Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: MoHJ0N7vNUVe01WG4aNzm6Hs6bW9wMkS20TmUcj29QY=
Subject key identifier: 15:47:0D:87:67:E6:83:DB:B9:77:F0:B3:CC:74:F7:A3:48:C5:4F:37
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 0197B6D7682C68D24572EC873BFE188AABA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 12DB
Signing time: Sat 28 Jun 2025 14:00:59 +0000
Manifest this update: Sat 28 Jun 2025 14:00:59 +0000
Manifest next update: Sun 29 Jun 2025 14:00:59 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: wIqdgB/fZriVMQMsKGh77Eea81TujPe1WPM/7OR6c1k=)
2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=)
3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:68:2c:68:d2:45:72:ec:87:3b:fe:18:8a:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Jun 28 14:00:59 2025 GMT
Not After : Jun 29 14:00:59 2025 GMT
Subject: CN=15470d8767e683dbb977f0b3cc74f7a348c54f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:f4:6d:72:b6:3e:c2:21:17:2d:d9:19:d2:
a8:e3:28:e3:79:2c:d2:aa:44:a8:e8:87:55:0a:bd:
14:a9:43:d5:75:96:03:e5:3e:7c:78:5f:73:50:a5:
7b:57:08:5f:43:e3:59:6a:70:63:cd:44:1a:ae:7a:
89:34:d1:34:74:4e:90:ad:2f:81:99:06:36:28:19:
7e:32:66:1f:b3:ca:f4:eb:31:14:76:ce:1d:1d:87:
2d:6f:50:d5:06:cf:06:af:49:38:69:c9:23:7d:f9:
d5:e9:46:09:8e:08:cf:e8:96:9e:fc:af:56:7c:2e:
db:eb:9d:20:f8:1e:3b:f4:f9:1f:9e:95:a2:74:af:
74:5d:b0:c2:0e:df:23:b5:46:55:b1:bf:b4:1b:1e:
68:77:6d:dc:f9:f5:d3:71:30:f9:2c:e2:eb:b1:e8:
1d:b7:39:26:f6:65:1a:39:35:87:f1:a6:ed:7c:9e:
eb:8d:a4:07:39:17:4f:78:62:f3:8f:9b:cb:7a:0c:
1b:51:16:ff:74:cd:54:c1:71:08:34:cf:e8:24:aa:
99:5a:3f:7f:b7:89:fd:89:a1:7f:53:df:bb:a2:28:
41:f7:85:0d:01:21:47:c2:0d:9d:62:7a:e6:1e:18:
b9:69:57:33:4e:3f:0a:83:f6:26:fd:cb:9e:39:fd:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:47:0D:87:67:E6:83:DB:B9:77:F0:B3:CC:74:F7:A3:48:C5:4F:37
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0b:9e:6a:4e:39:6f:de:65:6a:e0:40:cc:02:e5:fd:7d:98:
36:e1:e7:3a:56:c7:ad:c8:6d:0c:2b:c1:b2:f4:6a:5b:56:3d:
66:81:59:16:12:10:36:ca:8a:46:72:65:ee:70:b5:cf:8e:3b:
e5:6d:3a:94:e2:f9:2d:27:e8:1c:4b:85:ca:0a:89:55:44:d6:
59:f6:6b:78:28:1c:2f:96:2e:2a:f7:0f:68:c7:0a:83:aa:f1:
9b:5f:51:b6:b9:99:77:a4:b5:3b:0e:25:e1:6e:95:96:e3:94:
e5:ae:90:59:bb:71:a1:f5:d2:c3:8c:b1:08:66:bc:a8:43:87:
6a:f4:c3:ef:c8:e4:3c:f3:53:b7:57:6f:40:7b:44:9c:d9:76:
29:13:0d:32:83:4b:07:ba:72:2c:af:2e:41:3d:05:b1:aa:62:
d4:08:0f:52:30:50:97:63:15:93:e3:61:73:c2:c9:62:7e:f1:
36:18:ef:7c:46:73:27:1e:bc:6f:bc:ba:98:00:e4:02:fb:f0:
19:9b:91:27:7f:35:fd:9f:e2:ee:cf:55:4d:8f:b2:b4:15:60:
b8:8f:c6:83:e9:1d:72:c7:da:c6:48:eb:95:5a:0d:ad:0d:86:
56:e6:cd:82:64:2e:19:4a:3b:02:33:ca:81:ee:b3:d7:67:88:
6a:37:44:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe212gsaNJFcuyHO/4YiqugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw
YTlhNGMwHhcNMjUwNjI4MTQwMDU5WhcNMjUwNjI5MTQwMDU5WjAzMTEwLwYDVQQD
EygxNTQ3MGQ4NzY3ZTY4M2RiYjk3N2YwYjNjYzc0ZjdhMzQ4YzU0ZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q30bXK2PsIhFy3ZGdKo4yjjeSzS
qkSo6IdVCr0UqUPVdZYD5T58eF9zUKV7VwhfQ+NZanBjzUQarnqJNNE0dE6QrS+B
mQY2KBl+MmYfs8r06zEUds4dHYctb1DVBs8Gr0k4ackjffnV6UYJjgjP6Jae/K9W
fC7b650g+B479PkfnpWidK90XbDCDt8jtUZVsb+0Gx5od23c+fXTcTD5LOLrsegd
tzkm9mUaOTWH8abtfJ7rjaQHORdPeGLzj5vLegwbURb/dM1UwXEINM/oJKqZWj9/
t4n9iaF/U9+7oihB94UNASFHwg2dYnrmHhi5aVczTj8Kg/Ym/cueOf0XKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVHDYdn5oPbuXfws8x096NIxU83MB8GA1UdIwQY
MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt
MWVlY2Q1ODVkYjhjLzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj
LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgueak45
b95lauBAzALl/X2YNuHnOlbHrchtDCvBsvRqW1Y9ZoFZFhIQNsqKRnJl7nC1z447
5W06lOL5LSfoHEuFygqJVUTWWfZreCgcL5YuKvcPaMcKg6rxm19RtrmZd6S1Ow4l
4W6VluOU5a6QWbtxofXSw4yxCGa8qEOHavTD78jkPPNTt1dvQHtEnNl2KRMNMoNL
B7pyLK8uQT0Fsapi1AgPUjBQl2MVk+Nhc8LJYn7xNhjvfEZzJx68b7y6mADkAvvw
GZuRJ381/Z/i7s9VTY+ytBVguI/Gg+kdcsfaxkjrlVoNrQ2GVubNgmQuGUo7AjPK
ge6z12eIajdESg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:12 2025 by rpki-client