Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: W9XNQHuFmBmUPwx1WG9aCVzWRcbA48DBFoz2YwNfIlY=
Subject key identifier: 8E:8D:17:15:52:29:4C:2C:62:05:55:44:0A:34:0E:35:32:9D:07:3B
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 0197703EF94FC8D151D0DADFC651641B82C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 03C1
Signing time: Sat 14 Jun 2025 21:01:04 +0000
Manifest this update: Sat 14 Jun 2025 21:01:04 +0000
Manifest next update: Sun 15 Jun 2025 21:01:04 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: 7oFEoldfdjZuZeQS/FJMx7HV7ujZZr8dmwjibBW/DNU=)
2: tavXsXu7Wm_kIdKnzfVPzxktMGQ.roa (hash: PDEUyoKVmJLpE4EXJZCm2eA6jcMg8DukO+sjxPMBeZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:f9:4f:c8:d1:51:d0:da:df:c6:51:64:1b:82:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Jun 14 21:01:04 2025 GMT
Not After : Jun 15 21:01:04 2025 GMT
Subject: CN=8e8d171552294c2c620555440a340e35329d073b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:df:86:69:d3:26:aa:50:bb:c2:3c:80:80:
f3:d5:a8:52:b9:ad:46:49:f2:ef:33:82:8d:8b:43:
9c:37:5b:61:bd:4f:c9:ee:70:88:61:cd:59:22:df:
2e:ba:0a:7c:d1:c9:dc:d3:7c:86:06:00:56:f6:44:
8e:a1:05:dc:88:0f:5b:5d:90:00:91:c0:83:cb:db:
52:53:a8:85:49:d5:c7:43:cb:9d:de:61:e5:dd:1d:
61:4b:f7:bf:47:17:1b:08:42:f5:b3:84:fa:6e:2f:
da:59:0a:67:ef:b0:75:b2:fb:2e:9f:a4:0f:e0:a1:
af:f1:80:14:26:7f:f6:cd:a6:79:df:c2:15:90:4e:
5a:be:30:21:69:f2:96:44:89:20:95:e6:bb:a3:0a:
8c:a8:cf:d9:90:ac:9c:81:0f:9d:a0:f5:99:f9:6a:
16:db:91:eb:53:cd:51:f2:6d:19:0c:e7:71:3c:d4:
aa:49:b1:bd:7f:ce:e2:7b:15:5c:22:6c:bb:2e:74:
3e:a6:ce:ed:28:55:88:d0:95:63:77:ce:ae:23:0a:
f4:4e:04:8c:10:a4:49:38:28:cb:4b:e6:57:a5:cc:
5c:52:95:7d:86:19:6e:6a:e4:23:d2:f5:aa:ae:77:
4a:58:f1:87:56:57:c7:58:c2:6f:95:a3:a5:59:4e:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:17:15:52:29:4C:2C:62:05:55:44:0A:34:0E:35:32:9D:07:3B
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:60:a9:09:e7:ad:88:70:c0:85:4a:69:b4:06:25:5f:72:72:
6b:10:0c:28:00:49:13:ef:2a:b3:69:ac:4e:60:a0:bd:f8:c9:
6c:85:eb:26:b0:21:03:ea:c5:55:41:13:71:3b:b1:db:dd:fe:
e9:fd:2f:06:b1:30:e5:1a:a7:6a:41:9a:4b:45:49:5e:54:c7:
bb:36:b0:5a:7f:91:c1:37:7b:25:35:b5:44:86:55:de:4b:0c:
4c:ec:c4:a4:bc:69:de:7c:f6:a2:df:79:e2:c0:03:ec:3f:8e:
53:dd:bd:7d:70:a5:28:b9:b1:0c:9b:5f:99:a1:ed:54:c3:dd:
5f:d9:8d:1a:82:3d:57:b2:58:03:5f:58:27:75:75:cb:13:a9:
ad:06:02:97:b2:ae:cd:c9:32:14:d6:40:54:65:48:f9:20:3c:
c6:23:07:a9:88:17:a9:66:f9:fb:e1:75:a4:60:96:91:3d:04:
0b:64:8b:0f:46:0b:41:ad:cf:87:81:dd:2c:64:db:d8:a5:7c:
3b:b8:6f:69:3f:50:82:fe:9a:c4:62:2e:ab:50:40:f5:4e:03:
9e:2e:bc:2d:af:93:ab:ba:1e:2d:6d:5c:70:ef:c6:70:fa:f4:
3a:12:dc:26:c4:19:17:2c:7c:cf:76:83:65:45:4d:23:27:40:
a4:af:1c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPvlPyNFR0NrfxlFkG4LEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2VmNzVlMDk3YTYzMTg4NmIzM2M4MWY2NGFhNWViYmMw
YzMyYTAwHhcNMjUwNjE0MjEwMTA0WhcNMjUwNjE1MjEwMTA0WjAzMTEwLwYDVQQD
Eyg4ZThkMTcxNTUyMjk0YzJjNjIwNTU1NDQwYTM0MGUzNTMyOWQwNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMbfhmnTJqpQu8I8gIDz1ahSua1G
SfLvM4KNi0OcN1thvU/J7nCIYc1ZIt8uugp80cnc03yGBgBW9kSOoQXciA9bXZAA
kcCDy9tSU6iFSdXHQ8ud3mHl3R1hS/e/RxcbCEL1s4T6bi/aWQpn77B1svsun6QP
4KGv8YAUJn/2zaZ538IVkE5avjAhafKWRIkglea7owqMqM/ZkKycgQ+doPWZ+WoW
25HrU81R8m0ZDOdxPNSqSbG9f87iexVcImy7LnQ+ps7tKFWI0JVjd86uIwr0TgSM
EKRJOCjLS+ZXpcxcUpV9hhluauQj0vWqrndKWPGHVlfHWMJvlaOlWU6CNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6NFxVSKUwsYgVVRAo0DjUynQc7MB8GA1UdIwQY
MBaAFNfO914JemMYhrM8gfZKpeu8DDKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGYwZDUtN2U0My00NmJlLWIwOTIt
NWJhNTAxZTBiMzcwLzEvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9mNGYwZDUtN2U0My00NmJlLWIwOTItNWJhNTAxZTBiMzcw
LzEvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWCpCeet
iHDAhUpptAYlX3JyaxAMKABJE+8qs2msTmCgvfjJbIXrJrAhA+rFVUETcTux293+
6f0vBrEw5RqnakGaS0VJXlTHuzawWn+RwTd7JTW1RIZV3ksMTOzEpLxp3nz2ot95
4sAD7D+OU929fXClKLmxDJtfmaHtVMPdX9mNGoI9V7JYA19YJ3V1yxOprQYCl7Ku
zckyFNZAVGVI+SA8xiMHqYgXqWb5++F1pGCWkT0EC2SLD0YLQa3Ph4HdLGTb2KV8
O7hvaT9Qgv6axGIuq1BA9U4Dni68La+Tq7oeLW1ccO/GcPr0OhLcJsQZFyx8z3aD
ZUVNIydApK8cwg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:57:36 2025 by rpki-client