Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
File: 1kBlpUFdmUI5AUXyJHkB2TZFidc.mft (raw, json)
Hash identifier: Z7S+opNCLgexvkMftVcSosBBaUXuks63IWZk9hoU1K4=
Subject key identifier: 42:47:B6:30:EB:A4:E7:D7:68:53:CF:D9:0A:90:89:D1:EC:2E:AE:45
Authority key identifier: D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
Certificate issuer: /CN=d64065a5415d9942390145f2247901d9364589d7
Certificate serial: 019771512198A0B956FD0074E84910CFFF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
Manifest number: 0A65
Signing time: Sun 15 Jun 2025 02:00:31 +0000
Manifest this update: Sun 15 Jun 2025 02:00:31 +0000
Manifest next update: Mon 16 Jun 2025 02:00:31 +0000
Files and hashes: 1: 1kBlpUFdmUI5AUXyJHkB2TZFidc.crl (hash: JZVE+VIe3XSu0SRKcQ2fUbLhyzbnvlDOwnuW/rB5HXk=)
2: 6rPFWOjVfpn28_M8t16r5KAzkLA.roa (hash: wER3Gq8nSGCzekLgZFtgVD/F8/GF6EezM87XvHZecI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:21:98:a0:b9:56:fd:00:74:e8:49:10:cf:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64065a5415d9942390145f2247901d9364589d7
Validity
Not Before: Jun 15 02:00:31 2025 GMT
Not After : Jun 16 02:00:31 2025 GMT
Subject: CN=4247b630eba4e7d76853cfd90a9089d1ec2eae45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:07:5a:94:2d:e3:f8:4d:1e:d1:b0:86:30:
fe:47:a7:e9:c9:3d:ec:27:81:ae:c2:64:35:26:4b:
a0:ca:4e:81:5e:75:39:69:47:15:9f:26:02:94:00:
17:b2:fc:6b:0c:da:b8:50:71:7e:bf:ac:78:ee:53:
c3:bf:a4:05:4e:53:1e:a0:df:32:bf:51:93:93:19:
f9:5e:f9:31:b9:34:f0:c1:2e:bd:e8:18:41:fe:1d:
89:f3:af:d3:d1:d9:04:00:4e:fa:75:ca:54:a5:23:
be:55:ee:4c:d4:d8:34:19:d0:d4:e5:30:68:29:df:
aa:6e:3a:12:71:af:c6:84:cc:86:9a:2c:f2:65:8f:
ac:23:2c:ff:0c:41:23:23:3d:d2:d8:e5:40:72:92:
0f:d6:f4:8e:e9:f7:c1:58:19:37:5d:9e:b3:9a:4d:
ff:d2:81:37:42:77:12:c1:e8:95:e3:df:13:62:26:
63:36:31:1e:b2:6b:2f:fb:18:28:26:3a:67:33:34:
75:a1:c0:96:38:d2:ba:3b:b3:2c:0b:92:25:9b:ff:
ef:78:5e:48:00:18:2b:cf:73:91:c2:b3:a5:94:5a:
11:fe:9e:60:66:cf:98:7a:03:e7:60:90:bd:83:92:
59:fb:77:9b:dc:07:26:d1:bd:2a:63:99:c1:cc:a1:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:B6:30:EB:A4:E7:D7:68:53:CF:D9:0A:90:89:D1:EC:2E:AE:45
X509v3 Authority Key Identifier:
keyid:D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:91:78:e4:d1:4b:25:2b:ce:3d:d2:9e:80:dc:c4:88:f3:25:
3d:e1:7b:ed:cb:ce:98:0a:16:b9:d9:5e:69:56:77:fe:fb:86:
80:eb:c3:dc:8e:52:6c:c7:b3:de:c5:9c:e8:97:25:96:2f:e5:
0f:e1:fd:bc:e9:8b:af:d7:3a:8a:78:1f:04:03:36:fe:1b:d6:
fa:2e:0d:81:fa:54:f2:cd:25:be:7c:a9:8f:b2:f9:cf:63:a6:
4b:40:3d:40:7e:dd:63:49:5b:98:d3:be:13:fa:6b:59:73:16:
9d:32:2f:28:08:59:c1:32:94:de:46:e6:f1:ab:17:d5:f8:d7:
ad:8d:80:13:f9:b2:3c:39:68:f2:f8:9c:00:d2:2c:dd:3f:be:
86:eb:7d:8e:7f:e5:67:2a:12:77:45:aa:09:a5:bb:35:92:e3:
9f:6a:36:e3:1d:d8:2b:c8:39:80:23:c0:44:e6:04:98:27:2d:
3f:f8:2e:bf:27:36:ff:46:9c:c5:9b:9d:4e:a9:ff:99:cc:3b:
91:1c:a6:d8:4c:96:c7:6d:26:0f:81:1a:c6:78:a6:fb:a8:ae:
d9:ae:c6:47:94:04:a4:d4:41:ba:9b:fb:ae:27:b7:bf:4b:00:
04:21:f2:0b:67:a5:22:7c:27:6a:fe:93:2a:e6:1f:50:9f:b5:
2b:be:bc:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUSGYoLlW/QB06EkQz/9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDA2NWE1NDE1ZDk5NDIzOTAxNDVmMjI0NzkwMWQ5MzY0
NTg5ZDcwHhcNMjUwNjE1MDIwMDMxWhcNMjUwNjE2MDIwMDMxWjAzMTEwLwYDVQQD
Eyg0MjQ3YjYzMGViYTRlN2Q3Njg1M2NmZDkwYTkwODlkMWVjMmVhZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTYHWpQt4/hNHtGwhjD+R6fpyT3s
J4GuwmQ1Jkugyk6BXnU5aUcVnyYClAAXsvxrDNq4UHF+v6x47lPDv6QFTlMeoN8y
v1GTkxn5XvkxuTTwwS696BhB/h2J86/T0dkEAE76dcpUpSO+Ve5M1Ng0GdDU5TBo
Kd+qbjoSca/GhMyGmizyZY+sIyz/DEEjIz3S2OVAcpIP1vSO6ffBWBk3XZ6zmk3/
0oE3QncSweiV498TYiZjNjEesmsv+xgoJjpnMzR1ocCWONK6O7MsC5Ilm//veF5I
ABgrz3ORwrOllFoR/p5gZs+YegPnYJC9g5JZ+3eb3Acm0b0qY5nBzKHHZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJHtjDrpOfXaFPP2QqQidHsLq5FMB8GA1UdIwQY
MBaAFNZAZaVBXZlCOQFF8iR5Adk2RYnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtCbHBVRmRtVUk1QVVYeUpIa0IyVFpGaWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85YTJkODYtMGY1ZS00NDZiLWFkMjkt
ZjhhZjJkMGFlMjhjLzEvMWtCbHBVRmRtVUk1QVVYeUpIa0IyVFpGaWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85YTJkODYtMGY1ZS00NDZiLWFkMjktZjhhZjJkMGFlMjhj
LzEvMWtCbHBVRmRtVUk1QVVYeUpIa0IyVFpGaWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZF45NFL
JSvOPdKegNzEiPMlPeF77cvOmAoWudleaVZ3/vuGgOvD3I5SbMez3sWc6Jclli/l
D+H9vOmLr9c6ingfBAM2/hvW+i4NgfpU8s0lvnypj7L5z2OmS0A9QH7dY0lbmNO+
E/prWXMWnTIvKAhZwTKU3kbm8asX1fjXrY2AE/myPDlo8vicANIs3T++hut9jn/l
ZyoSd0WqCaW7NZLjn2o24x3YK8g5gCPAROYEmCctP/guvyc2/0acxZudTqn/mcw7
kRym2EyWx20mD4Eaxnim+6iu2a7GR5QEpNRBupv7rie3v0sABCHyC2elInwnav6T
KuYfUJ+1K768yA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:56:55 2025 by rpki-client