Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: a9WzlLUPRcCgHsWiRZORdIPBWv7hKBv839bQvRNn1rI=
Subject key identifier: 6E:8A:EE:55:AE:19:F9:BB:FE:4A:A4:0D:AA:6B:2D:EB:25:59:AC:E2
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 0197469E65ED97314A1881BF4AADA5E76526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 19:01:15 +0000
Manifest this update: Fri 06 Jun 2025 19:01:15 +0000
Manifest next update: Sat 07 Jun 2025 19:01:15 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: 3SQRdPlT+TocQhG3QXvGf6zXqG1LB4o7f/c7H4orI1E=)
2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:65:ed:97:31:4a:18:81:bf:4a:ad:a5:e7:65:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Jun 6 19:01:15 2025 GMT
Not After : Jun 7 19:01:15 2025 GMT
Subject: CN=6e8aee55ae19f9bbfe4aa40daa6b2deb2559ace2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:df:82:4e:84:09:83:fe:21:58:10:b9:6f:f1:
b8:6b:a2:74:87:ca:87:78:7a:a8:6c:5b:39:6d:47:
55:63:60:cb:5a:7c:1b:e5:52:57:6e:58:5b:44:49:
9e:40:be:52:91:cc:da:e1:2e:1d:9e:27:74:df:cc:
d9:fb:73:7e:49:18:81:ec:fd:97:e2:8d:6e:3f:c5:
bd:02:a6:6b:b1:ca:b3:8e:65:f7:82:35:66:16:83:
5e:7f:19:0a:1b:11:38:c9:0f:65:53:4f:25:28:db:
ff:8c:a8:f3:f0:ee:1b:38:e0:8f:4c:e0:73:89:63:
67:3f:83:aa:92:cc:c8:c5:90:91:a2:e3:e9:11:94:
18:ff:ec:11:a2:d4:28:32:1b:d7:bb:74:fc:11:3d:
d7:50:39:be:d2:dd:75:5b:58:6f:b7:89:f2:e0:0a:
48:1e:54:2d:b9:3e:32:89:31:a7:ad:57:a8:2b:5a:
8b:e8:73:82:b5:5c:94:95:4c:bc:1e:72:8e:de:66:
20:7d:2f:6c:53:b2:96:e8:9b:6b:8c:40:c2:b9:df:
72:be:f2:cf:29:9c:9f:df:62:fe:b7:7b:87:ef:f2:
0b:42:9f:c5:99:8f:e6:b0:d2:2e:3a:be:fa:f1:d9:
5c:1e:3e:35:62:a9:d1:66:c9:75:c4:c7:f6:69:c8:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8A:EE:55:AE:19:F9:BB:FE:4A:A4:0D:AA:6B:2D:EB:25:59:AC:E2
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:30:e5:33:1d:f4:9f:66:de:d5:dd:77:0d:cf:36:1b:a7:12:
10:af:a7:45:f3:68:fc:c9:6d:e3:93:5e:43:7b:33:95:3c:23:
b5:77:dc:2c:d0:ed:19:71:d3:69:d7:ea:11:9a:05:c4:9c:e7:
dd:90:75:20:c7:52:49:7c:f2:d2:af:76:dd:b4:58:d5:9a:a8:
29:04:0a:87:30:44:e3:f5:0d:c4:41:ec:11:21:a9:06:ac:fd:
f5:dc:3e:b4:85:9c:4d:02:48:09:8e:e6:e4:be:1d:c3:55:b5:
30:cd:05:45:97:5e:94:64:8b:f4:ae:a3:10:e8:52:69:44:43:
3c:fc:0b:2b:56:02:d3:9c:12:f9:6d:8d:e6:f2:b8:46:a8:ba:
18:af:5e:5b:c3:f1:44:41:af:c5:62:ec:e5:39:a1:2b:93:37:
a0:86:ff:2a:17:a3:a9:1a:23:4a:a3:d4:48:91:76:e4:01:d2:
96:f8:42:7f:bc:f1:52:35:18:b1:52:f6:5b:05:8f:3a:bc:f8:
79:f6:57:97:4f:aa:bf:b6:21:ab:92:91:48:56:b4:6d:92:35:
09:a9:a1:5a:69:40:15:e7:31:67:4f:c7:5c:2c:1f:16:c7:96:
04:0f:a2:af:3e:a9:74:8c:f1:c5:11:d9:b8:48:64:78:37:da:
3e:e4:34:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnmXtlzFKGIG/Sq2l52UmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MjdmMjFkNDA2MjFlNTgxM2U0YTA2OTIxMTk0N2UyNGQw
MGU3OTcwHhcNMjUwNjA2MTkwMTE1WhcNMjUwNjA3MTkwMTE1WjAzMTEwLwYDVQQD
Eyg2ZThhZWU1NWFlMTlmOWJiZmU0YWE0MGRhYTZiMmRlYjI1NTlhY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9N+CToQJg/4hWBC5b/G4a6J0h8qH
eHqobFs5bUdVY2DLWnwb5VJXblhbREmeQL5Skcza4S4dnid038zZ+3N+SRiB7P2X
4o1uP8W9AqZrscqzjmX3gjVmFoNefxkKGxE4yQ9lU08lKNv/jKjz8O4bOOCPTOBz
iWNnP4OqkszIxZCRouPpEZQY/+wRotQoMhvXu3T8ET3XUDm+0t11W1hvt4ny4ApI
HlQtuT4yiTGnrVeoK1qL6HOCtVyUlUy8HnKO3mYgfS9sU7KW6JtrjEDCud9yvvLP
KZyf32L+t3uH7/ILQp/FmY/msNIuOr768dlcHj41YqnRZsl1xMf2acgaEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6K7lWuGfm7/kqkDaprLeslWaziMB8GA1UdIwQY
MBaAFEUn8h1AYh5YE+SgaSEZR+JNAOeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYt
ZjA4NmU2Zjk2Y2JiLzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYtZjA4NmU2Zjk2Y2Ji
LzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTDlMx30
n2be1d13Dc82G6cSEK+nRfNo/Mlt45NeQ3szlTwjtXfcLNDtGXHTadfqEZoFxJzn
3ZB1IMdSSXzy0q923bRY1ZqoKQQKhzBE4/UNxEHsESGpBqz99dw+tIWcTQJICY7m
5L4dw1W1MM0FRZdelGSL9K6jEOhSaURDPPwLK1YC05wS+W2N5vK4Rqi6GK9eW8Px
REGvxWLs5TmhK5M3oIb/KhejqRojSqPUSJF25AHSlvhCf7zxUjUYsVL2WwWPOrz4
efZXl0+qv7Yhq5KRSFa0bZI1CamhWmlAFecxZ0/HXCwfFseWBA+irz6pdIzxxRHZ
uEhkeDfaPuQ06w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:21 2025 by rpki-client