
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: G8zd9876j/fs82sc90lwCj3Y+O/+66r44qv0mRg2CG4=
Subject key identifier: 6F:01:CC:26:64:DD:3B:EB:24:4D:33:BB:18:0E:F7:86:64:DD:A8:4B
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 019750B3F657EB3F77E040BEB086CD3B563D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 1035
Signing time: Sun 08 Jun 2025 18:01:00 +0000
Manifest this update: Sun 08 Jun 2025 18:01:00 +0000
Manifest next update: Mon 09 Jun 2025 18:01:00 +0000
Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=)
2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: w+W/4uHfSL42DRSsFP8AyiMu0lQeRQqdMVk6nJ6qyXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:f6:57:eb:3f:77:e0:40:be:b0:86:cd:3b:56:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Jun 8 18:01:00 2025 GMT
Not After : Jun 9 18:01:00 2025 GMT
Subject: CN=6f01cc2664dd3beb244d33bb180ef78664dda84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:03:a8:89:f8:a4:f7:38:eb:74:78:9c:f8:
a9:16:5b:45:58:eb:7e:69:94:94:e7:f2:9c:6f:03:
2e:b4:1b:f1:4d:2d:28:ea:2a:b7:4c:c6:b7:a7:69:
c7:ab:56:c3:66:f3:ab:20:bf:11:00:5e:c2:f7:23:
16:bd:27:38:41:c3:85:ad:c2:6b:35:78:fb:11:3a:
99:e3:13:05:d7:06:45:60:49:46:e0:5b:e6:ae:8f:
dc:3e:e8:17:32:fa:a2:4f:23:44:0e:23:fc:95:03:
af:01:80:41:90:22:a7:0f:da:02:4d:95:b3:2d:b7:
10:5f:ca:b5:17:c7:8f:a4:24:33:0e:e3:0a:b9:dc:
6d:e0:0a:84:ff:e7:69:72:6a:da:9f:37:4d:23:81:
07:60:2e:76:9f:3a:a6:2d:f9:85:09:69:42:76:fe:
95:ca:74:b4:57:2c:3a:fa:23:db:b5:4e:32:27:2b:
88:16:6c:bc:39:28:51:6b:6f:6c:22:7e:ab:e3:9d:
4d:60:08:d8:ba:75:95:47:cb:ed:8d:77:81:a8:fd:
3d:d4:1c:7e:a8:04:5a:10:de:ba:87:b8:11:5f:32:
10:27:6a:41:b7:72:0b:d3:76:4e:53:de:6a:2e:58:
32:dd:11:7a:fc:f7:9d:12:7d:26:d7:79:53:a3:d4:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:CC:26:64:DD:3B:EB:24:4D:33:BB:18:0E:F7:86:64:DD:A8:4B
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1d:7b:7d:cf:82:68:87:5c:6f:4a:30:40:a0:82:2c:bc:31:
f6:ec:23:14:1c:d7:97:dc:fb:81:b5:28:da:c3:53:7e:1b:51:
41:52:ae:42:1b:6f:96:d8:84:e1:2b:a7:c5:bd:f0:91:5e:d5:
87:a2:be:bb:e2:61:a9:5a:72:0e:91:fb:29:b7:05:89:5e:20:
56:26:7f:7c:35:97:b1:e4:89:9c:b3:a7:8e:c9:f2:d2:e1:d3:
3b:27:87:33:66:05:ac:29:db:6c:25:c0:b9:02:22:02:b0:52:
fd:8a:2a:b6:85:b9:e8:14:bc:cd:9a:78:35:77:ad:e1:d0:b8:
86:30:4a:51:fd:5e:33:7c:e6:e3:42:35:af:c8:6a:81:ea:5e:
04:e5:a4:2e:9f:62:8e:1a:21:ac:1e:07:18:a7:99:b0:96:65:
8d:c4:17:52:7c:25:da:89:df:90:df:e4:b3:83:4c:88:14:a9:
63:b6:0e:ca:14:5e:25:aa:ce:56:f4:d0:0d:c3:a5:ce:3d:aa:
d1:75:6c:3e:d1:c6:e3:4a:e3:27:d2:6b:8d:b3:b1:09:7c:3f:
a1:74:e3:52:4d:3f:c9:01:c9:9a:2d:91:08:3c:9a:80:d4:56:
e0:32:d0:40:12:01:1c:61:59:af:dd:70:cb:52:12:59:b1:51:
5a:30:9b:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQs/ZX6z934EC+sIbNO1Y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NzBkMjhmYzQ5YWEwYWU4MDhjMzgzZjU4N2YzZWE0Y2Zl
YjA0OWQwHhcNMjUwNjA4MTgwMTAwWhcNMjUwNjA5MTgwMTAwWjAzMTEwLwYDVQQD
Eyg2ZjAxY2MyNjY0ZGQzYmViMjQ0ZDMzYmIxODBlZjc4NjY0ZGRhODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU8DqIn4pPc463R4nPipFltFWOt+
aZSU5/KcbwMutBvxTS0o6iq3TMa3p2nHq1bDZvOrIL8RAF7C9yMWvSc4QcOFrcJr
NXj7ETqZ4xMF1wZFYElG4Fvmro/cPugXMvqiTyNEDiP8lQOvAYBBkCKnD9oCTZWz
LbcQX8q1F8ePpCQzDuMKudxt4AqE/+dpcmranzdNI4EHYC52nzqmLfmFCWlCdv6V
ynS0Vyw6+iPbtU4yJyuIFmy8OShRa29sIn6r451NYAjYunWVR8vtjXeBqP091Bx+
qARaEN66h7gRXzIQJ2pBt3IL03ZOU95qLlgy3RF6/PedEn0m13lTo9QnfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8BzCZk3TvrJE0zuxgO94Zk3ahLMB8GA1UdIwQY
MBaAFEVw0o/EmqCugIw4P1h/PqTP6wSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjct
ZWIwNzM3OTdhYzY2LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjctZWIwNzM3OTdhYzY2
LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPB17fc+C
aIdcb0owQKCCLLwx9uwjFBzXl9z7gbUo2sNTfhtRQVKuQhtvltiE4Sunxb3wkV7V
h6K+u+JhqVpyDpH7KbcFiV4gViZ/fDWXseSJnLOnjsny0uHTOyeHM2YFrCnbbCXA
uQIiArBS/YoqtoW56BS8zZp4NXet4dC4hjBKUf1eM3zm40I1r8hqgepeBOWkLp9i
jhohrB4HGKeZsJZljcQXUnwl2onfkN/ks4NMiBSpY7YOyhReJarOVvTQDcOlzj2q
0XVsPtHG40rjJ9JrjbOxCXw/oXTjUk0/yQHJmi2RCDyagNRW4DLQQBIBHGFZr91w
y1ISWbFRWjCbeA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:06 2025 by rpki-client