Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: cjvKmhBdrAxj9xjpnQN3Rt29/5/ScKAh+nFenQf3YNY=
Subject key identifier: 2A:2B:76:E7:CC:5C:36:B7:0D:63:47:CE:21:2A:CC:6A:96:92:83:37
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 0197458B69D7EA1825B2F618D479F8E98269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 14:00:53 +0000
Manifest this update: Fri 06 Jun 2025 14:00:53 +0000
Manifest next update: Sat 07 Jun 2025 14:00:53 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: fKjMvQz/QqKOpZr6pu94We+1rGPpCLdoq93DP3iGf2Y=)
2: cl3GADBIa5-t9wHD_fNk8JDv5PM.roa (hash: H9R6zlOL/gViduYKRIYyM+avR4L6nr/tioY61On5qcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:69:d7:ea:18:25:b2:f6:18:d4:79:f8:e9:82:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Jun 6 14:00:53 2025 GMT
Not After : Jun 7 14:00:53 2025 GMT
Subject: CN=2a2b76e7cc5c36b70d6347ce212acc6a96928337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:9b:2d:5a:aa:c5:b6:05:f1:4f:8f:cd:c2:
14:54:f1:9e:18:72:9e:64:b3:cf:e2:c7:fc:33:1d:
cc:04:ad:c2:36:f2:c2:b0:1b:28:6a:00:d1:6b:e3:
4b:bd:c2:33:eb:bb:84:69:08:d8:5a:0d:0d:4d:27:
73:4d:39:9c:2f:cd:35:7b:66:58:c5:18:de:1a:2e:
85:bc:f4:f0:46:ee:46:27:0b:60:25:da:d7:d2:ed:
19:bc:95:f6:b4:3f:fb:c5:80:f2:fc:2a:2c:18:dc:
d7:6b:73:e6:62:f7:55:8c:92:0b:99:37:e1:d1:f7:
ca:13:b3:37:67:00:e9:f1:50:25:e3:4f:90:3c:c9:
e2:5a:00:2f:98:e4:48:52:ef:bb:05:4e:fa:4d:07:
65:0b:a1:dc:8d:c6:6a:72:94:e3:ce:90:45:65:b6:
5b:95:9a:83:87:65:e9:05:c1:8b:c8:4d:13:28:21:
84:40:24:e6:a3:2e:17:19:46:8a:f9:1b:ca:e3:9a:
78:a2:06:cf:f4:bd:79:5b:1e:96:1f:6e:55:50:29:
4e:d5:d0:b5:35:be:12:e6:ae:90:d9:47:f6:7e:ba:
42:7f:72:21:0c:5a:2d:34:e9:de:12:dd:96:d6:7b:
92:10:ba:d6:19:2e:91:0e:d6:6a:24:66:14:cb:1c:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2B:76:E7:CC:5C:36:B7:0D:63:47:CE:21:2A:CC:6A:96:92:83:37
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:82:e2:ca:23:f9:0a:ba:89:1b:5f:0d:25:09:8e:e0:78:a3:
fb:bf:8f:9a:a5:43:13:ee:8f:46:32:c0:e9:c5:96:1c:75:8f:
af:9c:62:06:a2:28:3c:c6:99:a4:69:64:bb:46:58:3a:5e:4a:
5b:26:e5:bb:05:62:6f:dc:ff:02:01:13:26:42:97:0f:bb:49:
75:fa:72:62:d1:f2:d7:9b:df:12:db:7b:18:7c:6d:49:75:14:
fb:04:fe:92:38:07:8b:75:85:58:b9:65:8d:03:f0:7e:44:02:
ca:ea:cd:a4:01:fb:05:6e:c1:aa:e5:84:42:72:9e:57:3c:35:
e5:9b:74:89:0f:63:ec:bb:61:55:3f:9f:e7:a0:0a:65:6b:ec:
7d:cd:43:ae:a2:ed:e6:44:f9:3b:9a:ea:b7:34:76:e1:ce:67:
85:47:e0:5e:5b:34:7c:e5:97:5a:f2:ba:db:53:54:37:11:44:
27:c4:22:71:87:24:62:0f:eb:62:79:73:da:db:18:fa:68:a8:
a7:e5:1f:ad:81:81:cf:0b:72:b0:5e:c1:a2:7d:d4:e9:d8:87:
e2:0a:5a:d6:f8:be:5f:ff:6b:2f:0d:44:38:fd:46:3b:14:c7:
e9:34:54:99:9a:1d:9e:9a:18:cb:5d:f1:65:c0:b3:13:85:44:
92:c8:38:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFi2nX6hglsvYY1Hn46YJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjExMTU5YjcyZDQwMTVlZDg2N2I0MmI3ODQzODFlNWQ5
NTVhOGYwHhcNMjUwNjA2MTQwMDUzWhcNMjUwNjA3MTQwMDUzWjAzMTEwLwYDVQQD
EygyYTJiNzZlN2NjNWMzNmI3MGQ2MzQ3Y2UyMTJhY2M2YTk2OTI4MzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtibLVqqxbYF8U+PzcIUVPGeGHKe
ZLPP4sf8Mx3MBK3CNvLCsBsoagDRa+NLvcIz67uEaQjYWg0NTSdzTTmcL801e2ZY
xRjeGi6FvPTwRu5GJwtgJdrX0u0ZvJX2tD/7xYDy/CosGNzXa3PmYvdVjJILmTfh
0ffKE7M3ZwDp8VAl40+QPMniWgAvmORIUu+7BU76TQdlC6HcjcZqcpTjzpBFZbZb
lZqDh2XpBcGLyE0TKCGEQCTmoy4XGUaK+RvK45p4ogbP9L15Wx6WH25VUClO1dC1
Nb4S5q6Q2Uf2frpCf3IhDFotNOneEt2W1nuSELrWGS6RDtZqJGYUyxzOcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCordufMXDa3DWNHziEqzGqWkoM3MB8GA1UdIwQY
MBaAFNKxEVm3LUAV7YZ7QreEOB5dlVqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAt
ZjViOTQ5NTljOWY3LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAtZjViOTQ5NTljOWY3
LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoLiyiP5
CrqJG18NJQmO4Hij+7+PmqVDE+6PRjLA6cWWHHWPr5xiBqIoPMaZpGlku0ZYOl5K
WybluwVib9z/AgETJkKXD7tJdfpyYtHy15vfEtt7GHxtSXUU+wT+kjgHi3WFWLll
jQPwfkQCyurNpAH7BW7BquWEQnKeVzw15Zt0iQ9j7LthVT+f56AKZWvsfc1DrqLt
5kT5O5rqtzR24c5nhUfgXls0fOWXWvK621NUNxFEJ8QicYckYg/rYnlz2tsY+mio
p+UfrYGBzwtysF7Bon3U6diH4gpa1vi+X/9rLw1EOP1GOxTH6TRUmZodnpoYy13x
ZcCzE4VEksg46w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:52 2025 by rpki-client