Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
File: R0kcIjvm4aqla_7G2g2pDEqFKq8.mft (raw, json)
Hash identifier: MnpnJzLdCqhCrkR468JeSQxbnc3jgz8yEvw6XRGD5Dc=
Subject key identifier: D6:BC:46:93:B5:C5:50:F1:D7:7E:F2:34:DB:FF:4A:94:6F:08:8B:95
Authority key identifier: 47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
Certificate issuer: /CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Certificate serial: 019751FD0AA2DBBBD870DC68319D25567215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
Manifest number: 02E8
Signing time: Mon 09 Jun 2025 00:00:27 +0000
Manifest this update: Mon 09 Jun 2025 00:00:27 +0000
Manifest next update: Tue 10 Jun 2025 00:00:27 +0000
Files and hashes: 1: R0kcIjvm4aqla_7G2g2pDEqFKq8.crl (hash: EMw9FlBXVfa+7SHJTe3p064n4M04XfcD60Y2yMqbkOI=)
2: rVporlTC0KO2iHCmNkPkBQ1rLtA.roa (hash: QNFtzFtuUhiRexRD3zRBFnGt2eHAdDUybJR5bbQe4xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:0a:a2:db:bb:d8:70:dc:68:31:9d:25:56:72:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Validity
Not Before: Jun 9 00:00:27 2025 GMT
Not After : Jun 10 00:00:27 2025 GMT
Subject: CN=d6bc4693b5c550f1d77ef234dbff4a946f088b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:c7:a7:5e:74:3b:74:b5:56:f2:af:4c:0b:
e0:a6:64:ce:36:69:75:95:82:91:f8:87:de:98:8d:
fb:0e:f5:60:60:91:44:b4:e8:c9:7e:38:8a:9c:96:
f7:1c:fb:fc:10:a8:7c:c2:92:59:88:86:11:35:e9:
25:0b:e8:bc:45:15:e9:39:2f:36:92:65:47:94:01:
52:17:5e:35:a0:73:43:4a:c1:5d:ce:34:c2:a1:aa:
40:7a:aa:c7:27:eb:17:56:24:42:0c:59:60:83:ea:
df:86:50:5f:27:7c:e1:61:90:a9:a2:28:ca:05:ad:
c5:fe:f6:98:46:2b:cf:53:db:fc:4e:9e:67:bd:73:
ea:d0:99:f6:8a:85:a1:c5:d7:de:2e:09:31:63:fe:
22:b3:b6:b7:a3:1b:fb:7c:ad:6e:6e:ba:9d:d8:c9:
fb:5d:db:40:58:41:12:ea:28:cf:53:35:c9:13:2f:
a2:98:65:8d:f4:40:9e:a3:00:a0:74:db:10:f7:6c:
0f:92:fd:71:4a:e2:80:4f:ad:d9:c4:20:b8:14:8c:
85:cb:81:7b:74:da:08:a9:83:94:a0:63:f7:74:c6:
c6:4d:26:59:38:b3:51:a2:c9:d8:7b:15:03:84:33:
ff:27:79:f8:ce:e0:e4:c4:2f:2c:3f:d0:6e:93:8f:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:46:93:B5:C5:50:F1:D7:7E:F2:34:DB:FF:4A:94:6F:08:8B:95
X509v3 Authority Key Identifier:
keyid:47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e0:e6:4d:ec:c9:92:62:e0:12:7b:63:bd:05:0e:4e:c2:39:
5c:87:de:b7:ab:b4:33:13:a6:59:13:11:fa:a0:7b:99:da:55:
9f:31:59:80:ae:c7:1d:24:2b:b8:7b:6a:98:35:94:a3:fe:e8:
43:fc:57:2c:7c:59:44:c2:4b:8f:69:72:d0:3d:59:6a:7d:bd:
b1:2d:1e:3c:f4:08:07:57:a3:dd:02:fb:86:7b:c5:51:e3:4f:
08:6f:cd:88:7f:c7:dc:7f:b5:08:7c:f2:13:60:a0:5e:ef:cd:
8a:26:d3:f7:e4:07:af:95:65:03:7f:b6:11:f5:0e:5f:56:bd:
ca:38:30:24:7a:f6:9d:13:4f:19:d9:32:39:62:8b:23:21:18:
03:61:cb:6f:fc:03:c4:d2:0c:0b:81:f4:6b:44:81:2f:d1:19:
48:e4:2c:52:cf:f0:b4:8d:05:5f:2e:31:34:bf:d4:1d:5e:8f:
14:15:1f:87:0d:b6:83:df:65:4d:4e:09:8e:99:99:74:c1:17:
b4:ad:27:87:db:f7:88:d7:2f:84:87:cc:98:ab:ef:e7:39:70:
d7:b0:c5:a7:28:ac:fa:9b:eb:b0:d6:15:48:e1:aa:71:b8:8b:
f2:0c:2d:49:14:c2:d3:9f:8f:cb:18:c5:b8:68:ec:93:70:c1:
f3:f6:00:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdR/Qqi27vYcNxoMZ0lVnIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NDkxYzIyM2JlNmUxYWFhNTZiZmVjNmRhMGRhOTBjNGE4
NTJhYWYwHhcNMjUwNjA5MDAwMDI3WhcNMjUwNjEwMDAwMDI3WjAzMTEwLwYDVQQD
EyhkNmJjNDY5M2I1YzU1MGYxZDc3ZWYyMzRkYmZmNGE5NDZmMDg4Yjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mfHp150O3S1VvKvTAvgpmTONml1
lYKR+IfemI37DvVgYJFEtOjJfjiKnJb3HPv8EKh8wpJZiIYRNeklC+i8RRXpOS82
kmVHlAFSF141oHNDSsFdzjTCoapAeqrHJ+sXViRCDFlgg+rfhlBfJ3zhYZCpoijK
Ba3F/vaYRivPU9v8Tp5nvXPq0Jn2ioWhxdfeLgkxY/4is7a3oxv7fK1ubrqd2Mn7
XdtAWEES6ijPUzXJEy+imGWN9ECeowCgdNsQ92wPkv1xSuKAT63ZxCC4FIyFy4F7
dNoIqYOUoGP3dMbGTSZZOLNRosnYexUDhDP/J3n4zuDkxC8sP9Buk496wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa8RpO1xVDx137yNNv/SpRvCIuVMB8GA1UdIwQY
MBaAFEdJHCI75uGqpWv+xtoNqQxKhSqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgt
OGFjZGY5NmM5OGEwLzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgtOGFjZGY5NmM5OGEw
LzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuDmTezJ
kmLgEntjvQUOTsI5XIfet6u0MxOmWRMR+qB7mdpVnzFZgK7HHSQruHtqmDWUo/7o
Q/xXLHxZRMJLj2ly0D1Zan29sS0ePPQIB1ej3QL7hnvFUeNPCG/NiH/H3H+1CHzy
E2CgXu/NiibT9+QHr5VlA3+2EfUOX1a9yjgwJHr2nRNPGdkyOWKLIyEYA2HLb/wD
xNIMC4H0a0SBL9EZSOQsUs/wtI0FXy4xNL/UHV6PFBUfhw22g99lTU4JjpmZdMEX
tK0nh9v3iNcvhIfMmKvv5zlw17DFpyis+pvrsNYVSOGqcbiL8gwtSRTC05+PyxjF
uGjsk3DB8/YAFg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:00:18 2025 by rpki-client