Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: l7y2hxfT+ySKankoAt0IQcNByg4U4FiGK2Cf1gp7k1U=
Subject key identifier: 20:B0:14:6E:BA:87:3A:E4:C0:47:4F:CF:7C:1B:DF:E2:6E:02:90:4E
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 01976CCFAF85AA04572E7C141B5AE86FFAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 12D4
Signing time: Sat 14 Jun 2025 05:00:39 +0000
Manifest this update: Sat 14 Jun 2025 05:00:39 +0000
Manifest next update: Sun 15 Jun 2025 05:00:39 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: aUXzNkzeNFv/MTnSYj1bBjhn6gKiLr6rHAGQ4/JcL3M=)
2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=)
3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:af:85:aa:04:57:2e:7c:14:1b:5a:e8:6f:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Jun 14 05:00:39 2025 GMT
Not After : Jun 15 05:00:39 2025 GMT
Subject: CN=20b0146eba873ae4c0474fcf7c1bdfe26e02904e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b8:73:0b:10:b6:27:7c:f7:57:f0:e9:10:6b:
d2:62:09:1d:37:a9:1d:e8:75:06:97:17:cb:27:22:
64:51:3c:3f:6c:3f:1b:57:cb:8e:34:8b:35:b9:77:
dc:09:98:e3:47:14:6d:16:e9:62:d3:7b:72:a3:3d:
76:14:f2:47:f9:61:d6:14:f9:3b:a8:17:b7:64:44:
5e:12:64:f5:7c:39:45:6f:bc:66:7a:49:fd:33:68:
fd:08:0c:2f:30:1a:81:f3:e7:8c:a4:8c:dc:f3:14:
39:3e:cf:df:9b:fb:1e:d4:62:75:81:13:84:74:42:
09:24:ec:63:9d:73:49:6a:e5:e6:b6:e0:23:5a:b5:
a8:1d:80:84:2a:77:cd:47:5a:a2:6a:b6:ff:af:6f:
19:0e:0f:f7:62:e0:7a:9b:6e:49:44:de:54:fb:99:
20:0c:52:41:47:42:8d:5d:4f:08:9e:04:9a:4b:44:
e8:f2:2f:4f:7f:84:af:20:b6:bd:7a:2e:40:b1:49:
36:53:37:de:ec:57:2f:c3:b8:45:77:f1:5a:81:bb:
d1:2c:8e:54:18:8d:ca:71:8a:14:24:9e:7c:77:52:
be:3f:95:b7:0d:6c:b0:59:8c:5c:c9:48:0f:f6:a8:
86:bc:cb:8f:89:97:b0:91:e5:69:e4:d6:3c:1e:69:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B0:14:6E:BA:87:3A:E4:C0:47:4F:CF:7C:1B:DF:E2:6E:02:90:4E
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e8:4e:9f:b8:c1:a7:b5:b9:58:d9:b9:c8:f5:2a:39:e2:98:
e6:ae:a4:f4:0e:95:70:32:74:ee:34:c1:bb:64:b3:cc:2d:f5:
f0:b9:16:12:61:0d:4b:98:5b:90:87:58:ba:1f:eb:2c:db:ed:
af:3e:2b:9f:bf:ad:57:43:29:65:8a:8a:32:bd:25:ae:0b:2b:
71:96:53:fd:95:3f:02:8a:28:26:aa:74:dd:9f:b9:c4:73:2d:
a0:d9:1f:d2:b9:48:7f:74:08:e1:77:3d:45:4d:d4:2e:75:d7:
ac:a4:18:01:3f:0e:3e:0e:ff:36:36:34:ec:54:0b:26:22:ec:
86:d0:74:83:0d:b9:01:35:36:3e:be:83:c2:2d:6d:8c:28:ff:
6a:e3:16:de:7e:e4:67:da:98:d5:6d:52:2f:ac:4d:24:9e:72:
df:4a:8d:05:24:ea:72:7a:34:ae:85:01:4a:cf:72:f1:4a:3c:
64:10:9d:71:29:59:2b:9a:72:80:4a:98:2d:2d:4d:b1:02:35:
40:e5:e9:9f:c3:10:3c:c5:2c:60:7f:b2:19:6d:be:4c:83:3e:
14:4b:9e:94:c5:d8:18:7e:56:e5:25:2d:d8:91:6f:ed:0b:a8:
99:e2:a1:6f:f2:bc:88:ea:76:d7:86:07:a6:8c:91:16:c8:b7:
af:3a:5c:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz6+FqgRXLnwUG1rob/quMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTkyYWFjNDg5NTIyZDVkYjE4ZmQ2MzkxZTAzNWE5Nzc4
ZWEzYjEwHhcNMjUwNjE0MDUwMDM5WhcNMjUwNjE1MDUwMDM5WjAzMTEwLwYDVQQD
EygyMGIwMTQ2ZWJhODczYWU0YzA0NzRmY2Y3YzFiZGZlMjZlMDI5MDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLhzCxC2J3z3V/DpEGvSYgkdN6kd
6HUGlxfLJyJkUTw/bD8bV8uONIs1uXfcCZjjRxRtFuli03tyoz12FPJH+WHWFPk7
qBe3ZEReEmT1fDlFb7xmekn9M2j9CAwvMBqB8+eMpIzc8xQ5Ps/fm/se1GJ1gROE
dEIJJOxjnXNJauXmtuAjWrWoHYCEKnfNR1qiarb/r28ZDg/3YuB6m25JRN5U+5kg
DFJBR0KNXU8IngSaS0To8i9Pf4SvILa9ei5AsUk2Uzfe7Fcvw7hFd/FagbvRLI5U
GI3KcYoUJJ58d1K+P5W3DWywWYxcyUgP9qiGvMuPiZewkeVp5NY8HmmBoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCwFG66hzrkwEdPz3wb3+JuApBOMB8GA1UdIwQY
MBaAFNNZKqxIlSLV2xj9Y5HgNal3jqOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUt
ZTMzYWUxMDZiNTRkLzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUtZTMzYWUxMDZiNTRk
LzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+hOn7jB
p7W5WNm5yPUqOeKY5q6k9A6VcDJ07jTBu2SzzC318LkWEmENS5hbkIdYuh/rLNvt
rz4rn7+tV0MpZYqKMr0lrgsrcZZT/ZU/AoooJqp03Z+5xHMtoNkf0rlIf3QI4Xc9
RU3ULnXXrKQYAT8OPg7/NjY07FQLJiLshtB0gw25ATU2Pr6Dwi1tjCj/auMW3n7k
Z9qY1W1SL6xNJJ5y30qNBSTqcno0roUBSs9y8Uo8ZBCdcSlZK5pygEqYLS1NsQI1
QOXpn8MQPMUsYH+yGW2+TIM+FEuelMXYGH5W5SUt2JFv7QuomeKhb/K8iOp214YH
poyRFsi3rzpcmA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:32:28 2025 by rpki-client