Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: scgChdDLHAtwExmsed+Ghw8UTC+wzBxRVT9QtWLNx1g=
Subject key identifier: 63:9E:43:F3:05:7A:99:02:04:7A:FE:7C:F0:9B:68:F6:AD:33:55:A6
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 01977CE78DEC8A79C6AB923577096983EBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1529
Signing time: Tue 17 Jun 2025 08:00:39 +0000
Manifest this update: Tue 17 Jun 2025 08:00:39 +0000
Manifest next update: Wed 18 Jun 2025 08:00:39 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: L9spu7ZwxrG18p654cbeywcxfhoFtTlQqC2eEENfqoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:e7:8d:ec:8a:79:c6:ab:92:35:77:09:69:83:eb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jun 17 08:00:39 2025 GMT
Not After : Jun 18 08:00:39 2025 GMT
Subject: CN=639e43f3057a9902047afe7cf09b68f6ad3355a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:bf:a1:9f:a9:3f:f8:42:15:6a:49:57:97:
0b:d2:ce:36:29:cc:03:07:3d:80:83:1a:4f:8a:f6:
5a:73:59:f1:15:85:b7:fb:1f:d2:84:65:2f:31:fa:
f1:9f:d0:08:a6:b7:1d:dc:88:9b:85:63:7f:fa:33:
01:e3:48:ec:fd:25:55:f1:fa:ae:ba:b9:b1:73:86:
7a:a8:e8:30:c2:33:6d:c2:d2:e5:4b:a0:bf:94:a5:
d3:1e:76:a8:88:a3:64:f3:91:2d:aa:8f:99:ab:79:
b4:a8:ad:28:2a:3c:8b:40:bb:52:17:cd:b7:8a:f3:
87:83:fe:ac:19:09:38:13:52:9b:4c:90:4f:41:30:
5e:dc:e6:24:c0:3b:c2:59:b0:95:c0:9c:64:b2:68:
0b:06:92:1c:db:4b:31:a1:26:75:47:3f:a8:01:70:
1d:e1:65:97:d6:db:06:b2:59:4c:3e:31:09:a2:93:
5c:bf:a4:a6:0f:87:f7:23:d0:ec:87:a9:92:6b:09:
69:e9:19:cd:29:80:a6:c1:58:5d:ff:7e:5e:10:5c:
90:a0:d9:93:e3:1c:31:b2:27:a6:a3:ee:cc:3a:f0:
d2:ac:fb:fd:8a:d3:62:0b:6e:33:d2:7f:8f:8b:81:
f3:b5:7b:f9:72:7b:eb:cb:6d:1d:59:bc:cb:3a:e5:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9E:43:F3:05:7A:99:02:04:7A:FE:7C:F0:9B:68:F6:AD:33:55:A6
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:c1:6e:f6:98:1c:8d:10:db:fb:be:81:ee:c1:b3:20:50:
7f:25:17:90:7a:f9:d3:a8:cb:a5:db:fb:d5:52:45:e3:8a:6d:
e2:8d:e3:2a:58:55:55:1a:e3:e2:e7:0f:3b:0f:9c:25:4f:60:
3c:61:09:33:18:8a:56:3e:64:39:6a:2d:ec:4a:f0:0c:92:f2:
1f:62:da:80:71:a1:aa:02:92:8a:f8:63:18:63:61:ba:78:09:
28:e3:9b:de:7e:9c:ab:c6:d7:e0:0c:c4:2c:9f:75:87:39:05:
9e:ec:aa:02:d7:f3:2c:f4:1c:59:1a:2f:63:ec:ad:c5:cf:89:
a8:c8:9f:93:bb:e3:2b:fb:92:47:72:5e:7b:69:dd:c0:d6:a7:
77:3c:63:7a:cc:a7:84:1e:03:9e:cb:d2:51:2f:f9:63:71:46:
3c:fa:1a:99:af:2b:c2:4e:e0:4d:8b:63:33:8b:24:51:de:97:
4d:af:bb:59:cc:a2:08:7b:1d:71:d8:b9:c5:aa:8a:d9:12:21:
b3:d8:18:8b:25:17:0d:78:fb:24:d2:12:80:88:30:42:0b:08:
86:e8:75:08:d4:89:f8:f6:6a:fe:97:af:85:c3:84:af:c6:b2:
c9:64:8a:ff:28:91:90:b7:fb:99:86:f8:b5:02:46:f0:63:a1:
31:4e:73:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8543sinnGq5I1dwlpg+vsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2U0MjgxYTk5NGQ1MjE2NmVmM2ZmMTc3MjhiYWUyMTg4
NTVmYzQwHhcNMjUwNjE3MDgwMDM5WhcNMjUwNjE4MDgwMDM5WjAzMTEwLwYDVQQD
Eyg2MzllNDNmMzA1N2E5OTAyMDQ3YWZlN2NmMDliNjhmNmFkMzM1NWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf+/oZ+pP/hCFWpJV5cL0s42KcwD
Bz2AgxpPivZac1nxFYW3+x/ShGUvMfrxn9AIprcd3IibhWN/+jMB40js/SVV8fqu
urmxc4Z6qOgwwjNtwtLlS6C/lKXTHnaoiKNk85Etqo+Zq3m0qK0oKjyLQLtSF823
ivOHg/6sGQk4E1KbTJBPQTBe3OYkwDvCWbCVwJxksmgLBpIc20sxoSZ1Rz+oAXAd
4WWX1tsGsllMPjEJopNcv6SmD4f3I9Dsh6mSawlp6RnNKYCmwVhd/35eEFyQoNmT
4xwxsiemo+7MOvDSrPv9itNiC24z0n+Pi4HztXv5cnvry20dWbzLOuUqiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOeQ/MFepkCBHr+fPCbaPatM1WmMB8GA1UdIwQY
MBaAFIvOQoGplNUhZu8/8XcouuIYhV/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUt
YTFlMDFjNjMzNDNhLzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUtYTFlMDFjNjMzNDNh
LzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY/BbvaY
HI0Q2/u+ge7BsyBQfyUXkHr506jLpdv71VJF44pt4o3jKlhVVRrj4ucPOw+cJU9g
PGEJMxiKVj5kOWot7ErwDJLyH2LagHGhqgKSivhjGGNhungJKOOb3n6cq8bX4AzE
LJ91hzkFnuyqAtfzLPQcWRovY+ytxc+JqMifk7vjK/uSR3Jee2ndwNandzxjesyn
hB4DnsvSUS/5Y3FGPPoama8rwk7gTYtjM4skUd6XTa+7WcyiCHsdcdi5xaqK2RIh
s9gYiyUXDXj7JNISgIgwQgsIhuh1CNSJ+PZq/pevhcOEr8ayyWSK/yiRkLf7mYb4
tQJG8GOhMU5zXw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:02:10 2025 by rpki-client