Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: Eg8ktaQHPcFiE6yOfWodo8YMWriANINHMLJgpRkDkvc=
Subject key identifier: 21:FA:8C:6E:C0:01:97:8D:9E:3C:37:B9:FA:D9:A9:B3:93:BB:55:83
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 019749D5BB1EB1F85F61922646DBA52037F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 02F5
Signing time: Sat 07 Jun 2025 10:00:33 +0000
Manifest this update: Sat 07 Jun 2025 10:00:33 +0000
Manifest next update: Sun 08 Jun 2025 10:00:33 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: OvggeqHGbnvLrVfJQqjDTMZ6/Znz2CaOZhcbqr3mwOI=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:bb:1e:b1:f8:5f:61:92:26:46:db:a5:20:37:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Jun 7 10:00:33 2025 GMT
Not After : Jun 8 10:00:33 2025 GMT
Subject: CN=21fa8c6ec001978d9e3c37b9fad9a9b393bb5583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:9a:cc:a1:42:45:64:3f:dd:0c:cf:b6:6e:
af:8e:e7:51:5f:27:01:33:44:b2:a3:c1:8e:cc:22:
50:e7:ed:b6:dc:9a:76:07:a9:94:4b:24:d1:f7:07:
97:e2:46:45:04:6d:65:b3:7b:8a:51:78:39:ac:c3:
cc:ea:8b:4b:05:37:de:a7:aa:5c:1d:5d:79:56:e2:
b9:35:4f:71:8c:6e:33:84:fa:1a:cf:d9:ad:a2:1e:
7f:8b:6a:30:d3:ca:3b:8f:b2:a7:a8:57:ec:9f:fe:
68:20:b5:b1:7d:c4:d3:a5:0f:a3:ec:36:c7:46:cd:
51:e6:e1:ba:5b:84:09:57:9b:93:d8:59:43:2e:f0:
de:ac:4c:bc:89:2b:07:84:bb:04:2c:a2:51:45:94:
25:5c:76:4a:8f:37:ca:69:f6:67:20:98:e7:0c:36:
25:47:c1:31:b4:83:ed:79:f7:03:48:ed:fe:10:e6:
5e:c0:6a:03:93:64:73:f4:0a:1e:cd:97:68:c6:25:
62:37:26:d1:60:7c:22:52:d3:9a:9f:7a:14:74:0e:
ad:b0:33:ac:a3:bb:3a:4d:f9:f8:c7:c1:65:93:f8:
4d:44:16:04:a7:29:dd:11:e1:ac:43:73:48:4d:5c:
20:aa:09:0d:a1:ba:21:c2:95:8a:e5:07:b9:e5:4c:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FA:8C:6E:C0:01:97:8D:9E:3C:37:B9:FA:D9:A9:B3:93:BB:55:83
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f5:86:f3:6e:97:b0:a3:8e:6d:23:17:a5:f3:bb:f8:4b:aa:
ec:30:30:ec:c0:fc:79:ee:27:01:6f:e3:6c:91:52:65:5c:3c:
76:8e:3f:5d:0b:0c:27:0d:5b:ee:2a:20:e2:21:79:ab:18:40:
e5:dc:ea:1e:59:9a:98:da:b3:07:62:c6:bb:2c:36:3d:61:4b:
1c:6c:aa:27:a8:c3:46:2b:de:9c:3f:52:50:01:62:0e:99:cf:
d6:57:1c:6e:4a:21:c9:30:49:ed:48:5e:ea:50:e4:fd:79:19:
d3:5f:54:b9:99:7f:62:32:ad:fb:f7:fb:dd:42:82:4c:78:c5:
9b:68:5a:0c:97:d5:50:18:55:f3:f9:14:4a:52:ce:7a:0f:e3:
d2:ca:80:ca:fe:19:ff:1d:f5:c0:57:77:61:39:12:80:b6:b3:
ee:2d:60:7b:75:4b:a0:d8:35:a1:8b:51:53:ca:76:cf:8c:e2:
4e:44:56:4d:07:31:2d:b7:98:a0:41:bb:1b:2a:c2:19:4b:3b:
58:ab:a7:ef:a6:2c:90:53:f2:d3:97:41:16:01:b2:95:a7:50:
95:a0:d1:0b:27:38:ae:6f:1c:0a:6c:35:e0:3e:00:22:58:71:
18:8d:a3:7e:2a:cb:4b:ed:c7:74:ae:7e:64:b6:7b:dd:32:76:
62:78:f3:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1bsesfhfYZImRtulIDfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZmU4ODI1Y2UyOTExNWVjNzFjZGNjZmMzNTVkODFhMzVm
ZDdlOGMwHhcNMjUwNjA3MTAwMDMzWhcNMjUwNjA4MTAwMDMzWjAzMTEwLwYDVQQD
EygyMWZhOGM2ZWMwMDE5NzhkOWUzYzM3YjlmYWQ5YTliMzkzYmI1NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEWazKFCRWQ/3QzPtm6vjudRXycB
M0Syo8GOzCJQ5+223Jp2B6mUSyTR9weX4kZFBG1ls3uKUXg5rMPM6otLBTfep6pc
HV15VuK5NU9xjG4zhPoaz9mtoh5/i2ow08o7j7KnqFfsn/5oILWxfcTTpQ+j7DbH
Rs1R5uG6W4QJV5uT2FlDLvDerEy8iSsHhLsELKJRRZQlXHZKjzfKafZnIJjnDDYl
R8ExtIPtefcDSO3+EOZewGoDk2Rz9AoezZdoxiViNybRYHwiUtOan3oUdA6tsDOs
o7s6Tfn4x8Flk/hNRBYEpyndEeGsQ3NITVwgqgkNobohwpWK5Qe55UzfkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH6jG7AAZeNnjw3ufrZqbOTu1WDMB8GA1UdIwQY
MBaAFAH+iCXOKRFexxzcz8NV2Bo1/X6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMt
NTM4MjhmNDNmZWEwLzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMtNTM4MjhmNDNmZWEw
LzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/WG826X
sKOObSMXpfO7+Euq7DAw7MD8ee4nAW/jbJFSZVw8do4/XQsMJw1b7iog4iF5qxhA
5dzqHlmamNqzB2LGuyw2PWFLHGyqJ6jDRivenD9SUAFiDpnP1lccbkohyTBJ7Uhe
6lDk/XkZ019UuZl/YjKt+/f73UKCTHjFm2haDJfVUBhV8/kUSlLOeg/j0sqAyv4Z
/x31wFd3YTkSgLaz7i1ge3VLoNg1oYtRU8p2z4ziTkRWTQcxLbeYoEG7GyrCGUs7
WKun76YskFPy05dBFgGyladQlaDRCyc4rm8cCmw14D4AIlhxGI2jfirLS+3HdK5+
ZLZ73TJ2YnjztA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:56 2025 by rpki-client