Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: ZofuGJC7esA4PJnlgNBXqsGhNPOo/ueonsw08fi5dfQ=
Subject key identifier: D5:D6:7F:93:07:4A:30:3F:EA:27:65:1D:1E:B4:B5:3A:EB:47:CE:88
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 0197B745A8FB268715976E09096FCFA89B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: PEvQaYMVsfpcD4DGAc0O/I0UP0AKkMIbvzBDNx7N2ZA=)
2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a8:fb:26:87:15:97:6e:09:09:6f:cf:a8:9b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=d5d67f93074a303fea27651d1eb4b53aeb47ce88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:c5:3e:de:f0:70:b0:ef:33:26:e3:d6:d8:
9a:7b:1d:7b:f2:e6:22:34:94:5a:51:6e:68:6e:2b:
10:93:63:10:9a:57:4f:05:14:69:08:fb:8f:63:62:
42:17:30:42:83:27:e2:f7:e0:a3:bd:fa:85:30:b4:
c0:b3:87:6a:0f:9e:85:55:28:ac:22:05:e2:8f:dd:
16:ba:79:14:c9:02:4a:41:f6:6d:85:f6:c9:f3:2a:
74:d2:d7:d1:d7:6f:9c:b2:29:58:8a:66:bf:0e:e7:
58:ae:a5:47:2d:12:3e:fb:4b:e4:70:65:08:65:b7:
0b:b7:da:19:d5:60:43:be:20:d2:1b:9e:9d:d9:6e:
40:02:3c:3e:f2:d9:c4:7b:ae:38:a0:8f:6d:c0:fd:
9c:8b:61:60:a9:77:ec:52:8f:f8:09:69:9b:3b:fe:
3d:ea:63:73:ba:9e:89:c6:63:bf:82:fa:1d:35:73:
03:06:7f:03:99:ea:90:e1:6c:21:1c:a2:b7:37:a9:
32:63:aa:6b:e0:6e:bb:f4:6e:5b:99:1e:9f:32:97:
b5:f4:0b:4b:7a:f4:b2:cb:db:a3:01:0c:d4:5d:10:
1b:9d:8d:62:de:94:09:20:fa:5d:c7:8d:f8:25:4f:
fb:ef:1e:01:f5:c6:a3:51:a0:48:53:fd:5e:0b:13:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:7F:93:07:4A:30:3F:EA:27:65:1D:1E:B4:B5:3A:EB:47:CE:88
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6d:a2:29:31:df:36:57:71:0a:1e:ad:07:de:11:b6:f4:76:
c6:a4:8b:a7:02:96:96:68:e0:bf:25:90:e7:cd:b3:7d:cb:b9:
7b:ea:63:5c:7e:9e:06:b5:9f:ab:23:54:92:ac:d6:75:77:b3:
b4:36:49:57:1e:94:53:3a:73:c2:3e:bc:34:e9:1f:43:9f:30:
e5:48:a6:e1:f5:e1:d5:81:c7:dc:57:7b:c9:97:ac:8b:f0:a1:
0b:a5:01:b9:2a:48:36:8e:23:0b:58:7e:48:d5:c8:91:d8:75:
19:4c:2d:4e:d2:54:3f:4b:b9:f7:28:1d:45:21:01:27:69:36:
62:c4:bc:43:a7:c7:26:b3:e9:b3:f2:a8:bc:47:41:65:8d:e7:
46:36:cc:21:25:4b:c5:44:b3:4a:fc:79:73:65:03:af:3a:a6:
49:e0:45:e6:02:86:2e:c6:e2:9c:94:54:af:30:8e:c7:79:3a:
d7:bb:89:21:b8:e1:89:7f:4c:4f:bc:81:0c:86:e4:00:2b:30:
47:c8:05:14:8e:1b:b9:52:ad:64:cf:33:16:f6:ab:e5:85:d2:
1b:d0:96:db:d2:52:77:94:57:80:53:92:b2:3d:eb:85:7a:98:
7f:4d:41:93:6a:1a:2c:1f:b3:69:0f:f7:30:06:71:cc:87:1d:
bb:d6:eb:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Raj7JocVl24JCW/PqJtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1Nzc3NTc5Y2M2Nzc4NDQ1NGJjZDkxYTA2YmQ2OTM1YWFl
ZjczZjkwHhcNMjUwNjI4MTYwMTI1WhcNMjUwNjI5MTYwMTI1WjAzMTEwLwYDVQQD
EyhkNWQ2N2Y5MzA3NGEzMDNmZWEyNzY1MWQxZWI0YjUzYWViNDdjZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWnFPt7wcLDvMybj1tiaex178uYi
NJRaUW5obisQk2MQmldPBRRpCPuPY2JCFzBCgyfi9+CjvfqFMLTAs4dqD56FVSis
IgXij90WunkUyQJKQfZthfbJ8yp00tfR12+csilYima/DudYrqVHLRI++0vkcGUI
ZbcLt9oZ1WBDviDSG56d2W5AAjw+8tnEe644oI9twP2ci2FgqXfsUo/4CWmbO/49
6mNzup6JxmO/gvodNXMDBn8DmeqQ4WwhHKK3N6kyY6pr4G679G5bmR6fMpe19AtL
evSyy9ujAQzUXRAbnY1i3pQJIPpdx434JU/77x4B9cajUaBIU/1eCxOnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXWf5MHSjA/6idlHR60tTrrR86IMB8GA1UdIwQY
MBaAFNV3dXnMZ3hEVLzZGga9aTWq73P5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYt
ODBhMmI2OGMzODMyLzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYtODBhMmI2OGMzODMy
LzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr22iKTHf
NldxCh6tB94RtvR2xqSLpwKWlmjgvyWQ582zfcu5e+pjXH6eBrWfqyNUkqzWdXez
tDZJVx6UUzpzwj68NOkfQ58w5Uim4fXh1YHH3Fd7yZesi/ChC6UBuSpINo4jC1h+
SNXIkdh1GUwtTtJUP0u59ygdRSEBJ2k2YsS8Q6fHJrPps/KovEdBZY3nRjbMISVL
xUSzSvx5c2UDrzqmSeBF5gKGLsbinJRUrzCOx3k617uJIbjhiX9MT7yBDIbkACsw
R8gFFI4buVKtZM8zFvar5YXSG9CW29JSd5RXgFOSsj3rhXqYf01Bk2oaLB+zaQ/3
MAZxzIcdu9brKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:00 2025 by rpki-client