Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
File: pI2lIJvWz5DG321-bWOmOVW61LU.mft (raw, json)
Hash identifier: ExKXB47CRaTYySZRP61d9VRyfayaxf/wkFv1sWqRoiU=
Subject key identifier: 3C:22:CC:68:A9:50:D4:99:2A:57:1E:43:B0:D6:32:47:E1:16:C7:DD
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Certificate issuer: /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial: 019748C301FCA867236658041B7E4CE0E1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
Manifest number: 0605
Signing time: Sat 07 Jun 2025 05:00:28 +0000
Manifest this update: Sat 07 Jun 2025 05:00:28 +0000
Manifest next update: Sun 08 Jun 2025 05:00:28 +0000
Files and hashes: 1: gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa (hash: LNpaqhIXeGRj9rxSqG8l9W+yrY/Iu+GRMv3w/Y4Inpo=)
2: pI2lIJvWz5DG321-bWOmOVW61LU.crl (hash: RIINY4eaaATcoif9OoXXBrK7j720Jfsy8j8zKOCbJHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:01:fc:a8:67:23:66:58:04:1b:7e:4c:e0:e1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Validity
Not Before: Jun 7 05:00:28 2025 GMT
Not After : Jun 8 05:00:28 2025 GMT
Subject: CN=3c22cc68a950d4992a571e43b0d63247e116c7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:4f:f5:94:54:10:80:85:62:a3:45:fd:f9:
1e:22:81:c7:74:70:37:01:48:47:ff:59:3b:03:cf:
69:eb:c2:5e:b0:fe:47:51:f2:63:55:4c:df:5a:31:
63:db:d2:e0:4f:91:47:dd:0b:c6:49:ec:9e:c2:f4:
41:95:a5:a8:42:c9:b7:0b:b9:b6:f2:c6:c6:94:84:
b2:22:c1:f1:7d:01:45:5a:7c:57:98:53:3c:4b:db:
f6:ee:af:e2:8e:2d:df:da:2d:1b:29:b6:20:84:b6:
d0:5f:cf:2f:c9:ff:7f:56:da:a0:bd:4d:15:4f:65:
67:70:b0:04:56:c2:48:06:73:27:71:cd:e7:50:a4:
0b:6e:9e:8c:43:6e:ac:f5:4f:95:06:42:c6:e6:36:
d4:08:7f:f5:a7:bc:b4:9f:ff:63:38:62:9d:8e:45:
3b:c7:6a:92:e5:8c:09:c5:f2:62:a7:2e:64:5f:d8:
d1:9f:31:4f:49:53:c3:01:81:70:24:0a:4a:d4:0a:
96:9f:ba:db:19:28:82:b6:75:aa:19:c2:dc:6e:ba:
6b:f5:60:50:17:a9:10:f2:d5:2c:a5:96:ed:d5:b3:
bf:f1:09:c6:b0:16:30:89:f2:a6:17:fe:c4:40:f0:
35:b1:43:8a:06:80:33:3b:f5:ba:91:ff:8d:78:ce:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:22:CC:68:A9:50:D4:99:2A:57:1E:43:B0:D6:32:47:E1:16:C7:DD
X509v3 Authority Key Identifier:
keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bb:db:e6:bf:fe:38:33:ed:2a:ac:50:3b:25:13:5e:52:cf:
46:6b:a4:87:af:b5:67:92:65:1b:5b:5a:71:ae:44:75:d3:ca:
3a:61:1f:2f:c4:dc:0b:14:46:bd:3a:fc:d4:36:e9:81:cb:67:
90:a2:45:67:4c:9f:88:e3:f7:ff:4e:fd:62:6a:2d:11:2d:d4:
08:a3:a2:79:40:2e:5b:fe:40:3f:cb:ee:3b:fa:12:bb:2b:38:
01:72:e6:1c:b1:1f:e1:4c:9b:18:fe:e8:fc:36:94:25:49:9e:
40:38:4a:61:cb:30:6e:25:04:3f:e2:90:be:a3:a4:5a:e9:17:
df:99:32:84:38:5b:8c:f8:3d:64:82:2d:28:65:6e:df:7b:7a:
d2:61:0f:fe:26:6c:0c:95:87:0a:fe:d5:10:a7:ae:3d:65:2a:
4e:04:5a:30:0f:c9:9a:3a:24:d6:8b:45:3f:fa:a1:8b:d6:5a:
f1:7b:25:25:a4:e3:cf:ab:90:db:70:96:43:96:13:6c:48:1b:
f8:6e:0e:16:94:4a:bd:4f:a9:78:ed:de:c3:4e:01:d9:b6:02:
15:1b:c1:4b:bd:3b:ce:63:4d:51:64:10:9b:61:b7:13:cd:f1:
a8:ef:c8:05:b1:8a:8e:5f:2d:f6:68:5a:04:15:d7:67:b3:ad:
6f:8e:f4:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwwH8qGcjZlgEG35M4OHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OGRhNTIwOWJkNmNmOTBjNmRmNmQ3ZTZkNjNhNjM5NTVi
YWQ0YjUwHhcNMjUwNjA3MDUwMDI4WhcNMjUwNjA4MDUwMDI4WjAzMTEwLwYDVQQD
EygzYzIyY2M2OGE5NTBkNDk5MmE1NzFlNDNiMGQ2MzI0N2UxMTZjN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAortP9ZRUEICFYqNF/fkeIoHHdHA3
AUhH/1k7A89p68JesP5HUfJjVUzfWjFj29LgT5FH3QvGSeyewvRBlaWoQsm3C7m2
8sbGlISyIsHxfQFFWnxXmFM8S9v27q/iji3f2i0bKbYghLbQX88vyf9/VtqgvU0V
T2VncLAEVsJIBnMncc3nUKQLbp6MQ26s9U+VBkLG5jbUCH/1p7y0n/9jOGKdjkU7
x2qS5YwJxfJipy5kX9jRnzFPSVPDAYFwJApK1AqWn7rbGSiCtnWqGcLcbrpr9WBQ
F6kQ8tUspZbt1bO/8QnGsBYwifKmF/7EQPA1sUOKBoAzO/W6kf+NeM5r3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwizGipUNSZKlceQ7DWMkfhFsfdMB8GA1UdIwQY
MBaAFKSNpSCb1s+Qxt9tfm1jpjlVutS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEkybElKdld6NURHMzIxLWJXT21PVlc2MUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lNjMxYmYtZGU5NS00Y2ZmLWIwZGQt
NWNiMmQ3MjU4YjBkLzEvcEkybElKdld6NURHMzIxLWJXT21PVlc2MUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lNjMxYmYtZGU5NS00Y2ZmLWIwZGQtNWNiMmQ3MjU4YjBk
LzEvcEkybElKdld6NURHMzIxLWJXT21PVlc2MUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbvb5r/+
ODPtKqxQOyUTXlLPRmukh6+1Z5JlG1taca5EddPKOmEfL8TcCxRGvTr81Dbpgctn
kKJFZ0yfiOP3/079YmotES3UCKOieUAuW/5AP8vuO/oSuys4AXLmHLEf4UybGP7o
/DaUJUmeQDhKYcswbiUEP+KQvqOkWukX35kyhDhbjPg9ZIItKGVu33t60mEP/iZs
DJWHCv7VEKeuPWUqTgRaMA/Jmjok1otFP/qhi9Za8XslJaTjz6uQ23CWQ5YTbEgb
+G4OFpRKvU+peO3ew04B2bYCFRvBS707zmNNUWQQm2G3E83xqO/IBbGKjl8t9mha
BBXXZ7Otb470FA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:07 2025 by rpki-client