Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File: d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier: PlXRY+cmOXUoVwccYIkU9J7XVB1YvTerKUz00UeI3cg=
Subject key identifier: 74:86:5F:BD:F2:F7:A2:D6:2F:4A:36:B1:07:BE:2F:61:19:DE:FC:08
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer: /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial: 01976EBDFD952E9D2BFC25DD0E351DCD82C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 14:00:34 +0000
Manifest this update: Sat 14 Jun 2025 14:00:34 +0000
Manifest next update: Sun 15 Jun 2025 14:00:34 +0000
Files and hashes: 1: 1-1kKr9VJ8bw_SUqQcMUBecH1TKg.roa (hash: 3o6hb5np+9u5Gu9cp0jYxsJnhLz7Y1oIDpNf2dIi2oE=)
2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: cZR+DrmA9+x1mnQ4JdcOrAZLxZWXf6Sd6XYnjFAxZOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:fd:95:2e:9d:2b:fc:25:dd:0e:35:1d:cd:82:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
Validity
Not Before: Jun 14 14:00:34 2025 GMT
Not After : Jun 15 14:00:34 2025 GMT
Subject: CN=74865fbdf2f7a2d62f4a36b107be2f6119defc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:c9:2e:6e:cd:df:54:3f:61:34:a5:31:62:
e0:c3:5c:ba:b5:7e:48:cb:30:fb:9f:ab:3e:b9:8e:
fa:c8:88:82:9c:2f:14:74:e9:72:28:d6:90:83:6b:
1d:0d:6e:af:da:78:bc:48:cb:6b:fa:09:45:1c:32:
8c:4e:ed:a0:89:4f:ef:bb:17:35:6f:d1:5d:f8:ce:
4a:6b:3f:72:92:c2:b2:45:63:0e:62:0b:6c:14:66:
ed:21:9d:5d:65:f2:a7:bc:e8:12:c6:c3:44:0e:fe:
4b:61:9a:00:76:38:f5:7b:55:58:15:83:b2:38:5a:
89:8d:f8:a3:09:0c:25:17:76:ea:cd:92:f5:f3:9c:
19:53:91:8d:3a:71:46:52:c2:a5:47:fe:ca:2e:64:
3c:c4:d7:e7:08:33:b3:ef:ea:bc:3e:99:e9:7a:3a:
02:1c:44:7b:6f:6d:98:c3:ec:c1:24:8b:d4:1f:73:
ca:93:8b:d4:da:74:49:e9:8b:cf:eb:c9:01:81:10:
9a:d4:b6:f4:c4:bd:dd:09:37:0a:56:53:c0:77:60:
b2:05:71:a7:ff:2d:2e:e3:ca:be:1d:d1:27:34:68:
07:93:86:74:ef:6c:4f:d8:51:05:a3:6b:51:22:cf:
43:c9:58:7d:a5:89:5e:53:c9:67:f3:2c:2f:6e:59:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:86:5F:BD:F2:F7:A2:D6:2F:4A:36:B1:07:BE:2F:61:19:DE:FC:08
X509v3 Authority Key Identifier:
keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c1:25:ef:8b:c5:09:9d:bf:07:8f:f2:ca:c3:1c:83:a4:80:
42:7e:8c:77:7e:2c:f8:58:62:d5:49:3d:44:1a:f4:4a:23:e0:
95:39:f3:88:a8:01:73:32:26:70:4e:47:85:13:64:07:cf:11:
1c:82:d0:e4:0b:be:08:5f:a6:18:39:d6:64:c2:ce:0b:1b:e1:
e9:1c:74:61:d9:4e:32:b4:65:1c:20:20:05:63:4b:9a:2b:f6:
de:57:95:70:af:22:3c:c9:74:ac:0b:37:cb:8b:57:85:79:9f:
f9:98:13:8e:7d:db:ef:f9:87:55:9d:fb:3e:25:9b:31:8a:54:
88:7d:33:3b:b9:20:78:fb:d3:f4:85:7e:8d:12:08:65:be:35:
49:bf:b8:19:a7:a3:ca:2a:03:4f:dd:d9:d7:f5:22:47:dd:d9:
61:f5:71:22:64:fa:ef:92:41:dd:d0:71:35:98:27:e4:1a:c9:
86:bc:6d:ae:61:93:ed:50:3d:ff:0e:1a:a6:4a:ad:24:b2:c5:
35:ef:07:ff:0c:c5:81:bd:55:fa:fa:96:d7:94:86:7b:67:91:
f9:ff:87:a5:3d:9c:56:89:ce:25:cc:77:85:eb:b2:5a:a6:f7:
d4:ce:33:a2:39:af:7a:bc:80:03:d3:40:d2:89:33:76:b6:ca:
5c:bd:76:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvf2VLp0r/CXdDjUdzYLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmM5MWY3OGEzMzUwYmFjYmJmYmUzNzZmODgxMzIxMmQx
NDk5MzEwHhcNMjUwNjE0MTQwMDM0WhcNMjUwNjE1MTQwMDM0WjAzMTEwLwYDVQQD
Eyg3NDg2NWZiZGYyZjdhMmQ2MmY0YTM2YjEwN2JlMmY2MTE5ZGVmYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcHJLm7N31Q/YTSlMWLgw1y6tX5I
yzD7n6s+uY76yIiCnC8UdOlyKNaQg2sdDW6v2ni8SMtr+glFHDKMTu2giU/vuxc1
b9Fd+M5Kaz9yksKyRWMOYgtsFGbtIZ1dZfKnvOgSxsNEDv5LYZoAdjj1e1VYFYOy
OFqJjfijCQwlF3bqzZL185wZU5GNOnFGUsKlR/7KLmQ8xNfnCDOz7+q8PpnpejoC
HER7b22Yw+zBJIvUH3PKk4vU2nRJ6YvP68kBgRCa1Lb0xL3dCTcKVlPAd2CyBXGn
/y0u48q+HdEnNGgHk4Z072xP2FEFo2tRIs9DyVh9pYleU8ln8ywvbln+swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSGX73y96LWL0o2sQe+L2EZ3vwIMB8GA1UdIwQY
MBaAFHe8kfeKM1C6y7++N2+IEyEtFJkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mOTJiOWYtNDc1OC00NDI4LWEyMmMt
OWRiNTdjM2ZlNDFkLzEvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mOTJiOWYtNDc1OC00NDI4LWEyMmMtOWRiNTdjM2ZlNDFk
LzEvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcEl74vF
CZ2/B4/yysMcg6SAQn6Md34s+Fhi1Uk9RBr0SiPglTnziKgBczImcE5HhRNkB88R
HILQ5Au+CF+mGDnWZMLOCxvh6Rx0YdlOMrRlHCAgBWNLmiv23leVcK8iPMl0rAs3
y4tXhXmf+ZgTjn3b7/mHVZ37PiWbMYpUiH0zO7kgePvT9IV+jRIIZb41Sb+4Gaej
yioDT93Z1/UiR93ZYfVxImT675JB3dBxNZgn5BrJhrxtrmGT7VA9/w4apkqtJLLF
Ne8H/wzFgb1V+vqW15SGe2eR+f+HpT2cVonOJcx3heuyWqb31M4zojmveryAA9NA
0okzdrbKXL12zA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:19 2025 by rpki-client