Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: CE8//LSc4kkBuH9YicsPatrzFqdMK16bSWBBrWqWl94=
Subject key identifier: D3:8B:B5:7C:79:C2:04:41:D7:1C:FF:91:2D:04:4C:A0:C6:6F:31:3C
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 0197488C1A95D67BFEABA9E37EDC36954803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 06B3
Signing time: Sat 07 Jun 2025 04:00:30 +0000
Manifest this update: Sat 07 Jun 2025 04:00:30 +0000
Manifest next update: Sun 08 Jun 2025 04:00:30 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: ul77V8h7I6yUzWV+yPKdVK6H92vqft3IMTwph0eEpYg=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:1a:95:d6:7b:fe:ab:a9:e3:7e:dc:36:95:48:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Jun 7 04:00:30 2025 GMT
Not After : Jun 8 04:00:30 2025 GMT
Subject: CN=d38bb57c79c20441d71cff912d044ca0c66f313c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:7a:45:9e:95:dd:c9:31:00:f4:6f:e4:d4:
c9:57:cd:c7:63:4f:35:43:25:fc:8d:3e:9b:d6:12:
5e:bb:f8:38:88:2a:15:17:aa:aa:46:51:de:4c:47:
bc:1d:5c:4a:53:f6:57:0b:3a:94:2f:51:c6:41:67:
2e:cd:13:ad:4a:25:54:5a:d9:78:d0:4b:d0:b5:0c:
1b:2b:79:77:1b:b5:97:d4:ac:bb:16:30:02:ca:98:
ae:59:c6:73:61:8a:95:ab:5b:ee:9a:6b:c7:1c:ea:
8b:7f:69:3a:2f:da:dc:7f:1a:5d:c9:1a:43:9c:1a:
86:16:ee:00:85:81:7f:e8:24:81:0e:b0:e5:8a:9e:
5f:dd:1a:87:7e:64:92:de:70:d4:9f:25:e5:14:d0:
1c:bc:3b:c1:52:73:8f:8a:eb:1b:56:e2:5b:16:f0:
48:8e:c5:e8:b3:70:91:82:62:bf:c6:56:53:53:0b:
45:eb:73:75:5e:a7:52:17:44:65:41:d1:9e:c0:0c:
8f:eb:56:84:93:90:bc:63:9f:40:4c:a7:90:1b:be:
50:f8:7c:45:27:7f:93:d4:47:77:00:7e:17:b8:35:
87:a6:38:ed:a7:c0:40:15:5f:81:47:6b:20:d9:d9:
9c:66:e7:c4:d6:44:9f:4f:a1:88:3d:ce:85:b1:f8:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8B:B5:7C:79:C2:04:41:D7:1C:FF:91:2D:04:4C:A0:C6:6F:31:3C
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c0:35:2b:31:81:36:ba:28:74:75:24:16:16:11:65:14:4b:
8a:02:71:a4:83:90:25:d1:92:0a:f1:69:d7:92:6c:bd:55:7f:
3d:72:50:ac:03:ee:7d:9e:71:e9:98:9d:6b:8c:90:b1:90:48:
a1:67:dc:f2:f0:0c:71:42:a4:e4:15:7a:69:5c:06:11:22:a7:
da:9d:df:02:98:f9:24:0d:5d:c3:0c:9d:41:10:03:8b:eb:c7:
00:5e:57:48:7c:49:7f:4e:db:1a:98:ca:ff:9c:1b:1d:d7:d0:
9b:d2:4b:80:2f:cc:a0:ae:c2:33:f8:45:7e:08:cb:2f:ba:04:
f1:24:64:89:c1:2b:f8:56:9e:c7:80:00:5d:b4:23:8c:fc:61:
d4:4b:71:8e:69:d9:ca:63:39:65:16:d7:73:6a:51:72:da:cc:
96:3c:08:ac:25:7f:e5:93:70:de:fe:9c:56:ab:e2:4f:68:7d:
4f:e6:cf:34:7c:80:f5:72:d6:be:25:3a:3e:b4:34:33:0f:1e:
fe:a1:7e:66:68:8b:97:1b:ed:c1:20:e5:c2:21:74:a4:da:e4:
ed:32:6a:81:23:c7:00:c7:f2:b7:34:1c:d4:93:5a:10:27:08:
5f:83:83:a0:dd:c8:cd:bb:c7:fd:3f:6a:c4:d8:ae:c0:8a:3d:
30:06:0b:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjBqV1nv+q6njftw2lUgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzE1MDA3NGVhNmZkZDFlODRkZDk1ZTBiMDY4MzY0MDdl
OTQxMWIwHhcNMjUwNjA3MDQwMDMwWhcNMjUwNjA4MDQwMDMwWjAzMTEwLwYDVQQD
EyhkMzhiYjU3Yzc5YzIwNDQxZDcxY2ZmOTEyZDA0NGNhMGM2NmYzMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWN6RZ6V3ckxAPRv5NTJV83HY081
QyX8jT6b1hJeu/g4iCoVF6qqRlHeTEe8HVxKU/ZXCzqUL1HGQWcuzROtSiVUWtl4
0EvQtQwbK3l3G7WX1Ky7FjACypiuWcZzYYqVq1vummvHHOqLf2k6L9rcfxpdyRpD
nBqGFu4AhYF/6CSBDrDlip5f3RqHfmSS3nDUnyXlFNAcvDvBUnOPiusbVuJbFvBI
jsXos3CRgmK/xlZTUwtF63N1XqdSF0RlQdGewAyP61aEk5C8Y59ATKeQG75Q+HxF
J3+T1Ed3AH4XuDWHpjjtp8BAFV+BR2sg2dmcZufE1kSfT6GIPc6FsfiyUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOLtXx5wgRB1xz/kS0ETKDGbzE8MB8GA1UdIwQY
MBaAFIpxUAdOpv3R6E3ZXgsGg2QH6UEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQt
M2M5M2JiNmNmZWUxLzEvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQtM2M5M2JiNmNmZWUx
LzEvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsA1KzGB
NroodHUkFhYRZRRLigJxpIOQJdGSCvFp15JsvVV/PXJQrAPufZ5x6Zida4yQsZBI
oWfc8vAMcUKk5BV6aVwGESKn2p3fApj5JA1dwwydQRADi+vHAF5XSHxJf07bGpjK
/5wbHdfQm9JLgC/MoK7CM/hFfgjLL7oE8SRkicEr+Faex4AAXbQjjPxh1EtxjmnZ
ymM5ZRbXc2pRctrMljwIrCV/5ZNw3v6cVqviT2h9T+bPNHyA9XLWviU6PrQ0Mw8e
/qF+ZmiLlxvtwSDlwiF0pNrk7TJqgSPHAMfytzQc1JNaECcIX4ODoN3IzbvH/T9q
xNiuwIo9MAYLVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:03:00 2025 by rpki-client