Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: CU3HFfE0qUn655cYn09i/2RtK93Flo0Dqa8YE4Hux7w=
Subject key identifier: 57:6A:58:D4:7D:7D:67:DA:28:BA:56:2F:E5:F3:90:75:97:67:03:D1
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 0197B7EA5B484C47DCD1863C3782789A9CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 1427
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: 0cEqGKjfm76Pz1TjiCr0iAFNt_k.roa (hash: 8zpaYy8O1j58gbBpTxxShajSZwJzqKtViEUnKsc1qt8=)
2: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: n/qKixJDDMS3fNIV48PL0t1hywsragkMI6n/1+o3Qjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5b:48:4c:47:dc:d1:86:3c:37:82:78:9a:9c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=576a58d47d7d67da28ba562fe5f39075976703d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:0c:08:de:96:78:5c:42:db:5e:0b:50:03:
f1:77:dd:fc:5e:ab:da:7c:07:21:6f:89:a4:f4:1a:
3f:cf:e4:27:09:fd:5a:55:ff:aa:0e:e8:49:34:5f:
10:6b:b1:66:e6:9c:fd:ed:51:75:0f:17:d1:35:55:
b8:40:dd:f2:38:c9:92:bf:94:2e:ed:eb:25:e9:16:
b9:95:4e:75:28:7e:98:8c:c0:c0:b8:e0:95:b4:50:
03:a9:b8:da:04:52:63:8e:d2:ec:49:40:39:8b:2b:
bc:e2:d1:a3:dc:7c:89:d5:f1:5e:b0:c5:35:94:c5:
0a:fc:1c:55:21:9b:6e:5c:f9:d0:dd:8c:7f:5f:3d:
25:60:b6:dd:af:16:68:69:13:3a:3c:7c:e3:77:71:
4b:18:45:1a:99:4a:6e:ea:cb:d0:ab:98:3a:b0:f3:
75:d2:5d:16:f7:b6:02:db:8b:20:6e:2c:fb:d8:1c:
14:d3:d6:b7:c2:8d:c2:44:40:3b:95:6e:07:6a:98:
c8:5e:60:00:9a:40:84:88:a2:11:58:1d:42:15:8a:
59:14:ad:20:1e:3b:f3:c5:a2:be:e4:c5:d3:cf:6f:
1e:8c:35:de:e5:cf:88:a8:b6:02:a3:d4:c9:eb:67:
2d:fe:1f:66:5b:dd:df:96:d4:e9:83:d8:b2:b9:26:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6A:58:D4:7D:7D:67:DA:28:BA:56:2F:E5:F3:90:75:97:67:03:D1
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d7:2c:99:f8:c0:33:31:97:de:7f:c0:9b:b1:b8:39:2f:53:
ba:43:f3:30:e9:c2:78:c7:d4:36:42:9e:79:a6:5b:71:6d:67:
6e:02:3f:a7:4d:5b:d2:44:28:1f:76:f2:9f:bd:4f:a8:cc:1d:
06:cf:ae:f4:31:c0:6e:88:c5:77:cb:49:fb:33:e7:1f:40:df:
ef:0a:7f:eb:71:12:21:3f:4f:44:12:46:40:d3:ff:d7:9c:7c:
c5:18:f6:ea:38:37:a3:ac:82:ec:fb:48:ca:26:7f:7a:2c:d1:
82:56:8d:b0:4f:76:02:f9:49:43:16:ce:95:f9:59:9e:fc:a0:
01:71:2b:2b:a9:b0:74:be:fd:48:af:46:7d:d6:39:94:f1:19:
e3:94:f1:8c:b5:50:2f:ac:93:f3:55:b6:f3:35:79:9e:04:f4:
21:3c:82:93:0f:fa:1d:e8:79:96:b5:81:8a:e5:e7:9e:a7:8a:
9c:b7:39:20:e5:89:43:7a:5d:60:98:1f:04:4f:aa:a2:99:88:
06:b5:78:50:40:39:b5:f0:1e:ea:07:44:03:23:6c:67:0d:57:
06:57:ed:87:92:1b:a4:df:14:d7:cb:f9:00:3d:1b:d9:5e:8a:
a7:d8:a2:7c:d5:dc:a6:4f:bc:fd:ff:f7:bc:5b:47:57:43:6c:
26:c9:49:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ltITEfc0YY8N4J4mpywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MWU2Nzk5YmM1Y2EyODVhMzc2MzcyZjBiNjM0NWRmZmM4
N2I4YzAwHhcNMjUwNjI4MTkwMTE4WhcNMjUwNjI5MTkwMTE4WjAzMTEwLwYDVQQD
Eyg1NzZhNThkNDdkN2Q2N2RhMjhiYTU2MmZlNWYzOTA3NTk3NjcwM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCUMCN6WeFxC214LUAPxd938Xqva
fAchb4mk9Bo/z+QnCf1aVf+qDuhJNF8Qa7Fm5pz97VF1DxfRNVW4QN3yOMmSv5Qu
7esl6Ra5lU51KH6YjMDAuOCVtFADqbjaBFJjjtLsSUA5iyu84tGj3HyJ1fFesMU1
lMUK/BxVIZtuXPnQ3Yx/Xz0lYLbdrxZoaRM6PHzjd3FLGEUamUpu6svQq5g6sPN1
0l0W97YC24sgbiz72BwU09a3wo3CREA7lW4HapjIXmAAmkCEiKIRWB1CFYpZFK0g
HjvzxaK+5MXTz28ejDXe5c+IqLYCo9TJ62ct/h9mW93fltTpg9iyuSaHHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdqWNR9fWfaKLpWL+XzkHWXZwPRMB8GA1UdIwQY
MBaAFNUeZ5m8XKKFo3Y3LwtjRd/8h7jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEt
OWNhMjUxYzA1NDhiLzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEtOWNhMjUxYzA1NDhi
LzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwtcsmfjA
MzGX3n/Am7G4OS9TukPzMOnCeMfUNkKeeaZbcW1nbgI/p01b0kQoH3byn71PqMwd
Bs+u9DHAbojFd8tJ+zPnH0Df7wp/63ESIT9PRBJGQNP/15x8xRj26jg3o6yC7PtI
yiZ/eizRglaNsE92AvlJQxbOlflZnvygAXErK6mwdL79SK9GfdY5lPEZ45TxjLVQ
L6yT81W28zV5ngT0ITyCkw/6Heh5lrWBiuXnnqeKnLc5IOWJQ3pdYJgfBE+qopmI
BrV4UEA5tfAe6gdEAyNsZw1XBlfth5IbpN8U18v5AD0b2V6Kp9iifNXcpk+8/f/3
vFtHV0NsJslJuA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:20 2025 by rpki-client