Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier: Uaby1waIRn/Zn1hcJrJByfcBg0qBI/kBcqwDYILWixQ=
Subject key identifier: 82:EF:41:7C:8D:0C:92:5F:1C:48:8E:9C:E8:CF:EE:E6:79:43:3B:DC
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial: 0197B77CE223B676DE34A2E850C6173959C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number: 0CFC
Signing time: Sat 28 Jun 2025 17:01:44 +0000
Manifest this update: Sat 28 Jun 2025 17:01:44 +0000
Manifest next update: Sun 29 Jun 2025 17:01:44 +0000
Files and hashes: 1: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: OYzaIify3BaZ5n72IYZTyIXEWR58cbnSQ1P/Zovl0JM=)
2: DJNwK4d1O-0W4wKdXnOfs7vSo0I.roa (hash: 4ioCgLyFFC/qkKUBjTLDnN9rjQ3ov2Q43NX+vQC3BfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:e2:23:b6:76:de:34:a2:e8:50:c6:17:39:59:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Validity
Not Before: Jun 28 17:01:44 2025 GMT
Not After : Jun 29 17:01:44 2025 GMT
Subject: CN=82ef417c8d0c925f1c488e9ce8cfeee679433bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:9c:44:c8:77:c7:d7:e2:c2:b3:96:96:d7:
20:f9:c7:63:af:bb:ce:8d:4e:28:ba:ff:a4:39:18:
09:43:dd:c1:33:a3:00:5e:fa:68:37:34:68:f1:be:
b0:92:05:fb:fb:d5:2c:b6:f3:29:9c:c4:fc:79:e9:
5b:9c:7c:c8:09:bc:f9:b7:b1:fa:20:68:02:e0:f6:
de:9c:3b:ee:2c:c7:be:08:51:8c:d4:20:80:64:dc:
60:e9:b3:6a:e3:39:f2:39:8e:b5:8c:92:5f:f5:ea:
a3:c9:33:e2:c3:5e:68:ce:67:54:41:13:07:a5:62:
0c:72:b4:c1:82:44:af:80:36:3e:b7:0d:70:c1:42:
63:10:1e:30:3b:65:82:b3:c1:f6:02:c9:44:1d:5c:
26:65:c2:8f:55:6e:fb:4d:e5:d0:55:3c:06:0d:a3:
83:7c:cb:dc:03:86:3f:cb:af:42:76:1e:70:6b:7f:
ca:04:20:84:d6:9b:81:9b:91:3a:1e:65:ed:61:2c:
fd:aa:bf:2e:27:34:5c:09:6b:aa:bf:66:1b:7a:d2:
53:fc:ad:e7:6c:4a:ad:28:cd:89:22:12:bd:3d:eb:
c2:84:27:9f:29:b3:7b:fe:6e:55:03:b1:f3:be:02:
d2:c1:21:31:78:36:bb:a7:67:ed:7e:6d:4f:13:be:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EF:41:7C:8D:0C:92:5F:1C:48:8E:9C:E8:CF:EE:E6:79:43:3B:DC
X509v3 Authority Key Identifier:
keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:35:59:ad:c7:b1:35:e1:87:f5:62:0c:a4:33:39:e3:a9:a1:
20:e6:05:ac:2b:27:c8:04:bd:02:4e:c6:1a:24:dd:84:16:78:
44:7d:06:4c:48:0a:62:ea:af:77:5c:9e:e0:ae:b7:f9:2d:bb:
2d:1f:1b:b8:36:ac:80:a5:c1:b0:1b:d4:51:88:98:1b:4c:3e:
3e:9f:1d:e2:32:2b:06:a9:51:a1:9f:8e:b6:e7:46:40:17:9d:
2b:bf:1e:eb:db:7e:d2:c3:dc:ce:df:f6:10:5d:42:69:8e:95:
6b:12:25:c8:7d:23:4b:0e:49:06:28:4c:6a:54:fa:56:9b:fd:
e4:3e:23:bd:10:2a:96:2d:20:2a:61:fe:c5:a6:30:6c:60:d1:
5f:d7:1c:4e:c9:55:c6:b4:c0:4c:4d:05:62:8c:4d:48:02:66:
89:d3:41:d0:81:b4:c9:9c:3e:43:d0:de:dd:44:b7:db:24:d0:
98:f9:85:1e:60:4a:e2:18:3a:33:30:62:04:7d:da:1b:03:d5:
d2:ea:29:40:5f:b9:a8:60:f1:bb:ec:0e:45:d4:55:1f:e9:09:
82:b7:3e:f7:de:b4:aa:c4:35:ef:31:e8:92:73:78:ef:6e:6a:
56:cc:a8:38:a0:a3:77:a4:3b:ee:68:44:06:1e:94:6d:03:c6:
c9:be:e2:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fOIjtnbeNKLoUMYXOVnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MzQwMDc0MTRjZmYxNmNkY2YzYTNhYTIyYTk2Njc3Zjhi
ZTJiNjgwHhcNMjUwNjI4MTcwMTQ0WhcNMjUwNjI5MTcwMTQ0WjAzMTEwLwYDVQQD
Eyg4MmVmNDE3YzhkMGM5MjVmMWM0ODhlOWNlOGNmZWVlNjc5NDMzYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSCcRMh3x9fiwrOWltcg+cdjr7vO
jU4ouv+kORgJQ93BM6MAXvpoNzRo8b6wkgX7+9UstvMpnMT8eelbnHzICbz5t7H6
IGgC4PbenDvuLMe+CFGM1CCAZNxg6bNq4znyOY61jJJf9eqjyTPiw15ozmdUQRMH
pWIMcrTBgkSvgDY+tw1wwUJjEB4wO2WCs8H2AslEHVwmZcKPVW77TeXQVTwGDaOD
fMvcA4Y/y69Cdh5wa3/KBCCE1puBm5E6HmXtYSz9qr8uJzRcCWuqv2YbetJT/K3n
bEqtKM2JIhK9PevChCefKbN7/m5VA7HzvgLSwSExeDa7p2ftfm1PE76XsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILvQXyNDJJfHEiOnOjP7uZ5QzvcMB8GA1UdIwQY
MBaAFNY0AHQUz/Fs3POjqiKpZnf4vitoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kMDMwZWYtOTJjYi00Y2M1LTg2Yzgt
ZGVjYjkyZDFhNTIzLzEvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kMDMwZWYtOTJjYi00Y2M1LTg2YzgtZGVjYjkyZDFhNTIz
LzEvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTVZrcex
NeGH9WIMpDM546mhIOYFrCsnyAS9Ak7GGiTdhBZ4RH0GTEgKYuqvd1ye4K63+S27
LR8buDasgKXBsBvUUYiYG0w+Pp8d4jIrBqlRoZ+OtudGQBedK78e69t+0sPczt/2
EF1CaY6VaxIlyH0jSw5JBihMalT6Vpv95D4jvRAqli0gKmH+xaYwbGDRX9ccTslV
xrTATE0FYoxNSAJmidNB0IG0yZw+Q9De3US32yTQmPmFHmBK4hg6MzBiBH3aGwPV
0uopQF+5qGDxu+wORdRVH+kJgrc+9960qsQ17zHoknN4725qVsyoOKCjd6Q77mhE
Bh6UbQPGyb7i0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:11 2025 by rpki-client