Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: ZKpugxKxreylHGDbk87q7dECR4Qy00sXlzEoYSe65uc=
Subject key identifier: DC:C3:C3:5C:B2:21:CD:BA:BE:E5:30:56:DE:AC:39:F7:6A:F8:41:E1
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 0197B7EA46EAEF86DF759FAFDEEF8BFEBB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 19:01:13 +0000
Manifest this update: Sat 28 Jun 2025 19:01:13 +0000
Manifest next update: Sun 29 Jun 2025 19:01:13 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: QA0kinUFYgIF3/3uzside5wxQN8iz8FnACuMMasR+Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:46:ea:ef:86:df:75:9f:af:de:ef:8b:fe:bb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Jun 28 19:01:13 2025 GMT
Not After : Jun 29 19:01:13 2025 GMT
Subject: CN=dcc3c35cb221cdbabee53056deac39f76af841e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:7f:da:90:5e:98:b5:30:66:51:70:64:72:
6e:03:45:79:e1:d4:5a:e0:ab:b8:52:ee:bc:c2:e5:
0d:f0:10:d5:d3:43:26:f9:48:97:8a:6e:6a:b4:02:
ac:7c:31:21:d5:8e:76:dd:0c:2a:c0:89:e7:a6:56:
5a:ad:69:45:c7:36:85:6b:e4:2c:7e:b1:52:b4:59:
d3:ad:d0:86:f8:8c:a7:43:0b:32:36:d9:9f:c4:76:
6d:78:2b:20:6d:db:44:54:b1:91:41:46:a8:cb:a4:
49:0e:28:61:14:cc:ab:5f:d4:6f:49:31:7c:21:f9:
f9:85:f4:2a:ce:3e:b8:1f:51:a7:80:6c:ef:7b:90:
46:96:0e:35:09:f2:43:1f:04:b6:30:d5:db:c0:3a:
38:bd:65:4f:a1:d4:31:f7:5b:9a:91:4c:51:0c:5c:
d9:68:66:bf:6e:60:74:8f:f7:0e:2a:6a:e5:e3:f7:
57:fd:8d:8a:4a:c2:ad:af:b3:00:42:bf:6b:b1:d8:
31:fd:be:8a:1a:85:40:c4:9d:f9:fd:df:a8:42:0e:
96:3c:b1:e7:eb:3d:8a:9d:27:76:00:0b:53:55:2f:
69:54:83:8a:76:05:48:2a:bd:e0:e6:61:bf:dd:d9:
eb:bb:82:1b:de:31:23:48:84:5e:34:77:bd:71:b6:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:C3:5C:B2:21:CD:BA:BE:E5:30:56:DE:AC:39:F7:6A:F8:41:E1
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:04:ba:25:7b:3c:de:0f:66:1c:3c:e7:5d:53:ef:df:42:e2:
99:f2:d2:11:ef:3c:14:fa:ff:2a:a7:30:5d:9a:8e:4d:aa:9f:
bb:72:aa:64:da:0a:66:14:7d:2d:23:3e:c7:9d:e8:f6:cf:89:
79:2c:64:19:d6:ac:86:5e:d7:cc:56:c0:ed:72:ff:01:1f:3e:
32:31:fc:45:e8:fb:6d:01:c2:13:0a:65:62:78:6c:1e:05:28:
8c:dd:62:f0:c8:8f:65:cf:35:c9:ff:6b:85:da:bb:8c:44:da:
8e:73:1f:76:15:35:a2:b2:67:ea:49:3a:81:01:81:bf:09:65:
69:ec:e9:b4:ef:24:f4:45:a0:2f:d6:fb:c0:8d:5b:bb:b0:38:
4c:84:87:8e:21:de:04:b7:52:2f:b0:fa:69:9b:c2:0b:97:98:
c6:7d:a3:78:1a:78:e2:61:fb:cf:34:48:84:e4:28:67:fd:85:
d8:fc:cb:2d:5b:17:57:ec:66:de:5a:4b:6d:e0:66:22:b9:4d:
25:38:ed:5f:76:0a:a2:25:ad:61:36:c9:7d:e7:ab:ce:12:ec:
b4:09:2b:be:90:b5:39:17:4c:c4:e4:a2:06:52:9d:e3:ed:cd:
fc:1d:53:01:a8:5c:97:4a:0c:1e:b8:4e:75:88:77:f2:22:c5:
6b:69:d7:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36kbq74bfdZ+v3u+L/rshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTVkNTI0NzFlYTg3NDg5ZDQ4YTA2MjA4NDdhNmQ1NTZm
MTYzZGIwHhcNMjUwNjI4MTkwMTEzWhcNMjUwNjI5MTkwMTEzWjAzMTEwLwYDVQQD
EyhkY2MzYzM1Y2IyMjFjZGJhYmVlNTMwNTZkZWFjMzlmNzZhZjg0MWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9V/2pBemLUwZlFwZHJuA0V54dRa
4Ku4Uu68wuUN8BDV00Mm+UiXim5qtAKsfDEh1Y523QwqwInnplZarWlFxzaFa+Qs
frFStFnTrdCG+IynQwsyNtmfxHZteCsgbdtEVLGRQUaoy6RJDihhFMyrX9RvSTF8
Ifn5hfQqzj64H1GngGzve5BGlg41CfJDHwS2MNXbwDo4vWVPodQx91uakUxRDFzZ
aGa/bmB0j/cOKmrl4/dX/Y2KSsKtr7MAQr9rsdgx/b6KGoVAxJ35/d+oQg6WPLHn
6z2KnSd2AAtTVS9pVIOKdgVIKr3g5mG/3dnru4Ib3jEjSIReNHe9cbZRxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzDw1yyIc26vuUwVt6sOfdq+EHhMB8GA1UdIwQY
MBaAFNTl1SRx6odInUigYghHptVW8WPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kODA4ZDgtMDNlZC00NGM0LTliMWMt
MDE4MmNiMDJjODAwLzEvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kODA4ZDgtMDNlZC00NGM0LTliMWMtMDE4MmNiMDJjODAw
LzEvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwS6JXs8
3g9mHDznXVPv30LimfLSEe88FPr/KqcwXZqOTaqfu3KqZNoKZhR9LSM+x53o9s+J
eSxkGdashl7XzFbA7XL/AR8+MjH8Rej7bQHCEwplYnhsHgUojN1i8MiPZc81yf9r
hdq7jETajnMfdhU1orJn6kk6gQGBvwllaezptO8k9EWgL9b7wI1bu7A4TISHjiHe
BLdSL7D6aZvCC5eYxn2jeBp44mH7zzRIhOQoZ/2F2PzLLVsXV+xm3lpLbeBmIrlN
JTjtX3YKoiWtYTbJfeerzhLstAkrvpC1ORdMxOSiBlKd4+3N/B1TAahcl0oMHrhO
dYh38iLFa2nX3A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:20 2025 by rpki-client