Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: eCDcDhf8HNbyACUhEeJPzMu1Yy2D6Cjiq7VPoIGgJSQ=
Subject key identifier: 09:ED:3D:05:86:B8:C1:09:60:FD:D1:67:90:75:94:D5:F7:70:5F:07
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 0197C613A290942559D9CFC5D403294AAD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 15C2
Signing time: Tue 01 Jul 2025 13:01:04 +0000
Manifest this update: Tue 01 Jul 2025 13:01:04 +0000
Manifest next update: Wed 02 Jul 2025 13:01:04 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: 0dXl1/AgcZP3My9Nl3cqwxti4fIWTnAzgne5SqyUFL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:a2:90:94:25:59:d9:cf:c5:d4:03:29:4a:ad:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Jul 1 13:01:04 2025 GMT
Not After : Jul 2 13:01:04 2025 GMT
Subject: CN=09ed3d0586b8c10960fdd167907594d5f7705f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:65:2f:c3:31:82:1e:94:36:6f:ad:cb:79:
6c:12:7c:68:1f:d6:28:6b:c5:80:68:f8:8b:7c:6a:
4c:d8:a2:d5:3a:e6:cd:43:97:2a:37:a7:51:4d:4e:
f4:98:fa:a4:de:37:66:de:98:ea:ad:7e:49:51:8e:
d9:22:e5:11:0a:cd:67:9c:59:18:c4:e5:2b:bb:03:
be:2a:5d:60:1a:50:2a:f4:1a:31:31:7d:5f:23:d9:
70:a0:a5:6d:b4:3b:45:43:e9:e5:80:d5:12:cf:0f:
3d:de:33:81:c5:92:e4:ae:c0:2e:ca:44:73:ff:75:
f9:c8:e8:ac:82:ce:40:55:f2:a1:ac:46:de:49:29:
5f:a5:d6:f9:f9:f0:95:d1:4e:50:19:68:6e:0a:da:
d5:7e:9f:a7:ac:5b:6d:61:00:e9:f8:bc:a8:75:ed:
ce:04:03:50:03:05:99:8f:1c:9d:dc:22:a5:79:60:
df:b3:71:ba:1b:81:9f:08:98:44:57:cf:de:3f:34:
7b:a0:35:d1:75:63:57:e2:01:82:ef:9b:ee:89:2c:
eb:e1:fb:f4:34:02:33:16:b1:e4:c4:41:82:9d:70:
e1:2c:ad:68:ef:da:71:3f:03:fb:47:cb:34:69:98:
c4:b9:56:b8:5d:81:4b:82:39:ee:0e:b0:43:6f:a6:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:ED:3D:05:86:B8:C1:09:60:FD:D1:67:90:75:94:D5:F7:70:5F:07
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:de:d8:13:84:77:dc:82:d3:2a:68:95:8d:50:75:ba:b8:03:
5b:71:52:d4:59:e8:29:e6:f7:ce:d6:5e:e7:42:f1:33:08:29:
ee:3d:50:65:a7:28:83:22:7e:f0:85:97:07:e9:5c:78:c1:82:
f5:01:d5:dd:fb:52:82:59:32:5e:f0:3f:51:27:96:b6:26:2a:
05:e7:66:62:41:1a:6d:e7:a8:7f:0a:c5:c5:80:be:f7:ec:62:
ba:2b:0b:07:30:43:79:70:ca:79:22:ec:ba:8e:ee:e0:a9:b2:
7e:1a:1a:4f:09:8c:33:d6:ef:bb:bd:ff:9d:6a:b0:d7:75:a7:
c4:38:4b:e2:85:34:05:67:57:27:00:0b:80:c0:77:ec:e5:67:
a0:66:b5:1f:9b:82:b1:0e:42:f8:d0:8c:63:fe:d1:46:4e:f1:
f2:d6:84:1a:e0:b8:87:d7:f9:55:c8:10:b1:de:a4:95:f3:ea:
92:1c:87:ba:42:de:68:45:68:0e:77:d7:f4:b9:5c:6b:3f:34:
78:88:1b:bd:a0:dd:29:26:c6:5c:e5:3f:2c:17:ce:c2:22:a7:
26:c3:8c:01:44:17:81:a8:36:2f:af:29:e1:40:4b:d8:f7:cf:
32:4a:ab:b3:a5:b0:4f:f6:20:a5:c3:12:53:49:13:86:56:b1:
41:dd:1e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGE6KQlCVZ2c/F1AMpSq0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWQ0ZTk3ODgxMGU5Nzg5YTc2ZTY4N2E3ZGRkOTc1MjZi
MGQ5YmMwHhcNMjUwNzAxMTMwMTA0WhcNMjUwNzAyMTMwMTA0WjAzMTEwLwYDVQQD
EygwOWVkM2QwNTg2YjhjMTA5NjBmZGQxNjc5MDc1OTRkNWY3NzA1ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst1lL8Mxgh6UNm+ty3lsEnxoH9Yo
a8WAaPiLfGpM2KLVOubNQ5cqN6dRTU70mPqk3jdm3pjqrX5JUY7ZIuURCs1nnFkY
xOUruwO+Kl1gGlAq9BoxMX1fI9lwoKVttDtFQ+nlgNUSzw893jOBxZLkrsAuykRz
/3X5yOisgs5AVfKhrEbeSSlfpdb5+fCV0U5QGWhuCtrVfp+nrFttYQDp+Lyode3O
BANQAwWZjxyd3CKleWDfs3G6G4GfCJhEV8/ePzR7oDXRdWNX4gGC75vuiSzr4fv0
NAIzFrHkxEGCnXDhLK1o79pxPwP7R8s0aZjEuVa4XYFLgjnuDrBDb6blMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAntPQWGuMEJYP3RZ5B1lNX3cF8HMB8GA1UdIwQY
MBaAFKQdTpeIEOl4mnbmh6fd2XUmsNm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmIt
MDk1ZTcxODhkMGEwLzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmItMDk1ZTcxODhkMGEw
LzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAft7YE4R3
3ILTKmiVjVB1urgDW3FS1FnoKeb3ztZe50LxMwgp7j1QZacogyJ+8IWXB+lceMGC
9QHV3ftSglkyXvA/USeWtiYqBedmYkEabeeofwrFxYC+9+xiuisLBzBDeXDKeSLs
uo7u4KmyfhoaTwmMM9bvu73/nWqw13WnxDhL4oU0BWdXJwALgMB37OVnoGa1H5uC
sQ5C+NCMY/7RRk7x8taEGuC4h9f5VcgQsd6klfPqkhyHukLeaEVoDnfX9Llcaz80
eIgbvaDdKSbGXOU/LBfOwiKnJsOMAUQXgag2L68p4UBL2PfPMkqrs6WwT/YgpcMS
U0kThlaxQd0e1A==
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:16:49 2025 by rpki-client