Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: 5pemXjsWg2xbITmC5Ss6p6SZEjyCyqjv2UaNeEG9YK0=
Subject key identifier: 49:7D:31:D3:41:A1:FA:C8:65:58:97:EE:FF:44:04:A9:62:C9:8B:2A
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 0197B7451F1E20C8C74916D268FB21E08B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 0209
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: U7GGu2jA1U0z8GuzencGRWNSt/aRl/6q56YDs+L2NDM=)
2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1f:1e:20:c8:c7:49:16:d2:68:fb:21:e0:8b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=497d31d341a1fac8655897eeff4404a962c98b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:fe:ba:e6:01:80:eb:12:08:a0:9d:11:bc:
b3:97:93:ec:66:c1:96:5a:35:45:a7:4a:9f:dd:ad:
6b:69:e5:7b:e3:b3:95:b3:ee:e4:53:db:c1:db:b0:
86:26:62:9b:2a:84:9e:a0:55:00:8a:d5:7b:5a:aa:
13:bc:73:4e:f8:62:98:09:8d:e9:f2:db:c2:54:f3:
f2:02:7d:4b:e2:90:f1:6c:9a:24:5e:55:22:40:44:
7b:97:8f:ab:b6:42:5c:c9:17:8d:0b:3f:03:60:93:
83:6b:d6:7b:e9:78:fa:6b:25:ab:1c:85:ce:ae:05:
34:b6:8b:d2:3a:1b:b5:5a:a1:52:94:12:e3:95:ac:
f0:ce:20:95:af:e0:fd:19:a0:ee:32:5f:7b:8d:41:
aa:61:d3:9e:7e:22:da:91:24:a6:9c:2d:c2:45:41:
dd:13:e9:55:ff:71:74:cb:26:c2:71:b9:32:51:2b:
48:a5:0d:b6:ab:e4:3b:7b:f2:91:4f:30:8a:e7:f5:
1d:d1:a5:a7:4a:e7:47:f3:17:ad:ed:7c:7f:95:95:
e6:9e:5e:72:2a:44:bc:01:7e:e4:04:49:64:7c:24:
f5:7f:5f:00:44:ad:d5:6e:85:23:35:e6:67:b0:14:
dd:39:60:7a:09:b5:42:5f:3d:e6:5b:0a:f0:58:87:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:31:D3:41:A1:FA:C8:65:58:97:EE:FF:44:04:A9:62:C9:8B:2A
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:89:7d:a7:79:ce:f1:fe:d0:82:32:04:a5:f0:7c:c6:53:40:
20:f3:e7:fc:7a:52:68:bd:cb:d4:b9:50:10:d5:d8:b8:6b:14:
1e:11:5e:b4:ba:d5:e3:d3:87:fd:e6:d3:b5:8d:2a:da:1d:5a:
92:b5:84:b6:9f:58:37:ab:db:40:46:f3:b3:8a:fc:bf:a9:9d:
bf:d0:ad:ac:ed:ef:6c:4a:7c:e6:ae:92:d5:9b:d5:62:c0:44:
22:13:a8:f7:ac:f8:75:6b:fc:af:1b:19:9e:36:57:f7:17:81:
4a:6e:21:86:3e:2b:2a:24:9f:fe:90:a5:40:e7:29:67:26:53:
97:b1:a6:23:1c:2d:81:5f:98:7e:e0:69:7e:9b:54:fc:7e:80:
d8:88:5f:2c:19:77:b9:cb:94:3f:d4:66:26:6a:06:3c:b1:b8:
44:a1:c5:da:12:8a:72:02:99:8e:77:1e:a7:c9:ab:d5:7d:3f:
d4:2d:b8:fd:23:76:2c:0f:42:6f:64:95:8e:55:44:f3:22:0c:
99:d2:f9:01:c7:5d:2b:d4:d9:3a:4c:9c:c8:e4:06:7c:2d:e5:
1b:92:99:8e:5b:4a:74:20:23:e8:99:60:16:92:5a:39:10:7f:
c5:79:e5:6e:0b:a5:10:78:2b:3d:2e:7e:2d:5e:7f:b6:c5:3f:
c6:d7:23:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RR8eIMjHSRbSaPsh4ItiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZGU0M2NkMWY4YWY0NWM2ODk4NjdkOWY1YTg4MWEyYWVj
MzRiMzEwHhcNMjUwNjI4MTYwMDQ5WhcNMjUwNjI5MTYwMDQ5WjAzMTEwLwYDVQQD
Eyg0OTdkMzFkMzQxYTFmYWM4NjU1ODk3ZWVmZjQ0MDRhOTYyYzk4YjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2z+uuYBgOsSCKCdEbyzl5PsZsGW
WjVFp0qf3a1raeV747OVs+7kU9vB27CGJmKbKoSeoFUAitV7WqoTvHNO+GKYCY3p
8tvCVPPyAn1L4pDxbJokXlUiQER7l4+rtkJcyReNCz8DYJODa9Z76Xj6ayWrHIXO
rgU0tovSOhu1WqFSlBLjlazwziCVr+D9GaDuMl97jUGqYdOefiLakSSmnC3CRUHd
E+lV/3F0yybCcbkyUStIpQ22q+Q7e/KRTzCK5/Ud0aWnSudH8xet7Xx/lZXmnl5y
KkS8AX7kBElkfCT1f18ARK3VboUjNeZnsBTdOWB6CbVCXz3mWwrwWIfTtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl9MdNBofrIZViX7v9EBKliyYsqMB8GA1UdIwQY
MBaAFNXeQ80fivRcaJhn2fWogaKuw0sxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNjA4YjAtZTdjYS00YjNiLTkwMmYt
NGQwYTdlYzA3Nzg2LzEvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNjA4YjAtZTdjYS00YjNiLTkwMmYtNGQwYTdlYzA3Nzg2
LzEvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYl9p3nO
8f7QgjIEpfB8xlNAIPPn/HpSaL3L1LlQENXYuGsUHhFetLrV49OH/ebTtY0q2h1a
krWEtp9YN6vbQEbzs4r8v6mdv9CtrO3vbEp85q6S1ZvVYsBEIhOo96z4dWv8rxsZ
njZX9xeBSm4hhj4rKiSf/pClQOcpZyZTl7GmIxwtgV+YfuBpfptU/H6A2IhfLBl3
ucuUP9RmJmoGPLG4RKHF2hKKcgKZjncep8mr1X0/1C24/SN2LA9Cb2SVjlVE8yIM
mdL5AcddK9TZOkycyOQGfC3lG5KZjltKdCAj6JlgFpJaORB/xXnlbgulEHgrPS5+
LV5/tsU/xtcjtg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:33 2025 by rpki-client