Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: +OHH11AQNiA3Zeu35CKxVj6343FOkaz+4fp2IpFVDEU=
Subject key identifier: 6B:BD:73:8B:F8:03:EE:B1:D2:6C:F0:7C:BD:DD:0A:A3:1B:86:F2:69
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 01977F7AFE872693FDFE6937BF6B043F9B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 0FB8
Signing time: Tue 17 Jun 2025 20:00:56 +0000
Manifest this update: Tue 17 Jun 2025 20:00:56 +0000
Manifest next update: Wed 18 Jun 2025 20:00:56 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: HoYNiYQSr3veys8ZxyKnxqmZNviTd+fsVy+x0O8kuOo=)
2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=)
3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:7a:fe:87:26:93:fd:fe:69:37:bf:6b:04:3f:9b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Jun 17 20:00:56 2025 GMT
Not After : Jun 18 20:00:56 2025 GMT
Subject: CN=6bbd738bf803eeb1d26cf07cbddd0aa31b86f269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:a1:4e:e6:fa:73:3a:d1:22:92:a3:49:55:
77:be:c8:e1:e4:2d:f6:66:52:0c:ca:ed:d3:c2:6b:
18:88:ba:00:42:08:86:ac:e9:25:9f:d5:07:f8:45:
bf:33:db:4d:99:3e:9e:ef:81:ee:30:17:43:29:58:
8f:0f:52:4f:1d:98:a6:c3:0b:9f:62:62:fe:fa:7e:
86:5d:49:c3:54:ad:10:26:04:3b:7d:35:66:7d:df:
2e:59:bf:27:35:fc:b2:10:34:51:c3:8a:74:e5:0b:
be:68:dd:cc:b5:10:6f:b8:2e:e5:2b:6b:38:31:cd:
da:c4:4a:36:a1:c0:e3:af:6b:d0:b2:88:5d:d1:9a:
5a:0f:73:08:d5:4b:bb:ba:2c:ad:2d:e0:a5:cc:f8:
c5:9b:85:21:fa:55:34:5b:20:a2:a2:c1:1d:36:54:
9b:3b:37:fc:26:79:d8:35:ff:3e:39:a7:9e:ff:bd:
44:8c:f8:8a:48:a0:92:b6:32:23:29:eb:e0:62:ff:
76:c0:d7:12:3b:72:f7:68:53:d0:e7:f5:6b:9f:37:
df:3e:57:49:c5:fc:fc:19:7f:60:33:48:81:ba:08:
22:a3:02:d9:95:1a:59:7e:0d:f6:1a:a4:6b:57:44:
5a:dd:58:77:46:01:0c:de:65:fd:52:44:c5:98:cc:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BD:73:8B:F8:03:EE:B1:D2:6C:F0:7C:BD:DD:0A:A3:1B:86:F2:69
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7d:83:c9:ca:07:aa:13:42:66:88:bd:e8:6d:e2:30:95:dc:
6f:72:4d:65:b5:86:95:25:4e:85:8c:3b:79:5f:78:e8:4e:e5:
63:f5:b1:d1:7a:df:ee:77:a0:56:a4:5e:f7:f5:4e:1a:c0:52:
e8:cf:38:46:f7:4f:59:01:31:22:8d:36:a6:26:4b:3c:cc:c4:
ca:d9:40:3f:5d:2d:68:57:39:1d:93:db:a7:7e:36:df:3f:00:
dc:ad:84:96:7a:6c:cb:34:f0:2a:b9:a1:77:4b:0e:f6:18:af:
63:a4:c5:90:09:07:b3:b9:31:fd:c8:e3:54:e8:bc:01:fa:7b:
f2:e2:e9:e4:55:28:a8:3a:7b:2e:c8:5d:b6:7e:ba:2b:60:59:
57:b2:4c:aa:d1:a2:72:01:ca:54:09:ef:38:21:21:f3:20:9b:
6b:7a:3a:1c:0b:ed:2f:7d:e6:13:d6:c4:4c:51:6f:35:d7:66:
29:01:74:b4:b0:7a:a5:29:5b:44:9f:50:62:46:ae:6e:17:4c:
de:60:3e:27:89:1c:78:49:b0:33:3e:b6:b7:32:e0:fc:9b:3a:
6c:70:ea:a2:b4:f0:d9:e7:8e:07:09:e2:21:00:ab:4a:e1:c6:
73:8c:b7:36:72:09:6e:a0:83:33:ab:48:5b:93:b1:10:8d:10:
03:4c:e4:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/ev6HJpP9/mk3v2sEP5sxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5
YjhkYTcwHhcNMjUwNjE3MjAwMDU2WhcNMjUwNjE4MjAwMDU2WjAzMTEwLwYDVQQD
Eyg2YmJkNzM4YmY4MDNlZWIxZDI2Y2YwN2NiZGRkMGFhMzFiODZmMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqOhTub6czrRIpKjSVV3vsjh5C32
ZlIMyu3TwmsYiLoAQgiGrOkln9UH+EW/M9tNmT6e74HuMBdDKViPD1JPHZimwwuf
YmL++n6GXUnDVK0QJgQ7fTVmfd8uWb8nNfyyEDRRw4p05Qu+aN3MtRBvuC7lK2s4
Mc3axEo2ocDjr2vQsohd0ZpaD3MI1Uu7uiytLeClzPjFm4Uh+lU0WyCiosEdNlSb
Ozf8JnnYNf8+Oaee/71EjPiKSKCStjIjKevgYv92wNcSO3L3aFPQ5/VrnzffPldJ
xfz8GX9gM0iBuggiowLZlRpZfg32GqRrV0Ra3Vh3RgEM3mX9UkTFmMxUVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu9c4v4A+6x0mzwfL3dCqMbhvJpMB8GA1UdIwQY
MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt
ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh
LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn2DycoH
qhNCZoi96G3iMJXcb3JNZbWGlSVOhYw7eV946E7lY/Wx0Xrf7negVqRe9/VOGsBS
6M84RvdPWQExIo02piZLPMzEytlAP10taFc5HZPbp3423z8A3K2ElnpsyzTwKrmh
d0sO9hivY6TFkAkHs7kx/cjjVOi8Afp78uLp5FUoqDp7Lshdtn66K2BZV7JMqtGi
cgHKVAnvOCEh8yCba3o6HAvtL33mE9bETFFvNddmKQF0tLB6pSlbRJ9QYkaubhdM
3mA+J4kceEmwMz62tzLg/Js6bHDqorTw2eeOBwniIQCrSuHGc4y3NnIJbqCDM6tI
W5OxEI0QA0zk2A==
-----END CERTIFICATE-----
Generated at Wed Jun 18 02:36:16 2025 by rpki-client