Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: gsIa3WZsqozV4gu3YywIVwcpeKXOD3qISFnLnMS1faA=
Subject key identifier: 7D:20:CE:D9:F4:0C:64:C5:DD:1F:DD:87:9C:4E:A0:DC:7E:A4:54:F7
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 0197B745221E8617078F5275D8D85976F7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 053C
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: yPMVB7/wvP/doyr+tEteYYAaD8ehPiCIPF+AZKOLytU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:22:1e:86:17:07:8f:52:75:d8:d8:59:76:f7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=7d20ced9f40c64c5dd1fdd879c4ea0dc7ea454f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:b4:a3:07:de:bc:1f:c1:06:af:8d:95:cb:
77:81:d5:41:d1:fa:b5:3d:05:eb:25:9e:94:32:e8:
76:13:e0:05:f9:64:eb:76:85:26:48:95:f1:39:fd:
d8:70:5e:47:09:fb:ff:b6:cf:13:a8:09:20:8e:61:
f0:d9:bb:67:17:c9:8d:85:65:ce:52:ea:57:7e:1f:
b7:e8:28:4c:5a:e9:c0:55:81:d7:c2:61:91:20:a0:
4a:a8:f4:b7:b5:66:df:4b:cd:2e:51:b4:4a:44:78:
14:54:3b:d2:0b:c4:4a:9d:15:8f:a8:19:98:ae:e5:
b7:b8:db:7f:ad:fa:ce:4e:8d:87:ef:b2:97:67:7a:
24:16:72:7a:07:94:18:ec:c5:4e:9b:c0:2a:a9:00:
c2:d7:f0:47:37:78:d3:14:26:ae:1a:80:97:ee:94:
5a:7d:8a:c1:31:2e:92:54:33:01:a9:7a:7a:85:5a:
bc:ad:24:ca:71:51:6a:e7:2f:17:69:34:f1:4a:e0:
24:22:eb:8a:57:7d:82:14:7b:fa:62:a9:f3:51:6c:
39:54:ae:49:91:50:9e:d1:e2:51:4e:42:1c:74:be:
d5:06:29:b6:63:3d:67:f2:26:64:09:49:1b:67:d0:
e0:7d:aa:4d:bd:5d:8b:df:2b:45:d3:6d:57:f2:58:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:CE:D9:F4:0C:64:C5:DD:1F:DD:87:9C:4E:A0:DC:7E:A4:54:F7
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:3a:f5:00:5a:cc:6e:d3:73:b8:c1:0d:d9:38:57:ed:b2:fa:
0e:a9:82:ef:5f:38:cf:49:38:8a:40:09:e8:e9:c3:23:5d:23:
4e:df:8c:6f:ea:40:cc:7c:15:aa:97:ce:04:d2:9b:8e:49:8b:
ea:15:0d:6e:1a:1f:a5:11:0f:34:58:43:e4:c2:e1:35:49:9a:
00:55:de:81:c2:7a:7f:82:4b:d2:bf:40:c8:29:8c:34:83:7a:
15:87:12:7d:b3:18:6d:55:50:ea:e8:89:b1:7a:ad:73:c4:10:
0d:ee:fc:28:cf:28:74:70:2c:37:f7:26:1b:17:e9:b4:c1:8c:
96:eb:cd:92:24:6d:57:ac:71:db:a8:67:53:95:ca:ac:4a:e7:
b3:31:a8:20:12:ba:81:b8:81:bf:66:be:eb:04:f7:a5:ba:1a:
43:ff:0f:a5:7e:d6:e3:52:73:2d:72:0b:93:3d:05:f4:1e:d1:
11:6e:d2:2e:90:92:27:6f:4f:10:b3:5e:da:9a:38:ad:1a:0c:
66:5d:99:d1:8c:b3:4f:5d:5a:a9:29:38:3b:1c:7f:06:14:aa:
7f:06:86:17:91:d2:b5:44:b7:01:e2:e0:15:78:fe:c5:d8:5c:
91:02:e1:5f:06:8f:92:9a:46:b7:0e:d2:77:41:b9:86:c2:a6:
85:32:7c:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSIehhcHj1J12NhZdvfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODc2NDE0ZGM5OTVkMTRlZGUzYTAxYTMyM2I2MmI5MDZm
ODNjNTcwHhcNMjUwNjI4MTYwMDUwWhcNMjUwNjI5MTYwMDUwWjAzMTEwLwYDVQQD
Eyg3ZDIwY2VkOWY0MGM2NGM1ZGQxZmRkODc5YzRlYTBkYzdlYTQ1NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TS0owfevB/BBq+Nlct3gdVB0fq1
PQXrJZ6UMuh2E+AF+WTrdoUmSJXxOf3YcF5HCfv/ts8TqAkgjmHw2btnF8mNhWXO
UupXfh+36ChMWunAVYHXwmGRIKBKqPS3tWbfS80uUbRKRHgUVDvSC8RKnRWPqBmY
ruW3uNt/rfrOTo2H77KXZ3okFnJ6B5QY7MVOm8AqqQDC1/BHN3jTFCauGoCX7pRa
fYrBMS6SVDMBqXp6hVq8rSTKcVFq5y8XaTTxSuAkIuuKV32CFHv6YqnzUWw5VK5J
kVCe0eJRTkIcdL7VBim2Yz1n8iZkCUkbZ9DgfapNvV2L3ytF021X8lh2UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0gztn0DGTF3R/dh5xOoNx+pFT3MB8GA1UdIwQY
MBaAFNSHZBTcmV0U7eOgGjI7YrkG+DxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYt
MTAyYzRiYThjYzRiLzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYtMTAyYzRiYThjYzRi
LzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzTr1AFrM
btNzuMEN2ThX7bL6DqmC7184z0k4ikAJ6OnDI10jTt+Mb+pAzHwVqpfOBNKbjkmL
6hUNbhofpREPNFhD5MLhNUmaAFXegcJ6f4JL0r9AyCmMNIN6FYcSfbMYbVVQ6uiJ
sXqtc8QQDe78KM8odHAsN/cmGxfptMGMluvNkiRtV6xx26hnU5XKrErnszGoIBK6
gbiBv2a+6wT3pboaQ/8PpX7W41JzLXILkz0F9B7REW7SLpCSJ29PELNe2po4rRoM
Zl2Z0YyzT11aqSk4Oxx/BhSqfwaGF5HStUS3AeLgFXj+xdhckQLhXwaPkppGtw7S
d0G5hsKmhTJ8jQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:03 2025 by rpki-client