Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: qRgSEVs24XR4hwTSQmVr60JycoO8AiFkFSgyHOvxEDg=
Subject key identifier: 53:F1:99:3E:61:4F:0C:3E:A8:DA:3E:D0:DD:3E:6C:27:1F:60:1C:A5
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 0197B70EC141747736ECBBEE324376E34402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 01CA
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: eZ7BGs67U+buBKDCJ4MARoZFcPdngOPsk7Uzl9xZWN4=)
2: oL3YqmLZNQTklrYCVBkqoxnVPVE.roa (hash: vNB411x6DGxlKgUop3xuDcnHI37Ap9OjrZ9OIS8r31M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c1:41:74:77:36:ec:bb:ee:32:43:76:e3:44:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=53f1993e614f0c3ea8da3ed0dd3e6c271f601ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:e3:81:41:26:99:28:8e:f4:63:33:2c:5e:
1f:34:b5:77:1e:6d:8d:d0:ea:c9:94:8a:57:9a:61:
d7:26:05:b3:38:f3:d3:a9:42:cb:73:49:82:85:37:
be:a4:47:42:79:4f:6c:15:e2:80:cd:1f:86:fe:7e:
59:dd:84:c5:a5:c2:40:b9:51:d9:8e:6c:73:a1:01:
e3:38:43:e6:24:ce:e9:71:e4:35:a5:44:02:a1:8d:
1b:4e:c9:87:69:11:ff:c8:52:3a:72:b9:0c:6f:ae:
38:a4:37:1f:5b:26:ab:4d:e6:44:04:68:3f:6a:b6:
08:70:ea:59:21:4d:81:3a:13:6e:97:43:fb:ed:de:
62:0c:c3:40:da:80:4f:97:fc:ec:71:58:99:39:b9:
34:8c:a5:96:a7:d4:e3:99:34:58:9c:20:a8:f1:d5:
89:32:b1:2d:a4:b7:c7:11:7d:0c:45:5c:34:e9:9e:
f4:a4:73:40:20:b9:da:0b:b4:45:ef:e9:d7:d7:73:
64:df:1a:07:b9:f5:9c:73:bf:b9:40:e6:12:08:ac:
08:e2:bd:fe:36:cd:e3:d1:a2:91:24:f9:f6:f4:16:
2e:ee:9d:74:52:fa:6d:29:1f:cf:f6:e9:7f:24:c9:
16:7c:39:7a:2a:1e:25:e5:15:64:2d:1d:84:b8:00:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F1:99:3E:61:4F:0C:3E:A8:DA:3E:D0:DD:3E:6C:27:1F:60:1C:A5
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3e:bc:d5:ab:6b:2c:53:3a:ef:82:d0:71:8e:01:8c:35:78:
74:2f:bd:e2:b9:ee:3f:c3:2a:cb:67:34:4e:ff:7e:eb:5f:da:
c3:98:fc:85:95:f8:1f:fe:fc:59:fb:e5:7d:56:0a:d1:fe:b4:
71:74:95:a2:42:22:8f:1e:9e:48:80:97:97:72:99:0c:1a:27:
fd:db:1a:3a:32:c7:fa:8d:4e:8b:e3:1b:14:64:7e:66:93:d3:
40:07:6d:19:14:42:f4:cb:f6:b1:10:30:81:65:67:5d:91:7e:
bd:3d:cc:2c:81:09:95:d1:8f:f0:d8:3e:d9:14:ed:1c:72:a7:
d0:63:df:90:d0:fd:61:23:94:c8:e7:fe:0b:1a:b9:7a:bc:37:
c0:7a:93:66:b7:0c:b0:8b:0e:ff:c6:8e:2c:43:bd:64:6c:d3:
f5:c0:66:16:51:45:ee:29:45:fb:28:d4:11:b2:da:46:ce:3c:
38:64:9d:33:ba:18:b4:13:d3:5b:28:8c:b6:c6:42:87:2e:07:
c6:88:42:ea:eb:b8:32:dc:b5:8b:0c:16:d4:c8:a8:94:a0:10:
23:55:32:ea:71:45:68:fc:e1:bd:8e:17:ab:bb:a5:8a:6a:15:
e7:d9:9c:e7:38:1b:52:a5:7a:9c:02:d0:fd:96:d5:53:c6:3b:
b5:c1:8e:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DsFBdHc27LvuMkN240QCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0N2Q4YWFhMTBlZGNmNWQwODE0MDM5MTUzOTk3YmZiZjRk
MzViYTkwHhcNMjUwNjI4MTUwMTI2WhcNMjUwNjI5MTUwMTI2WjAzMTEwLwYDVQQD
Eyg1M2YxOTkzZTYxNGYwYzNlYThkYTNlZDBkZDNlNmMyNzFmNjAxY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscvjgUEmmSiO9GMzLF4fNLV3Hm2N
0OrJlIpXmmHXJgWzOPPTqULLc0mChTe+pEdCeU9sFeKAzR+G/n5Z3YTFpcJAuVHZ
jmxzoQHjOEPmJM7pceQ1pUQCoY0bTsmHaRH/yFI6crkMb644pDcfWyarTeZEBGg/
arYIcOpZIU2BOhNul0P77d5iDMNA2oBPl/zscViZObk0jKWWp9TjmTRYnCCo8dWJ
MrEtpLfHEX0MRVw06Z70pHNAILnaC7RF7+nX13Nk3xoHufWcc7+5QOYSCKwI4r3+
Ns3j0aKRJPn29BYu7p10UvptKR/P9ul/JMkWfDl6Kh4l5RVkLR2EuAB7twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPxmT5hTww+qNo+0N0+bCcfYBylMB8GA1UdIwQY
MBaAFNR9iqoQ7c9dCBQDkVOZe/v001upMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUgyS3FoRHR6MTBJRkFPUlU1bDctX1RUVzZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZGNjNTAtMDI1Yy00YzIwLTg2OTkt
YmNlZDU3OWMwYjdiLzEvMUgyS3FoRHR6MTBJRkFPUlU1bDctX1RUVzZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82ZGNjNTAtMDI1Yy00YzIwLTg2OTktYmNlZDU3OWMwYjdi
LzEvMUgyS3FoRHR6MTBJRkFPUlU1bDctX1RUVzZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaD681atr
LFM674LQcY4BjDV4dC+94rnuP8Mqy2c0Tv9+61/aw5j8hZX4H/78WfvlfVYK0f60
cXSVokIijx6eSICXl3KZDBon/dsaOjLH+o1Oi+MbFGR+ZpPTQAdtGRRC9Mv2sRAw
gWVnXZF+vT3MLIEJldGP8Ng+2RTtHHKn0GPfkND9YSOUyOf+Cxq5erw3wHqTZrcM
sIsO/8aOLEO9ZGzT9cBmFlFF7ilF+yjUEbLaRs48OGSdM7oYtBPTWyiMtsZChy4H
xohC6uu4Mty1iwwW1MiolKAQI1Uy6nFFaPzhvY4Xq7ulimoV59mc5zgbUqV6nALQ
/ZbVU8Y7tcGOng==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:20 2025 by rpki-client