Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: Q+lNIOY5GTWdGTpVHmeFBkKTslBwSBOKp+N+u5xl27Q=
Subject key identifier: F6:00:37:F4:EE:01:E5:F8:2E:2E:18:1C:25:1C:59:06:8C:D6:B4:FE
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 01976D3E7A2B69FD557A428D8DDB9DD86EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 0525
Signing time: Sat 14 Jun 2025 07:01:40 +0000
Manifest this update: Sat 14 Jun 2025 07:01:40 +0000
Manifest next update: Sun 15 Jun 2025 07:01:40 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: U0MttQNKEi/6DF1Mt6nARXiNMJdBdPaYevar+QqRQuo=)
2: EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa (hash: /ZPFrrUhiRzvgJS9F6X6CPNQ9l9Fj7isIDOoSoDinwA=)
3: xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa (hash: UKVupoJGtNRB7xSecoUEhumnrVWffmz284NYSDysuEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:7a:2b:69:fd:55:7a:42:8d:8d:db:9d:d8:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Jun 14 07:01:40 2025 GMT
Not After : Jun 15 07:01:40 2025 GMT
Subject: CN=f60037f4ee01e5f82e2e181c251c59068cd6b4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:f0:8b:14:08:96:ad:5f:0f:93:c2:de:57:
bf:f0:b5:b4:78:33:61:4a:89:4f:b2:ba:96:f0:47:
db:1b:36:e2:55:37:b8:c9:07:f3:9b:c0:aa:29:18:
26:59:f4:19:fa:e3:55:62:da:5f:7d:7d:df:81:b6:
bf:38:ee:c4:09:94:ce:1c:83:7a:ae:a2:7f:ce:13:
3b:af:fe:22:80:1f:85:bd:5e:ff:24:74:f4:d3:47:
00:c2:07:0f:de:61:83:bf:ca:0e:08:b9:cf:33:ea:
19:7b:78:8e:4b:da:6f:3f:2a:6f:bb:95:75:af:94:
5a:b5:da:ac:2c:95:54:01:8e:e8:b0:72:bf:68:00:
af:49:74:f8:12:95:d0:67:e6:16:f6:89:68:4a:bc:
bb:14:f3:a1:49:34:2c:0d:c5:be:89:88:c0:52:97:
f7:73:be:f8:1a:d1:be:c0:9b:a0:dd:fb:28:db:5f:
e4:68:3e:d2:dd:42:97:c7:60:96:f7:f4:d9:ec:98:
d7:37:11:84:a7:51:c5:44:69:29:81:00:4c:a3:d4:
76:65:46:16:9b:69:7d:74:e5:78:6f:bf:cb:7f:5d:
0a:8d:5e:62:0a:f0:d8:d4:e4:10:b8:a7:60:a5:1e:
84:ef:aa:60:05:8d:c5:1c:f9:ef:a0:36:8a:56:1b:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:00:37:F4:EE:01:E5:F8:2E:2E:18:1C:25:1C:59:06:8C:D6:B4:FE
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5e:75:d1:71:d4:ff:20:1a:40:9d:a2:89:52:79:24:48:ef:
e3:1a:ae:c9:9f:b7:8f:2b:5e:9e:4d:0b:37:b2:73:0e:9a:28:
a7:53:c6:7a:69:64:48:cc:51:39:d8:e5:70:92:0f:85:67:6e:
a0:6c:b8:aa:93:79:c1:65:c3:70:22:bd:44:b8:f9:fd:39:f5:
35:66:9c:33:cf:80:99:5a:48:08:4d:31:f7:b1:c7:a0:5f:da:
e8:af:70:a8:0d:50:d6:4e:f1:80:c5:5c:c2:35:63:d0:02:82:
b3:27:28:39:6e:ff:5f:e5:f1:4f:a6:09:f5:a2:9c:c2:16:a0:
a9:2d:2e:e9:a3:24:67:8c:5c:3a:d2:ed:b1:f5:82:b5:72:83:
0f:28:7c:35:dc:a1:65:c1:09:c2:05:5a:49:1f:ca:0a:f2:df:
7f:a7:80:95:db:50:ec:68:5f:9a:40:c1:cb:d9:83:3d:31:a3:
d8:be:6d:be:e1:08:a0:02:cc:72:a7:2e:c5:56:86:c1:d8:0e:
ab:5c:45:ef:16:9e:7b:b1:7f:69:07:75:f8:3d:ec:31:e5:1a:
78:16:5d:ed:62:f8:0e:a2:e6:e5:9a:42:9b:ee:d8:c5:bb:c5:
e4:5a:9b:c9:e8:1f:6e:7a:7b:ad:eb:67:9d:d5:ea:87:25:17:
2c:dd:8c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPnoraf1VekKNjdud2G64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Njk0OGZiYzkyNWY5NzU5ZmI2OWY5ZWZiMTJlZTNmMWNk
NDE2MTUwHhcNMjUwNjE0MDcwMTQwWhcNMjUwNjE1MDcwMTQwWjAzMTEwLwYDVQQD
EyhmNjAwMzdmNGVlMDFlNWY4MmUyZTE4MWMyNTFjNTkwNjhjZDZiNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDDwixQIlq1fD5PC3le/8LW0eDNh
SolPsrqW8EfbGzbiVTe4yQfzm8CqKRgmWfQZ+uNVYtpffX3fgba/OO7ECZTOHIN6
rqJ/zhM7r/4igB+FvV7/JHT000cAwgcP3mGDv8oOCLnPM+oZe3iOS9pvPypvu5V1
r5RatdqsLJVUAY7osHK/aACvSXT4EpXQZ+YW9oloSry7FPOhSTQsDcW+iYjAUpf3
c774GtG+wJug3fso21/kaD7S3UKXx2CW9/TZ7JjXNxGEp1HFRGkpgQBMo9R2ZUYW
m2l9dOV4b7/Lf10KjV5iCvDY1OQQuKdgpR6E76pgBY3FHPnvoDaKVhtMtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYAN/TuAeX4Li4YHCUcWQaM1rT+MB8GA1UdIwQY
MBaAFNRpSPvJJfl1n7afnvsS7j8c1BYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTkt
MTgxZTY0MDU5ZDMxLzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTktMTgxZTY0MDU5ZDMx
LzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEl510XHU
/yAaQJ2iiVJ5JEjv4xquyZ+3jytenk0LN7JzDpoop1PGemlkSMxROdjlcJIPhWdu
oGy4qpN5wWXDcCK9RLj5/Tn1NWacM8+AmVpICE0x97HHoF/a6K9wqA1Q1k7xgMVc
wjVj0AKCsycoOW7/X+XxT6YJ9aKcwhagqS0u6aMkZ4xcOtLtsfWCtXKDDyh8Ndyh
ZcEJwgVaSR/KCvLff6eAldtQ7GhfmkDBy9mDPTGj2L5tvuEIoALMcqcuxVaGwdgO
q1xF7xaee7F/aQd1+D3sMeUaeBZd7WL4DqLm5ZpCm+7YxbvF5Fqbyegfbnp7retn
ndXqhyUXLN2MFw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:53 2025 by rpki-client