Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: l7Qr5ayff0pZRmPulUF1tQ2G7m865f/tarP7VHBEwr0=
Subject key identifier: CA:52:DE:4B:BF:96:9D:75:52:71:72:07:A2:5B:87:1E:13:D7:5A:B7
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 01977007F8255041387213578B611DDB6058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 1565
Signing time: Sat 14 Jun 2025 20:00:59 +0000
Manifest this update: Sat 14 Jun 2025 20:00:59 +0000
Manifest next update: Sun 15 Jun 2025 20:00:59 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: zp/XivrhNcKCL6otZVV1AuMTJxinq3dCu8BBpVQaHUk=)
2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:f8:25:50:41:38:72:13:57:8b:61:1d:db:60:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Jun 14 20:00:59 2025 GMT
Not After : Jun 15 20:00:59 2025 GMT
Subject: CN=ca52de4bbf969d7552717207a25b871e13d75ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:d5:52:a4:12:f7:7a:b2:ea:d3:de:0d:f4:
e5:d1:0f:3f:0d:03:9b:1f:2d:6a:9d:71:a0:c1:df:
03:26:37:eb:fe:30:d9:f0:c3:5a:4c:42:3a:4c:7d:
83:d1:44:81:db:6a:a1:9b:d7:7a:c8:a3:2b:99:6b:
a5:ad:60:fc:18:5f:0a:87:41:b6:e6:9c:64:b2:35:
5a:67:51:fc:c5:87:3f:a8:c5:64:7b:8a:1a:da:ce:
4b:df:3d:11:7d:89:3f:a6:54:f8:90:15:12:52:99:
83:9d:19:50:43:08:5a:d4:11:e8:7a:8b:58:ee:78:
0f:e9:fe:55:ec:bf:35:ee:30:ac:17:e5:85:83:8c:
ce:49:9f:65:85:86:4e:40:75:79:8c:ed:81:ed:95:
c0:95:77:b4:93:7f:e5:59:78:1b:f7:41:4d:80:b3:
2d:6c:8b:e8:e2:a4:4d:f1:e5:23:fe:76:85:1b:d4:
fa:94:b1:07:1f:7e:6d:31:0b:fd:4c:40:9e:0c:74:
88:e6:fc:94:4f:3b:3f:dd:b7:2a:da:9f:97:1b:93:
6f:46:7c:b9:5c:56:97:ae:2a:6c:92:da:ab:07:54:
de:45:2f:26:92:b0:22:f8:8a:a5:31:0b:fd:bd:5f:
c9:c8:c9:bc:2b:a3:fd:ff:03:b7:aa:35:60:0e:b8:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:52:DE:4B:BF:96:9D:75:52:71:72:07:A2:5B:87:1E:13:D7:5A:B7
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:31:38:d4:5b:1a:03:64:9c:0d:fb:e1:9d:5d:2f:58:7e:bd:
d0:5a:e6:86:9a:d0:14:7b:c1:61:77:42:a9:6f:77:93:49:d9:
b0:84:6a:2e:94:9a:5c:34:fe:f4:db:b3:8d:5e:ff:63:d9:86:
18:e4:26:f5:34:7c:28:46:97:a9:d6:ce:c6:8f:ed:7d:3a:ec:
2b:ba:f4:71:64:28:b8:05:50:93:bd:4d:7d:af:3b:34:26:56:
7a:98:96:0f:7e:ac:b9:e0:f8:2f:16:7d:43:ee:f3:50:e2:09:
86:5a:b1:fa:5d:9b:7c:9d:cb:5e:03:ab:e7:e0:92:d9:bd:67:
89:3a:04:d0:02:7a:bc:3e:fa:9d:bf:68:10:73:28:47:ca:25:
cb:cb:0b:00:10:03:9e:09:c0:fc:14:55:16:93:b1:9c:94:1e:
a7:36:ec:03:05:ef:96:83:22:b6:7a:2b:81:17:6d:74:3d:fb:
12:db:d6:d1:3b:cd:25:fa:08:bb:ca:c2:37:3f:7d:ca:e1:2a:
be:77:14:d6:bd:78:de:18:90:df:50:ea:c6:f5:bb:be:36:9c:
15:d8:cb:7b:e0:17:af:87:6f:26:1b:40:36:ec:a4:c4:1c:e9:
23:a8:d8:90:bf:c4:bd:24:14:0a:04:87:3d:36:74:68:90:8e:
2d:3c:23:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB/glUEE4chNXi2Ed22BYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZiODQzNmY2NjM0Y2QzMWQ3MDk3Y2UyNDJhNTQ5OTM1
YjE4ZDcwHhcNMjUwNjE0MjAwMDU5WhcNMjUwNjE1MjAwMDU5WjAzMTEwLwYDVQQD
EyhjYTUyZGU0YmJmOTY5ZDc1NTI3MTcyMDdhMjViODcxZTEzZDc1YWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcTVUqQS93qy6tPeDfTl0Q8/DQOb
Hy1qnXGgwd8DJjfr/jDZ8MNaTEI6TH2D0USB22qhm9d6yKMrmWulrWD8GF8Kh0G2
5pxksjVaZ1H8xYc/qMVke4oa2s5L3z0RfYk/plT4kBUSUpmDnRlQQwha1BHoeotY
7ngP6f5V7L817jCsF+WFg4zOSZ9lhYZOQHV5jO2B7ZXAlXe0k3/lWXgb90FNgLMt
bIvo4qRN8eUj/naFG9T6lLEHH35tMQv9TECeDHSI5vyUTzs/3bcq2p+XG5NvRny5
XFaXripsktqrB1TeRS8mkrAi+IqlMQv9vV/JyMm8K6P9/wO3qjVgDrj5BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpS3ku/lp11UnFyB6Jbhx4T11q3MB8GA1UdIwQY
MBaAFND2uENvZjTNMdcJfOJCpUmTWxjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAt
NTVkYThlYzM2MDE0LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAtNTVkYThlYzM2MDE0
LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDE41Fsa
A2ScDfvhnV0vWH690FrmhprQFHvBYXdCqW93k0nZsIRqLpSaXDT+9NuzjV7/Y9mG
GOQm9TR8KEaXqdbOxo/tfTrsK7r0cWQouAVQk71Nfa87NCZWepiWD36sueD4LxZ9
Q+7zUOIJhlqx+l2bfJ3LXgOr5+CS2b1niToE0AJ6vD76nb9oEHMoR8oly8sLABAD
ngnA/BRVFpOxnJQepzbsAwXvloMitnorgRdtdD37EtvW0TvNJfoIu8rCNz99yuEq
vncU1r143hiQ31DqxvW7vjacFdjLe+AXr4dvJhtANuykxBzpI6jYkL/EvSQUCgSH
PTZ0aJCOLTwj/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:09:37 2025 by rpki-client