Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: idAb/p3fu8+suWL7bPRb5N66826gvvaUztAhgw4aECc=
Subject key identifier: 75:6B:54:5E:A5:46:96:AC:15:1D:26:67:8E:58:86:62:F0:D0:BB:4F
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 0197B70EA45C2B112A0E766186A2DDC02B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 15C9
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: JD+mz+kLeMyrgTzctTf0RJOpc3nEminAe44Rbtx/Ua0=)
2: JoOIhSAqKdpIXX40gcKLusWeNyE.roa (hash: XGkJT13q1QJrNBJYi9R9LyTuLa34GhQ10YEFypzjsJU=)
3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a4:5c:2b:11:2a:0e:76:61:86:a2:dd:c0:2b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=756b545ea54696ac151d26678e588662f0d0bb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:6e:3d:e1:f0:d9:03:0d:6f:57:da:db:3f:
74:05:bf:1f:fa:84:0b:62:ff:4f:65:d2:02:78:99:
29:0e:fc:b6:1a:82:8d:d1:dc:20:d5:a9:c0:be:c6:
5a:5c:5a:84:e5:2e:33:e0:9e:87:87:70:9b:51:16:
53:19:94:67:73:db:7a:90:bd:be:f5:db:fd:77:72:
11:a2:f8:61:cb:9f:83:25:3b:1e:d8:88:82:65:67:
a2:61:77:df:d0:3b:4c:34:00:f2:4e:72:89:3b:58:
1c:60:e6:f9:23:a9:5a:9f:b8:e2:32:aa:a7:a8:8c:
8f:7e:84:21:90:28:db:68:50:46:cb:b1:cb:7b:61:
43:40:3e:11:1d:b8:cc:e5:9a:34:ce:1f:ce:d8:92:
45:fd:64:7d:fe:37:9d:63:12:b4:45:72:9a:35:88:
10:67:16:93:f2:cf:99:fc:80:f7:4b:ba:a0:72:94:
a7:d2:01:5c:05:e9:d2:0f:6a:41:92:51:54:b6:73:
5d:38:72:04:97:fd:9a:3d:a3:0c:5d:b6:44:0c:46:
5a:58:70:38:7b:eb:6c:a3:e0:3e:3b:27:17:21:fa:
5c:d4:6b:b2:e0:6e:20:6d:11:24:e4:2c:de:92:1f:
d2:1a:b5:bc:20:83:29:3e:61:b1:a7:08:e4:38:18:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6B:54:5E:A5:46:96:AC:15:1D:26:67:8E:58:86:62:F0:D0:BB:4F
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0b:58:c7:d5:d3:41:8b:0f:45:af:1d:d3:f8:9e:5b:f6:25:
22:55:56:91:f2:fb:7c:0a:73:e6:5f:9f:9c:40:21:88:51:46:
03:a2:f3:3a:76:ba:8c:4a:eb:f0:13:bc:47:9a:a9:70:c8:91:
44:b6:8a:1a:cf:2d:b8:28:f8:88:b2:cf:b3:96:08:a9:6c:db:
a5:cb:6b:3f:bc:13:6d:a3:3a:6e:2b:dd:f2:a5:22:0d:2c:b0:
be:bb:bb:1c:26:74:72:60:28:fb:8f:e9:ba:c6:0d:87:95:98:
f1:07:fc:8a:5d:01:7e:8b:21:83:94:60:2c:9c:58:47:77:a2:
2c:c2:40:23:fc:05:ea:1c:ca:ec:1d:2e:73:34:0f:a1:76:64:
31:1a:b1:3c:18:58:05:8c:84:82:ab:85:66:39:47:78:ba:7d:
3a:e7:62:5a:07:27:37:55:55:07:2d:ea:2e:2b:fb:f9:0a:49:
45:4d:26:67:23:dd:7e:a1:09:e3:22:83:7b:e3:a7:e6:c5:73:
d6:31:23:07:49:f6:d7:c8:cb:79:59:16:a8:e7:9d:93:ab:57:
00:ac:3b:f1:83:fb:d7:60:ac:2e:9f:8c:4b:7a:c8:97:8f:42:
6b:1d:bf:08:e6:66:a7:ef:da:be:92:8c:5e:8b:1b:45:aa:76:
2a:15:6b:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqRcKxEqDnZhhqLdwCt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTcwM2RiMzAyMGNjMWVmMmZkNzEwOTFhNDY4ZjRhNjQ5
YzIzOGYwHhcNMjUwNjI4MTUwMTE5WhcNMjUwNjI5MTUwMTE5WjAzMTEwLwYDVQQD
Eyg3NTZiNTQ1ZWE1NDY5NmFjMTUxZDI2Njc4ZTU4ODY2MmYwZDBiYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl1uPeHw2QMNb1fa2z90Bb8f+oQL
Yv9PZdICeJkpDvy2GoKN0dwg1anAvsZaXFqE5S4z4J6Hh3CbURZTGZRnc9t6kL2+
9dv9d3IRovhhy5+DJTse2IiCZWeiYXff0DtMNADyTnKJO1gcYOb5I6lan7jiMqqn
qIyPfoQhkCjbaFBGy7HLe2FDQD4RHbjM5Zo0zh/O2JJF/WR9/jedYxK0RXKaNYgQ
ZxaT8s+Z/ID3S7qgcpSn0gFcBenSD2pBklFUtnNdOHIEl/2aPaMMXbZEDEZaWHA4
e+tso+A+OycXIfpc1Guy4G4gbREk5Czekh/SGrW8IIMpPmGxpwjkOBiuzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVrVF6lRpasFR0mZ45YhmLw0LtPMB8GA1UdIwQY
MBaAFNQXA9swIMwe8v1xCRpGj0pknCOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJjRDJ6QWd6Qjd5X1hFSkdrYVBTbVNjSTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ODU1NGItNGY5Ny00MDZjLTkwYTYt
NDhkMzFjNzVmMzFlLzEvMUJjRDJ6QWd6Qjd5X1hFSkdrYVBTbVNjSTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ODU1NGItNGY5Ny00MDZjLTkwYTYtNDhkMzFjNzVmMzFl
LzEvMUJjRDJ6QWd6Qjd5X1hFSkdrYVBTbVNjSTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgtYx9XT
QYsPRa8d0/ieW/YlIlVWkfL7fApz5l+fnEAhiFFGA6LzOna6jErr8BO8R5qpcMiR
RLaKGs8tuCj4iLLPs5YIqWzbpctrP7wTbaM6bivd8qUiDSywvru7HCZ0cmAo+4/p
usYNh5WY8Qf8il0Bfoshg5RgLJxYR3eiLMJAI/wF6hzK7B0uczQPoXZkMRqxPBhY
BYyEgquFZjlHeLp9OudiWgcnN1VVBy3qLiv7+QpJRU0mZyPdfqEJ4yKDe+On5sVz
1jEjB0n218jLeVkWqOedk6tXAKw78YP712CsLp+MS3rIl49Cax2/COZmp+/avpKM
XosbRap2KhVrlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:23 2025 by rpki-client