Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: GIV58l5/Q7Lo2JFVzDR/5LOBSir9IlCtLtBzuF9OVeQ=
Subject key identifier: AF:D8:C6:7F:0D:76:90:F7:C1:02:83:BB:20:ED:CC:30:40:CE:10:A2
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 0197CCF1719DB8259CEF9E7784F3D3F62A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 21:01:04 +0000
Manifest this update: Wed 02 Jul 2025 21:01:04 +0000
Manifest next update: Thu 03 Jul 2025 21:01:04 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: ww3ISk1g/KyjR2NUrYKCXBrGJk1Zm5Ilbznn2/6c7JA=)
2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:71:9d:b8:25:9c:ef:9e:77:84:f3:d3:f6:2a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Jul 2 21:01:04 2025 GMT
Not After : Jul 3 21:01:04 2025 GMT
Subject: CN=afd8c67f0d7690f7c10283bb20edcc3040ce10a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:7e:e7:e5:58:18:5a:a0:ae:14:93:64:5c:
76:72:d4:08:11:9a:1d:97:96:01:18:32:0e:46:57:
93:be:ff:f0:e8:22:85:1c:04:32:e8:20:b5:81:f4:
3c:3f:5d:b2:e6:dd:74:e5:02:e2:2a:d2:a6:9c:c0:
c7:9a:d1:6c:38:fe:01:05:07:d9:1b:70:a6:55:ff:
5c:98:b9:db:2a:b9:88:19:0c:67:ce:ce:ab:73:5b:
77:32:0a:63:09:71:e0:e0:c0:c8:0d:57:ca:68:d1:
2b:56:fd:4d:bc:24:0b:e6:26:31:0f:a2:b6:36:f6:
ee:a1:85:14:19:ec:9f:b5:fb:06:4a:45:00:61:b0:
08:b0:8f:97:9a:d2:30:c9:2b:94:12:8e:f5:7d:62:
be:49:e0:19:a6:36:2a:d7:35:1b:cf:68:0a:25:13:
ff:dd:bf:48:9a:47:0b:1b:15:54:e6:83:22:92:d6:
b8:4d:1e:ab:15:75:b0:60:2f:a9:07:be:55:33:0d:
50:49:9f:31:a7:6e:8f:38:76:24:84:64:59:f8:4e:
14:a7:93:fa:2a:dd:ab:e3:f0:80:89:40:cf:2e:37:
2f:6f:fd:8e:6b:f2:da:b8:30:14:29:5e:6f:07:d7:
9d:2a:1b:88:3e:fd:2f:12:82:cd:99:71:ee:60:2c:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D8:C6:7F:0D:76:90:F7:C1:02:83:BB:20:ED:CC:30:40:CE:10:A2
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dd:5d:29:07:d9:0c:32:43:42:b6:f7:36:b6:72:d0:65:82:
ec:5b:84:db:e0:db:f7:be:a1:e9:4d:f4:a3:fd:69:2b:8f:0c:
34:e4:31:c9:23:ad:4d:6b:53:a0:4f:49:e6:47:0f:1f:8c:cb:
33:a4:0f:e3:7b:5e:f5:3e:6f:35:66:ff:12:28:f4:cf:b6:0e:
0b:bf:82:00:a1:fc:fd:35:20:05:1e:82:59:2b:58:b9:18:25:
3c:be:ed:10:53:4e:96:86:33:f9:d4:0c:be:e1:d6:5e:b3:fb:
78:f7:ad:24:bf:d4:f9:03:cd:06:be:5f:d4:98:a6:3c:f3:3a:
dd:f2:34:5a:bf:5f:ed:6b:d5:6d:bf:90:a2:4f:e5:87:06:fc:
cc:49:42:70:fd:15:76:01:68:b4:4e:0d:39:c2:cf:cc:2c:a6:
18:cc:db:71:4a:e7:a4:20:1d:17:1a:80:48:41:ad:5d:72:14:
86:db:c9:b0:7f:7a:27:2a:68:84:3d:50:c1:ea:a6:c6:80:18:
1a:d0:6f:e5:5e:66:26:54:9e:7e:ce:d6:4b:a7:72:d3:6c:f4:
d5:54:a8:54:bc:31:d2:fd:72:21:c9:5a:0d:87:65:94:f6:06:
fd:47:78:5d:37:ca:88:5c:03:c6:43:4d:7c:11:0b:c0:35:31:
73:11:c6:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfM8XGduCWc7553hPPT9ipKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWIzMzZkNTYwNGQ0N2JhZTgxNzIzOGIwZGJiNDk3NzFl
MjQ3MjkwHhcNMjUwNzAyMjEwMTA0WhcNMjUwNzAzMjEwMTA0WjAzMTEwLwYDVQQD
EyhhZmQ4YzY3ZjBkNzY5MGY3YzEwMjgzYmIyMGVkY2MzMDQwY2UxMGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot9+5+VYGFqgrhSTZFx2ctQIEZod
l5YBGDIORleTvv/w6CKFHAQy6CC1gfQ8P12y5t105QLiKtKmnMDHmtFsOP4BBQfZ
G3CmVf9cmLnbKrmIGQxnzs6rc1t3MgpjCXHg4MDIDVfKaNErVv1NvCQL5iYxD6K2
NvbuoYUUGeyftfsGSkUAYbAIsI+XmtIwySuUEo71fWK+SeAZpjYq1zUbz2gKJRP/
3b9ImkcLGxVU5oMikta4TR6rFXWwYC+pB75VMw1QSZ8xp26POHYkhGRZ+E4Up5P6
Kt2r4/CAiUDPLjcvb/2Oa/LauDAUKV5vB9edKhuIPv0vEoLNmXHuYCzrxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/Yxn8NdpD3wQKDuyDtzDBAzhCiMB8GA1UdIwQY
MBaAFJDrM21WBNR7roFyOLDbtJdx4kcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWIt
YjExOTI3NGFkNjU0LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWItYjExOTI3NGFkNjU0
LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPN1dKQfZ
DDJDQrb3NrZy0GWC7FuE2+Db976h6U30o/1pK48MNOQxySOtTWtToE9J5kcPH4zL
M6QP43te9T5vNWb/Eij0z7YOC7+CAKH8/TUgBR6CWStYuRglPL7tEFNOloYz+dQM
vuHWXrP7ePetJL/U+QPNBr5f1JimPPM63fI0Wr9f7WvVbb+Qok/lhwb8zElCcP0V
dgFotE4NOcLPzCymGMzbcUrnpCAdFxqASEGtXXIUhtvJsH96JypohD1QweqmxoAY
GtBv5V5mJlSefs7WS6dy02z01VSoVLwx0v1yIclaDYdllPYG/Ud4XTfKiFwDxkNN
fBELwDUxcxHGLw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:53:51 2025 by rpki-client