Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: bnLkBEoCwj6FdAwsnGGsTlHt3NRdRbG8yhDMPs/TwYQ=
Subject key identifier: AE:6C:EA:75:D3:93:60:31:BD:8D:C6:01:B4:07:73:DF:6B:38:EC:49
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 0197B9A19B4CD93E15F0C9AFBE6B4EFD2631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 1549
Signing time: Sun 29 Jun 2025 03:01:05 +0000
Manifest this update: Sun 29 Jun 2025 03:01:05 +0000
Manifest next update: Mon 30 Jun 2025 03:01:05 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: l0LTBysSZ9zNEB0T7wm4KA/MH5Ep6Dg3BZ//G4hoOik=)
2: CUxoxoHUFgCcWdXLBL1XTZtblHU.roa (hash: nuVV0ajPUp0XSEkxw4hsRxKF9YmW1aG+8tY3rAw4VUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:9b:4c:d9:3e:15:f0:c9:af:be:6b:4e:fd:26:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Jun 29 03:01:05 2025 GMT
Not After : Jun 30 03:01:05 2025 GMT
Subject: CN=ae6cea75d3936031bd8dc601b40773df6b38ec49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:cf:f6:79:e9:e3:fa:77:d4:bb:d0:13:60:
93:d2:3f:43:16:31:bb:a1:59:16:eb:0b:31:fb:e4:
04:a9:dc:1a:f3:ab:eb:ee:94:17:f1:98:d0:18:05:
10:57:1c:0b:83:5d:93:f8:b9:1a:6f:38:22:8c:d6:
b3:15:df:9b:07:93:b5:36:5c:1e:7a:84:68:61:61:
96:7b:fc:5b:ff:14:4f:1e:d9:1e:5d:db:d5:c0:8f:
e4:47:50:30:89:24:51:6d:9f:d6:13:ee:19:00:b3:
9b:24:9f:12:fe:19:ab:54:dc:9d:7f:4a:e4:57:aa:
dd:07:4e:37:3e:6c:40:31:2a:ee:ff:af:ce:96:24:
d4:6b:59:79:d1:2f:8c:cd:8e:87:36:d2:3b:04:e4:
06:b8:93:72:82:aa:a9:ca:aa:53:20:e1:0b:a7:26:
f4:cd:30:73:b1:f3:2d:69:b8:cc:81:e6:f1:65:33:
b8:ba:f6:cf:56:3c:eb:dd:7c:1c:62:e1:bb:0e:71:
ef:5e:4f:b5:21:89:0d:23:f1:7c:03:93:94:a4:d6:
5d:98:a1:c3:b6:3e:01:25:23:1b:76:db:a7:73:82:
e8:7d:8c:ae:c0:b9:e9:6a:2f:7a:c7:ce:0f:cf:b8:
f0:c5:02:58:de:bc:69:17:46:c3:c4:b4:4b:a1:33:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6C:EA:75:D3:93:60:31:BD:8D:C6:01:B4:07:73:DF:6B:38:EC:49
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:4e:2a:cd:cb:da:f1:b0:33:b5:43:f6:86:de:7d:78:e7:ae:
5c:22:b9:98:96:1d:d2:6e:19:a2:d4:5d:96:18:61:e8:7b:f3:
ef:f1:b1:ef:a0:06:16:c1:24:66:bc:47:b2:db:e3:34:97:19:
0e:09:b9:0e:12:60:eb:82:ae:c0:1e:de:98:e8:9a:9d:33:86:
11:f8:c6:db:b1:8e:46:d4:cc:ff:fc:fe:3f:a7:e2:85:85:03:
b3:85:4d:36:6d:aa:86:87:a2:a4:6f:d3:60:24:5b:fd:0c:ee:
1b:3d:7d:ab:fe:1d:87:ec:6d:aa:f5:38:93:f0:8f:5f:38:4f:
56:40:76:f9:79:1f:07:69:5d:4b:4a:6b:c8:ee:5e:2e:e9:b7:
f8:53:cc:77:a8:95:38:00:f2:21:07:de:7a:02:dc:b6:55:80:
11:4b:25:b0:af:91:72:41:30:e8:ba:80:01:12:2d:3d:97:c4:
d0:ed:29:81:ca:5b:0f:e8:db:6f:f6:64:7c:d9:e7:58:02:ba:
04:21:a1:ad:b4:33:3e:a4:63:76:dd:34:72:91:c6:c9:30:18:
0c:82:e3:9a:0f:c4:8f:9e:14:da:dd:0c:e6:ce:18:bc:f5:84:
5b:7a:63:50:1d:d2:00:bb:a9:78:82:11:4b:ac:eb:1c:aa:c4:
fd:83:88:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oZtM2T4V8MmvvmtO/SYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw
ZGRiMzYwHhcNMjUwNjI5MDMwMTA1WhcNMjUwNjMwMDMwMTA1WjAzMTEwLwYDVQQD
EyhhZTZjZWE3NWQzOTM2MDMxYmQ4ZGM2MDFiNDA3NzNkZjZiMzhlYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu3P9nnp4/p31LvQE2CT0j9DFjG7
oVkW6wsx++QEqdwa86vr7pQX8ZjQGAUQVxwLg12T+LkabzgijNazFd+bB5O1Nlwe
eoRoYWGWe/xb/xRPHtkeXdvVwI/kR1AwiSRRbZ/WE+4ZALObJJ8S/hmrVNydf0rk
V6rdB043PmxAMSru/6/OliTUa1l50S+MzY6HNtI7BOQGuJNygqqpyqpTIOELpyb0
zTBzsfMtabjMgebxZTO4uvbPVjzr3XwcYuG7DnHvXk+1IYkNI/F8A5OUpNZdmKHD
tj4BJSMbdtunc4LofYyuwLnpai96x84Pz7jwxQJY3rxpF0bDxLRLoTPYUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5s6nXTk2AxvY3GAbQHc99rOOxJMB8GA1UdIwQY
MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct
NDU0YzkzYzA2NWEwLzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw
LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvk4qzcva
8bAztUP2ht59eOeuXCK5mJYd0m4ZotRdlhhh6Hvz7/Gx76AGFsEkZrxHstvjNJcZ
Dgm5DhJg64KuwB7emOianTOGEfjG27GORtTM//z+P6fihYUDs4VNNm2qhoeipG/T
YCRb/QzuGz19q/4dh+xtqvU4k/CPXzhPVkB2+XkfB2ldS0pryO5eLum3+FPMd6iV
OADyIQfeegLctlWAEUslsK+RckEw6LqAARItPZfE0O0pgcpbD+jbb/ZkfNnnWAK6
BCGhrbQzPqRjdt00cpHGyTAYDILjmg/Ej54U2t0M5s4YvPWEW3pjUB3SALupeIIR
S6zrHKrE/YOIbw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:39:14 2025 by rpki-client