Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier: NVCRzuYar0O7TszN3FcHl4IXf+yXFHfc60Z7dSAFfOM=
Subject key identifier: 47:82:CD:FC:48:45:35:87:76:CD:33:0B:4B:9D:8A:88:3E:D0:35:6C
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 0197B70E96A03AC264143F4C69A23BD603BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number: 15C1
Signing time: Sat 28 Jun 2025 15:01:15 +0000
Manifest this update: Sat 28 Jun 2025 15:01:15 +0000
Manifest next update: Sun 29 Jun 2025 15:01:15 +0000
Files and hashes: 1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: B9YOcQozUzUzJc7IeOTED3PPixE5N81j8njrIphpcqY=)
3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:96:a0:3a:c2:64:14:3f:4c:69:a2:3b:d6:03:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Jun 28 15:01:15 2025 GMT
Not After : Jun 29 15:01:15 2025 GMT
Subject: CN=4782cdfc4845358776cd330b4b9d8a883ed0356c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:d2:90:89:8c:a5:f7:94:e6:8e:f5:cd:d5:
71:f0:6e:0d:a2:56:8d:7d:73:3b:33:f6:2a:46:4d:
ea:be:84:be:39:f8:63:34:93:39:57:f9:2d:fd:33:
00:70:d7:3e:6e:e7:9c:d5:23:71:2b:e2:dc:ee:b1:
70:cd:f4:c8:ad:6a:80:e3:6a:24:d3:e7:8a:1b:a5:
06:4e:5e:d8:44:c0:ed:b1:02:ef:ec:3c:63:da:06:
04:2f:66:c0:a1:88:31:49:55:e1:6c:a5:e3:86:93:
74:86:95:eb:21:21:f0:0d:1d:ad:19:fb:90:74:f5:
9b:a8:e1:e4:ca:ce:97:9f:34:ee:bd:49:9a:50:d7:
6f:82:40:52:a8:1c:77:7c:e1:c6:92:2b:15:a8:30:
6b:d3:8a:8c:79:e9:13:46:7c:07:a9:5c:e6:84:71:
fe:51:64:5f:48:b2:e6:79:4f:d1:c3:e1:d7:62:4d:
bc:07:9a:3d:e0:91:e6:3a:7a:ce:eb:3e:bd:9f:78:
af:f5:15:af:b0:02:d2:f2:78:5a:a4:9f:6a:20:6d:
f8:36:62:a5:ca:ad:29:df:43:cc:64:4e:26:87:61:
6b:d3:6b:3e:06:fc:58:8a:84:17:60:ff:b7:6e:a9:
03:92:43:a6:79:04:e9:41:b5:a6:64:cd:cf:d6:91:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:82:CD:FC:48:45:35:87:76:CD:33:0B:4B:9D:8A:88:3E:D0:35:6C
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:14:f3:2c:40:a6:3f:0b:00:c3:b0:99:d8:37:23:0f:f0:41:
d8:37:ab:9e:f9:d3:f6:6a:b9:b7:d2:de:8a:d2:83:1a:62:67:
5a:65:b7:a9:80:e3:94:61:a2:40:aa:c0:ee:2b:f7:2d:4a:b4:
3b:38:41:af:6f:bc:a3:9f:71:d2:41:42:ba:2f:5f:42:e8:a7:
af:ad:65:a6:c8:df:df:79:d7:b2:00:fe:8a:08:80:bf:d8:ff:
5f:b1:35:79:28:bb:01:ae:39:a9:cd:81:c1:6b:e5:47:75:56:
2e:c1:d5:0e:b5:5e:da:5e:cd:33:a0:fc:d9:02:a8:88:07:18:
8c:94:85:c7:5f:00:24:8e:1a:d4:22:7f:a6:4e:01:71:10:57:
be:4d:86:d7:bb:ca:85:c1:eb:3e:d5:f6:f4:31:1a:6d:eb:02:
42:77:a5:fd:63:cb:ef:b5:a5:56:4c:8e:ca:cd:dd:16:d8:24:
c7:f0:65:fb:3a:c4:03:85:71:37:7c:19:68:d9:2c:05:6b:ea:
f3:5c:3d:36:8b:86:08:ee:00:0a:ad:9e:5a:69:55:19:17:e7:
63:c9:a4:2e:2c:cb:1a:de:09:47:c4:e7:27:08:69:64:fc:20:
01:fa:3f:78:6c:ff:72:19:f0:d1:9c:03:e2:74:2e:bd:14:1e:
c2:5f:14:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DpagOsJkFD9MaaI71gO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTc3MjViMGE2MDVkNGRkY2M0NjRiNzBkY2IzYTE2MmE1
ZjA1NWIwHhcNMjUwNjI4MTUwMTE1WhcNMjUwNjI5MTUwMTE1WjAzMTEwLwYDVQQD
Eyg0NzgyY2RmYzQ4NDUzNTg3NzZjZDMzMGI0YjlkOGE4ODNlZDAzNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ADSkImMpfeU5o71zdVx8G4NolaN
fXM7M/YqRk3qvoS+OfhjNJM5V/kt/TMAcNc+buec1SNxK+Lc7rFwzfTIrWqA42ok
0+eKG6UGTl7YRMDtsQLv7Dxj2gYEL2bAoYgxSVXhbKXjhpN0hpXrISHwDR2tGfuQ
dPWbqOHkys6XnzTuvUmaUNdvgkBSqBx3fOHGkisVqDBr04qMeekTRnwHqVzmhHH+
UWRfSLLmeU/Rw+HXYk28B5o94JHmOnrO6z69n3iv9RWvsALS8nhapJ9qIG34NmKl
yq0p30PMZE4mh2Fr02s+BvxYioQXYP+3bqkDkkOmeQTpQbWmZM3P1pGxKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeCzfxIRTWHds0zC0udiog+0DVsMB8GA1UdIwQY
MBaAFEtXclsKYF1N3MRktw3LOhYqXwVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgt
OGFmNTZlNzMzNjAwLzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgtOGFmNTZlNzMzNjAw
LzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxTzLECm
PwsAw7CZ2DcjD/BB2DernvnT9mq5t9LeitKDGmJnWmW3qYDjlGGiQKrA7iv3LUq0
OzhBr2+8o59x0kFCui9fQuinr61lpsjf33nXsgD+igiAv9j/X7E1eSi7Aa45qc2B
wWvlR3VWLsHVDrVe2l7NM6D82QKoiAcYjJSFx18AJI4a1CJ/pk4BcRBXvk2G17vK
hcHrPtX29DEabesCQnel/WPL77WlVkyOys3dFtgkx/Bl+zrEA4VxN3wZaNksBWvq
81w9NouGCO4ACq2eWmlVGRfnY8mkLizLGt4JR8TnJwhpZPwgAfo/eGz/chnw0ZwD
4nQuvRQewl8UQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:24 2025 by rpki-client