
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: rLmW6NwrrpEHb53kmSAtbXjyuKQh1JbY93uYN6+tjJs=
Subject key identifier: 54:AF:FB:A0:13:87:C4:C9:7F:F3:B2:61:44:18:E2:ED:23:F9:84:F6
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 01976C98CB88F0723107B04645D70421CF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 04:00:42 +0000
Manifest this update: Sat 14 Jun 2025 04:00:42 +0000
Manifest next update: Sun 15 Jun 2025 04:00:42 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: h4Nf0S5jiNsFxMwVAO1EfVf31iMfGBluoQObYqoeYc0=)
2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=)
3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=)
4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:cb:88:f0:72:31:07:b0:46:45:d7:04:21:cf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jun 14 04:00:42 2025 GMT
Not After : Jun 15 04:00:42 2025 GMT
Subject: CN=54affba01387c4c97ff3b2614418e2ed23f984f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:8a:7d:83:88:d3:9f:27:90:2f:48:59:78:
c9:9a:26:35:4c:fa:3d:19:6c:58:e7:63:66:f6:d5:
e2:de:1e:94:2a:1a:55:20:4a:aa:02:10:f0:84:94:
fb:2a:b8:db:c2:69:ea:66:6e:92:3c:a7:38:05:6c:
5a:23:e2:53:9e:58:9c:0a:47:9e:3d:c6:91:93:52:
35:77:04:f2:c6:c6:70:61:ff:8b:d4:5f:b0:12:90:
eb:e9:9e:34:52:79:08:82:7e:e0:7b:4c:d9:2b:1b:
09:19:ad:63:50:18:b3:54:73:93:a6:77:50:a3:0e:
85:2c:25:07:41:13:e4:93:39:83:fd:cc:6a:dc:a7:
b4:9a:c1:58:75:17:5c:03:c1:0a:39:69:3b:df:37:
c5:5d:2b:48:c8:bf:db:5b:6d:fb:66:9d:33:71:54:
c4:1d:0f:bc:01:95:a1:d0:11:3e:79:16:01:58:b8:
26:92:69:31:8e:ff:19:39:68:a6:0d:38:65:ed:e0:
0b:1a:1d:7d:31:22:5a:e5:27:69:a8:81:27:6d:e0:
cb:6e:44:5a:b7:25:a3:21:dd:49:8f:ab:b8:63:96:
02:4f:42:b7:9a:99:46:94:fd:af:21:1f:53:b0:7a:
73:d9:2b:06:87:b1:f9:5f:96:a5:23:db:d7:34:fe:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AF:FB:A0:13:87:C4:C9:7F:F3:B2:61:44:18:E2:ED:23:F9:84:F6
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9e:8d:53:91:e4:c6:c1:37:2e:90:dc:ba:ba:91:51:bd:55:
55:60:4b:fb:c7:89:bc:69:2b:4a:00:91:3f:84:9f:59:de:4c:
92:0b:36:2f:ef:98:04:75:59:4a:2c:e1:5c:5c:0a:df:89:cd:
62:ff:90:1e:a4:1e:8c:fe:09:7a:ac:74:3f:9c:1c:46:77:04:
fd:0d:85:b6:57:45:19:89:f0:54:c2:0a:9e:96:c1:3a:f4:5c:
d5:77:e8:8b:f3:b0:86:64:8e:2b:6f:ef:54:06:24:73:f7:8e:
6f:fe:63:92:b8:38:5a:62:69:75:20:12:c4:e6:c8:12:a2:c8:
b7:c3:43:07:73:2f:06:8e:26:09:8c:9d:66:90:67:8f:b5:6a:
b2:9c:b2:55:24:99:41:e1:6e:f2:45:43:5f:29:5c:02:8f:29:
92:63:43:bc:81:87:4d:0f:35:64:62:77:4c:36:65:ef:2e:6b:
df:8b:e9:a0:4e:63:95:bc:6f:97:fe:d0:b0:b2:72:d6:22:dd:
33:2c:a2:36:ee:85:41:b0:3a:e1:ae:c4:db:31:16:fa:33:86:
64:14:14:07:7e:56:a2:76:8a:3e:08:4a:0b:f0:7f:49:65:9c:
16:ac:26:5a:af:52:b7:4c:07:35:9d:21:b2:6b:c9:b9:ca:58:
e6:b2:12:d5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdsmMuI8HIxB7BGRdcEIc85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NWQwMDQ0NDYxODJkNTFmZDM4ZjdmNzVmZTJhNWM4NjA4
YmM4NmQwHhcNMjUwNjE0MDQwMDQyWhcNMjUwNjE1MDQwMDQyWjAzMTEwLwYDVQQD
Eyg1NGFmZmJhMDEzODdjNGM5N2ZmM2IyNjE0NDE4ZTJlZDIzZjk4NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7GKfYOI058nkC9IWXjJmiY1TPo9
GWxY52Nm9tXi3h6UKhpVIEqqAhDwhJT7KrjbwmnqZm6SPKc4BWxaI+JTnlicCkee
PcaRk1I1dwTyxsZwYf+L1F+wEpDr6Z40UnkIgn7ge0zZKxsJGa1jUBizVHOTpndQ
ow6FLCUHQRPkkzmD/cxq3Ke0msFYdRdcA8EKOWk73zfFXStIyL/bW237Zp0zcVTE
HQ+8AZWh0BE+eRYBWLgmkmkxjv8ZOWimDThl7eALGh19MSJa5SdpqIEnbeDLbkRa
tyWjId1Jj6u4Y5YCT0K3mplGlP2vIR9TsHpz2SsGh7H5X5alI9vXNP76kwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFSv+6ATh8TJf/OyYUQY4u0j+YT2MB8GA1UdIwQY
MBaAFPhdAERGGC1R/Tj391/ipchgi8htMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GMEFSRVlZTFZIOU9QZjNYLUtseUdDTHlHMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1
LTA4MGVlMGE5N2Y2YS8xLzEtRjBBUkVZWUxWSDlPUGYzWC1LbHlHQ0x5RzAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M5ZGI1Mi1hYzkxLTQwNmEtOWY5NS0wODBlZTBhOTdm
NmEvMS8xLUYwQVJFWVlMVkg5T1BmM1gtS2x5R0NMeUcwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO56N
U5HkxsE3LpDcurqRUb1VVWBL+8eJvGkrSgCRP4SfWd5Mkgs2L++YBHVZSizhXFwK
34nNYv+QHqQejP4Jeqx0P5wcRncE/Q2FtldFGYnwVMIKnpbBOvRc1Xfoi/OwhmSO
K2/vVAYkc/eOb/5jkrg4WmJpdSASxObIEqLIt8NDB3MvBo4mCYydZpBnj7Vqspyy
VSSZQeFu8kVDXylcAo8pkmNDvIGHTQ81ZGJ3TDZl7y5r34vpoE5jlbxvl/7QsLJy
1iLdMyyiNu6FQbA64a7E2zEW+jOGZBQUB35WonaKPghKC/B/SWWcFqwmWq9St0wH
NZ0hsmvJucpY5rIS1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:06 2025 by rpki-client