Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier: hFnS1ytGFh7qnUTwxWKSIA1/ViZzvqVA1aqOeDrbLL4=
Subject key identifier: CB:29:D8:FF:01:78:B4:19:53:24:80:36:45:8D:59:99:CA:A7:E1:36
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 0197507C7A66F8221196A134D847D26F1614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number: 0D0A
Signing time: Sun 08 Jun 2025 17:00:24 +0000
Manifest this update: Sun 08 Jun 2025 17:00:24 +0000
Manifest next update: Mon 09 Jun 2025 17:00:24 +0000
Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: mSvYjHTDcI8aRkCeGWHZ8WN3rCnVh++Owx6pjxZOm0w=)
2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:7a:66:f8:22:11:96:a1:34:d8:47:d2:6f:16:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Jun 8 17:00:24 2025 GMT
Not After : Jun 9 17:00:24 2025 GMT
Subject: CN=cb29d8ff0178b41953248036458d5999caa7e136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:3d:50:b4:48:2c:57:c5:07:38:ee:46:4e:
34:46:ac:4a:9d:91:44:17:9e:44:2d:5a:90:d2:b2:
31:ae:32:7c:0a:f5:4a:a4:fb:52:94:fd:3b:93:79:
fa:15:f2:e0:0f:4c:bf:ac:41:26:27:44:0f:23:3f:
53:d0:90:a7:8b:26:a2:d5:5d:ad:ff:03:d5:a0:89:
55:3f:bf:a6:87:c6:f7:27:03:af:aa:ff:76:1e:54:
59:04:04:d2:69:da:44:fa:86:5b:b9:02:40:55:82:
40:03:8a:14:32:a4:b4:44:4f:11:76:54:95:27:a9:
63:6a:a7:98:38:4c:53:bf:60:48:89:5d:f4:c5:ae:
04:ec:d5:5d:91:9d:c5:1c:45:bb:57:fb:04:35:5b:
77:e2:98:92:4d:0d:cf:1c:a4:65:37:d7:61:5c:27:
82:33:8d:07:a8:43:07:f0:42:36:66:f7:b0:76:1f:
fa:ba:26:ba:a3:55:da:2e:61:e2:2d:3f:5c:7e:0d:
87:35:e4:94:6b:b9:0d:04:57:a4:84:bf:2a:53:35:
95:ba:de:ee:9b:39:9d:07:a4:81:a6:1a:49:84:08:
c7:46:2d:30:73:2d:e5:85:e9:df:43:ca:4d:e5:0c:
91:ec:1b:b5:b0:7b:4c:fa:c5:81:15:72:b2:aa:d5:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:29:D8:FF:01:78:B4:19:53:24:80:36:45:8D:59:99:CA:A7:E1:36
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:34:45:58:e8:2b:4a:11:ab:86:01:d9:5b:7a:8c:fa:b4:b1:
54:50:98:7b:00:5d:08:47:5b:d9:f0:c6:33:b1:a5:59:67:f5:
74:ec:43:1b:c0:1d:df:3f:5f:fe:f2:4a:c5:df:31:6a:44:28:
5e:bc:66:cb:c2:6e:2e:2f:4b:76:50:48:24:e0:ec:6e:83:4d:
eb:bb:e8:9e:d4:8f:a0:27:2f:58:43:14:11:a8:7f:8d:ef:47:
ca:a7:07:9b:bc:ee:6f:6c:12:88:2c:88:02:04:e9:7b:2f:23:
41:06:08:5a:f2:ae:04:c8:7e:3a:4a:69:24:a6:57:a5:c9:d4:
df:24:5a:eb:09:4a:23:29:f3:ac:39:b3:0e:25:da:ab:f4:46:
67:ab:71:a2:f8:5d:fb:38:54:b2:d8:0c:10:5e:d0:46:48:0f:
87:41:ad:1e:5a:b1:6e:46:09:aa:2a:72:bb:f7:ad:7f:7b:7c:
f2:db:c1:10:48:65:c9:6a:19:26:2b:d7:bb:93:46:fd:88:03:
1f:63:84:38:fa:6f:95:4a:40:a6:39:41:6c:e7:89:af:47:73:
c6:10:7b:13:ea:a7:b6:f9:cf:af:a0:77:17:90:80:5f:f1:89:
39:94:66:99:77:94:a6:12:6c:6f:29:24:95:c0:35:e5:79:18:
6e:10:9a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQfHpm+CIRlqE02EfSbxYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4
NGY2ZGMwHhcNMjUwNjA4MTcwMDI0WhcNMjUwNjA5MTcwMDI0WjAzMTEwLwYDVQQD
EyhjYjI5ZDhmZjAxNzhiNDE5NTMyNDgwMzY0NThkNTk5OWNhYTdlMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbM9ULRILFfFBzjuRk40RqxKnZFE
F55ELVqQ0rIxrjJ8CvVKpPtSlP07k3n6FfLgD0y/rEEmJ0QPIz9T0JCniyai1V2t
/wPVoIlVP7+mh8b3JwOvqv92HlRZBATSadpE+oZbuQJAVYJAA4oUMqS0RE8RdlSV
J6ljaqeYOExTv2BIiV30xa4E7NVdkZ3FHEW7V/sENVt34piSTQ3PHKRlN9dhXCeC
M40HqEMH8EI2Zvewdh/6uia6o1XaLmHiLT9cfg2HNeSUa7kNBFekhL8qUzWVut7u
mzmdB6SBphpJhAjHRi0wcy3lhenfQ8pN5QyR7Bu1sHtM+sWBFXKyqtUMfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsp2P8BeLQZUySANkWNWZnKp+E2MB8GA1UdIwQY
MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt
MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0
LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjRFWOgr
ShGrhgHZW3qM+rSxVFCYewBdCEdb2fDGM7GlWWf1dOxDG8Ad3z9f/vJKxd8xakQo
Xrxmy8JuLi9LdlBIJODsboNN67vontSPoCcvWEMUEah/je9HyqcHm7zub2wSiCyI
AgTpey8jQQYIWvKuBMh+OkppJKZXpcnU3yRa6wlKIynzrDmzDiXaq/RGZ6txovhd
+zhUstgMEF7QRkgPh0GtHlqxbkYJqipyu/etf3t88tvBEEhlyWoZJivXu5NG/YgD
H2OEOPpvlUpApjlBbOeJr0dzxhB7E+qntvnPr6B3F5CAX/GJOZRmmXeUphJsbykk
lcA15XkYbhCamA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:21:59 2025 by rpki-client