Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier: 2ts5MPjvAWRsUEIzXSqVgWM73yHufSe1JPcr4v+275U=
Subject key identifier: 1C:79:8B:7B:C5:DA:74:48:8A:DE:68:18:FD:E0:4C:87:66:C8:E7:9A
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 01974FA0EF45DE6118B27F80E81CBDBD0D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number: 1492
Signing time: Sun 08 Jun 2025 13:00:36 +0000
Manifest this update: Sun 08 Jun 2025 13:00:36 +0000
Manifest next update: Mon 09 Jun 2025 13:00:36 +0000
Files and hashes: 1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: 1su4my0BgRyyjgwHDsQPq9Du+Ig8EgaKlVxEIkQfkLk=)
2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:ef:45:de:61:18:b2:7f:80:e8:1c:bd:bd:0d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Jun 8 13:00:36 2025 GMT
Not After : Jun 9 13:00:36 2025 GMT
Subject: CN=1c798b7bc5da74488ade6818fde04c8766c8e79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:16:52:20:b2:58:16:6c:9b:c9:e7:de:37:
6c:7f:63:76:2e:8b:c5:7c:ab:2d:7f:c8:20:8a:50:
2f:b9:0a:9b:32:7c:c9:8a:ec:2a:52:64:53:51:02:
3a:a9:a5:35:f2:fd:1b:9a:31:46:ed:2b:c1:bd:59:
48:2d:cf:42:5a:84:88:db:4e:40:30:1c:ab:dc:24:
95:39:a9:14:15:6b:78:3e:3e:5f:92:bc:4a:0b:b1:
e6:6e:15:df:c8:2a:bd:e6:14:49:d7:36:f4:16:c0:
94:e0:52:a2:5c:34:ae:80:21:b5:03:29:4f:5e:d8:
65:3f:c0:97:5b:e7:d5:84:dc:ed:cf:a0:a9:30:e5:
bf:2e:55:7b:07:80:72:04:e8:1a:1b:8a:07:c6:33:
d6:10:ce:a5:00:55:ab:82:7a:c5:36:33:7a:86:f1:
71:03:a5:a5:f4:26:df:34:f7:bf:e1:ee:52:a2:71:
7a:41:a3:7e:bf:09:a9:e1:1e:51:92:48:1d:99:4f:
93:66:6f:20:31:f2:7f:89:c0:71:90:9e:4f:ac:d3:
2e:4f:93:42:84:a0:ad:7f:ee:80:26:af:f0:d9:d2:
29:34:07:dd:3e:c1:7f:2b:fa:51:d6:ea:1e:77:c0:
87:1a:e0:59:76:2f:be:20:54:2e:3f:3c:70:8d:de:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:79:8B:7B:C5:DA:74:48:8A:DE:68:18:FD:E0:4C:87:66:C8:E7:9A
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f8:8e:72:1b:69:5e:48:d0:17:37:b1:93:52:ab:3c:9d:47:
af:08:6c:9a:89:71:39:72:32:78:a6:a8:5a:48:4d:6d:85:c2:
f4:59:62:f2:e7:9f:56:d4:e4:4b:b3:a2:c3:58:c0:78:9f:d6:
09:9a:f3:41:1f:cc:1e:40:2c:dd:27:a2:de:7e:d1:a5:e9:ce:
20:17:d6:0b:31:c7:10:09:79:30:d8:26:8c:da:0a:49:4a:3c:
04:d9:dc:0f:37:35:42:97:41:48:be:30:f1:ff:26:59:f5:e2:
9e:54:7a:62:47:cc:ce:d0:2e:ff:25:d9:17:d2:74:61:ff:28:
14:59:97:67:ce:d8:4a:27:f9:84:fc:c8:aa:2d:59:6d:82:84:
4f:7c:88:a6:a6:90:bd:82:6b:00:c5:4b:65:00:70:2a:a0:e6:
f6:69:68:b4:9a:bf:d9:8c:78:9b:57:4c:fb:5e:e6:ef:bd:fd:
ab:03:11:33:57:b0:19:2b:9c:62:6e:5a:15:0f:d5:9a:57:09:
7d:76:2c:7b:f1:bd:58:18:1b:12:99:eb:c5:84:8e:a1:69:d9:
a9:3e:4b:6e:eb:91:08:4e:11:00:f2:8e:61:0a:36:e6:9a:fd:
9e:5d:a4:44:e5:30:c8:ca:aa:22:fb:01:c5:4b:61:a4:82:5c:
16:32:e7:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoO9F3mEYsn+A6By9vQ1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNTI4Yzk1ZjYwODBhYjEzY2IwNDk3ODNlOTI0NGQzM2Q5
YzRiMzIwHhcNMjUwNjA4MTMwMDM2WhcNMjUwNjA5MTMwMDM2WjAzMTEwLwYDVQQD
EygxYzc5OGI3YmM1ZGE3NDQ4OGFkZTY4MThmZGUwNGM4NzY2YzhlNzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EgWUiCyWBZsm8nn3jdsf2N2LovF
fKstf8ggilAvuQqbMnzJiuwqUmRTUQI6qaU18v0bmjFG7SvBvVlILc9CWoSI205A
MByr3CSVOakUFWt4Pj5fkrxKC7HmbhXfyCq95hRJ1zb0FsCU4FKiXDSugCG1AylP
XthlP8CXW+fVhNztz6CpMOW/LlV7B4ByBOgaG4oHxjPWEM6lAFWrgnrFNjN6hvFx
A6Wl9CbfNPe/4e5SonF6QaN+vwmp4R5RkkgdmU+TZm8gMfJ/icBxkJ5PrNMuT5NC
hKCtf+6AJq/w2dIpNAfdPsF/K/pR1uoed8CHGuBZdi++IFQuPzxwjd4M5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx5i3vF2nRIit5oGP3gTIdmyOeaMB8GA1UdIwQY
MBaAFD9SjJX2CAqxPLBJeD6SRNM9nEsyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAt
YTViZGJiMTQ1YTc4LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAtYTViZGJiMTQ1YTc4
LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPiOchtp
XkjQFzexk1KrPJ1HrwhsmolxOXIyeKaoWkhNbYXC9Fli8uefVtTkS7Oiw1jAeJ/W
CZrzQR/MHkAs3Sei3n7RpenOIBfWCzHHEAl5MNgmjNoKSUo8BNncDzc1QpdBSL4w
8f8mWfXinlR6YkfMztAu/yXZF9J0Yf8oFFmXZ87YSif5hPzIqi1ZbYKET3yIpqaQ
vYJrAMVLZQBwKqDm9mlotJq/2Yx4m1dM+17m7739qwMRM1ewGSucYm5aFQ/VmlcJ
fXYse/G9WBgbEpnrxYSOoWnZqT5LbuuRCE4RAPKOYQo25pr9nl2kROUwyMqqIvsB
xUthpIJcFjLnGw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:22:06 2025 by rpki-client