Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: lvbuP0X2OjFbAZxAYUWsaRpNkrsW28ds5rwbI3HQHqQ=
Subject key identifier: 24:01:70:32:49:4F:8F:C7:95:B1:A9:F3:49:91:99:0A:53:8D:45:D7
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 0197711B484570C8AB58350B26D79263E8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 01:01:42 +0000
Manifest this update: Sun 15 Jun 2025 01:01:42 +0000
Manifest next update: Mon 16 Jun 2025 01:01:42 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: SXlvdKCVTzzQj60zoaRKDQVNl2Pwz06FFHVlRWjo48M=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:48:45:70:c8:ab:58:35:0b:26:d7:92:63:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jun 15 01:01:42 2025 GMT
Not After : Jun 16 01:01:42 2025 GMT
Subject: CN=24017032494f8fc795b1a9f34991990a538d45d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:a1:28:8e:58:ad:e1:d3:5d:c6:50:a3:e8:
29:48:1e:58:5c:97:37:15:98:ea:1e:b6:35:e8:4e:
a8:7c:c3:1f:b1:a2:fc:bf:2e:27:98:98:77:8f:c6:
df:34:ae:15:ca:ca:2f:68:37:0d:33:5a:b9:7d:52:
f3:a7:18:05:4f:14:92:21:65:a6:fd:75:42:74:c2:
f7:cf:b4:99:e9:15:40:0b:e0:d5:8e:80:0c:57:c3:
8a:70:42:20:24:f2:74:b9:58:22:1b:8d:f6:7d:4d:
f0:6d:f8:14:54:22:e6:83:05:c1:97:77:d8:bc:c4:
3e:f0:af:af:8b:c5:99:1c:35:aa:26:d5:19:5a:26:
4e:a2:42:40:fa:c5:a2:24:71:39:74:7d:74:69:0c:
06:67:40:22:3b:73:c2:5f:08:02:33:e8:39:36:e9:
67:38:7e:bf:2f:f0:03:12:c6:65:3b:31:9c:66:de:
04:92:2a:aa:77:92:7f:3f:46:61:f1:ef:89:25:a8:
a2:11:3e:ad:18:0e:14:64:40:60:23:f0:43:f7:87:
c9:0f:67:15:6d:a8:3b:2b:15:21:60:af:90:1f:3d:
9f:c9:39:ac:e5:77:a0:06:33:18:37:65:84:7e:97:
4d:2d:8e:3b:bc:52:79:a8:02:53:94:a9:5d:9c:48:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:01:70:32:49:4F:8F:C7:95:B1:A9:F3:49:91:99:0A:53:8D:45:D7
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e5:23:b3:fb:82:8a:e4:24:ef:c5:4e:d3:19:e4:b7:6c:b6:
80:e2:93:9f:31:7c:81:39:e6:fc:e6:29:bf:ed:36:87:9f:a8:
1c:4c:48:ad:10:39:53:f0:61:83:f9:a4:08:71:2a:89:be:a1:
98:ac:b4:08:59:1a:2a:03:f9:30:09:4e:50:b8:ea:29:b5:7b:
13:1b:2b:bf:12:9c:0b:1b:c4:42:ef:74:30:24:6d:9c:ad:8f:
b6:e9:0e:60:57:98:b8:bd:f9:13:d0:00:11:e5:6e:2b:f1:a2:
e6:39:95:48:e1:db:21:27:fe:53:83:7b:fe:53:f4:fc:e6:6c:
9c:e4:2b:cc:4f:de:f2:46:e0:58:d7:42:33:bf:2f:2c:5b:23:
6f:99:eb:be:4a:4b:5b:57:ca:03:59:5b:57:e3:de:40:63:26:
28:6d:75:28:02:92:77:7d:9a:d2:84:88:50:7f:e5:07:7d:41:
35:b7:99:cd:48:bc:db:0a:78:7a:45:24:a1:ce:ad:46:ed:99:
57:1d:d8:a2:2e:45:ce:b5:f3:10:c5:0a:f0:03:89:6d:10:6f:
6a:eb:56:19:2b:4c:ac:78:15:42:95:af:1d:e3:00:e4:4a:2e:
a8:4b:53:7b:96:ba:85:b5:37:96:04:72:35:47:28:b8:f6:c1:
82:69:36:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxG0hFcMirWDULJteSY+i+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4
NWQyYzgwHhcNMjUwNjE1MDEwMTQyWhcNMjUwNjE2MDEwMTQyWjAzMTEwLwYDVQQD
EygyNDAxNzAzMjQ5NGY4ZmM3OTViMWE5ZjM0OTkxOTkwYTUzOGQ0NWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ+hKI5YreHTXcZQo+gpSB5YXJc3
FZjqHrY16E6ofMMfsaL8vy4nmJh3j8bfNK4VysovaDcNM1q5fVLzpxgFTxSSIWWm
/XVCdML3z7SZ6RVAC+DVjoAMV8OKcEIgJPJ0uVgiG432fU3wbfgUVCLmgwXBl3fY
vMQ+8K+vi8WZHDWqJtUZWiZOokJA+sWiJHE5dH10aQwGZ0AiO3PCXwgCM+g5Nuln
OH6/L/ADEsZlOzGcZt4Ekiqqd5J/P0Zh8e+JJaiiET6tGA4UZEBgI/BD94fJD2cV
bag7KxUhYK+QHz2fyTms5XegBjMYN2WEfpdNLY47vFJ5qAJTlKldnEg70wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQBcDJJT4/HlbGp80mRmQpTjUXXMB8GA1UdIwQY
MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt
Y2Y3MjMyZGRlYmVjLzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj
LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+Ujs/uC
iuQk78VO0xnkt2y2gOKTnzF8gTnm/OYpv+02h5+oHExIrRA5U/Bhg/mkCHEqib6h
mKy0CFkaKgP5MAlOULjqKbV7ExsrvxKcCxvEQu90MCRtnK2PtukOYFeYuL35E9AA
EeVuK/Gi5jmVSOHbISf+U4N7/lP0/OZsnOQrzE/e8kbgWNdCM78vLFsjb5nrvkpL
W1fKA1lbV+PeQGMmKG11KAKSd32a0oSIUH/lB31BNbeZzUi82wp4ekUkoc6tRu2Z
Vx3Yoi5FzrXzEMUK8AOJbRBvautWGStMrHgVQpWvHeMA5EouqEtTe5a6hbU3lgRy
NUcouPbBgmk2TA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:22 2025 by rpki-client