Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier: 8h4TiJbOjiSWxkPQ/EeXPW6NQbjCy+/p2xsS6grPuRI=
Subject key identifier: 21:CC:31:B9:8A:EB:FB:3F:98:3E:8F:F6:4B:2F:9E:68:B8:BB:B8:08
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial: 0197B820BEE6538AEE03DB7B5FB4CACF6DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number: 11B2
Signing time: Sat 28 Jun 2025 20:00:42 +0000
Manifest this update: Sat 28 Jun 2025 20:00:42 +0000
Manifest next update: Sun 29 Jun 2025 20:00:42 +0000
Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: cgB3FV9YkCQHrIeBpiaKueUdyVeaYT2gfOqxiHHslE8=)
2: n_c4PLsmjJy0yCliC8En4sc8wCw.roa (hash: cMBCvEWECFAcwZYZaTXi+y0wWCPFximX6N1nRpp3vNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:be:e6:53:8a:ee:03:db:7b:5f:b4:ca:cf:6d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Validity
Not Before: Jun 28 20:00:42 2025 GMT
Not After : Jun 29 20:00:42 2025 GMT
Subject: CN=21cc31b98aebfb3f983e8ff64b2f9e68b8bbb808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:aa:58:fd:e0:2c:4a:9a:7f:82:f4:78:b1:
45:bf:e9:00:1c:93:b6:9b:8f:f0:54:20:ef:7c:da:
58:02:0b:26:4b:bf:a3:43:3c:7d:7a:58:83:80:f8:
5f:d1:91:73:8a:b2:a1:e5:d7:04:04:26:f5:d5:0d:
b7:e8:61:57:f7:1a:8c:b5:16:08:53:d6:25:a3:13:
bb:9c:8f:36:be:35:42:0b:c8:c8:55:ad:6b:65:36:
f3:5b:8d:35:9e:71:12:98:01:a4:e3:12:76:ab:0b:
f8:e1:75:fa:e7:45:12:aa:4d:e9:1c:8a:d4:77:ec:
ba:02:8f:8e:fb:aa:87:ec:3a:7f:1e:47:36:20:e4:
be:fb:29:83:f8:9e:20:0c:45:89:98:80:7f:3a:2b:
c9:7c:20:4a:4e:18:1d:2e:5e:b5:85:54:27:60:98:
93:62:55:1c:c0:5f:6a:37:12:90:fc:c4:49:60:69:
b2:7d:86:65:72:07:f3:99:82:5a:7f:64:16:99:25:
51:ce:6c:10:eb:ba:3a:a1:09:56:b8:78:5e:ae:d5:
ae:ca:11:b0:11:3b:f1:1d:24:76:38:da:9a:0b:ee:
16:a2:8d:a6:b2:fa:93:43:9f:cc:c7:f5:77:43:87:
ff:17:e1:14:15:26:73:4a:3b:d9:77:18:34:41:cf:
fb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:31:B9:8A:EB:FB:3F:98:3E:8F:F6:4B:2F:9E:68:B8:BB:B8:08
X509v3 Authority Key Identifier:
keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:07:5b:5b:33:6e:e7:40:ac:9b:c5:42:77:b4:4e:00:3d:69:
9d:87:0e:5f:51:8a:50:1f:70:4c:35:04:2d:ac:ec:15:9f:2c:
b7:b9:b4:1f:9c:c0:62:f5:16:be:2c:1b:3f:d5:15:3f:b1:24:
95:3d:26:6d:d7:81:95:97:2b:6d:e4:d9:4e:0d:5d:fa:22:4d:
a4:a2:4c:e1:4a:16:c2:03:70:0b:b4:21:bf:85:fa:0f:ce:92:
b2:72:24:fa:93:96:bf:74:f5:1a:78:34:1c:f8:26:8e:c3:eb:
5a:c5:48:e8:64:b1:7e:2e:62:8b:35:46:4f:24:fe:23:6f:91:
30:3e:3c:fb:e2:9f:c2:92:d3:5a:2c:d2:7a:af:b2:17:64:1f:
c0:20:08:05:fd:df:e6:90:4e:2c:6a:98:9e:29:7d:18:12:5a:
6b:f2:44:cd:0e:ef:17:b2:56:e3:e6:0b:b8:54:97:32:25:89:
31:74:16:08:2b:f3:83:a8:44:8f:3c:f0:be:47:17:b7:d0:b9:
13:b7:5d:88:3d:d0:f3:72:b8:a3:cd:1f:56:ec:7c:75:e4:40:
a0:95:c3:45:6f:ad:17:ac:07:84:7d:35:1a:5b:d1:d0:9a:3a:
98:63:26:b7:33:14:2b:d1:41:fe:14:e5:c0:69:e1:e6:17:75:
43:b7:7f:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IL7mU4ruA9t7X7TKz23TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTRmOWUwYTdhOWVhZWVhY2JjNWIxMDMxMDIzNWI3ZmQw
ZWVkMDMwHhcNMjUwNjI4MjAwMDQyWhcNMjUwNjI5MjAwMDQyWjAzMTEwLwYDVQQD
EygyMWNjMzFiOThhZWJmYjNmOTgzZThmZjY0YjJmOWU2OGI4YmJiODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW2qWP3gLEqaf4L0eLFFv+kAHJO2
m4/wVCDvfNpYAgsmS7+jQzx9eliDgPhf0ZFzirKh5dcEBCb11Q236GFX9xqMtRYI
U9YloxO7nI82vjVCC8jIVa1rZTbzW401nnESmAGk4xJ2qwv44XX650USqk3pHIrU
d+y6Ao+O+6qH7Dp/Hkc2IOS++ymD+J4gDEWJmIB/OivJfCBKThgdLl61hVQnYJiT
YlUcwF9qNxKQ/MRJYGmyfYZlcgfzmYJaf2QWmSVRzmwQ67o6oQlWuHhertWuyhGw
ETvxHSR2ONqaC+4Woo2msvqTQ5/Mx/V3Q4f/F+EUFSZzSjvZdxg0Qc/7BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHMMbmK6/s/mD6P9ksvnmi4u7gIMB8GA1UdIwQY
MBaAFA9U+eCnqerurLxbEDECNbf9Du0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUt
ZWYyNmMzNDRlZjAxLzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUtZWYyNmMzNDRlZjAx
LzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAdbWzNu
50Csm8VCd7ROAD1pnYcOX1GKUB9wTDUELazsFZ8st7m0H5zAYvUWviwbP9UVP7Ek
lT0mbdeBlZcrbeTZTg1d+iJNpKJM4UoWwgNwC7Qhv4X6D86SsnIk+pOWv3T1Gng0
HPgmjsPrWsVI6GSxfi5iizVGTyT+I2+RMD48++KfwpLTWizSeq+yF2QfwCAIBf3f
5pBOLGqYnil9GBJaa/JEzQ7vF7JW4+YLuFSXMiWJMXQWCCvzg6hEjzzwvkcXt9C5
E7ddiD3Q83K4o80fVux8deRAoJXDRW+tF6wHhH01GlvR0Jo6mGMmtzMUK9FB/hTl
wGnh5hd1Q7d/MA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:25 2025 by rpki-client