Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File: rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier: qA/hHbWiNV5RlpTAg78mdfIs3b7tI96X7Fd8MEKuuS0=
Subject key identifier: 0E:38:54:15:2A:58:0E:A6:C7:D5:93:79:AC:D0:2E:F1:81:22:FD:D9
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 019749314B6B9175AD5EC08C84D1618F437A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number: 05F3
Signing time: Sat 07 Jun 2025 07:00:56 +0000
Manifest this update: Sat 07 Jun 2025 07:00:56 +0000
Manifest next update: Sun 08 Jun 2025 07:00:56 +0000
Files and hashes: 1: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (hash: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=)
2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: JLrBAZTuuaIew1EP7aF3D8ev66CvOeRYn11prO9BGNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:4b:6b:91:75:ad:5e:c0:8c:84:d1:61:8f:43:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Jun 7 07:00:56 2025 GMT
Not After : Jun 8 07:00:56 2025 GMT
Subject: CN=0e3854152a580ea6c7d59379acd02ef18122fdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:54:ec:5c:bb:51:55:1c:86:c8:5e:9a:72:
c8:3d:01:30:e0:33:46:ca:26:6c:4d:34:9e:61:0b:
e0:77:cd:c3:6b:4d:44:b9:5f:96:c1:42:05:1e:1a:
1c:78:6f:4f:33:ca:39:db:53:e6:34:ee:6d:76:b7:
75:4d:d1:ee:c1:83:20:37:c4:26:6f:e1:26:f0:72:
73:6d:b4:86:82:63:d6:96:c2:b8:e5:31:2f:d3:d1:
78:81:20:fd:f2:7e:be:69:f8:09:da:ea:ba:c8:7a:
12:48:98:54:b2:ed:e1:a6:d2:1e:b3:3c:1e:cb:fa:
6a:c0:3a:8b:ca:c5:4f:2d:ea:d9:c9:30:34:c6:13:
2f:a1:46:57:78:cf:2c:42:32:57:cd:e3:8e:3b:33:
0b:7d:d4:c8:f5:84:56:57:1c:6d:91:0e:eb:ea:a5:
a6:5c:0d:54:38:7c:68:f9:8d:36:6d:d7:c9:b0:b0:
22:cb:74:80:e8:9b:b9:a8:4c:9e:ca:ac:5d:38:44:
9b:c4:27:e5:14:4f:68:69:5b:14:45:ae:46:e8:b1:
62:a9:b8:bb:d4:40:3b:05:04:2e:2e:09:78:c4:14:
4f:58:1a:0c:fd:d4:d2:01:ec:53:e8:f2:a0:8a:de:
d1:77:b1:f8:01:45:21:6a:1f:36:ba:57:60:f7:83:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:38:54:15:2A:58:0E:A6:C7:D5:93:79:AC:D0:2E:F1:81:22:FD:D9
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b8:da:8c:e6:1c:97:49:4d:a9:c7:7f:73:99:55:ea:1f:82:
30:5d:ce:d4:5a:d2:e6:59:8d:ff:4b:0c:3e:e4:07:eb:d2:01:
5c:3b:b9:9b:53:3e:cf:62:8b:81:db:66:02:e2:2c:d9:a0:4d:
47:dc:17:dd:7b:4c:54:bc:eb:c3:64:94:ab:5a:e5:6e:43:51:
2b:47:fc:52:9c:30:b8:9b:32:7e:ff:2a:b0:10:a4:16:9a:c3:
33:0c:fb:0b:40:93:5d:3c:9f:15:60:07:c3:d1:2e:ad:fe:0d:
5a:9d:9b:46:87:81:1b:92:fe:a8:56:13:f5:20:34:30:3b:90:
7d:0e:d2:87:4d:d1:03:49:ef:ea:a9:de:c6:ae:cc:02:69:e5:
4a:83:63:7c:10:37:6d:12:85:83:14:38:62:7b:93:74:dc:f6:
9a:ef:b7:c3:b1:89:fa:2b:fa:43:12:20:a3:cf:62:19:6e:06:
26:91:ea:32:ed:1b:b8:1c:e4:0f:ac:53:92:ad:a1:62:d8:2d:
79:44:72:c0:6b:46:9b:2e:90:2b:ef:7f:6a:48:3e:1d:19:45:
99:02:24:61:3a:83:de:dd:96:ff:b1:29:ae:f9:04:59:48:97:
bd:2a:92:c2:fa:6b:54:34:3b:f6:2b:c1:1e:cc:ef:e3:f3:b8:
fe:00:a0:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMUtrkXWtXsCMhNFhj0N6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmNiNjQ0MWQ3MGQyZWIxMGQ3NjMzZGE3MzE5YTNkM2Zm
OTc3YWUwHhcNMjUwNjA3MDcwMDU2WhcNMjUwNjA4MDcwMDU2WjAzMTEwLwYDVQQD
EygwZTM4NTQxNTJhNTgwZWE2YzdkNTkzNzlhY2QwMmVmMTgxMjJmZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3BU7Fy7UVUchshemnLIPQEw4DNG
yiZsTTSeYQvgd83Da01EuV+WwUIFHhoceG9PM8o521PmNO5tdrd1TdHuwYMgN8Qm
b+Em8HJzbbSGgmPWlsK45TEv09F4gSD98n6+afgJ2uq6yHoSSJhUsu3hptIeszwe
y/pqwDqLysVPLerZyTA0xhMvoUZXeM8sQjJXzeOOOzMLfdTI9YRWVxxtkQ7r6qWm
XA1UOHxo+Y02bdfJsLAiy3SA6Ju5qEyeyqxdOESbxCflFE9oaVsURa5G6LFiqbi7
1EA7BQQuLgl4xBRPWBoM/dTSAexT6PKgit7Rd7H4AUUhah82uldg94MPIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA44VBUqWA6mx9WTeazQLvGBIv3ZMB8GA1UdIwQY
MBaAFK78tkQdcNLrENdjPacxmj0/+XeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnZ5MlJCMXcwdXNRMTJNOXB6R2FQVF81ZDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8zM2FkNDQtNzg2Yy00NjQzLTlkZTIt
MzRmNzIyYjA4ZGVmLzEvcnZ5MlJCMXcwdXNRMTJNOXB6R2FQVF81ZDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8zM2FkNDQtNzg2Yy00NjQzLTlkZTItMzRmNzIyYjA4ZGVm
LzEvcnZ5MlJCMXcwdXNRMTJNOXB6R2FQVF81ZDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7jajOYc
l0lNqcd/c5lV6h+CMF3O1FrS5lmN/0sMPuQH69IBXDu5m1M+z2KLgdtmAuIs2aBN
R9wX3XtMVLzrw2SUq1rlbkNRK0f8UpwwuJsyfv8qsBCkFprDMwz7C0CTXTyfFWAH
w9Eurf4NWp2bRoeBG5L+qFYT9SA0MDuQfQ7Sh03RA0nv6qnexq7MAmnlSoNjfBA3
bRKFgxQ4YnuTdNz2mu+3w7GJ+iv6QxIgo89iGW4GJpHqMu0buBzkD6xTkq2hYtgt
eURywGtGmy6QK+9/akg+HRlFmQIkYTqD3t2W/7EprvkEWUiXvSqSwvprVDQ79ivB
Hszv4/O4/gCgSA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:02:53 2025 by rpki-client