Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File: fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier: 2ijHde0apu1b5nos4TtpOe+3SvKCsVjZ2gzYdm25gH4=
Subject key identifier: C1:CC:45:72:E2:E4:36:11:17:2B:FE:34:C3:E9:B4:26:D1:F7:B2:C1
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer: /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial: 019771514CFD3E8CFAEF77F40E98B64B1ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 02:00:42 +0000
Manifest this update: Sun 15 Jun 2025 02:00:42 +0000
Manifest next update: Mon 16 Jun 2025 02:00:42 +0000
Files and hashes: 1: EeK6cauICbjiVCSXw89JJKbgWuI.roa (hash: dQibGt3eUNBx7bxOeGKDFYcaj4qO4S1imLS16SxshcI=)
2: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: hZPkkZva7G8a8bQYIQjGfaxBtjKJ1kJhwfFWN5d7+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:4c:fd:3e:8c:fa:ef:77:f4:0e:98:b6:4b:1e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Validity
Not Before: Jun 15 02:00:42 2025 GMT
Not After : Jun 16 02:00:42 2025 GMT
Subject: CN=c1cc4572e2e43611172bfe34c3e9b426d1f7b2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:03:8e:26:95:64:26:cd:d5:d5:9d:cc:ce:
06:cd:03:17:08:62:ec:ce:03:36:c2:af:2a:90:9e:
cf:d3:39:41:08:3c:70:f1:6b:c4:4b:67:6b:74:6e:
a2:f1:02:fa:ef:d2:fe:ed:73:ad:3c:4c:d8:8f:13:
60:da:fe:a2:4f:9c:62:a0:95:fe:e9:3d:55:32:54:
d1:d4:94:b0:67:f0:a4:a7:6f:65:e8:2b:b9:11:93:
95:5e:ab:2e:31:44:c7:fd:de:b3:18:a9:d2:14:1e:
20:01:87:4c:e2:09:fe:e0:2f:0d:55:88:90:66:e6:
c6:77:b0:fd:e0:3b:34:10:02:48:50:90:2b:53:be:
23:60:ff:9c:82:f1:ff:2f:e8:ac:72:30:4b:a7:38:
f6:83:b7:e5:52:47:2c:1b:df:e9:85:d8:32:b4:5b:
d2:6c:71:49:30:ff:45:78:00:76:88:98:3f:14:1d:
20:75:7d:e0:1b:2a:99:22:2e:42:e0:b8:7a:50:98:
fa:5e:27:50:6f:ec:fa:fd:52:aa:f7:b6:81:8f:6f:
62:29:60:cb:c7:08:18:82:1b:ea:5b:17:0d:c5:87:
90:5a:52:17:68:8b:dd:49:40:ae:ad:da:7d:a1:98:
51:11:52:eb:70:c8:c6:56:df:ce:f3:c7:ad:38:1b:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CC:45:72:E2:E4:36:11:17:2B:FE:34:C3:E9:B4:26:D1:F7:B2:C1
X509v3 Authority Key Identifier:
keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c9:b6:68:18:87:5c:32:00:7c:fe:a6:bb:43:4a:31:4c:4d:
9a:d8:9a:32:32:9a:ea:97:31:4e:ef:52:09:43:5e:3b:d4:70:
1d:9f:a8:9b:98:26:18:18:35:7f:c7:1a:35:74:45:2f:c8:17:
86:18:89:59:23:30:86:c9:dd:d2:06:58:a0:fc:26:9e:a5:a5:
d0:e6:0e:ba:20:bd:c3:df:b0:30:cb:0f:b1:16:0a:14:8c:d7:
ed:f8:b0:a4:1a:2f:f4:21:d0:47:be:a8:82:c8:1b:a1:fb:df:
46:26:99:80:da:c8:0c:8b:69:0d:6b:e0:d6:7b:a1:22:3e:97:
a9:cf:3a:4e:41:8c:fd:82:ec:c3:59:39:47:b5:0d:50:f2:df:
91:ac:68:68:c5:e7:ad:f5:94:7d:cf:c6:7b:f5:c3:ae:00:96:
91:7e:99:1b:d1:00:50:a2:87:be:99:d0:72:b0:df:d0:7e:17:
40:8f:9f:75:dd:ae:ba:42:90:10:a2:29:70:ad:d5:b9:b2:1e:
d7:23:54:76:67:72:20:26:de:8c:df:80:2e:81:ee:a5:ad:17:
7b:bf:3c:b8:1f:5e:80:36:fc:76:6c:87:0a:42:e5:ae:5a:2e:
f1:08:2b:44:2a:e9:8e:68:a5:21:25:da:c9:01:a9:1e:bf:be:
af:01:58:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUUz9Poz673f0Dpi2Sx7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGMxMzcxZGQ2YWZkNWZkNzllYTk4NGRhM2ZiZGExYjk0
YWZlMjMwHhcNMjUwNjE1MDIwMDQyWhcNMjUwNjE2MDIwMDQyWjAzMTEwLwYDVQQD
EyhjMWNjNDU3MmUyZTQzNjExMTcyYmZlMzRjM2U5YjQyNmQxZjdiMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6gDjiaVZCbN1dWdzM4GzQMXCGLs
zgM2wq8qkJ7P0zlBCDxw8WvES2drdG6i8QL679L+7XOtPEzYjxNg2v6iT5xioJX+
6T1VMlTR1JSwZ/Ckp29l6Cu5EZOVXqsuMUTH/d6zGKnSFB4gAYdM4gn+4C8NVYiQ
ZubGd7D94Ds0EAJIUJArU74jYP+cgvH/L+iscjBLpzj2g7flUkcsG9/phdgytFvS
bHFJMP9FeAB2iJg/FB0gdX3gGyqZIi5C4Lh6UJj6XidQb+z6/VKq97aBj29iKWDL
xwgYghvqWxcNxYeQWlIXaIvdSUCurdp9oZhREVLrcMjGVt/O88etOBtapwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHMRXLi5DYRFyv+NMPptCbR97LBMB8GA1UdIwQY
MBaAFHyME3Hdav1f156phNo/vaG5Sv4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOTQ2NTItMTU2NC00ZDFiLTgxOTgt
MWFjNWQ4ODYzMDgyLzEvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lOTQ2NTItMTU2NC00ZDFiLTgxOTgtMWFjNWQ4ODYzMDgy
LzEvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMm2aBiH
XDIAfP6mu0NKMUxNmtiaMjKa6pcxTu9SCUNeO9RwHZ+om5gmGBg1f8caNXRFL8gX
hhiJWSMwhsnd0gZYoPwmnqWl0OYOuiC9w9+wMMsPsRYKFIzX7fiwpBov9CHQR76o
gsgbofvfRiaZgNrIDItpDWvg1nuhIj6Xqc86TkGM/YLsw1k5R7UNUPLfkaxoaMXn
rfWUfc/Ge/XDrgCWkX6ZG9EAUKKHvpnQcrDf0H4XQI+fdd2uukKQEKIpcK3VubIe
1yNUdmdyICbejN+ALoHupa0Xe788uB9egDb8dmyHCkLlrlou8QgrRCrpjmilISXa
yQGpHr++rwFY/g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:50 2025 by rpki-client