Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: 6JZuq1fRa3+IyejOmNq8b69ZM/BDEH2N7rSDTMu1CHs=
Subject key identifier: EB:2F:9F:22:49:B5:BC:9B:CE:76:98:CF:26:0B:9D:60:DD:72:42:38
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 019750EA6A6F35B4838EE7F6E0FF34AE9765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 19:00:29 +0000
Manifest this update: Sun 08 Jun 2025 19:00:29 +0000
Manifest next update: Mon 09 Jun 2025 19:00:29 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: 06S9X8wOtlzq94V4APA0GP9rjvOgf4wp41h81tbaJK4=)
2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:6a:6f:35:b4:83:8e:e7:f6:e0:ff:34:ae:97:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Jun 8 19:00:29 2025 GMT
Not After : Jun 9 19:00:29 2025 GMT
Subject: CN=eb2f9f2249b5bc9bce7698cf260b9d60dd724238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:58:c5:22:f2:b3:4f:e0:b7:33:3d:a7:b5:
32:d3:b4:b2:f2:3c:13:11:cb:b8:a7:ab:5e:30:6d:
c7:8f:2e:bc:43:99:fe:fe:22:43:b3:f2:37:6d:e2:
76:3e:63:87:29:81:54:1b:d0:40:d4:6e:97:a0:b8:
00:13:a6:47:5a:c6:46:5d:ec:43:50:3e:e9:d5:40:
9d:e3:2f:ec:53:8c:47:9d:91:25:b3:c0:c4:d6:70:
b8:bd:68:3a:e5:17:29:f7:17:dd:b8:23:49:1c:d1:
99:50:2f:5c:ec:70:10:38:43:7a:ea:8b:de:71:a1:
b1:fd:36:87:45:22:02:2b:bf:f8:5e:44:a4:88:83:
53:67:60:7f:46:70:b2:7c:7b:4e:a0:5f:44:fd:ba:
1b:8d:84:ec:33:90:ef:38:51:10:aa:c1:b3:72:27:
d2:19:82:70:5b:b3:bc:fb:17:2e:04:79:df:70:f5:
66:45:13:b8:bb:24:d2:96:85:31:ea:e4:10:5d:87:
b8:09:2f:2d:29:d6:2d:99:15:2b:89:99:09:94:c9:
58:e6:3f:1e:77:03:12:97:0e:0c:31:30:f2:1a:1e:
aa:9d:f2:2a:69:50:88:12:a8:5d:e9:e1:f7:ad:08:
cc:9c:33:8b:5f:6c:36:b2:90:9c:35:49:25:07:22:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2F:9F:22:49:B5:BC:9B:CE:76:98:CF:26:0B:9D:60:DD:72:42:38
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2b:7b:0a:a7:7f:3c:bd:8c:35:0a:7c:5e:d5:40:59:9e:fb:
f0:94:cc:c5:9b:4f:72:91:4a:1d:d3:6b:05:9a:4c:b1:23:bf:
41:e4:a9:0c:32:f7:8f:86:8c:e0:fb:4c:08:d7:f0:f8:88:00:
53:64:f3:45:47:96:be:c5:97:b0:be:c2:bc:64:e3:5b:12:11:
15:e7:2a:3c:48:fb:51:ca:b5:bf:dd:2d:fb:2d:8e:04:e4:d4:
f7:37:e3:eb:67:8f:8b:7d:19:a4:86:3f:2b:82:cc:49:60:fc:
c5:e6:27:df:a7:a0:bd:dd:1c:4c:f1:6d:3d:ca:9d:fb:f8:1e:
7f:11:3b:37:b8:93:f3:3e:f6:0f:b4:ad:b6:29:f1:01:1c:0c:
50:d7:11:74:62:58:c9:65:d1:61:1f:a6:e3:16:fe:53:06:d7:
d7:93:3d:50:03:23:49:f6:c9:5f:6c:3b:52:ba:4b:4c:1f:55:
2c:1b:f3:c0:d3:3d:81:88:a4:8a:f8:39:35:0e:5d:b5:97:d5:
ea:fa:af:f3:8f:39:2d:9e:20:d8:80:36:cd:3a:0a:83:90:dc:
0d:9f:a3:77:49:46:71:94:91:37:e4:ab:18:e3:95:5e:12:33:
cf:21:29:98:41:64:2e:1d:23:0a:f6:f4:93:0b:d1:dc:0c:9e:
2a:a3:bc:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6mpvNbSDjuf24P80rpdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1Nzc3NTc5Y2M2Nzc4NDQ1NGJjZDkxYTA2YmQ2OTM1YWFl
ZjczZjkwHhcNMjUwNjA4MTkwMDI5WhcNMjUwNjA5MTkwMDI5WjAzMTEwLwYDVQQD
EyhlYjJmOWYyMjQ5YjViYzliY2U3Njk4Y2YyNjBiOWQ2MGRkNzI0MjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+dYxSLys0/gtzM9p7Uy07Sy8jwT
Ecu4p6teMG3Hjy68Q5n+/iJDs/I3beJ2PmOHKYFUG9BA1G6XoLgAE6ZHWsZGXexD
UD7p1UCd4y/sU4xHnZEls8DE1nC4vWg65Rcp9xfduCNJHNGZUC9c7HAQOEN66ove
caGx/TaHRSICK7/4XkSkiINTZ2B/RnCyfHtOoF9E/bobjYTsM5DvOFEQqsGzcifS
GYJwW7O8+xcuBHnfcPVmRRO4uyTSloUx6uQQXYe4CS8tKdYtmRUriZkJlMlY5j8e
dwMSlw4MMTDyGh6qnfIqaVCIEqhd6eH3rQjMnDOLX2w2spCcNUklByKLTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsvnyJJtbybznaYzyYLnWDdckI4MB8GA1UdIwQY
MBaAFNV3dXnMZ3hEVLzZGga9aTWq73P5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYt
ODBhMmI2OGMzODMyLzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYtODBhMmI2OGMzODMy
LzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyt7Cqd/
PL2MNQp8XtVAWZ778JTMxZtPcpFKHdNrBZpMsSO/QeSpDDL3j4aM4PtMCNfw+IgA
U2TzRUeWvsWXsL7CvGTjWxIRFecqPEj7Ucq1v90t+y2OBOTU9zfj62ePi30ZpIY/
K4LMSWD8xeYn36egvd0cTPFtPcqd+/gefxE7N7iT8z72D7SttinxARwMUNcRdGJY
yWXRYR+m4xb+UwbX15M9UAMjSfbJX2w7UrpLTB9VLBvzwNM9gYikivg5NQ5dtZfV
6vqv8485LZ4g2IA2zToKg5DcDZ+jd0lGcZSRN+SrGOOVXhIzzyEpmEFkLh0jCvb0
kwvR3AyeKqO8UQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:32:14 2025 by rpki-client