Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: mLSwRe3DsNh6l5eled9lC5maCIj+MYJhje3AeqOy6vk=
Subject key identifier: B8:1A:2F:0A:A0:88:0A:4B:76:79:E9:F4:C6:C0:83:42:2A:08:B7:A2
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 01976E1938125FAEBF1A201D269EFFF97BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 1231
Signing time: Sat 14 Jun 2025 11:00:35 +0000
Manifest this update: Sat 14 Jun 2025 11:00:35 +0000
Manifest next update: Sun 15 Jun 2025 11:00:35 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: MCyFcgsN4eL5le+sshjagh4PvTZV0ufJ3Al2Vf2MQ2k=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:38:12:5f:ae:bf:1a:20:1d:26:9e:ff:f9:7b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Jun 14 11:00:35 2025 GMT
Not After : Jun 15 11:00:35 2025 GMT
Subject: CN=b81a2f0aa0880a4b7679e9f4c6c083422a08b7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:4b:20:4c:57:d2:27:84:23:8e:e7:ea:bc:
f3:33:8e:93:f4:6e:d0:64:c1:6a:57:dd:a8:0c:ba:
13:6a:55:5a:56:16:75:b0:9f:64:4e:82:8b:73:cc:
81:95:8e:20:c0:58:2f:7c:94:8d:43:5a:41:47:ba:
a0:0e:4e:66:1f:f8:08:bb:df:52:a9:41:6e:d0:ea:
13:88:38:18:c0:a4:c2:24:69:ad:ae:11:3a:9a:f6:
a6:7a:58:3c:fb:b0:b9:c4:7e:07:c0:a9:d9:80:d7:
aa:3c:85:31:0d:d2:2f:81:d9:46:b2:8f:16:75:1b:
0d:98:4e:1f:9e:cf:2a:58:b5:44:ba:fb:b8:3a:cc:
6c:56:40:e0:eb:90:7b:f3:f8:1d:a9:93:36:f1:b0:
e6:c1:bc:3c:ce:ef:58:c6:53:bd:c9:91:09:e2:9a:
a3:fc:6e:80:1a:f4:0e:26:1f:2e:da:b1:3e:de:8f:
44:6a:68:05:a0:c3:6f:66:70:b4:77:13:cd:fd:06:
a3:b9:4f:d5:a2:49:9f:2c:95:b8:b0:23:c3:cf:a0:
8a:3b:15:fa:46:f6:55:15:69:f4:73:27:ba:aa:4c:
9d:17:f3:12:c8:47:31:3c:8b:8f:2a:1a:5d:5f:40:
1d:fe:1f:b8:1d:57:db:99:4a:e1:01:33:85:13:9b:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:2F:0A:A0:88:0A:4B:76:79:E9:F4:C6:C0:83:42:2A:08:B7:A2
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:83:ba:bc:a5:a3:e6:b9:b3:d1:e0:2b:d8:0b:d1:16:3c:5c:
f5:a4:89:d2:9d:a1:2d:d7:17:f4:e0:a1:7f:5a:dc:b2:1d:9a:
f6:2d:28:d3:43:a1:97:8d:00:fb:ce:2f:e0:2c:86:4a:99:40:
cf:81:0d:3c:bb:a4:ed:56:d6:df:27:b2:f0:e4:69:57:f0:ca:
6e:3a:d0:1a:a0:cf:68:2c:29:05:27:16:32:cb:48:7a:9f:4b:
67:d9:ef:58:bd:72:84:fc:48:6c:c7:9d:ff:72:b6:53:fa:24:
a9:07:04:35:ff:39:0d:47:e9:fd:aa:ff:70:3d:e0:2a:eb:ca:
2a:7f:93:97:58:e4:3f:f5:4d:1e:08:32:ac:2f:a0:f0:a9:35:
80:35:46:b6:67:0c:68:96:fd:50:65:2d:6f:c4:8a:5c:f4:ce:
3d:76:f3:b2:24:78:10:b0:02:1d:5f:77:aa:66:14:67:d4:3c:
24:b5:30:52:48:11:0d:69:37:07:af:c6:31:8d:9d:12:40:ac:
79:d1:41:b3:b5:af:ef:d8:08:2b:5c:5f:42:cc:b8:bd:d6:a6:
d9:4f:dc:3e:8c:92:e8:bb:e5:07:b1:fe:bb:b5:cc:0e:93:2a:
91:f1:a6:85:f9:90:a7:72:aa:0d:0f:ca:c7:bb:fc:fd:88:ba:
97:e5:62:95
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZduGTgSX66/GiAdJp7/+XuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjRhMWY3Y2E0MGI1ODExNmU2YmM4MzhlMDYyZjljNzEy
MjI4YTQwHhcNMjUwNjE0MTEwMDM1WhcNMjUwNjE1MTEwMDM1WjAzMTEwLwYDVQQD
EyhiODFhMmYwYWEwODgwYTRiNzY3OWU5ZjRjNmMwODM0MjJhMDhiN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjtLIExX0ieEI47n6rzzM46T9G7Q
ZMFqV92oDLoTalVaVhZ1sJ9kToKLc8yBlY4gwFgvfJSNQ1pBR7qgDk5mH/gIu99S
qUFu0OoTiDgYwKTCJGmtrhE6mvamelg8+7C5xH4HwKnZgNeqPIUxDdIvgdlGso8W
dRsNmE4fns8qWLVEuvu4OsxsVkDg65B78/gdqZM28bDmwbw8zu9YxlO9yZEJ4pqj
/G6AGvQOJh8u2rE+3o9EamgFoMNvZnC0dxPN/QajuU/VokmfLJW4sCPDz6CKOxX6
RvZVFWn0cye6qkydF/MSyEcxPIuPKhpdX0Ad/h+4HVfbmUrhATOFE5uSAwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLgaLwqgiApLdnnp9MbAg0IqCLeiMB8GA1UdIwQY
MBaAFPpkoffKQLWBFua8g44GL5xxIiikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tU2g5OHBBdFlFVzVyeURqZ1l2bkhFaUtLUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVm
LTViODNkMGU5NjAxMi8xLzEtbVNoOThwQXRZRVc1cnlEamdZdm5IRWlLS1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNmL2JhMjdmYi0yNTUwLTQ5YWQtYjBlZi01YjgzZDBlOTYw
MTIvMS8xLW1TaDk4cEF0WUVXNXJ5RGpnWXZuSEVpS0tRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYO6
vKWj5rmz0eAr2AvRFjxc9aSJ0p2hLdcX9OChf1rcsh2a9i0o00Ohl40A+84v4CyG
SplAz4ENPLuk7VbW3yey8ORpV/DKbjrQGqDPaCwpBScWMstIep9LZ9nvWL1yhPxI
bMed/3K2U/okqQcENf85DUfp/ar/cD3gKuvKKn+Tl1jkP/VNHggyrC+g8Kk1gDVG
tmcMaJb9UGUtb8SKXPTOPXbzsiR4ELACHV93qmYUZ9Q8JLUwUkgRDWk3B6/GMY2d
EkCsedFBs7Wv79gIK1xfQsy4vdam2U/cPoyS6LvlB7H+u7XMDpMqkfGmhfmQp3Kq
DQ/Kx7v8/Yi6l+VilQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:39:27 2025 by rpki-client