Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: zv11zZwZOGlgKUX4Kk9z60wm/4A0t11iBH3YcGYPAmY=
Subject key identifier: E1:09:8E:51:E9:31:0A:E0:AA:0F:74:33:17:5A:BA:F5:15:1B:1E:B9
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 01976D06D5E27AD9BA1D4AE065BF38464A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 06:00:53 +0000
Manifest this update: Sat 14 Jun 2025 06:00:53 +0000
Manifest next update: Sun 15 Jun 2025 06:00:53 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: bPYqoI5cT4S8FWobNqjhGSM493gPmrXswWrAC9RFQh4=)
2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:d5:e2:7a:d9:ba:1d:4a:e0:65:bf:38:46:4a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Jun 14 06:00:53 2025 GMT
Not After : Jun 15 06:00:53 2025 GMT
Subject: CN=e1098e51e9310ae0aa0f7433175abaf5151b1eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:98:ab:af:d9:91:09:7e:f4:eb:aa:bb:3a:
95:82:f4:0c:b2:a3:6c:2f:a5:6a:d5:40:03:6d:88:
45:c4:8d:0b:79:ca:41:56:c3:27:e1:8a:ba:cf:74:
a7:c2:72:5b:33:fd:ad:da:1a:2c:c3:03:7c:de:cf:
15:c0:0b:7d:7d:61:27:22:ce:55:8c:75:4f:ad:a3:
ac:b3:29:d0:3f:87:b3:18:ab:1b:44:52:64:08:f8:
a1:2c:07:28:e5:cd:7b:4c:29:85:a5:9f:f0:5e:2d:
2a:12:d2:94:9e:e9:be:6e:22:40:98:57:dc:9a:fe:
a0:0c:63:f3:5a:af:f0:2b:4e:be:3b:49:e1:1d:3b:
c4:d7:8f:7e:73:1f:71:01:a5:4b:49:58:fc:38:91:
b5:6a:c6:81:ae:40:67:fc:4b:ab:71:2f:fa:61:8a:
74:5e:fe:23:8a:09:48:53:2a:7f:1f:65:2e:2e:16:
72:c4:2e:41:87:e8:7a:c3:6b:15:f7:4b:64:22:5d:
e5:f0:52:7f:a1:0c:0c:70:c9:25:9b:dd:b4:e3:d4:
98:61:1d:f2:86:23:ec:80:e3:f8:41:e0:cf:ff:9c:
c0:f0:d0:1b:6e:d6:8f:be:47:f3:b8:9e:f9:40:c4:
27:70:1b:e6:62:d0:78:33:ac:17:4e:2e:ef:45:69:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:09:8E:51:E9:31:0A:E0:AA:0F:74:33:17:5A:BA:F5:15:1B:1E:B9
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cd:c8:65:00:6b:7d:06:18:36:e9:aa:74:36:07:55:e8:be:
b8:07:2f:57:25:e9:c5:79:54:db:ae:3c:ae:04:44:c3:4f:72:
04:fd:52:dc:9c:da:14:08:b4:40:ea:df:eb:c4:4f:c3:24:b6:
6f:87:24:da:f1:6d:97:a4:46:12:62:2e:7d:d0:f0:63:f1:3b:
73:a2:87:8c:4d:27:7d:80:87:4d:08:d3:b7:d8:94:13:2c:4f:
4e:6e:14:f7:76:a7:82:76:88:2a:7f:0f:61:00:ae:b8:ab:4d:
6c:cc:7e:c8:3a:77:1c:e5:7b:f5:a4:70:22:71:e9:9e:96:d0:
b1:42:16:c2:47:d6:f2:ad:d5:b8:34:b6:8c:13:bd:9c:77:34:
b3:cd:29:db:8f:32:7f:e7:50:ca:81:f1:6b:3b:b9:0c:1c:de:
3b:6f:75:dc:db:62:76:bf:5f:21:6d:c6:62:ee:48:26:7e:bf:
ec:35:e1:e3:03:96:57:7f:67:af:42:93:9d:d0:e1:eb:33:7f:
89:de:58:9c:a0:7b:49:58:6a:af:e9:cf:8f:20:b7:60:9f:e5:
cb:a4:93:df:fa:cc:25:f2:b5:58:b7:d6:44:d8:b1:c5:a8:a8:
4d:b9:2d:b0:4f:7b:15:7f:8a:b0:66:8e:d6:c0:77:b0:22:4c:
32:ed:7d:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBtXietm6HUrgZb84RkqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmRkNTk2MjY3ZDU2ZjdjZTU2ZWJmYWVjODZhMzI3MDhm
ZWRlMDAwHhcNMjUwNjE0MDYwMDUzWhcNMjUwNjE1MDYwMDUzWjAzMTEwLwYDVQQD
EyhlMTA5OGU1MWU5MzEwYWUwYWEwZjc0MzMxNzVhYmFmNTE1MWIxZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwqYq6/ZkQl+9OuquzqVgvQMsqNs
L6Vq1UADbYhFxI0LecpBVsMn4Yq6z3SnwnJbM/2t2hoswwN83s8VwAt9fWEnIs5V
jHVPraOssynQP4ezGKsbRFJkCPihLAco5c17TCmFpZ/wXi0qEtKUnum+biJAmFfc
mv6gDGPzWq/wK06+O0nhHTvE149+cx9xAaVLSVj8OJG1asaBrkBn/EurcS/6YYp0
Xv4jiglIUyp/H2UuLhZyxC5Bh+h6w2sV90tkIl3l8FJ/oQwMcMklm92049SYYR3y
hiPsgOP4QeDP/5zA8NAbbtaPvkfzuJ75QMQncBvmYtB4M6wXTi7vRWk5eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEJjlHpMQrgqg90MxdauvUVGx65MB8GA1UdIwQY
MBaAFNT91ZYmfVb3zlbr+uyGoycI/t4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAt
NjdhODdkOGEzYjliLzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAtNjdhODdkOGEzYjli
LzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfM3IZQBr
fQYYNumqdDYHVei+uAcvVyXpxXlU2648rgREw09yBP1S3JzaFAi0QOrf68RPwyS2
b4ck2vFtl6RGEmIufdDwY/E7c6KHjE0nfYCHTQjTt9iUEyxPTm4U93angnaIKn8P
YQCuuKtNbMx+yDp3HOV79aRwInHpnpbQsUIWwkfW8q3VuDS2jBO9nHc0s80p248y
f+dQyoHxazu5DBzeO2913Ntidr9fIW3GYu5IJn6/7DXh4wOWV39nr0KTndDh6zN/
id5YnKB7SVhqr+nPjyC3YJ/ly6ST3/rMJfK1WLfWRNixxaioTbktsE97FX+KsGaO
1sB3sCJMMu19tw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:19:27 2025 by rpki-client