Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: B8MlCvEFgI9pY4nNIhCSDXNelD7MZy5kCH/lLeFIkyw=
Subject key identifier: DF:AE:D8:07:5E:64:63:D4:EC:2F:B3:09:07:56:9D:8D:22:30:8E:90
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 01976997944B4A37978246AFFF3907014EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 12B3
Signing time: Fri 13 Jun 2025 14:00:30 +0000
Manifest this update: Fri 13 Jun 2025 14:00:30 +0000
Manifest next update: Sat 14 Jun 2025 14:00:30 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: Tk6iQ0Cj2xECIaNrfeLqJ1F1zHj1HMqs2SOUNHx+44o=)
2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=)
3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:94:4b:4a:37:97:82:46:af:ff:39:07:01:4e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Jun 13 14:00:30 2025 GMT
Not After : Jun 14 14:00:30 2025 GMT
Subject: CN=dfaed8075e6463d4ec2fb30907569d8d22308e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:fa:6b:31:dd:eb:75:f5:99:04:91:df:58:
b3:d4:a2:6b:5c:6e:4c:13:f6:ea:70:f4:00:b2:56:
8a:6c:c2:d2:5a:08:b1:14:61:8f:51:91:e5:81:e8:
5b:1f:f6:5a:3c:26:eb:3f:fa:4d:c5:e5:d4:f3:33:
41:4a:f7:ad:93:9f:9d:c2:94:5d:33:70:f9:d8:ed:
37:ce:02:a6:4f:ba:c3:89:9f:f9:c1:84:61:12:3e:
66:87:0a:14:c3:08:64:15:24:7a:51:53:a1:31:c6:
75:74:0d:95:47:1c:ce:77:13:dc:98:58:18:a7:66:
16:d7:8a:db:bf:14:28:7c:53:75:83:79:59:2e:24:
16:c5:86:4d:7e:c6:00:09:02:e2:43:ae:02:84:f5:
78:02:44:e2:60:70:3b:35:2a:2f:da:2d:81:b8:1d:
ed:ff:20:63:ac:a0:4f:9a:e7:58:f1:43:74:de:50:
e6:da:6a:8e:5b:38:34:a2:8f:9a:09:d5:e2:c8:01:
d4:df:12:7c:3e:c9:62:9b:e0:3c:3e:5d:13:e4:1f:
c1:06:1a:2d:09:36:5e:25:a9:25:2f:45:ef:72:c0:
0b:30:6f:52:5c:8f:02:d4:2a:84:ee:ff:45:80:fa:
21:03:f4:88:46:7d:3c:74:03:cb:df:2a:a8:ca:90:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:D8:07:5E:64:63:D4:EC:2F:B3:09:07:56:9D:8D:22:30:8E:90
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c2:bc:5f:e5:8d:dd:10:ef:40:26:9c:f7:a7:22:68:41:a5:
cb:95:3a:20:03:d2:cb:c3:32:f4:b0:39:4b:ad:81:bb:0c:ec:
ea:05:34:c8:9a:cf:94:b4:91:a9:05:34:d9:e0:68:f9:e3:fc:
27:f0:5d:f9:f5:52:17:26:12:f2:40:90:9c:10:de:8a:c0:28:
1f:b9:49:15:77:45:87:ef:ea:af:27:e8:33:d0:62:9e:bd:90:
03:1f:48:fb:c4:d8:64:e9:38:48:ec:48:71:14:17:5f:5a:e2:
d7:7c:19:bb:bf:35:6b:6a:d6:01:96:77:08:ab:6c:eb:25:bf:
90:73:18:85:df:38:ad:f9:61:82:2e:73:fc:83:e0:4c:67:72:
3b:05:dd:ee:de:6c:94:c8:9c:46:3a:b0:5c:2b:59:cd:a1:a2:
57:74:27:7b:dd:1f:2c:99:57:cd:38:ac:40:3e:3f:22:65:eb:
5f:32:78:bf:5c:54:3a:f2:9e:7d:7f:c6:17:01:0c:c3:ff:29:
b7:61:6d:0a:09:85:13:77:3c:55:1f:a2:8b:f2:35:92:d7:30:
c3:df:2e:fc:5e:49:94:c4:8a:58:2d:95:e9:35:b7:1d:7b:5f:
ce:1f:8c:23:70:c9:66:ea:81:88:86:61:f0:94:9d:73:91:4a:
d8:26:01:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl5RLSjeXgkav/zkHAU7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw
YTlhNGMwHhcNMjUwNjEzMTQwMDMwWhcNMjUwNjE0MTQwMDMwWjAzMTEwLwYDVQQD
EyhkZmFlZDgwNzVlNjQ2M2Q0ZWMyZmIzMDkwNzU2OWQ4ZDIyMzA4ZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBj6azHd63X1mQSR31iz1KJrXG5M
E/bqcPQAslaKbMLSWgixFGGPUZHlgehbH/ZaPCbrP/pNxeXU8zNBSvetk5+dwpRd
M3D52O03zgKmT7rDiZ/5wYRhEj5mhwoUwwhkFSR6UVOhMcZ1dA2VRxzOdxPcmFgY
p2YW14rbvxQofFN1g3lZLiQWxYZNfsYACQLiQ64ChPV4AkTiYHA7NSov2i2BuB3t
/yBjrKBPmudY8UN03lDm2mqOWzg0oo+aCdXiyAHU3xJ8Pslim+A8Pl0T5B/BBhot
CTZeJaklL0XvcsALMG9SXI8C1CqE7v9FgPohA/SIRn08dAPL3yqoypD0fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+u2AdeZGPU7C+zCQdWnY0iMI6QMB8GA1UdIwQY
MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt
MWVlY2Q1ODVkYjhjLzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj
LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMK8X+WN
3RDvQCac96ciaEGly5U6IAPSy8My9LA5S62Buwzs6gU0yJrPlLSRqQU02eBo+eP8
J/Bd+fVSFyYS8kCQnBDeisAoH7lJFXdFh+/qryfoM9Binr2QAx9I+8TYZOk4SOxI
cRQXX1ri13wZu781a2rWAZZ3CKts6yW/kHMYhd84rflhgi5z/IPgTGdyOwXd7t5s
lMicRjqwXCtZzaGiV3Qne90fLJlXzTisQD4/ImXrXzJ4v1xUOvKefX/GFwEMw/8p
t2FtCgmFE3c8VR+ii/I1ktcww98u/F5JlMSKWC2V6TW3HXtfzh+MI3DJZuqBiIZh
8JSdc5FK2CYBlw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:51 2025 by rpki-client