Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: lKtpzI6NnKHa25JDkSfa2PyZLMy3Jk/1tDVGyTPcUSU=
Subject key identifier: 71:3D:3B:DC:2F:36:E4:BF:86:7B:2B:56:E9:88:5A:53:77:27:02:56
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 01976F99F6F2F94CF38704C3B4B5F3626F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 18:00:50 +0000
Manifest this update: Sat 14 Jun 2025 18:00:50 +0000
Manifest next update: Sun 15 Jun 2025 18:00:50 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: nG63VE8RCV9rpjtXnFeYS3jGr8NCJOzsvsM7Ci6H5c8=)
2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:f6:f2:f9:4c:f3:87:04:c3:b4:b5:f3:62:6f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: Jun 14 18:00:50 2025 GMT
Not After : Jun 15 18:00:50 2025 GMT
Subject: CN=713d3bdc2f36e4bf867b2b56e9885a5377270256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:0d:ac:ec:74:5d:bf:5f:c4:7c:7e:c7:70:
f9:a3:eb:22:25:9c:52:0d:62:f0:59:ca:bd:d1:f2:
35:8e:71:8c:9e:e2:d7:12:99:95:d4:67:8f:18:8c:
ac:cc:58:fa:7f:50:e9:c5:42:ce:16:c7:53:a0:27:
a2:4d:fe:1d:eb:04:b4:09:81:23:08:7b:b3:4d:f6:
6a:ad:e8:f5:7e:f2:e9:3d:4d:e3:bb:40:6f:d3:8e:
5c:0e:5d:7b:0a:6f:ca:82:25:44:b4:72:d0:b3:22:
fe:98:93:f1:4a:b6:41:fd:11:9c:f6:e0:ca:4d:93:
51:a5:8f:4c:ff:9e:d4:3a:31:b3:fe:5e:ab:34:3d:
57:79:05:3a:73:9c:f5:7e:1f:e0:db:f8:84:c7:6e:
6f:dc:cb:cd:84:c2:22:16:66:b8:cc:24:34:a7:74:
92:23:73:6b:d9:33:94:17:62:ce:4a:53:3d:2f:ab:
95:1c:09:ee:aa:de:af:8e:e1:18:6d:a2:ea:ec:02:
74:d9:4c:ad:35:04:58:ad:ca:a1:1f:3e:7f:aa:e2:
99:0f:03:9a:26:9c:f4:77:70:da:45:37:b0:03:bf:
5f:70:d7:12:ef:ba:bd:07:4f:fb:44:35:a1:15:21:
eb:19:cd:74:23:09:03:13:a3:39:bf:38:50:62:93:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3D:3B:DC:2F:36:E4:BF:86:7B:2B:56:E9:88:5A:53:77:27:02:56
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:19:99:79:36:7d:eb:6e:02:13:ba:78:58:8b:47:f0:5f:e6:
2a:2e:55:b4:15:21:f6:47:d8:94:2f:be:3a:d4:28:40:26:6d:
ce:bc:60:9f:fc:c2:a0:10:ad:0c:2c:6c:41:ea:f7:53:f7:38:
32:30:1d:d7:95:b6:58:c5:8c:bd:e7:b0:aa:3e:fc:22:a6:33:
b5:e5:41:9f:22:25:fb:e2:7a:df:3d:c1:b8:d4:2b:65:a0:47:
b0:65:08:d3:ad:73:61:1d:cb:6b:77:6b:e0:b1:fa:91:46:7a:
ad:38:00:b1:f1:29:17:57:20:db:ed:e2:ed:67:fd:72:99:6e:
da:27:24:66:84:9b:b2:0b:c2:68:e2:6a:2e:46:7b:44:b0:0e:
c6:e8:f2:30:86:c1:e2:16:5d:cf:4d:90:ab:2b:ad:0a:61:5c:
72:6b:6c:63:74:b5:63:ee:3b:1b:72:f6:3c:84:99:08:69:26:
5f:6a:7f:61:f6:5b:e5:c9:e2:61:db:40:a8:82:b1:1f:e2:bf:
a8:43:45:81:42:ea:c1:85:8b:da:63:23:e1:cd:4e:88:4f:d4:
a3:97:7d:a2:b4:2e:ea:91:6c:19:15:21:7d:d1:5d:34:1b:f4:
e1:ca:04:02:8f:8e:0c:02:bc:ce:fe:02:76:c0:4c:0f:71:19:
79:e6:9a:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmfby+UzzhwTDtLXzYm8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzY4MTZlMGEzYTJmNjE2YzNhYTc3YTM2YjRjYWY3YTky
MjQwMzQwHhcNMjUwNjE0MTgwMDUwWhcNMjUwNjE1MTgwMDUwWjAzMTEwLwYDVQQD
Eyg3MTNkM2JkYzJmMzZlNGJmODY3YjJiNTZlOTg4NWE1Mzc3MjcwMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjUNrOx0Xb9fxHx+x3D5o+siJZxS
DWLwWcq90fI1jnGMnuLXEpmV1GePGIyszFj6f1DpxULOFsdToCeiTf4d6wS0CYEj
CHuzTfZqrej1fvLpPU3ju0Bv045cDl17Cm/KgiVEtHLQsyL+mJPxSrZB/RGc9uDK
TZNRpY9M/57UOjGz/l6rND1XeQU6c5z1fh/g2/iEx25v3MvNhMIiFma4zCQ0p3SS
I3Nr2TOUF2LOSlM9L6uVHAnuqt6vjuEYbaLq7AJ02UytNQRYrcqhHz5/quKZDwOa
Jpz0d3DaRTewA79fcNcS77q9B0/7RDWhFSHrGc10IwkDE6M5vzhQYpP+1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHE9O9wvNuS/hnsrVumIWlN3JwJWMB8GA1UdIwQY
MBaAFOLGgW4KOi9hbDqneja0yvepIkA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEt
MjAyYzUxNzIwYWI3LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEtMjAyYzUxNzIwYWI3
LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxmZeTZ9
624CE7p4WItH8F/mKi5VtBUh9kfYlC++OtQoQCZtzrxgn/zCoBCtDCxsQer3U/c4
MjAd15W2WMWMveewqj78IqYzteVBnyIl++J63z3BuNQrZaBHsGUI061zYR3La3dr
4LH6kUZ6rTgAsfEpF1cg2+3i7Wf9cplu2ickZoSbsgvCaOJqLkZ7RLAOxujyMIbB
4hZdz02QqyutCmFccmtsY3S1Y+47G3L2PISZCGkmX2p/YfZb5cniYdtAqIKxH+K/
qENFgULqwYWL2mMj4c1OiE/Uo5d9orQu6pFsGRUhfdFdNBv04coEAo+ODAK8zv4C
dsBMD3EZeeaaLg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:35:02 2025 by rpki-client