Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: +sW9wudHvtaw/brNVDsINlDrYLcH10nI9VuZIFkjhIA=
Subject key identifier: B9:12:62:CD:F9:92:9D:0C:67:5F:28:DD:94:93:C4:10:C0:4C:C8:39
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01976D3D8DC0BBF066110AD1E7ADFE17D347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 011D
Signing time: Sat 14 Jun 2025 07:00:39 +0000
Manifest this update: Sat 14 Jun 2025 07:00:39 +0000
Manifest next update: Sun 15 Jun 2025 07:00:39 +0000
Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: MBeZ0ZjCwYgwifib9JpDaPENkY+WPMFD7YNu7mRbbFs=)
2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=)
3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:8d:c0:bb:f0:66:11:0a:d1:e7:ad:fe:17:d3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Jun 14 07:00:39 2025 GMT
Not After : Jun 15 07:00:39 2025 GMT
Subject: CN=b91262cdf9929d0c675f28dd9493c410c04cc839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4c:3e:04:95:8a:93:80:0d:ed:b7:cb:6a:89:
b5:4a:18:2d:e5:63:25:77:d6:24:73:e9:8f:e4:2e:
b1:ba:a7:31:b1:62:38:8c:21:07:46:d3:22:d9:d8:
3c:a8:b8:4e:0b:1e:77:6b:5c:47:77:e9:08:4d:e3:
b7:c0:49:88:7f:79:78:38:f9:5b:5c:45:d5:c7:fb:
b9:4d:d7:4d:69:92:9e:f7:dc:ee:aa:bf:13:96:7e:
de:be:41:77:b6:d3:b2:ca:f4:18:e1:d4:3c:c5:4d:
d0:64:4c:7b:38:93:d1:88:8d:76:88:83:c8:38:aa:
42:98:8a:1c:3f:eb:13:d7:39:bf:b6:61:2a:f8:ee:
0e:e7:51:aa:f0:64:12:be:30:ca:52:c2:42:fd:a3:
c0:2e:10:23:7c:d3:2c:47:02:f5:af:0b:ce:de:34:
52:4e:09:11:d9:42:13:3d:44:9e:59:5e:37:3c:e9:
23:49:a9:8e:97:99:75:03:e3:4e:32:62:fc:ec:ac:
ec:9a:12:7c:70:8e:d4:45:b0:ee:dd:01:32:5d:b4:
0b:16:d0:4d:ef:c8:dc:b0:58:04:00:04:24:ca:5b:
12:c2:25:74:41:c2:8d:c7:bd:1a:15:c8:98:86:5a:
67:3a:c7:e3:11:bf:7a:e2:b7:59:0f:d4:f2:70:6f:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:12:62:CD:F9:92:9D:0C:67:5F:28:DD:94:93:C4:10:C0:4C:C8:39
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5c:dd:6b:36:0a:d5:be:38:85:8e:0f:fc:f4:a0:4d:d6:e4:
ed:e9:e9:3f:70:c5:b6:76:e3:a9:93:f2:c2:d3:bb:29:5c:d3:
b0:f6:c0:f6:7e:5d:f1:e2:99:b0:d0:68:8f:c9:85:02:a8:aa:
93:24:6c:34:7a:02:1c:67:70:a9:79:e3:6c:b6:c0:a5:58:c9:
9e:c1:62:f7:7d:e1:70:5a:65:dd:85:07:43:6f:c8:2f:6b:99:
27:7d:87:00:00:3b:61:73:26:46:12:bb:1b:e2:81:68:74:10:
f2:e2:f6:e8:f7:7d:ed:63:83:a2:79:d9:5c:30:3c:90:4d:8a:
4e:f9:7c:cc:96:b9:d2:39:a1:21:99:5d:f6:54:fa:33:68:b2:
cc:bf:61:5a:0b:8d:a4:8f:54:4b:4a:24:c3:03:7b:c6:68:9e:
9e:a4:80:7a:0f:45:41:5b:b4:d4:dc:31:22:85:21:f9:ad:5b:
0a:01:db:90:77:26:98:29:84:c2:25:39:ee:69:07:12:e0:68:
9a:30:37:61:85:28:61:24:ad:0e:38:68:e4:5f:b7:bb:d3:63:
4b:a1:4a:48:3e:cb:df:89:92:cb:cc:ae:07:dc:74:3c:bf:ff:
17:1c:e7:8f:a5:16:06:9f:90:7e:53:6a:da:14:39:fd:01:d7:
fa:22:25:e2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdtPY3Au/BmEQrR563+F9NHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw
NDRmNTcwHhcNMjUwNjE0MDcwMDM5WhcNMjUwNjE1MDcwMDM5WjAzMTEwLwYDVQQD
EyhiOTEyNjJjZGY5OTI5ZDBjNjc1ZjI4ZGQ5NDkzYzQxMGMwNGNjODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Uw+BJWKk4AN7bfLaom1Shgt5WMl
d9Ykc+mP5C6xuqcxsWI4jCEHRtMi2dg8qLhOCx53a1xHd+kITeO3wEmIf3l4OPlb
XEXVx/u5TddNaZKe99zuqr8Tln7evkF3ttOyyvQY4dQ8xU3QZEx7OJPRiI12iIPI
OKpCmIocP+sT1zm/tmEq+O4O51Gq8GQSvjDKUsJC/aPALhAjfNMsRwL1rwvO3jRS
TgkR2UITPUSeWV43POkjSamOl5l1A+NOMmL87KzsmhJ8cI7URbDu3QEyXbQLFtBN
78jcsFgEAAQkylsSwiV0QcKNx70aFciYhlpnOsfjEb964rdZD9TycG+SUQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLkSYs35kp0MZ18o3ZSTxBDATMg5MB8GA1UdIwQY
MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw
LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw
NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslzd
azYK1b44hY4P/PSgTdbk7enpP3DFtnbjqZPywtO7KVzTsPbA9n5d8eKZsNBoj8mF
AqiqkyRsNHoCHGdwqXnjbLbApVjJnsFi933hcFpl3YUHQ2/IL2uZJ32HAAA7YXMm
RhK7G+KBaHQQ8uL26Pd97WODonnZXDA8kE2KTvl8zJa50jmhIZld9lT6M2iyzL9h
WguNpI9US0okwwN7xmienqSAeg9FQVu01NwxIoUh+a1bCgHbkHcmmCmEwiU57mkH
EuBomjA3YYUoYSStDjho5F+3u9NjS6FKSD7L34mSy8yuB9x0PL//Fxznj6UWBp+Q
flNq2hQ5/QHX+iIl4g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:05 2025 by rpki-client