Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
File: 1kBlpUFdmUI5AUXyJHkB2TZFidc.mft (raw, json)
Hash identifier: NIiK/hpP73TvJlicODrrP++Y8v9TD/XdJTkuh3jG8aI=
Subject key identifier: B2:ED:F1:A8:91:AD:69:23:10:84:C6:1D:A0:F7:02:72:0C:EF:A1:76
Authority key identifier: D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
Certificate issuer: /CN=d64065a5415d9942390145f2247901d9364589d7
Certificate serial: 0197B6D780F1443CBD6641CF0C1271D0BC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
Manifest number: 0A89
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: 1kBlpUFdmUI5AUXyJHkB2TZFidc.crl (hash: eOTGLyqIS4KgO3srpgdSftAgBMJed7AUXK9tJXzhNXg=)
2: 6rPFWOjVfpn28_M8t16r5KAzkLA.roa (hash: wER3Gq8nSGCzekLgZFtgVD/F8/GF6EezM87XvHZecI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:80:f1:44:3c:bd:66:41:cf:0c:12:71:d0:bc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64065a5415d9942390145f2247901d9364589d7
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=b2edf1a891ad69231084c61da0f702720cefa176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:d5:db:ce:45:c4:e4:55:0e:3b:38:2c:cd:
3c:e4:14:e3:69:6d:d5:fe:5b:f5:ee:2c:41:21:c2:
b7:a6:e0:a6:c0:a2:6e:d7:27:cd:f1:0b:08:b3:2d:
bb:22:49:51:d6:be:60:b1:ca:e7:7a:4d:7d:4f:9f:
cc:1b:d7:72:7f:3f:a6:5e:36:9c:bf:08:2b:0a:b1:
96:f3:7b:8e:11:7b:d9:82:aa:4b:23:c0:6f:d1:eb:
a0:47:00:aa:10:23:ff:ab:05:0c:58:57:a2:f1:87:
71:43:ec:2e:2a:e5:56:c5:40:d5:cc:3b:08:53:0f:
ff:de:64:1a:ee:06:17:1f:c6:74:15:6c:b4:e6:a3:
62:8f:ee:d9:7d:0f:7d:6d:4c:58:32:57:52:83:8a:
58:25:7b:9c:99:5f:97:2d:68:e9:b1:b4:13:5c:e2:
c4:bd:9e:6c:8e:f9:03:02:c1:0f:61:21:85:8b:57:
5d:43:97:83:55:20:3c:81:fa:cf:cb:2b:9c:31:b1:
1a:d0:e1:f7:bc:d1:c3:e2:72:48:97:4a:84:6a:7e:
5c:ab:01:64:be:f0:34:4c:9f:bb:e7:ff:7b:d1:8e:
26:26:8c:95:ad:4c:c9:b0:9b:27:bc:a2:fd:23:6a:
74:0c:0a:1a:94:47:d1:35:9e:61:0b:8a:79:bd:b3:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:F1:A8:91:AD:69:23:10:84:C6:1D:A0:F7:02:72:0C:EF:A1:76
X509v3 Authority Key Identifier:
keyid:D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:11:2b:90:47:dd:f2:e0:b2:32:1c:fb:e7:f1:94:4d:b8:e9:
d6:b2:92:cb:ff:f0:4c:59:fe:01:bd:d0:23:e5:be:4a:e2:e3:
c0:ee:1f:fa:cf:41:de:04:6e:1d:a4:61:ad:ad:8a:e1:45:d4:
1a:59:36:5c:d5:3d:f6:0e:dc:73:9d:99:29:03:90:3c:dd:f6:
5e:68:f8:5e:4d:d1:a4:a3:63:3b:09:e1:b5:d6:66:12:a3:af:
25:aa:4c:51:60:5f:0a:76:4f:1c:c4:3c:7c:d5:3b:83:2f:b0:
41:07:63:3e:0e:af:5b:bf:75:e4:d7:1f:44:e5:54:0f:f7:2d:
01:c6:07:c8:d7:1c:18:ca:ca:1f:41:6f:f9:f0:c0:76:42:56:
e7:04:f7:ea:ff:b9:94:75:4b:fa:3f:58:88:c6:7a:5c:76:72:
ba:a5:1d:b2:c9:e7:c8:2f:1f:0a:c9:17:39:55:e7:c3:58:e6:
05:cc:88:bc:53:f7:4c:df:e5:2f:11:5e:ca:7e:fb:fc:a9:8b:
50:d7:da:1d:81:12:22:c0:b9:65:0c:c0:54:4a:53:8f:39:9a:
7c:27:f6:ba:bd:c5:3b:4b:b6:78:1e:b2:35:6e:cf:a1:57:e4:
b1:50:c1:f7:4c:45:10:60:51:9b:c6:a4:7b:5d:e4:79:49:f6:
79:10:19:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214DxRDy9ZkHPDBJx0LwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDA2NWE1NDE1ZDk5NDIzOTAxNDVmMjI0NzkwMWQ5MzY0
NTg5ZDcwHhcNMjUwNjI4MTQwMTA1WhcNMjUwNjI5MTQwMTA1WjAzMTEwLwYDVQQD
EyhiMmVkZjFhODkxYWQ2OTIzMTA4NGM2MWRhMGY3MDI3MjBjZWZhMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsHV285FxORVDjs4LM085BTjaW3V
/lv17ixBIcK3puCmwKJu1yfN8QsIsy27IklR1r5gscrnek19T5/MG9dyfz+mXjac
vwgrCrGW83uOEXvZgqpLI8Bv0eugRwCqECP/qwUMWFei8YdxQ+wuKuVWxUDVzDsI
Uw//3mQa7gYXH8Z0FWy05qNij+7ZfQ99bUxYMldSg4pYJXucmV+XLWjpsbQTXOLE
vZ5sjvkDAsEPYSGFi1ddQ5eDVSA8gfrPyyucMbEa0OH3vNHD4nJIl0qEan5cqwFk
vvA0TJ+75/970Y4mJoyVrUzJsJsnvKL9I2p0DAoalEfRNZ5hC4p5vbPdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLt8aiRrWkjEITGHaD3AnIM76F2MB8GA1UdIwQY
MBaAFNZAZaVBXZlCOQFF8iR5Adk2RYnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtCbHBVRmRtVUk1QVVYeUpIa0IyVFpGaWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85YTJkODYtMGY1ZS00NDZiLWFkMjkt
ZjhhZjJkMGFlMjhjLzEvMWtCbHBVRmRtVUk1QVVYeUpIa0IyVFpGaWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85YTJkODYtMGY1ZS00NDZiLWFkMjktZjhhZjJkMGFlMjhj
LzEvMWtCbHBVRmRtVUk1QVVYeUpIa0IyVFpGaWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRErkEfd
8uCyMhz75/GUTbjp1rKSy//wTFn+Ab3QI+W+SuLjwO4f+s9B3gRuHaRhra2K4UXU
Glk2XNU99g7cc52ZKQOQPN32Xmj4Xk3RpKNjOwnhtdZmEqOvJapMUWBfCnZPHMQ8
fNU7gy+wQQdjPg6vW7915NcfROVUD/ctAcYHyNccGMrKH0Fv+fDAdkJW5wT36v+5
lHVL+j9YiMZ6XHZyuqUdssnnyC8fCskXOVXnw1jmBcyIvFP3TN/lLxFeyn77/KmL
UNfaHYESIsC5ZQzAVEpTjzmafCf2ur3FO0u2eB6yNW7PoVfksVDB90xFEGBRm8ak
e13keUn2eRAZzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:18 2025 by rpki-client