Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: 5F6o+mE3VTiBgg9YvS5Pycsrq9yPKHagwC0QaBP7B5U=
Subject key identifier: 86:AA:82:12:5E:C6:39:D0:F7:01:99:61:02:C2:6D:C3:81:F3:84:E5
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 01976F63070EED8E3B8570CD62E86B0AAC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0901
Signing time: Sat 14 Jun 2025 17:00:50 +0000
Manifest this update: Sat 14 Jun 2025 17:00:50 +0000
Manifest next update: Sun 15 Jun 2025 17:00:50 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: K60wSJDdWDm0fdoL25pj94gb6A9vGjv7GpTS30B927k=)
2: p_nbD9KuiCOJzHmbdVr4OiJYuSU.roa (hash: 2YfZYPYmw6whN3cTmCbCktLIftyc5bzNjj98rSEk3Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:07:0e:ed:8e:3b:85:70:cd:62:e8:6b:0a:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Jun 14 17:00:50 2025 GMT
Not After : Jun 15 17:00:50 2025 GMT
Subject: CN=86aa82125ec639d0f701996102c26dc381f384e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c1:c3:7c:29:c3:1f:a4:85:da:48:5e:06:4f:
63:34:65:19:49:96:2a:38:ab:92:4f:c8:c7:2c:10:
2c:88:2a:eb:9d:e7:5d:6e:80:fd:31:2c:e4:e2:e0:
6a:88:e9:f6:68:06:fa:ce:87:76:7c:6a:60:1d:2d:
da:6f:05:2d:8e:80:55:d8:8d:b3:5b:e0:cc:c9:27:
9f:ce:66:80:e9:7e:a3:49:14:72:0c:c0:1b:6d:e2:
b8:62:d7:41:6f:70:cd:f5:f1:ba:b7:56:84:24:14:
75:b5:07:0a:5d:c5:48:85:95:fa:ad:e3:34:ca:5b:
6b:df:08:c1:30:60:6d:ab:57:fb:19:09:b6:d7:37:
3f:15:d8:cd:93:76:76:4d:c2:5d:19:87:42:6f:0b:
74:e9:be:0a:86:be:e1:e2:7a:a0:83:52:8c:ba:e7:
41:a2:59:01:13:99:ba:d1:60:ea:81:63:1d:e5:f3:
cb:97:79:7b:8c:d4:0c:c9:96:de:5c:77:42:87:83:
92:fb:dd:f3:ff:a0:c5:cc:d8:6d:a2:d3:c9:26:0b:
fc:c1:b6:34:04:72:08:04:73:61:e9:1f:d4:2a:e4:
19:1d:e5:cb:af:b0:ab:bd:3d:a6:01:99:21:9f:46:
c7:29:75:06:e6:ea:70:af:28:81:89:7e:4d:ea:16:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AA:82:12:5E:C6:39:D0:F7:01:99:61:02:C2:6D:C3:81:F3:84:E5
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1d:fa:f6:7d:db:c4:47:a1:3c:9e:48:46:bf:32:94:b2:53:
91:c5:90:2c:48:04:5f:a7:cb:d9:d0:47:86:12:32:c8:8d:e6:
47:7f:ba:a8:ff:30:95:5b:3e:cb:d3:e6:18:fc:46:c0:66:dd:
85:41:40:4a:1c:9a:68:e6:07:b4:4f:d1:93:fd:4f:50:39:b3:
94:d6:57:f0:ea:18:b3:69:03:47:82:4a:fa:15:60:83:8d:a4:
11:df:02:64:ff:ce:d5:5f:47:e7:7a:a2:89:ac:b6:cd:df:a7:
08:4e:0d:95:6f:0c:80:94:08:73:37:e3:56:d6:cc:c5:90:ee:
00:b4:fa:35:53:6b:30:9c:2a:1f:59:1c:d6:24:0f:5d:2d:e2:
d9:d2:2e:1a:52:a3:3a:59:e9:c6:bc:bd:90:06:a6:b7:ed:af:
b3:d6:79:be:c6:73:e9:9a:01:c4:6d:5b:fd:02:26:6f:01:2c:
52:5d:47:5e:a8:82:18:c1:dd:b4:ed:ff:cf:93:4f:6d:eb:a5:
ec:1d:fa:b5:3e:6d:e3:2e:26:4c:d7:e1:2f:05:8c:0a:8c:7f:
6b:6f:d5:ac:09:cb:38:d9:13:92:97:7c:ec:e7:1f:e8:10:ac:
c7:a2:cd:f8:83:8f:9b:47:df:f8:c9:60:ab:73:1a:b6:79:dc:
49:ad:be:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYwcO7Y47hXDNYuhrCqx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2NlODllZWE0NTFiODI5NGE4YmI2OTdjNDk5M2FlNDRk
MDVjNmYwHhcNMjUwNjE0MTcwMDUwWhcNMjUwNjE1MTcwMDUwWjAzMTEwLwYDVQQD
Eyg4NmFhODIxMjVlYzYzOWQwZjcwMTk5NjEwMmMyNmRjMzgxZjM4NGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cHDfCnDH6SF2kheBk9jNGUZSZYq
OKuST8jHLBAsiCrrneddboD9MSzk4uBqiOn2aAb6zod2fGpgHS3abwUtjoBV2I2z
W+DMySefzmaA6X6jSRRyDMAbbeK4YtdBb3DN9fG6t1aEJBR1tQcKXcVIhZX6reM0
yltr3wjBMGBtq1f7GQm21zc/FdjNk3Z2TcJdGYdCbwt06b4Khr7h4nqgg1KMuudB
olkBE5m60WDqgWMd5fPLl3l7jNQMyZbeXHdCh4OS+93z/6DFzNhtotPJJgv8wbY0
BHIIBHNh6R/UKuQZHeXLr7CrvT2mAZkhn0bHKXUG5upwryiBiX5N6hZu2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaqghJexjnQ9wGZYQLCbcOB84TlMB8GA1UdIwQY
MBaAFNbM6J7qRRuClKi7aXxJk65E0FxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEt
Njk2ZTNkMTg4ZjJhLzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEtNjk2ZTNkMTg4ZjJh
LzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALx369n3b
xEehPJ5IRr8ylLJTkcWQLEgEX6fL2dBHhhIyyI3mR3+6qP8wlVs+y9PmGPxGwGbd
hUFAShyaaOYHtE/Rk/1PUDmzlNZX8OoYs2kDR4JK+hVgg42kEd8CZP/O1V9H53qi
iay2zd+nCE4NlW8MgJQIczfjVtbMxZDuALT6NVNrMJwqH1kc1iQPXS3i2dIuGlKj
Olnpxry9kAamt+2vs9Z5vsZz6ZoBxG1b/QImbwEsUl1HXqiCGMHdtO3/z5NPbeul
7B36tT5t4y4mTNfhLwWMCox/a2/VrAnLONkTkpd87Ocf6BCsx6LN+IOPm0ff+Mlg
q3MatnncSa2+9A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:40 2025 by rpki-client