Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: Hme+BxTjR/bDLGDajU5igwkcQV2P8XNFoq/0cOg7oC4=
Subject key identifier: C3:B5:E5:66:20:A6:D3:A6:13:0A:D4:5B:9E:3E:35:F8:73:BA:3D:18
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 019770759AC9E37843831BCCCD8D96198FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 22:00:44 +0000
Manifest this update: Sat 14 Jun 2025 22:00:44 +0000
Manifest next update: Sun 15 Jun 2025 22:00:44 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: xHSyMyfZ8P+M5OIfiqFwVkuNeinp22NngeJdhHMeISA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:9a:c9:e3:78:43:83:1b:cc:cd:8d:96:19:8f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Jun 14 22:00:44 2025 GMT
Not After : Jun 15 22:00:44 2025 GMT
Subject: CN=c3b5e56620a6d3a6130ad45b9e3e35f873ba3d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:e6:26:b7:03:2c:e2:ae:e7:7e:d4:60:d4:
52:ee:27:98:2a:7b:c6:c7:4d:df:79:a8:db:7e:f2:
f4:6b:14:d5:01:14:ab:67:20:2c:8e:4e:f3:0c:01:
c9:38:d8:88:de:88:e0:d6:b8:bc:87:51:2d:09:87:
f4:0d:2e:8d:fa:5f:47:91:2a:cf:d2:a1:fa:32:52:
41:f9:63:74:9a:89:1c:e0:a9:7d:be:b8:ec:39:7c:
f8:ab:c0:e5:7e:52:53:a6:5c:2b:a8:c7:36:d3:91:
11:25:99:66:33:a4:24:06:9a:f3:b1:ee:e7:ab:a2:
60:5f:00:02:37:2e:0d:77:9a:90:a8:ad:d0:fc:7b:
41:55:90:b8:19:66:04:d9:10:49:88:21:67:6a:bb:
c4:15:b6:cf:4d:65:e7:ec:06:04:34:16:c0:00:52:
b0:5c:96:66:29:d4:ab:8e:e1:79:0e:70:c7:f0:74:
6a:c2:70:b6:b1:5c:3f:56:5e:a7:b2:ec:41:cc:80:
cc:ce:10:0e:b7:a9:a3:ea:69:7d:71:69:eb:74:1f:
32:56:98:e6:91:38:f1:24:ca:41:7c:ac:9b:70:fb:
39:cf:b9:95:07:cf:3f:8d:8e:b1:e6:69:36:a1:d8:
b5:54:da:3c:4a:f1:8e:83:69:03:f3:b1:53:98:47:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:E5:66:20:A6:D3:A6:13:0A:D4:5B:9E:3E:35:F8:73:BA:3D:18
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:20:3e:47:75:6b:f1:47:22:4b:25:d3:4a:0c:bb:24:a8:35:
35:99:37:2f:88:f7:b2:ea:3b:ae:ea:63:c6:66:7c:83:c5:a8:
dd:e6:4d:71:fc:97:13:76:52:05:54:5b:64:cb:fb:d3:0b:64:
fa:66:b1:15:72:b7:22:98:5d:e1:4a:e9:37:13:63:16:f6:90:
ad:43:bf:52:b3:01:bb:86:bc:05:4f:5a:26:82:8a:fa:bd:5a:
03:79:0e:f1:f4:27:ef:6b:4b:6d:d5:10:39:27:92:7c:7c:63:
18:d2:81:55:0a:11:da:09:ef:ed:74:35:6b:df:0e:87:ce:87:
d5:d1:a2:16:d4:79:34:2d:0b:05:7a:82:6e:df:5f:a6:a3:51:
25:49:07:43:2a:24:38:94:30:cb:03:2d:0f:2c:93:95:cd:03:
a3:36:9d:f1:1e:96:4f:95:25:58:4b:52:54:4f:56:26:ad:c8:
c5:dc:24:58:76:57:7d:25:5b:62:a5:1e:b6:55:cc:a0:7a:86:
af:4d:9f:83:7a:8d:7e:ca:fe:40:c1:5e:01:e0:1f:39:d0:d0:
ae:4b:4c:01:9f:3a:d9:61:f4:26:14:00:fb:ed:e7:35:ae:00:
b7:b8:88:41:fe:7f:d3:92:c6:33:f9:e2:a3:1e:ff:8f:70:8e:
e7:de:80:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdZrJ43hDgxvMzY2WGY/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODc1MjFmMTVlMDQ1NzI4OGE5ZjE5NmE4Yzg4NjVjMzY5
MjIxNTAwHhcNMjUwNjE0MjIwMDQ0WhcNMjUwNjE1MjIwMDQ0WjAzMTEwLwYDVQQD
EyhjM2I1ZTU2NjIwYTZkM2E2MTMwYWQ0NWI5ZTNlMzVmODczYmEzZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhXmJrcDLOKu537UYNRS7ieYKnvG
x03feajbfvL0axTVARSrZyAsjk7zDAHJONiI3ojg1ri8h1EtCYf0DS6N+l9HkSrP
0qH6MlJB+WN0mokc4Kl9vrjsOXz4q8DlflJTplwrqMc205ERJZlmM6QkBprzse7n
q6JgXwACNy4Nd5qQqK3Q/HtBVZC4GWYE2RBJiCFnarvEFbbPTWXn7AYENBbAAFKw
XJZmKdSrjuF5DnDH8HRqwnC2sVw/Vl6nsuxBzIDMzhAOt6mj6ml9cWnrdB8yVpjm
kTjxJMpBfKybcPs5z7mVB88/jY6x5mk2odi1VNo8SvGOg2kD87FTmEc93QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMO15WYgptOmEwrUW54+Nfhzuj0YMB8GA1UdIwQY
MBaAFJ+HUh8V4EVyiKnxlqjIhlw2kiFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQt
MjE3NjlkZTRhMWE4LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQtMjE3NjlkZTRhMWE4
LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyA+R3Vr
8UciSyXTSgy7JKg1NZk3L4j3suo7rupjxmZ8g8Wo3eZNcfyXE3ZSBVRbZMv70wtk
+maxFXK3Iphd4UrpNxNjFvaQrUO/UrMBu4a8BU9aJoKK+r1aA3kO8fQn72tLbdUQ
OSeSfHxjGNKBVQoR2gnv7XQ1a98Oh86H1dGiFtR5NC0LBXqCbt9fpqNRJUkHQyok
OJQwywMtDyyTlc0Dozad8R6WT5UlWEtSVE9WJq3IxdwkWHZXfSVbYqUetlXMoHqG
r02fg3qNfsr+QMFeAeAfOdDQrktMAZ862WH0JhQA++3nNa4At7iIQf5/05LGM/ni
ox7/j3CO596ApA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:12:47 2025 by rpki-client