Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: 3OYESQcmoR66pnFpUulQ1mzix3dMlmgBiiMhz5SXpUM=
Subject key identifier: B0:A9:2C:0A:85:12:F0:E8:11:D8:77:CB:D4:CB:3D:91:5A:4A:98:B3
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 0197B6326C0CC31347B3C0B4DF32AEAB845E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:00:47 +0000
Manifest this update: Sat 28 Jun 2025 11:00:47 +0000
Manifest next update: Sun 29 Jun 2025 11:00:47 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: 7EdjoiuVz9X/C2k4PScAvTv5iMfb9wJp9NMwEjcScoI=)
2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:6c:0c:c3:13:47:b3:c0:b4:df:32:ae:ab:84:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Jun 28 11:00:47 2025 GMT
Not After : Jun 29 11:00:47 2025 GMT
Subject: CN=b0a92c0a8512f0e811d877cbd4cb3d915a4a98b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:3d:d1:8e:78:3e:d9:91:45:dc:7f:24:e8:
55:0d:b2:6b:1e:88:7a:18:f9:31:a1:6a:62:5d:95:
dc:2f:28:16:ba:e8:4c:ee:fa:42:c9:09:00:05:fb:
aa:a7:a9:46:9c:0d:2b:bd:e0:53:0c:00:fa:ae:93:
ca:c9:a5:e3:ca:b8:00:6e:92:97:5c:3a:15:d0:2b:
10:40:69:d7:16:b2:64:46:9d:e5:a8:6c:b8:d7:d3:
38:29:3f:66:5b:91:cf:9a:9b:f5:d9:b7:60:43:a5:
a7:7a:50:98:8c:de:56:59:68:fa:f9:1c:76:8d:13:
b7:7a:d1:6e:e8:de:0f:ae:61:7a:0e:b6:82:c5:f1:
4d:92:ab:b3:d8:f8:63:4a:25:1d:15:5f:cb:27:df:
82:90:bd:af:9c:77:67:50:02:e5:35:1e:a4:fa:63:
a9:3a:5c:bc:75:8a:83:4b:de:6c:28:02:1c:05:b7:
41:b5:97:cd:a6:47:21:3f:a1:b8:18:43:6d:ea:5a:
cb:8e:ba:c1:3b:50:8f:20:62:d0:9e:dd:6c:9e:99:
29:10:06:44:30:57:80:b1:4f:a2:06:57:cc:1d:77:
53:3d:ce:23:8f:61:a5:75:59:9b:f3:db:34:36:8d:
7a:7b:57:1a:5f:50:57:11:24:bc:03:1e:75:1e:a7:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:2C:0A:85:12:F0:E8:11:D8:77:CB:D4:CB:3D:91:5A:4A:98:B3
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:b0:1c:9d:b2:f0:a7:e9:fd:f4:3f:63:fb:ac:ab:5c:cb:79:
ff:af:2d:d5:f6:99:21:35:ce:16:91:b0:12:ba:fe:71:9e:67:
db:b4:a9:92:56:7e:74:11:9f:6b:5a:2c:67:16:a5:30:47:a2:
c7:3d:ed:90:33:3c:96:0c:34:62:13:27:14:09:0b:44:5c:92:
c9:80:d8:4e:73:86:ca:42:a7:e4:ec:c1:d7:40:e6:b6:d6:4e:
64:d2:e3:f6:7d:75:57:e1:c1:98:e0:f6:6e:0f:b9:ae:69:8d:
55:44:62:36:d2:2a:a2:99:a8:f8:69:7b:09:8e:ee:29:06:87:
59:a4:89:7c:10:c2:47:d2:a3:11:83:97:cf:ac:d1:73:3d:fa:
36:72:f1:57:d3:ec:1c:19:96:b7:da:cb:18:03:00:c9:ad:14:
d0:da:b5:d9:3b:5b:6a:0b:b0:4b:ad:c7:ce:37:72:95:a3:f3:
3a:10:10:c4:fe:99:31:e4:0a:a8:f8:3d:3f:88:11:5d:17:5e:
4a:94:89:c7:5a:e9:e0:b1:41:ab:14:b5:26:88:f7:11:f9:4f:
d2:0a:83:b5:dc:6d:a6:e1:88:89:c1:cc:6d:70:27:2c:b7:e2:
ee:2b:59:f8:09:d9:ff:15:b3:d9:58:7b:0a:6a:49:9f:6f:22:
72:c7:aa:8f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe2MmwMwxNHs8C03zKuq4ReMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMjNhZWI2YTVkOWEzNGI4MzYwNzc3Nzc3NmZiODc2NGZi
NzZmMDAwHhcNMjUwNjI4MTEwMDQ3WhcNMjUwNjI5MTEwMDQ3WjAzMTEwLwYDVQQD
EyhiMGE5MmMwYTg1MTJmMGU4MTFkODc3Y2JkNGNiM2Q5MTVhNGE5OGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34Q90Y54PtmRRdx/JOhVDbJrHoh6
GPkxoWpiXZXcLygWuuhM7vpCyQkABfuqp6lGnA0rveBTDAD6rpPKyaXjyrgAbpKX
XDoV0CsQQGnXFrJkRp3lqGy419M4KT9mW5HPmpv12bdgQ6WnelCYjN5WWWj6+Rx2
jRO3etFu6N4PrmF6DraCxfFNkquz2PhjSiUdFV/LJ9+CkL2vnHdnUALlNR6k+mOp
Oly8dYqDS95sKAIcBbdBtZfNpkchP6G4GENt6lrLjrrBO1CPIGLQnt1snpkpEAZE
MFeAsU+iBlfMHXdTPc4jj2GldVmb89s0No16e1caX1BXESS8Ax51HqfXRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLCpLAqFEvDoEdh3y9TLPZFaSpizMB8GA1UdIwQY
MBaAFPojrral2aNLg2B3d3dvuHZPt28AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1pT3V0cVhabzB1RFlIZDNkMi00ZGstM2J3QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzZlNmYwLWViMmMtNGNmOC04NTY1
LWIzNjNiYjZjYWEwMi8xLzEtaU91dHFYWm8wdURZSGQzZDItNGRrLTNid0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJjLzM2ZTZmMC1lYjJjLTRjZjgtODU2NS1iMzYzYmI2Y2Fh
MDIvMS8xLWlPdXRxWFpvMHVEWUhkM2QyLTRkay0zYndBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA47Ac
nbLwp+n99D9j+6yrXMt5/68t1faZITXOFpGwErr+cZ5n27SpklZ+dBGfa1osZxal
MEeixz3tkDM8lgw0YhMnFAkLRFySyYDYTnOGykKn5OzB10DmttZOZNLj9n11V+HB
mOD2bg+5rmmNVURiNtIqopmo+Gl7CY7uKQaHWaSJfBDCR9KjEYOXz6zRcz36NnLx
V9PsHBmWt9rLGAMAya0U0Nq12TtbaguwS63HzjdylaPzOhAQxP6ZMeQKqPg9P4gR
XRdeSpSJx1rp4LFBqxS1Joj3EflP0gqDtdxtpuGIicHMbXAnLLfi7itZ+AnZ/xWz
2Vh7CmpJn28icseqjw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:38 2025 by rpki-client