Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: YCbXi0QparY0MdkavK0hMMtMoKkBjQ9ebobPqx1TBjI=
Subject key identifier: 23:FC:50:AA:51:F1:02:DD:06:5A:D8:81:3D:56:B8:3D:93:96:69:B0
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 01974B1F1A84B9EF51D6B2E19F1A1A810E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 1372
Signing time: Sat 07 Jun 2025 16:00:18 +0000
Manifest this update: Sat 07 Jun 2025 16:00:18 +0000
Manifest next update: Sun 08 Jun 2025 16:00:18 +0000
Files and hashes: 1: LDFoqWoquL9wTVn9saN9JZc4auE.roa (hash: YdwrX0/CFiNvv9tuZOtWWVIYa8NZD1PSP+bR1o1/Vn8=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: iGwc3UpsPxUx4xVaHtz4g79Csqk81/4QIqrJgtYdH7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:1a:84:b9:ef:51:d6:b2:e1:9f:1a:1a:81:0e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: Jun 7 16:00:18 2025 GMT
Not After : Jun 8 16:00:18 2025 GMT
Subject: CN=23fc50aa51f102dd065ad8813d56b83d939669b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:42:ba:fb:f7:0c:46:19:a7:4d:96:42:50:
5a:98:a2:75:b8:bb:78:9a:06:b2:a2:b6:c9:bc:eb:
fb:e1:8e:92:25:af:df:c5:82:b9:9d:31:b7:db:ff:
0b:6c:47:c3:44:1b:98:d8:d7:a7:7b:b8:fa:38:40:
2d:61:f7:e5:44:fe:22:8d:ea:61:ed:6e:9d:6c:3d:
06:a6:ef:7c:85:f4:45:e5:4b:3f:06:f8:91:78:23:
fb:1c:9c:fb:b1:47:89:88:02:ff:99:96:9a:c7:b6:
ee:cb:8a:76:40:95:aa:9d:9b:8b:af:e3:73:f2:5b:
8f:35:e7:46:6d:a8:53:1b:68:51:7b:d2:34:7d:88:
93:62:e8:df:e0:d5:a0:2f:d3:bf:1b:33:11:de:13:
aa:97:a7:c3:26:85:e1:a3:54:4d:31:00:13:8a:70:
72:14:5f:3c:2b:7d:d0:2e:3c:dd:4e:0f:55:bf:63:
df:25:4f:ca:2d:6c:b1:9a:9d:a7:60:8b:7f:29:b1:
17:a2:8d:f5:2e:ff:b1:7f:a0:83:4a:73:13:66:10:
06:fa:45:d7:ef:72:19:8d:66:96:b5:14:55:58:a2:
da:02:61:e7:f6:b7:ee:78:4c:99:f5:0e:41:04:b8:
c3:c9:b4:4a:11:2a:69:53:0c:70:72:47:2f:62:92:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FC:50:AA:51:F1:02:DD:06:5A:D8:81:3D:56:B8:3D:93:96:69:B0
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f5:4d:9c:68:63:d3:b4:b5:da:3e:83:97:2a:0a:be:34:0f:
b8:26:e1:9e:21:5d:80:d4:a1:38:b6:02:81:f4:09:06:1b:37:
e8:c6:c0:a7:07:d9:7c:71:16:e7:16:1f:00:a0:a1:2e:b7:7f:
0a:2f:52:41:b6:da:32:cd:68:1c:6e:09:07:3e:4e:49:16:a2:
d7:e6:ea:b0:61:9b:52:33:c6:f8:b5:d9:eb:bd:0f:7e:1b:70:
38:94:64:79:c6:fb:ac:9d:cf:01:f4:6b:e4:c3:28:b1:b6:9a:
c9:90:2d:2b:48:15:b6:e3:13:a6:9f:8a:7f:c9:5d:6f:9e:58:
05:8a:24:9b:d1:0c:0e:fb:ce:c3:06:fc:7f:e1:e0:07:31:ad:
19:43:28:a0:50:7a:56:2f:84:43:4f:64:41:04:ed:84:79:46:
6b:e7:a5:13:ab:46:cf:5f:da:20:1f:43:0e:59:a5:28:a3:68:
e4:20:15:3f:26:e4:77:aa:12:3c:47:3e:94:29:22:02:45:81:
58:d2:2e:b8:db:b5:d5:27:41:d0:9d:b2:bd:e5:05:90:c2:6a:
4e:20:d8:1d:1e:99:40:02:e4:82:1d:20:20:16:65:a5:a1:f6:
09:f1:a0:fd:4e:13:a7:cd:b6:a1:c1:7a:4e:db:74:e5:99:b9:
9e:d5:af:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLHxqEue9R1rLhnxoagQ6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTlkMWJjYWM3NTIzMTJlYzRkZTZmNWJkMzlhY2NlMzJh
YjZiZDYwHhcNMjUwNjA3MTYwMDE4WhcNMjUwNjA4MTYwMDE4WjAzMTEwLwYDVQQD
EygyM2ZjNTBhYTUxZjEwMmRkMDY1YWQ4ODEzZDU2YjgzZDkzOTY2OWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB9Cuvv3DEYZp02WQlBamKJ1uLt4
mgayorbJvOv74Y6SJa/fxYK5nTG32/8LbEfDRBuY2Nene7j6OEAtYfflRP4ijeph
7W6dbD0Gpu98hfRF5Us/BviReCP7HJz7sUeJiAL/mZaax7buy4p2QJWqnZuLr+Nz
8luPNedGbahTG2hRe9I0fYiTYujf4NWgL9O/GzMR3hOql6fDJoXho1RNMQATinBy
FF88K33QLjzdTg9Vv2PfJU/KLWyxmp2nYIt/KbEXoo31Lv+xf6CDSnMTZhAG+kXX
73IZjWaWtRRVWKLaAmHn9rfueEyZ9Q5BBLjDybRKESppUwxwckcvYpKGewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP8UKpR8QLdBlrYgT1WuD2TlmmwMB8GA1UdIwQY
MBaAFGsZ0bysdSMS7E3m9b05rM4yq2vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYt
YjU1MWU0OTQzNWEyLzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYtYjU1MWU0OTQzNWEy
LzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfVNnGhj
07S12j6DlyoKvjQPuCbhniFdgNShOLYCgfQJBhs36MbApwfZfHEW5xYfAKChLrd/
Ci9SQbbaMs1oHG4JBz5OSRai1+bqsGGbUjPG+LXZ670PfhtwOJRkecb7rJ3PAfRr
5MMosbaayZAtK0gVtuMTpp+Kf8ldb55YBYokm9EMDvvOwwb8f+HgBzGtGUMooFB6
Vi+EQ09kQQTthHlGa+elE6tGz1/aIB9DDlmlKKNo5CAVPybkd6oSPEc+lCkiAkWB
WNIuuNu11SdB0J2yveUFkMJqTiDYHR6ZQALkgh0gIBZlpaH2CfGg/U4Tp822ocF6
Ttt05Zm5ntWvBg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:01:17 2025 by rpki-client