Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: XvlguOPW8uykEGs2FFOx8b5wrkg1lcyYjK0jHVWG598=
Subject key identifier: 5D:16:23:15:D3:63:EB:09:FC:F9:28:92:25:02:13:40:56:F6:71:C0
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 0197B7452A4F7A120B12276B68E9E346384B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 0FAF
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: 5xLpVRsm0oYSbDCqttt1rvFv+k1LL9UeB77deSuOcJ8=)
2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=)
3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2a:4f:7a:12:0b:12:27:6b:68:e9:e3:46:38:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=5d162315d363eb09fcf928922502134056f671c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:6a:f6:a6:e8:b7:cc:02:f1:dd:9f:67:72:
78:c2:f7:87:52:6f:ed:05:36:b9:50:d6:a4:bf:b1:
db:8b:71:2f:fb:d6:6c:e1:e5:62:06:d8:ab:d3:8a:
a0:95:83:a7:58:e5:ae:13:34:5a:14:5d:f0:a1:54:
9a:c1:14:be:5d:fc:b5:22:10:5b:eb:e4:ed:ab:87:
a8:a6:0e:aa:23:cb:33:e0:aa:10:f5:8f:d0:7a:58:
2d:71:bf:a2:c7:96:65:30:11:63:ad:06:30:fd:31:
33:b7:a2:d0:72:1d:10:97:92:45:cd:ab:8e:75:10:
e0:92:9b:17:f2:ee:2d:56:f9:4e:a9:63:42:b9:24:
c9:58:1f:86:fb:93:92:91:44:15:67:08:2c:a8:53:
9d:f2:31:6e:98:d6:b2:4c:c0:26:36:9d:67:b5:97:
f8:9d:9e:41:6a:0b:4a:f5:14:7b:d0:8a:7e:2a:d8:
07:b9:41:30:c0:86:af:70:8d:ce:74:60:1b:87:8a:
27:f7:4b:c3:34:d3:fd:30:bd:75:13:34:63:3b:5f:
92:71:85:c5:2c:a1:4e:34:4d:51:3e:aa:f4:54:65:
a7:bd:db:46:65:bb:43:ec:f8:49:86:22:b6:59:0a:
48:f1:2d:41:1f:1b:15:51:1a:82:94:da:17:5c:1f:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:16:23:15:D3:63:EB:09:FC:F9:28:92:25:02:13:40:56:F6:71:C0
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:27:4f:7a:64:4b:9d:b0:84:df:8c:73:c5:e7:77:ca:02:97:
49:19:5d:01:4c:28:8b:eb:b1:ea:8a:01:d8:aa:80:73:79:0f:
68:cc:16:02:13:32:85:71:6c:b1:1c:de:73:86:c7:88:bd:69:
e8:9d:3b:90:b5:84:4d:d9:c9:be:1e:26:f5:d9:22:5b:17:b2:
58:1d:ff:00:a7:2f:dc:41:7b:a6:08:64:fa:44:98:d8:f1:b0:
3b:c3:ac:21:37:24:85:f9:24:c0:7f:dc:5d:f5:c7:71:a9:6f:
bd:62:aa:72:c4:ba:e5:8d:46:76:3b:64:03:a2:30:fb:c2:f7:
90:3d:7c:eb:e0:27:01:93:36:f4:d0:be:03:36:a5:f4:85:d1:
e1:3a:e4:69:b1:03:0e:17:f4:80:d8:c9:23:a8:14:39:3c:2e:
a4:bd:f2:ea:dd:b7:c0:42:e0:17:c8:f5:a2:1c:8f:92:ce:29:
ed:c2:09:f5:ab:5f:cf:a1:91:41:eb:ca:76:54:87:0d:d7:73:
c0:2f:d0:1a:b9:e3:64:b5:59:96:a1:6c:1d:38:27:d0:4e:3e:
4f:4b:28:e8:70:3d:ce:ce:5c:b8:cc:e0:1f:cd:8b:fa:01:7b:
aa:c4:33:33:62:b9:ae:99:57:db:34:b0:3e:c7:35:86:f1:d5:
82:3d:c4:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSpPehILEidraOnjRjhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Mzc4MjRlMGZmYTc5ZjE4YjlmYzQ5ZDZjYjBkZDgxYzlh
NmNhMjgwHhcNMjUwNjI4MTYwMDUyWhcNMjUwNjI5MTYwMDUyWjAzMTEwLwYDVQQD
Eyg1ZDE2MjMxNWQzNjNlYjA5ZmNmOTI4OTIyNTAyMTM0MDU2ZjY3MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Nq9qbot8wC8d2fZ3J4wveHUm/t
BTa5UNakv7Hbi3Ev+9Zs4eViBtir04qglYOnWOWuEzRaFF3woVSawRS+Xfy1IhBb
6+Ttq4eopg6qI8sz4KoQ9Y/Qelgtcb+ix5ZlMBFjrQYw/TEzt6LQch0Ql5JFzauO
dRDgkpsX8u4tVvlOqWNCuSTJWB+G+5OSkUQVZwgsqFOd8jFumNayTMAmNp1ntZf4
nZ5BagtK9RR70Ip+KtgHuUEwwIavcI3OdGAbh4on90vDNNP9ML11EzRjO1+ScYXF
LKFONE1RPqr0VGWnvdtGZbtD7PhJhiK2WQpI8S1BHxsVURqClNoXXB+QnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0WIxXTY+sJ/PkokiUCE0BW9nHAMB8GA1UdIwQY
MBaAFNc3gk4P+nnxi5/EnWyw3YHJpsooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUt
YjY4ZjVkOGY2NTFhLzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUtYjY4ZjVkOGY2NTFh
LzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARydPemRL
nbCE34xzxed3ygKXSRldAUwoi+ux6ooB2KqAc3kPaMwWAhMyhXFssRzec4bHiL1p
6J07kLWETdnJvh4m9dkiWxeyWB3/AKcv3EF7pghk+kSY2PGwO8OsITckhfkkwH/c
XfXHcalvvWKqcsS65Y1GdjtkA6Iw+8L3kD186+AnAZM29NC+Azal9IXR4TrkabED
Dhf0gNjJI6gUOTwupL3y6t23wELgF8j1ohyPks4p7cIJ9atfz6GRQevKdlSHDddz
wC/QGrnjZLVZlqFsHTgn0E4+T0so6HA9zs5cuMzgH82L+gF7qsQzM2K5rplX2zSw
Psc1hvHVgj3EEw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:48 2025 by rpki-client