:5e:ce:15:2d:75:1f:f6:29:
3a:7d:8e:86:7f:dd:68:5d:a4:bd:cf:d5:3e:aa:11:ef:1c:11:
a1:69:3c:c9:2f:f0:0e:ff:bd:9c:e2:7c:91:17:84:c7:17:7c:
9c:20:c9:94:91:30:6f:dc:4b:57:28:bc:c2:98:a7:8e:e3:de:
76:5d:03:fd:54:1b:74:30:a8:d7:3e:72:22:4f:08:e0:28:0f:
dc:94:0b:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXJA3rHDni7OQVedLx/PnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3M2Y0OTg1OTI0NTc4NTlmMjZmYjVhNjEwYjdiNTFlZjUy
NDEzZjMwHhcNMjUwNjEwMDAwMTA5WhcNMjUwNjExMDAwMTA5WjAzMTEwLwYDVQQD
Eyg3MjdlYzg3NTgwOTYyMGFmY2Y5YmY1NDVlMGUwYjY4YmQwZWE0ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse29XhZodv4YU1cNlWOQnR3r5eBh
VXwvqqODqOxBvj/V+e6P7EDJpf+qY0CH2/pQOsaZVxYOSO0J2RXEQCmtkoV2DoR9
TFTOG2ClK1oq5jE2Rz6kfJZjxIINOV5LKwkkxUpbYrdzU6iAXb7kZ1qiQ4vrpOAC
gJv0iKHzMK+RsjJNUMrQjIOzLLLB4Zp2tn3gaRf3DKom5uZvXPMIMDmeB3VTxVaN
gGFuRcCHiX2c1AyaOEgfb/EXTUvK6E9zAvk1MlCjbNxBPOA+9GayC9nWqZD/6Tg3
Bmz0SAWcF/X8rgf/V1fn1ZPZDqmzjsUvTx7iG5S3rPRJ9Le2H0eSliwhFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJ+yHWAliCvz5v1ReDgtovQ6kiRMB8GA1UdIwQY
MBaAFEc/SYWSRXhZ8m+1phC3tR71JBPzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MjgyMzctZWZkNy00NzI2LTkwY2Et
ZjhmNDkyYWY0ODBlLzEvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS80MjgyMzctZWZkNy00NzI2LTkwY2EtZjhmNDkyYWY0ODBl
LzEvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPNHseNg
ORpryAMnZR0l3x+Cs6qS76O5FN0NckEPPC1dmNGV+jQycPXnX+eFbXE2Ka7v/aBM
4pEZWaHchDmbwIWV0iKTOpT98f0Rq5XEgBtZwU9wG9q/V/FnX6DW6cavklfc811S
wA56HlO9BeCdMwiN9unzq6JrUY2hWfrELROVrYAzfjczfDSiFyh+Q6bZzE7G7tG4
TTay3+61CSRfkDG2LJBxi6WfCdP84l7OFS11H/YpOn2Ohn/daF2kvc/VPqoR7xwR
oWk8yS/wDv+9nOJ8kReExxd8nCDJlJEwb9xLVyi8wpinjuPedl0D/VQbdDCo1z5y
Ik8I4CgP3JQLaQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:47:29 2025 by rpki-client