Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
File: rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft (raw, json)
Hash identifier: e/a+ZNRLOKwo+HZNXKf+qTPjvaJZfUJ0Ujm3tim10Jg=
Subject key identifier: C7:86:74:4D:94:30:40:49:2C:9E:25:EF:AC:C8:80:8C:42:F8:96:DB
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Certificate issuer: /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial: 01974E8E3C518B92A39D993F137710810238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
Manifest number: 0DF3
Signing time: Sun 08 Jun 2025 08:00:33 +0000
Manifest this update: Sun 08 Jun 2025 08:00:33 +0000
Manifest next update: Mon 09 Jun 2025 08:00:33 +0000
Files and hashes: 1: NRGRL-46NCSPaGi9AZCwzE3w5nE.roa (hash: u0L8t2q2EBStWXwxFZXL40Y75wNx2nDlIz7mo+UHSk8=)
2: rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl (hash: EHJP0nmunIGijy3AR9dqKWQsq9bY7T+9o/+v1+clme4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:3c:51:8b:92:a3:9d:99:3f:13:77:10:81:02:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
Validity
Not Before: Jun 8 08:00:33 2025 GMT
Not After : Jun 9 08:00:33 2025 GMT
Subject: CN=c786744d943040492c9e25efacc8808c42f896db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:b2:fd:36:1e:da:5a:8a:2b:ce:dd:19:48:
b1:4a:5f:18:4d:7d:1c:f8:14:61:95:77:2d:0e:8f:
d3:42:7d:e1:6f:68:b4:b0:77:ea:a1:1c:19:fc:bf:
3b:17:9b:e9:7b:66:5c:dd:d0:fa:2b:69:92:20:90:
d8:fb:7f:23:7f:bb:8a:54:84:97:37:87:34:17:06:
56:29:4b:ba:65:fc:4f:d3:f2:44:6e:f3:b1:dc:28:
5f:b0:76:5f:2d:ea:97:70:5f:aa:91:3f:3e:66:9e:
b7:41:ea:34:cc:26:77:42:d9:1b:5e:c9:39:31:d1:
c3:29:3f:59:f9:c3:30:18:19:9e:eb:76:07:5b:2f:
f6:b5:47:ea:d4:bb:73:30:47:ef:d0:cb:b0:e5:09:
c6:8e:78:85:de:e4:87:60:2d:3b:46:8c:b3:25:69:
58:91:e6:5c:e4:da:88:f8:3f:1f:8f:cc:e9:49:75:
96:44:d3:15:01:22:66:61:2b:e2:f0:17:b2:12:e9:
c8:39:fc:5d:8b:ee:1b:34:3a:77:99:01:64:88:c3:
3a:a3:60:4d:6a:44:12:6d:83:61:cd:52:3c:07:34:
b6:ac:bf:be:25:01:80:71:f0:94:95:50:31:b5:96:
59:82:9f:ce:4d:e3:3c:27:f7:41:63:5d:4b:71:38:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:86:74:4D:94:30:40:49:2C:9E:25:EF:AC:C8:80:8C:42:F8:96:DB
X509v3 Authority Key Identifier:
keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1c:d8:ad:ff:09:a4:1a:81:f6:b3:04:fe:0c:ec:6d:92:a6:
09:58:f0:07:cb:eb:4d:db:26:ff:39:e9:69:2a:e9:49:78:6c:
44:37:fc:8f:22:d0:95:c5:af:aa:c7:e2:03:f3:36:57:33:19:
ea:d4:f7:2c:6c:cc:af:2d:82:1d:34:2e:54:06:0a:e4:19:0f:
bd:31:14:f8:fe:d0:8c:cd:87:60:b8:7d:ed:73:d7:72:9f:d0:
22:6b:d1:d5:f0:51:76:56:7e:7b:11:ff:91:37:15:d5:a2:7e:
3c:02:a8:b3:d7:c3:11:d0:17:b0:1e:4e:21:2e:1d:44:a0:f6:
0f:b7:10:49:bb:63:9e:8f:2b:55:22:3c:c4:4e:69:25:cb:48:
b0:10:8b:c5:15:79:43:21:8c:e3:10:03:d4:e0:58:25:45:2e:
e3:32:80:df:74:a8:ef:f6:30:25:51:1b:31:4f:2c:78:2a:61:
ef:57:b5:a2:b4:da:ee:31:05:04:a7:0a:f1:6b:53:a7:01:9a:
c6:a1:53:92:82:c7:de:a5:d9:d6:0f:ce:ae:3c:8f:4b:c4:11:
0d:3e:1a:c4:eb:e8:42:be:b0:4b:9a:2e:4e:bc:fe:c2:aa:2e:
ce:60:67:59:21:81:0a:01:b8:61:e6:8f:42:95:42:98:8e:14:
92:ce:bf:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjjxRi5KjnZk/E3cQgQI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzkzYzYzZjE3ODY1NzgyMWEyMzdiYTAyNmNhNTI3OTIz
MzMzM2QwHhcNMjUwNjA4MDgwMDMzWhcNMjUwNjA5MDgwMDMzWjAzMTEwLwYDVQQD
EyhjNzg2NzQ0ZDk0MzA0MDQ5MmM5ZTI1ZWZhY2M4ODA4YzQyZjg5NmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPKy/TYe2lqKK87dGUixSl8YTX0c
+BRhlXctDo/TQn3hb2i0sHfqoRwZ/L87F5vpe2Zc3dD6K2mSIJDY+38jf7uKVISX
N4c0FwZWKUu6ZfxP0/JEbvOx3ChfsHZfLeqXcF+qkT8+Zp63Qeo0zCZ3QtkbXsk5
MdHDKT9Z+cMwGBme63YHWy/2tUfq1LtzMEfv0Muw5QnGjniF3uSHYC07RoyzJWlY
keZc5NqI+D8fj8zpSXWWRNMVASJmYSvi8BeyEunIOfxdi+4bNDp3mQFkiMM6o2BN
akQSbYNhzVI8BzS2rL++JQGAcfCUlVAxtZZZgp/OTeM8J/dBY11LcTiw5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeGdE2UMEBJLJ4l76zIgIxC+JbbMB8GA1UdIwQY
MBaAFK05PGPxeGV4IaI3ugJspSeSMzM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRrOFlfRjRaWGdob2plNkFteWxKNUl6TXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWU5ZWMtOGZhNS00MDljLWIxZGUt
OTM3ZTlkOTljYWMyLzEvclRrOFlfRjRaWGdob2plNkFteWxKNUl6TXowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zOWU5ZWMtOGZhNS00MDljLWIxZGUtOTM3ZTlkOTljYWMy
LzEvclRrOFlfRjRaWGdob2plNkFteWxKNUl6TXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhzYrf8J
pBqB9rME/gzsbZKmCVjwB8vrTdsm/znpaSrpSXhsRDf8jyLQlcWvqsfiA/M2VzMZ
6tT3LGzMry2CHTQuVAYK5BkPvTEU+P7QjM2HYLh97XPXcp/QImvR1fBRdlZ+exH/
kTcV1aJ+PAKos9fDEdAXsB5OIS4dRKD2D7cQSbtjno8rVSI8xE5pJctIsBCLxRV5
QyGM4xAD1OBYJUUu4zKA33So7/YwJVEbMU8seCph71e1orTa7jEFBKcK8WtTpwGa
xqFTkoLH3qXZ1g/OrjyPS8QRDT4axOvoQr6wS5ouTrz+wqouzmBnWSGBCgG4YeaP
QpVCmI4Uks6/IA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:34:19 2025 by rpki-client