Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: l0y6qh3RMRDdT4fWY0SYuVbA0Rq/ajU2FZ+Mq/PUQuA=
Subject key identifier: C5:98:07:F5:D9:C8:04:63:03:12:A0:49:D8:A1:C4:55:28:C1:84:DE
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 01976C98B07C9D52C5FFEAAEAA25D5547CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 04CE
Signing time: Sat 14 Jun 2025 04:00:35 +0000
Manifest this update: Sat 14 Jun 2025 04:00:35 +0000
Manifest next update: Sun 15 Jun 2025 04:00:35 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: I6xmnCPv9GN6T8Fo7fruHkQj6sTcUti96lhBmlq7+Xw=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:b0:7c:9d:52:c5:ff:ea:ae:aa:25:d5:54:7c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Jun 14 04:00:35 2025 GMT
Not After : Jun 15 04:00:35 2025 GMT
Subject: CN=c59807f5d9c804630312a049d8a1c45528c184de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:69:fe:a0:33:95:57:32:f8:f8:e4:13:0e:
b0:a2:50:96:74:ca:83:b5:3a:9a:f4:e4:4f:45:b7:
ec:af:a4:40:6f:d4:a3:74:80:bf:ee:42:0d:d1:47:
7f:fd:b9:0d:0a:8f:5c:32:f2:42:3c:05:98:9f:12:
af:b2:75:de:6e:35:ff:cb:07:b1:00:3a:ee:99:a8:
b0:7a:fd:dd:93:28:55:7c:33:e5:57:29:9b:45:2d:
69:33:87:f3:6c:07:87:dc:67:a7:57:94:6e:14:b6:
57:2b:3a:38:39:b8:97:01:b2:9f:51:68:f5:61:fd:
06:90:b5:b8:19:65:81:4c:3b:6b:06:11:4a:87:54:
6e:6c:52:30:88:24:bc:83:11:ad:8d:13:44:6c:d7:
62:ff:ab:75:ed:7e:24:cd:92:22:f6:8a:54:18:e8:
9b:11:30:3a:2b:79:ad:f5:3d:a7:e1:4e:1e:34:aa:
a6:4f:e1:c9:c1:79:7b:b4:db:21:4c:50:c7:52:a4:
f9:ff:90:7e:fc:98:cf:60:f8:8e:aa:cc:78:55:2f:
1c:11:0e:5c:3c:36:bf:36:17:55:c8:80:95:f3:5b:
23:72:f9:f0:a8:42:06:c5:d9:0c:fd:e8:f6:d6:c4:
dd:73:49:02:1d:0a:72:26:54:c1:bb:03:9c:f9:af:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:07:F5:D9:C8:04:63:03:12:A0:49:D8:A1:C4:55:28:C1:84:DE
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0e:a1:45:c9:7f:9a:99:e1:e3:ae:e6:73:68:5b:e9:85:4b:
60:ac:45:b3:eb:f0:7a:25:ad:2f:9d:a8:75:e4:28:cb:d9:32:
5f:d6:98:7b:1f:fd:02:23:66:eb:7b:d4:79:50:c1:3c:d1:3e:
43:2e:03:97:ab:20:37:80:0c:39:d5:1c:37:2f:b8:57:78:88:
5b:19:5c:97:5b:05:27:f2:6a:96:76:aa:e5:fb:c4:91:d1:3b:
db:e1:f1:ee:46:a3:35:ec:12:4b:95:31:db:41:74:d5:cb:54:
37:46:1c:53:d9:2f:75:09:71:ad:f0:82:6b:86:82:a1:fc:eb:
49:78:44:b7:45:80:25:bf:fd:16:17:7b:9b:fd:b9:73:4b:74:
38:c0:3a:04:4e:b3:f6:a4:ab:c3:d9:29:8f:10:da:e3:1a:a7:
f8:d9:71:4c:b1:77:29:35:d8:10:62:b1:2f:29:73:f8:06:15:
00:e5:50:ce:c2:31:1a:ba:a6:99:85:e5:a0:4c:67:d9:1c:9b:
75:fc:f9:3f:7f:50:6a:a4:6f:7a:d7:50:ec:c9:70:a6:ed:0b:
aa:68:94:83:c2:6c:05:fd:5f:49:e8:51:fe:1f:4f:f6:46:9b:
a2:1a:73:52:34:56:42:58:5d:7f:5f:e3:e2:f1:7d:96:cc:b2:
8e:c3:be:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmLB8nVLF/+quqiXVVHzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzI2OWY5ZTkzYjBmYjhiYzRiMWM5NDdhYmM1YjIxZjIx
ZjIzMDUwHhcNMjUwNjE0MDQwMDM1WhcNMjUwNjE1MDQwMDM1WjAzMTEwLwYDVQQD
EyhjNTk4MDdmNWQ5YzgwNDYzMDMxMmEwNDlkOGExYzQ1NTI4YzE4NGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyxp/qAzlVcy+PjkEw6wolCWdMqD
tTqa9ORPRbfsr6RAb9SjdIC/7kIN0Ud//bkNCo9cMvJCPAWYnxKvsnXebjX/ywex
ADrumaiwev3dkyhVfDPlVymbRS1pM4fzbAeH3GenV5RuFLZXKzo4ObiXAbKfUWj1
Yf0GkLW4GWWBTDtrBhFKh1RubFIwiCS8gxGtjRNEbNdi/6t17X4kzZIi9opUGOib
ETA6K3mt9T2n4U4eNKqmT+HJwXl7tNshTFDHUqT5/5B+/JjPYPiOqsx4VS8cEQ5c
PDa/NhdVyICV81sjcvnwqEIGxdkM/ej21sTdc0kCHQpyJlTBuwOc+a/bQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWYB/XZyARjAxKgSdihxFUowYTeMB8GA1UdIwQY
MBaAFNbCafnpOw+4vEsclHq8WyHyHyMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEt
Yjc5Y2ZjMjRkM2I3LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEtYjc5Y2ZjMjRkM2I3
LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnw6hRcl/
mpnh467mc2hb6YVLYKxFs+vweiWtL52odeQoy9kyX9aYex/9AiNm63vUeVDBPNE+
Qy4Dl6sgN4AMOdUcNy+4V3iIWxlcl1sFJ/Jqlnaq5fvEkdE72+Hx7kajNewSS5Ux
20F01ctUN0YcU9kvdQlxrfCCa4aCofzrSXhEt0WAJb/9Fhd7m/25c0t0OMA6BE6z
9qSrw9kpjxDa4xqn+NlxTLF3KTXYEGKxLylz+AYVAOVQzsIxGrqmmYXloExn2Ryb
dfz5P39QaqRvetdQ7Mlwpu0LqmiUg8JsBf1fSehR/h9P9kabohpzUjRWQlhdf1/j
4vF9lsyyjsO+kg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:17 2025 by rpki-client