Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: YJuyJWWX9isJ2d5llIZiPHK7J5UOOEboNxL8cTcKts0=
Subject key identifier: DB:F7:85:A1:B9:71:36:AE:DE:87:9A:E0:0A:71:2F:B3:81:B1:11:88
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 01976C98D5E28BAFE9AEC83E7FC2B70F7429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 04:00:44 +0000
Manifest this update: Sat 14 Jun 2025 04:00:44 +0000
Manifest next update: Sun 15 Jun 2025 04:00:44 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: XwEv4Lapo6O3FO1KT8YSYZyJHksc7cuBGOSWkzgvMc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:d5:e2:8b:af:e9:ae:c8:3e:7f:c2:b7:0f:74:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Jun 14 04:00:44 2025 GMT
Not After : Jun 15 04:00:44 2025 GMT
Subject: CN=dbf785a1b97136aede879ae00a712fb381b11188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:c9:55:88:b3:7d:03:fe:ab:df:7d:c5:7c:
87:1a:89:ab:d6:31:6f:5a:87:51:cb:15:a1:9b:dd:
d2:56:d8:1f:5d:65:f0:df:f9:cb:f8:32:5d:fb:f2:
64:8d:e3:1b:41:94:af:1b:90:ba:6e:dd:bd:cc:fd:
f2:0f:0a:f8:63:23:c1:68:92:7e:af:c6:d9:c1:11:
fa:1c:99:22:37:bc:04:d2:5e:68:c9:70:bc:9f:d6:
aa:85:26:ec:2c:c2:07:4b:bf:c2:53:83:08:83:08:
a9:4f:21:dc:85:ab:32:64:c2:6d:99:26:4e:6a:f0:
1a:27:72:50:1d:df:74:19:56:06:8f:d5:93:a1:7b:
26:fa:a4:f9:fc:a9:3e:76:cc:68:8a:17:1d:02:18:
36:3b:af:f8:4e:95:4e:89:20:9e:98:e4:40:4f:0c:
ad:70:d0:dd:ff:22:2c:e5:76:fd:96:a5:8f:9f:15:
d9:11:94:90:85:da:69:02:3d:43:94:9e:b5:08:06:
9b:e7:8b:d2:dd:04:22:46:ab:a5:f0:4b:5f:5b:d7:
58:6f:d6:50:0e:b3:ea:35:21:6e:a6:98:99:2b:90:
9c:99:07:77:95:b9:2a:3c:1b:6e:5c:30:38:6f:08:
4d:d3:83:c9:da:50:00:89:03:1a:f1:92:41:0c:9f:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F7:85:A1:B9:71:36:AE:DE:87:9A:E0:0A:71:2F:B3:81:B1:11:88
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c0:ba:61:1a:19:94:dd:21:a2:71:1c:24:dc:6f:da:c6:0e:
91:b1:ab:3e:e3:f2:3a:16:52:3b:1b:c9:16:5f:57:43:c0:83:
7b:32:39:57:e1:d2:fa:06:21:53:04:b9:0f:cf:91:c9:38:dc:
8a:c6:80:2b:c4:b8:9b:71:29:26:39:b7:e5:83:11:8b:05:9d:
db:e7:2f:9f:33:ff:57:65:24:67:47:25:62:a1:33:00:af:6d:
54:16:92:eb:85:ba:ea:8a:8d:7e:9b:52:99:3d:08:cf:b1:b8:
df:a4:f6:63:1a:b3:b9:8a:e3:73:ca:a5:f1:d8:9c:72:a5:ab:
f5:76:24:ab:0a:43:a7:9b:85:7f:90:b3:4b:72:8c:a8:1a:ae:
48:86:e8:1c:50:36:cb:c6:d7:6d:45:6e:63:a4:81:9d:78:b7:
37:f0:88:8e:24:8a:ad:26:e0:80:bd:b6:af:97:10:44:89:29:
3c:5e:ab:a6:83:d6:cb:40:ef:60:b9:a8:eb:66:41:bc:71:93:
82:b3:53:65:c6:75:d5:98:9e:7a:e0:4d:2b:2a:36:01:fb:3f:
78:aa:42:be:09:12:93:f5:f4:52:04:ab:38:01:74:6c:3b:f2:
08:24:54:6e:fa:a5:78:0f:6c:7e:d7:34:3e:21:d0:13:9a:a9:
4a:3f:fb:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmNXii6/prsg+f8K3D3QpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYWQzNTNjYzFhMGQxNmQ1ZThlMTRhMzc1NzVhNmYzZDYw
NTYzZjgwHhcNMjUwNjE0MDQwMDQ0WhcNMjUwNjE1MDQwMDQ0WjAzMTEwLwYDVQQD
EyhkYmY3ODVhMWI5NzEzNmFlZGU4NzlhZTAwYTcxMmZiMzgxYjExMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfPJVYizfQP+q999xXyHGomr1jFv
WodRyxWhm93SVtgfXWXw3/nL+DJd+/JkjeMbQZSvG5C6bt29zP3yDwr4YyPBaJJ+
r8bZwRH6HJkiN7wE0l5oyXC8n9aqhSbsLMIHS7/CU4MIgwipTyHchasyZMJtmSZO
avAaJ3JQHd90GVYGj9WToXsm+qT5/Kk+dsxoihcdAhg2O6/4TpVOiSCemORATwyt
cNDd/yIs5Xb9lqWPnxXZEZSQhdppAj1DlJ61CAab54vS3QQiRqul8EtfW9dYb9ZQ
DrPqNSFuppiZK5CcmQd3lbkqPBtuXDA4bwhN04PJ2lAAiQMa8ZJBDJ9sTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNv3haG5cTau3oea4ApxL7OBsRGIMB8GA1UdIwQY
MBaAFHCtNTzBoNFtXo4Uo3V1pvPWBWP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1Zjkt
MTUwNGVhNTNlMjU1LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1ZjktMTUwNGVhNTNlMjU1
LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScC6YRoZ
lN0honEcJNxv2sYOkbGrPuPyOhZSOxvJFl9XQ8CDezI5V+HS+gYhUwS5D8+RyTjc
isaAK8S4m3EpJjm35YMRiwWd2+cvnzP/V2UkZ0clYqEzAK9tVBaS64W66oqNfptS
mT0Iz7G436T2YxqzuYrjc8ql8diccqWr9XYkqwpDp5uFf5CzS3KMqBquSIboHFA2
y8bXbUVuY6SBnXi3N/CIjiSKrSbggL22r5cQRIkpPF6rpoPWy0DvYLmo62ZBvHGT
grNTZcZ11ZieeuBNKyo2Afs/eKpCvgkSk/X0UgSrOAF0bDvyCCRUbvqleA9sftc0
PiHQE5qpSj/7mg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:18:33 2025 by rpki-client