Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: R2rtNLhfroROBbctnc85XTExSmlVyiqXicoKJWC6j78=
Subject key identifier: 8E:38:AE:12:73:DA:8F:C1:9F:19:16:CF:17:FA:08:85:A7:71:9D:1E
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 01974A7B03B94884A4820753FFF3D36F3733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 0F9E
Signing time: Sat 07 Jun 2025 13:01:05 +0000
Manifest this update: Sat 07 Jun 2025 13:01:05 +0000
Manifest next update: Sun 08 Jun 2025 13:01:05 +0000
Files and hashes: 1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: NZox3Wpafgwjn0UMwSQJhwjH515vqgbM01Sw2ydjVqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:03:b9:48:84:a4:82:07:53:ff:f3:d3:6f:37:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Jun 7 13:01:05 2025 GMT
Not After : Jun 8 13:01:05 2025 GMT
Subject: CN=8e38ae1273da8fc19f1916cf17fa0885a7719d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:02:8b:7d:57:ff:0c:86:9c:fe:6f:45:e3:
d3:eb:fd:17:6b:c1:88:c7:cc:aa:bb:14:5b:ae:5c:
82:78:1c:32:1b:e4:eb:d6:b3:33:20:de:0f:0e:5f:
e6:a1:53:a5:5e:07:0d:2b:57:72:6c:91:72:ee:f7:
25:d4:b2:0d:f6:e7:71:db:a3:59:8f:cf:3b:94:89:
13:a3:7f:20:1b:cd:1c:ec:70:a3:9c:ee:96:1f:92:
dd:84:cb:de:e1:c4:11:ab:e3:6b:67:9e:43:f9:63:
27:95:4a:62:01:2a:bd:68:f6:95:20:4c:3b:5e:65:
b8:bc:e6:8c:cf:46:3a:64:f7:c9:84:be:6a:df:e0:
02:32:4a:fb:49:d7:cb:f1:9e:e1:2d:bc:59:c6:24:
47:02:48:8e:07:50:6d:f3:43:78:26:92:83:1d:22:
4e:93:7f:b2:e8:54:ff:ad:5c:48:74:37:05:82:3f:
f2:22:7c:27:bf:e0:f5:e7:4b:b9:05:a3:f5:c4:cf:
08:10:c0:1f:4e:48:90:b8:b3:8f:7a:73:03:a0:24:
ad:13:b4:69:ba:3d:1d:4e:8f:d9:49:06:88:94:5b:
c5:5a:75:31:34:99:28:d8:db:88:c7:c5:81:d9:0a:
72:1d:78:a6:d5:02:73:63:6c:ce:f7:b5:cc:05:ea:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:AE:12:73:DA:8F:C1:9F:19:16:CF:17:FA:08:85:A7:71:9D:1E
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6c:39:bd:20:da:d9:21:dd:30:f6:0b:49:05:e9:17:dd:74:
69:28:2d:d2:67:9d:5f:ee:d1:59:91:0e:fd:40:68:46:34:94:
dd:01:8c:90:41:76:c2:21:8c:d1:05:a5:09:91:3e:27:bf:df:
34:10:ed:5c:86:d4:f0:69:e2:ea:a1:c5:cb:7c:a2:0d:37:eb:
09:a9:b5:0b:b8:02:bb:69:74:bc:14:cd:4b:0f:30:01:87:25:
4b:5f:df:f7:b8:80:45:35:40:bb:d0:71:8f:07:0c:97:94:84:
86:28:2e:36:a1:9a:47:27:1e:b4:46:bb:e0:15:bc:0f:7a:69:
de:1b:2b:b9:a4:81:10:1f:0b:cb:a6:ab:fc:85:e4:57:57:64:
6d:43:c0:7c:6b:21:c2:57:c9:00:08:a8:dc:03:10:98:1f:6a:
55:1c:a4:86:e8:6f:23:8d:7c:41:99:9c:6c:b8:e7:5a:8e:b1:
a7:0c:54:9d:52:9e:65:be:6b:2a:36:21:ba:26:dd:af:75:9c:
b1:85:cf:84:d8:d6:e9:72:1d:55:ed:25:ea:26:8c:f7:b0:95:
fa:2a:94:2a:90:f4:37:86:15:66:7c:17:65:1d:ea:59:8f:2a:
0a:73:e4:10:24:e5:1b:83:1e:16:ce:91:66:a9:a8:39:0f:a2:
78:30:ba:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKewO5SISkggdT//PTbzczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMTU0ODJhNjU2MDA5YWExYmM4MDUxNDgzNjhkMWViZGY4
ZjYyYzgwHhcNMjUwNjA3MTMwMTA1WhcNMjUwNjA4MTMwMTA1WjAzMTEwLwYDVQQD
Eyg4ZTM4YWUxMjczZGE4ZmMxOWYxOTE2Y2YxN2ZhMDg4NWE3NzE5ZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCICi31X/wyGnP5vRePT6/0Xa8GI
x8yquxRbrlyCeBwyG+Tr1rMzIN4PDl/moVOlXgcNK1dybJFy7vcl1LIN9udx26NZ
j887lIkTo38gG80c7HCjnO6WH5LdhMve4cQRq+NrZ55D+WMnlUpiASq9aPaVIEw7
XmW4vOaMz0Y6ZPfJhL5q3+ACMkr7SdfL8Z7hLbxZxiRHAkiOB1Bt80N4JpKDHSJO
k3+y6FT/rVxIdDcFgj/yInwnv+D150u5BaP1xM8IEMAfTkiQuLOPenMDoCStE7Rp
uj0dTo/ZSQaIlFvFWnUxNJko2NuIx8WB2QpyHXim1QJzY2zO97XMBeqU3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI44rhJz2o/BnxkWzxf6CIWncZ0eMB8GA1UdIwQY
MBaAFP0VSCplYAmqG8gFFINo0evfj2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEt
OTE3YzgwYjE0ODYyLzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEtOTE3YzgwYjE0ODYy
LzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWw5vSDa
2SHdMPYLSQXpF910aSgt0medX+7RWZEO/UBoRjSU3QGMkEF2wiGM0QWlCZE+J7/f
NBDtXIbU8Gni6qHFy3yiDTfrCam1C7gCu2l0vBTNSw8wAYclS1/f97iARTVAu9Bx
jwcMl5SEhiguNqGaRycetEa74BW8D3pp3hsruaSBEB8Ly6ar/IXkV1dkbUPAfGsh
wlfJAAio3AMQmB9qVRykhuhvI418QZmcbLjnWo6xpwxUnVKeZb5rKjYhuibdr3Wc
sYXPhNjW6XIdVe0l6iaM97CV+iqUKpD0N4YVZnwXZR3qWY8qCnPkECTlG4MeFs6R
ZqmoOQ+ieDC6WQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:39:32 2025 by rpki-client