Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: LlLzuob2+sfOidOEC2v3A3MsRK9ryIyhzB/D6aMPLFY=
Subject key identifier: 6B:B8:FB:C4:0F:34:85:6A:75:9A:12:3D:69:37:1A:3B:B4:17:03:B2
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 0197499F53216E2F126E15AAC1DA5F65FB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 09EB
Signing time: Sat 07 Jun 2025 09:01:07 +0000
Manifest this update: Sat 07 Jun 2025 09:01:07 +0000
Manifest next update: Sun 08 Jun 2025 09:01:07 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: 2usSFvhDS1rbCUnKQQDsV1fh7t9DErGsJ3LtMI8JLUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:53:21:6e:2f:12:6e:15:aa:c1:da:5f:65:fb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Jun 7 09:01:07 2025 GMT
Not After : Jun 8 09:01:07 2025 GMT
Subject: CN=6bb8fbc40f34856a759a123d69371a3bb41703b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:8f:65:fb:e0:d0:5b:ec:a8:a8:e2:a6:5d:
a0:f4:87:d6:8f:9c:0b:7d:b7:e1:2e:b7:4c:f4:7c:
dd:e5:01:8f:71:dc:4a:d3:56:09:7b:02:7f:b7:4a:
01:fe:76:45:d8:c2:ac:15:d9:44:78:bd:74:63:f5:
de:fc:d6:11:7b:0c:ec:5f:87:15:4c:fb:61:10:b7:
fc:b7:97:fa:b5:6c:6c:39:6c:a8:43:0b:72:42:ab:
a1:a8:1a:45:e8:69:b4:4e:85:e6:69:af:1b:d6:04:
d6:91:71:c9:3c:be:34:e4:2a:0c:7b:a7:f5:25:b9:
ce:aa:85:ac:b1:a2:45:18:1d:dc:a6:eb:4d:d7:5b:
61:c3:d7:dd:df:3b:09:4f:e0:a5:49:6e:67:ed:02:
6f:40:94:1a:a0:c0:bb:ec:31:fd:ab:e7:75:87:91:
83:20:de:fc:08:b4:64:e3:f7:22:db:0d:d4:21:b8:
32:df:06:c1:29:c9:52:e5:23:f2:ca:ba:74:cd:29:
e5:10:cb:5e:1d:66:85:96:df:ca:e1:d5:bd:0c:d5:
cd:be:08:41:2f:e7:fe:b7:b4:00:a0:28:f2:10:47:
bc:98:29:75:e3:3e:3e:ff:71:5e:f3:87:7d:0a:b2:
3f:97:60:16:cc:b2:86:d2:e5:c7:50:d4:4d:96:9a:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B8:FB:C4:0F:34:85:6A:75:9A:12:3D:69:37:1A:3B:B4:17:03:B2
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f2:f1:63:0b:14:ce:e5:89:d4:48:78:5d:c1:6c:b0:61:68:
f6:a5:c1:48:c1:6e:44:86:a6:3e:fb:b8:51:10:9e:26:f8:98:
27:5d:9e:41:a8:df:f8:89:b8:c1:06:8e:34:54:41:82:0c:32:
54:7d:20:60:26:9c:20:f6:08:fc:e2:50:46:d9:1e:0b:8f:12:
d2:89:b7:60:1e:17:c1:3b:5a:9c:63:d4:41:cf:12:a3:3a:3c:
ca:7a:b6:a0:ab:e2:4c:e6:19:c6:d2:66:e2:5f:fa:65:22:41:
56:97:65:79:0b:b9:3b:cb:d9:1c:f8:88:45:ba:b9:1f:35:51:
0f:10:65:ae:1c:21:24:64:eb:4e:29:42:ee:f3:cb:74:61:d5:
be:90:ca:4f:0b:0c:5a:18:2b:75:a5:ec:14:6e:a4:71:51:6e:
c0:bc:36:1e:98:39:83:d9:fc:88:90:58:6d:b6:70:38:74:96:
a3:62:a4:e2:ef:87:f5:41:d3:f1:9c:3e:b7:2b:91:eb:f4:b4:
88:f4:d8:1f:c8:e0:8b:50:49:d7:34:3f:2c:0e:8e:b0:7a:6c:
d4:81:67:0d:3c:86:3d:37:30:53:b6:d0:37:43:36:61:c9:7b:
db:0d:53:a9:37:32:54:22:cd:41:e4:e8:97:6f:e7:8d:ce:a0:
9c:05:d3:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1Mhbi8SbhWqwdpfZftPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTY4MDI4ZWMwZGFiNjY4YTY3ZDViZjZmNTM1OGNhYWJl
MzM3YTgwHhcNMjUwNjA3MDkwMTA3WhcNMjUwNjA4MDkwMTA3WjAzMTEwLwYDVQQD
Eyg2YmI4ZmJjNDBmMzQ4NTZhNzU5YTEyM2Q2OTM3MWEzYmI0MTcwM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQaPZfvg0FvsqKjipl2g9IfWj5wL
fbfhLrdM9Hzd5QGPcdxK01YJewJ/t0oB/nZF2MKsFdlEeL10Y/Xe/NYRewzsX4cV
TPthELf8t5f6tWxsOWyoQwtyQquhqBpF6Gm0ToXmaa8b1gTWkXHJPL405CoMe6f1
JbnOqoWssaJFGB3cputN11thw9fd3zsJT+ClSW5n7QJvQJQaoMC77DH9q+d1h5GD
IN78CLRk4/ci2w3UIbgy3wbBKclS5SPyyrp0zSnlEMteHWaFlt/K4dW9DNXNvghB
L+f+t7QAoCjyEEe8mCl14z4+/3Fe84d9CrI/l2AWzLKG0uXHUNRNlprVCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu4+8QPNIVqdZoSPWk3Gju0FwOyMB8GA1UdIwQY
MBaAFH8WgCjsDatmimfVv29TWMqr4zeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUt
N2ZhZGY1MGEyZTM3LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUtN2ZhZGY1MGEyZTM3
LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/LxYwsU
zuWJ1Eh4XcFssGFo9qXBSMFuRIamPvu4URCeJviYJ12eQajf+Im4wQaONFRBggwy
VH0gYCacIPYI/OJQRtkeC48S0om3YB4XwTtanGPUQc8Sozo8ynq2oKviTOYZxtJm
4l/6ZSJBVpdleQu5O8vZHPiIRbq5HzVRDxBlrhwhJGTrTilC7vPLdGHVvpDKTwsM
WhgrdaXsFG6kcVFuwLw2Hpg5g9n8iJBYbbZwOHSWo2Kk4u+H9UHT8Zw+tyuR6/S0
iPTYH8jgi1BJ1zQ/LA6OsHps1IFnDTyGPTcwU7bQN0M2Ycl72w1TqTcyVCLNQeTo
l2/njc6gnAXTew==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:19 2025 by rpki-client