Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: D5RspHH6kPsLrvGrWDdTHDv9Sy5c4mjIbYkeKI3cluU=
Subject key identifier: FC:8C:78:04:F2:B9:25:CC:CB:B2:B0:70:1C:5B:0A:06:F7:A0:09:A7
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 0197808D86A67B2929B3C5DCD0D5A20376A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 1271
Signing time: Wed 18 Jun 2025 01:00:48 +0000
Manifest this update: Wed 18 Jun 2025 01:00:48 +0000
Manifest next update: Thu 19 Jun 2025 01:00:48 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: Yap3HFb4eqw+WxhYdtkVqlbPFDgi8eNhkXLIpKOoU+U=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8d:86:a6:7b:29:29:b3:c5:dc:d0:d5:a2:03:76:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Jun 18 01:00:48 2025 GMT
Not After : Jun 19 01:00:48 2025 GMT
Subject: CN=fc8c7804f2b925cccbb2b0701c5b0a06f7a009a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ae:9a:52:15:62:fe:e2:6e:93:8f:4d:ee:1c:
6a:1e:5d:8d:60:97:96:d3:45:94:0f:0c:fd:36:ab:
cf:91:df:e1:a9:7d:1a:f4:80:c3:57:aa:0f:eb:4e:
d2:c0:06:7b:cc:d1:d7:81:ae:3c:cb:17:17:45:19:
62:07:37:87:6c:d1:7f:4c:c1:34:63:3a:06:ee:b7:
8e:7e:17:10:ba:d8:cd:01:76:ff:71:b5:e4:25:7c:
72:a7:fc:45:29:2c:c6:7e:5d:eb:0d:c7:15:d8:3b:
ac:6e:9d:f5:17:fa:1e:b3:2c:0a:34:0d:ac:35:08:
ff:be:0e:18:49:a8:e9:8c:80:86:59:03:e8:96:e8:
d8:63:d6:fb:8c:11:ca:a9:cc:db:a0:22:c2:95:08:
83:75:af:2b:2a:3d:20:19:c9:9a:92:7b:e3:ef:c4:
c5:2e:4f:1f:6c:15:af:c2:80:1b:4c:c8:0b:60:c0:
38:19:77:81:11:7f:61:1e:bd:ca:ab:cc:18:15:c1:
60:ea:9b:ff:9f:2a:6b:df:36:14:ca:9e:b2:a2:84:
84:19:04:ff:5f:89:93:31:29:0b:32:75:b2:d2:62:
f3:07:30:53:e7:82:5b:de:2e:65:87:91:10:8e:8f:
c6:bb:53:f8:f0:a3:3a:30:b5:d6:a9:4f:61:8c:68:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8C:78:04:F2:B9:25:CC:CB:B2:B0:70:1C:5B:0A:06:F7:A0:09:A7
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f1:0f:f0:f2:23:59:cc:83:b3:70:25:41:b5:94:1b:d4:f6:
8e:eb:35:7d:69:1f:17:af:e1:32:22:2f:d1:02:85:98:70:b1:
66:b4:2c:ee:cb:67:86:4a:56:98:1a:ad:67:36:1c:7d:ba:ad:
7f:c4:99:a2:ec:3c:00:18:1e:57:ea:af:ab:0a:7f:7f:e4:b8:
c4:e8:5e:6c:da:3c:1a:c6:d4:52:dc:73:b3:12:5e:39:a9:7c:
63:66:96:2d:2a:5f:47:2a:3a:2e:23:e0:0d:ac:f9:48:88:7d:
4b:a3:7d:f7:ec:67:fd:3a:1c:e6:42:72:a9:76:2a:c9:e8:ec:
bd:82:e4:dc:c7:01:a5:8c:af:1b:71:21:37:41:e7:21:a0:b2:
04:88:36:78:77:a2:bb:d4:31:51:96:dc:ad:95:56:47:5e:2e:
00:26:fc:bd:8d:36:9d:4f:db:8d:70:ee:f7:f4:18:af:c7:5a:
58:f6:2c:41:45:21:ea:d6:9a:e5:ff:d4:15:07:de:36:2e:07:
ef:a4:5d:9c:dd:55:4c:10:91:ca:b6:ee:c7:8d:35:fe:fd:60:
5c:6f:3f:4f:93:fa:0b:5e:f8:2a:48:62:65:44:f3:2a:37:40:
79:a7:04:d4:49:ff:66:81:35:02:70:66:dd:f8:28:68:74:d1:
4c:81:cb:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAjYameykps8Xc0NWiA3aiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3
NjU2MmEwHhcNMjUwNjE4MDEwMDQ4WhcNMjUwNjE5MDEwMDQ4WjAzMTEwLwYDVQQD
EyhmYzhjNzgwNGYyYjkyNWNjY2JiMmIwNzAxYzViMGEwNmY3YTAwOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA566aUhVi/uJuk49N7hxqHl2NYJeW
00WUDwz9NqvPkd/hqX0a9IDDV6oP607SwAZ7zNHXga48yxcXRRliBzeHbNF/TME0
YzoG7reOfhcQutjNAXb/cbXkJXxyp/xFKSzGfl3rDccV2Dusbp31F/oesywKNA2s
NQj/vg4YSajpjICGWQPolujYY9b7jBHKqczboCLClQiDda8rKj0gGcmaknvj78TF
Lk8fbBWvwoAbTMgLYMA4GXeBEX9hHr3Kq8wYFcFg6pv/nypr3zYUyp6yooSEGQT/
X4mTMSkLMnWy0mLzBzBT54Jb3i5lh5EQjo/Gu1P48KM6MLXWqU9hjGib4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyMeATyuSXMy7KwcBxbCgb3oAmnMB8GA1UdIwQY
MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt
YzYzNDlkYjk0OTliLzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEtYzYzNDlkYjk0OTli
LzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/EP8PIj
WcyDs3AlQbWUG9T2jus1fWkfF6/hMiIv0QKFmHCxZrQs7stnhkpWmBqtZzYcfbqt
f8SZouw8ABgeV+qvqwp/f+S4xOhebNo8GsbUUtxzsxJeOal8Y2aWLSpfRyo6LiPg
Daz5SIh9S6N99+xn/Toc5kJyqXYqyejsvYLk3McBpYyvG3EhN0HnIaCyBIg2eHei
u9QxUZbcrZVWR14uACb8vY02nU/bjXDu9/QYr8daWPYsQUUh6taa5f/UFQfeNi4H
76RdnN1VTBCRyrbux401/v1gXG8/T5P6C174KkhiZUTzKjdAeacE1En/ZoE1AnBm
3fgoaHTRTIHLlQ==
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:16:52 2025 by rpki-client