Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: vFeAXdqAUIt3aI8jlqu4ybR0Tz4AqchkyqQjlG9CD3w=
Subject key identifier: D2:72:79:5C:F1:3E:7A:8B:96:4B:79:12:7B:EF:B5:F2:75:C0:C0:BE
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 0197B7B303FEA11A4251178399AAF41B4604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: JlnQ/CaFb1LKpg0kfeiU3JpR3jybzdw4Usr7fwoKqf8=)
2: dO1sDlUm4GNT1NLwZmfUYJ1pPqA.roa (hash: JWs3QU5N8u442ANJ16//ujHqSWgzP2/558mG+17RvNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:03:fe:a1:1a:42:51:17:83:99:aa:f4:1b:46:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=d272795cf13e7a8b964b79127befb5f275c0c0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:d7:31:e3:83:3d:af:77:4b:d5:1d:4d:5b:
2a:ac:21:af:e0:1f:35:9d:12:e3:6c:2a:ce:66:a1:
1b:10:05:11:e9:41:92:73:c6:eb:ba:ef:d5:eb:0e:
cb:96:b1:f8:b8:30:00:ae:06:43:d3:21:51:cb:5d:
55:e5:c8:6a:99:81:79:e6:da:9d:48:eb:c5:a3:b0:
bb:14:e8:83:f0:7f:c3:d1:2e:56:0b:4a:2d:ab:7b:
04:fd:d7:16:a5:4e:70:7e:63:6e:55:09:25:25:fe:
03:20:d1:a3:70:90:fb:0c:f9:94:85:2b:ce:52:20:
2e:1c:a1:a9:f7:67:44:38:cd:9a:a7:4b:fc:29:a1:
99:f9:33:a6:16:19:d5:7e:c9:b7:23:5d:8b:57:6b:
ef:84:b9:24:99:30:5c:38:db:ae:e3:3c:32:6d:00:
e6:59:c9:5c:4b:3f:9d:91:f6:90:3a:b8:c3:a2:64:
e9:2e:13:10:b6:ca:0c:aa:bc:f0:65:8a:75:79:68:
cf:e2:34:35:a5:ce:fe:6f:f5:00:bd:78:c5:57:ea:
ba:7c:32:9d:c6:9d:c3:ba:9c:33:a1:b5:20:c0:1d:
b3:01:64:44:5a:7b:d2:b5:3f:db:87:cf:76:53:c3:
5f:eb:9a:76:4a:8c:6b:d8:c6:d2:c9:60:16:d8:66:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:72:79:5C:F1:3E:7A:8B:96:4B:79:12:7B:EF:B5:F2:75:C0:C0:BE
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f9:75:38:79:fa:1a:49:47:bd:34:ba:45:cb:23:3b:c9:11:
9c:df:b1:5d:36:99:66:fd:f3:c7:28:25:e5:69:48:98:9f:f2:
0f:ba:d9:b1:a4:ce:3b:64:ea:4c:e2:0a:01:1a:b1:fd:28:42:
78:69:54:8e:5f:8d:3b:88:76:71:81:d0:ec:5f:84:fd:81:c4:
f9:9c:90:2b:4c:12:8e:f7:ba:f3:fc:e8:09:7e:05:77:e1:5f:
69:c1:14:b4:00:b1:a0:60:fc:1e:6e:ec:cf:3a:2d:51:be:64:
e4:5d:f3:d8:ea:1b:a6:de:b6:8b:2c:56:3e:15:ca:b4:8e:5a:
81:ef:b3:38:cf:0b:bb:4b:55:80:f9:b5:1f:4c:3b:f0:7e:1b:
5e:79:1b:98:0a:e5:0e:fd:70:50:2a:93:f2:a4:ad:ba:0d:e8:
71:42:22:59:dd:b0:9a:26:b7:30:0b:0b:45:a1:a5:0d:77:70:
aa:56:e5:c9:d7:56:cb:e7:9c:fd:5b:6e:11:7f:bb:33:6a:7b:
60:34:e2:e4:f5:3d:67:39:47:03:1b:69:7a:b8:ec:69:2b:2c:
c0:e1:4c:e9:87:ba:e5:51:e1:de:af:cd:48:71:39:ac:cc:7d:
24:23:b8:06:94:1b:95:4f:6d:d5:26:81:e3:9d:e2:73:e1:42:
81:ad:2f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swP+oRpCUReDmar0G0YEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MjIzNjc0MzM3NjViNTQxYTM3MzkwYTk5ODk5N2I3Mzdj
NDY0NzIwHhcNMjUwNjI4MTgwMDUxWhcNMjUwNjI5MTgwMDUxWjAzMTEwLwYDVQQD
EyhkMjcyNzk1Y2YxM2U3YThiOTY0Yjc5MTI3YmVmYjVmMjc1YzBjMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAvXMeODPa93S9UdTVsqrCGv4B81
nRLjbCrOZqEbEAUR6UGSc8bruu/V6w7LlrH4uDAArgZD0yFRy11V5chqmYF55tqd
SOvFo7C7FOiD8H/D0S5WC0otq3sE/dcWpU5wfmNuVQklJf4DINGjcJD7DPmUhSvO
UiAuHKGp92dEOM2ap0v8KaGZ+TOmFhnVfsm3I12LV2vvhLkkmTBcONuu4zwybQDm
WclcSz+dkfaQOrjDomTpLhMQtsoMqrzwZYp1eWjP4jQ1pc7+b/UAvXjFV+q6fDKd
xp3DupwzobUgwB2zAWREWnvStT/bh892U8Nf65p2Soxr2MbSyWAW2GYyZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJyeVzxPnqLlkt5EnvvtfJ1wMC+MB8GA1UdIwQY
MBaAFNQiNnQzdltUGjc5CpmJl7c3xGRyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUNJMmRETjJXMVFhTnprS21ZbVh0emZFWkhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80NWJlMzItODIxZi00NTE0LWFhMzEt
YmM3NTQ2NjA0N2M5LzEvMUNJMmRETjJXMVFhTnprS21ZbVh0emZFWkhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy80NWJlMzItODIxZi00NTE0LWFhMzEtYmM3NTQ2NjA0N2M5
LzEvMUNJMmRETjJXMVFhTnprS21ZbVh0emZFWkhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPl1OHn6
GklHvTS6RcsjO8kRnN+xXTaZZv3zxygl5WlImJ/yD7rZsaTOO2TqTOIKARqx/ShC
eGlUjl+NO4h2cYHQ7F+E/YHE+ZyQK0wSjve68/zoCX4Fd+FfacEUtACxoGD8Hm7s
zzotUb5k5F3z2Oobpt62iyxWPhXKtI5age+zOM8Lu0tVgPm1H0w78H4bXnkbmArl
Dv1wUCqT8qStug3ocUIiWd2wmia3MAsLRaGlDXdwqlblyddWy+ec/VtuEX+7M2p7
YDTi5PU9ZzlHAxtperjsaSsswOFM6Ye65VHh3q/NSHE5rMx9JCO4BpQblU9t1SaB
453ic+FCga0vaA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:26 2025 by rpki-client