Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier: gbviCpN8JLraCutbgokiYwaggyfGWNQJT0zYRkAUvHU=
Subject key identifier: 18:B1:97:61:98:96:2D:61:EA:6E:64:75:FB:80:85:F2:A3:1F:D4:3E
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 01974DB2EC3B7B3DEA0F791ABD9A42AA8AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number: 0687
Signing time: Sun 08 Jun 2025 04:01:00 +0000
Manifest this update: Sun 08 Jun 2025 04:01:00 +0000
Manifest next update: Mon 09 Jun 2025 04:01:00 +0000
Files and hashes: 1: ZRG74paviVX-XS90B8J_nR1og6Y.roa (hash: RiJuDSGI6phByjHDly7Ub5V9tWyhmJNeE34595qod9o=)
2: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: bRjE83EUPmjMBLjlWy4LFwbXa0DwT9GMrjEPyymnfzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:ec:3b:7b:3d:ea:0f:79:1a:bd:9a:42:aa:8a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: Jun 8 04:01:00 2025 GMT
Not After : Jun 9 04:01:00 2025 GMT
Subject: CN=18b1976198962d61ea6e6475fb8085f2a31fd43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:9a:ef:15:58:49:34:63:98:8d:e7:9d:e4:
2c:e4:9c:6a:77:fc:1d:db:ca:47:f4:cf:a9:e1:45:
3b:f3:9b:08:39:4c:38:9d:e1:b8:f0:cc:41:1b:27:
47:78:66:3e:3a:0d:96:17:ea:ef:a8:fa:3f:95:b0:
78:1b:fd:6f:74:34:5c:0c:35:f8:38:b8:e0:e3:46:
f9:85:69:fa:c7:35:e9:0b:db:6a:2e:3a:8f:78:6f:
1d:14:d0:89:ce:0e:e2:87:24:db:7e:01:2c:58:ac:
8a:b5:69:e6:5c:95:bc:3d:3b:d6:15:84:42:cf:df:
cf:de:db:8f:0b:69:65:ac:4c:1e:0c:02:60:5a:3c:
21:e9:dd:ea:0f:ff:89:af:5e:09:de:4e:e6:4e:e4:
dc:44:8a:67:e0:fc:b6:e0:f9:ac:bb:f4:59:66:e2:
25:97:3b:a7:dc:a0:31:c0:80:25:53:8c:5c:a9:d6:
f0:49:93:b8:d5:e0:93:65:92:e0:58:34:00:b9:11:
26:7d:00:f8:bb:ef:46:83:aa:3a:04:37:9e:28:b9:
54:f5:f2:f5:e0:11:0b:24:20:33:fa:f8:27:74:25:
67:46:ad:77:7d:9d:06:b2:1a:34:26:28:91:00:4c:
15:78:74:98:35:53:2e:d7:98:80:9d:9c:b3:2f:2c:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B1:97:61:98:96:2D:61:EA:6E:64:75:FB:80:85:F2:A3:1F:D4:3E
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:dc:c2:e9:e5:7e:30:77:d9:83:bc:79:66:9c:4e:af:52:15:
74:36:a5:75:34:b8:f2:97:a7:fe:27:a2:dc:fa:05:8a:59:b7:
d1:3e:05:bc:10:a1:1a:cd:53:95:11:db:d1:77:14:87:75:81:
53:18:8d:c6:3b:b9:6b:d7:c9:31:84:89:93:90:a5:59:3e:86:
72:36:a4:dc:40:71:41:bb:d5:ec:89:e0:0d:f6:d7:92:82:13:
3c:fd:86:72:6e:6e:39:d6:86:ea:e5:83:39:11:43:9e:04:db:
3a:b1:1a:fb:a6:3f:c5:81:4f:24:27:ca:29:78:61:fc:29:fe:
8a:3e:10:d3:f4:e0:26:22:90:0c:24:49:b2:52:08:f5:f7:70:
10:8d:97:9e:b8:5d:5b:06:b1:25:eb:23:4b:5f:e9:59:02:8c:
44:51:69:af:63:e2:6d:d9:a3:bb:ae:84:a1:4d:47:04:e2:ea:
16:d5:35:ff:98:ee:51:77:b4:5e:e7:b1:ea:a9:c8:34:0c:48:
3b:b2:c6:f1:83:86:16:ea:86:67:db:df:48:71:f1:e3:16:b2:
0c:a5:ba:44:29:4f:0a:94:b4:37:2b:6a:39:1b:7a:58:25:4b:
27:8c:0f:10:67:7b:87:64:e7:00:ce:55:8e:9f:31:69:4b:87:
03:91:ee:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsuw7ez3qD3kavZpCqor7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDEzZmQyYWQ5ZTI1Yzg0YmMwYjU5ZTYwOGE2NDM2NjNl
NmJiNjgwHhcNMjUwNjA4MDQwMTAwWhcNMjUwNjA5MDQwMTAwWjAzMTEwLwYDVQQD
EygxOGIxOTc2MTk4OTYyZDYxZWE2ZTY0NzVmYjgwODVmMmEzMWZkNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1aa7xVYSTRjmI3nneQs5Jxqd/wd
28pH9M+p4UU785sIOUw4neG48MxBGydHeGY+Og2WF+rvqPo/lbB4G/1vdDRcDDX4
OLjg40b5hWn6xzXpC9tqLjqPeG8dFNCJzg7ihyTbfgEsWKyKtWnmXJW8PTvWFYRC
z9/P3tuPC2llrEweDAJgWjwh6d3qD/+Jr14J3k7mTuTcRIpn4Py24Pmsu/RZZuIl
lzun3KAxwIAlU4xcqdbwSZO41eCTZZLgWDQAuREmfQD4u+9Gg6o6BDeeKLlU9fL1
4BELJCAz+vgndCVnRq13fZ0Gsho0JiiRAEwVeHSYNVMu15iAnZyzLyz51wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBixl2GYli1h6m5kdfuAhfKjH9Q+MB8GA1UdIwQY
MBaAFK9BP9KtniXIS8C1nmCKZDZj5rtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YWY2MTUtMmM0ZS00Y2FmLWI1YWYt
ZWJiZTFmNDc3ZjY4LzEvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85YWY2MTUtMmM0ZS00Y2FmLWI1YWYtZWJiZTFmNDc3ZjY4
LzEvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAstzC6eV+
MHfZg7x5ZpxOr1IVdDaldTS48pen/iei3PoFilm30T4FvBChGs1TlRHb0XcUh3WB
UxiNxju5a9fJMYSJk5ClWT6Gcjak3EBxQbvV7IngDfbXkoITPP2Gcm5uOdaG6uWD
ORFDngTbOrEa+6Y/xYFPJCfKKXhh/Cn+ij4Q0/TgJiKQDCRJslII9fdwEI2Xnrhd
WwaxJesjS1/pWQKMRFFpr2Pibdmju66EoU1HBOLqFtU1/5juUXe0Xuex6qnINAxI
O7LG8YOGFuqGZ9vfSHHx4xayDKW6RClPCpS0NytqORt6WCVLJ4wPEGd7h2TnAM5V
jp8xaUuHA5Huuw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:47:46 2025 by rpki-client