Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: Bz0KvvY+9/0eR2Wlcan18J0LArSKiGfSGhUez20O6Y4=
Subject key identifier: 0E:A2:E7:CA:70:E0:91:C5:3C:D1:E8:C5:1A:20:81:7C:8C:ED:0B:7C
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 0196BECA0725185075BC811CBD00C49445A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 0474
Signing time: Sun 11 May 2025 10:00:33 +0000
Manifest this update: Sun 11 May 2025 10:00:33 +0000
Manifest next update: Mon 12 May 2025 10:00:33 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: aEXSVJZKJjaUyoROKl+wzrs83V0EjvuaIoCDqajnVqk=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:07:25:18:50:75:bc:81:1c:bd:00:c4:94:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: May 11 10:00:33 2025 GMT
Not After : May 12 10:00:33 2025 GMT
Subject: CN=0ea2e7ca70e091c53cd1e8c51a20817c8ced0b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:88:f1:3a:17:7c:5a:4b:bd:d3:45:98:a1:0c:
59:82:38:1f:18:cd:b7:e5:dc:ac:67:44:d4:f8:fd:
0c:c7:96:82:be:14:2c:ae:1e:75:80:10:e7:2e:09:
8d:ed:32:d6:5a:b0:28:2d:a3:44:4a:6d:de:42:85:
9e:24:43:08:79:03:c8:a5:3f:1b:f4:35:9c:f1:17:
03:fb:6a:64:ed:5c:2c:a8:b9:3c:f3:9e:11:5c:c4:
56:4d:34:7f:9f:de:04:91:9f:04:ea:ca:4d:1d:75:
0c:d5:4c:36:c1:34:aa:e6:01:9f:8a:1f:dd:c2:f5:
8a:05:6f:11:00:95:04:ea:4f:9d:67:e2:b3:fd:f6:
57:d6:50:ae:9d:25:d3:50:72:7e:32:9d:f0:62:0c:
34:88:cb:7f:d8:f1:e5:68:34:5e:1f:bf:b9:0f:4d:
6c:9c:d9:cd:6c:a9:5f:40:cf:33:ed:ec:45:0c:51:
08:5c:2c:0e:10:aa:23:f4:1d:6e:a7:d4:a1:08:b8:
24:6c:fa:30:4d:e6:b1:7c:bc:59:52:3e:32:c6:9d:
fe:ff:4c:38:ee:48:fa:58:0d:fa:f8:fb:aa:6a:2e:
37:53:73:fb:9b:87:2b:bb:66:ab:04:75:b6:66:08:
7e:56:85:3b:34:8a:6b:14:83:95:37:5a:eb:0d:09:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A2:E7:CA:70:E0:91:C5:3C:D1:E8:C5:1A:20:81:7C:8C:ED:0B:7C
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:43:d6:ae:bf:74:b6:a0:12:72:1e:f8:05:e2:ac:fe:be:9d:
4b:81:81:3a:3f:df:b1:86:b5:d4:f2:83:d9:26:02:72:c5:cc:
ef:d3:82:6e:c8:57:d8:25:53:f7:ad:76:61:b3:95:cc:b9:30:
f1:80:dd:3d:5e:c4:e8:7d:f5:cd:aa:16:9b:90:b5:cc:15:6e:
93:0f:36:0d:65:96:84:76:83:b9:f4:a8:3a:e1:b8:4a:90:8d:
d2:46:4c:33:39:69:26:18:9d:bc:30:fd:b2:34:a2:a0:24:8f:
b0:91:bb:11:3c:ad:4b:8f:25:54:f9:05:b8:03:29:30:1d:b6:
ac:13:8f:af:c5:2b:ed:59:b2:b7:23:2a:ce:39:b9:04:b9:a3:
55:d5:85:cb:e4:97:bb:28:00:b4:7f:41:f3:82:29:ff:e6:cb:
23:9f:58:ae:2a:e8:ab:42:e3:f8:a4:20:db:82:f4:94:24:c8:
aa:0b:4b:20:0d:dd:d6:10:36:9f:f2:1f:2a:ac:d2:37:58:eb:
10:58:e4:08:8a:92:77:b1:fc:e1:6f:32:2c:6c:ba:8f:15:d8:
a9:3c:42:f9:71:bd:eb:e1:f3:af:fd:1c:83:f7:48:57:d6:93:
62:1a:d0:fe:ff:bb:ae:99:1c:83:79:fd:98:da:19:48:42:9a:
b5:7e:0a:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+ygclGFB1vIEcvQDElEWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzI2OWY5ZTkzYjBmYjhiYzRiMWM5NDdhYmM1YjIxZjIx
ZjIzMDUwHhcNMjUwNTExMTAwMDMzWhcNMjUwNTEyMTAwMDMzWjAzMTEwLwYDVQQD
EygwZWEyZTdjYTcwZTA5MWM1M2NkMWU4YzUxYTIwODE3YzhjZWQwYjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiojxOhd8Wku900WYoQxZgjgfGM23
5dysZ0TU+P0Mx5aCvhQsrh51gBDnLgmN7TLWWrAoLaNESm3eQoWeJEMIeQPIpT8b
9DWc8RcD+2pk7VwsqLk8854RXMRWTTR/n94EkZ8E6spNHXUM1Uw2wTSq5gGfih/d
wvWKBW8RAJUE6k+dZ+Kz/fZX1lCunSXTUHJ+Mp3wYgw0iMt/2PHlaDReH7+5D01s
nNnNbKlfQM8z7exFDFEIXCwOEKoj9B1up9ShCLgkbPowTeaxfLxZUj4yxp3+/0w4
7kj6WA36+Puqai43U3P7m4cru2arBHW2Zgh+VoU7NIprFIOVN1rrDQlV2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6i58pw4JHFPNHoxRoggXyM7Qt8MB8GA1UdIwQY
MBaAFNbCafnpOw+4vEsclHq8WyHyHyMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEt
Yjc5Y2ZjMjRkM2I3LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEtYjc5Y2ZjMjRkM2I3
LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEPWrr90
tqASch74BeKs/r6dS4GBOj/fsYa11PKD2SYCcsXM79OCbshX2CVT9612YbOVzLkw
8YDdPV7E6H31zaoWm5C1zBVukw82DWWWhHaDufSoOuG4SpCN0kZMMzlpJhidvDD9
sjSioCSPsJG7ETytS48lVPkFuAMpMB22rBOPr8Ur7VmytyMqzjm5BLmjVdWFy+SX
uygAtH9B84Ip/+bLI59Yriroq0Lj+KQg24L0lCTIqgtLIA3d1hA2n/IfKqzSN1jr
EFjkCIqSd7H84W8yLGy6jxXYqTxC+XG96+Hzr/0cg/dIV9aTYhrQ/v+7rpkcg3n9
mNoZSEKatX4KGQ==
-----END CERTIFICATE-----
Generated at Sun May 11 12:46:51 2025 by rpki-client