Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: m0ro4VARkGQ23oQU4jqyZEbtrqDICSDXYWMf+NZPULM=
Subject key identifier: C7:2C:0A:E0:9D:D9:14:D7:E9:A5:04:6A:F2:89:4E:80:94:F3:8A:F3
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 01974D4516D1425AA0B42B5C4D1150AA7D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 02:01:02 +0000
Manifest this update: Sun 08 Jun 2025 02:01:02 +0000
Manifest next update: Mon 09 Jun 2025 02:01:02 +0000
Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=)
2: Lqe5vcwgWue09k7p7ctNg9AlXcM.roa (hash: YaDYxTi/SH2+EMKhFcDi7OA2pSDfUeTirPWPAhdJeo0=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: mP9ewzDvEiYA277tdXGDFxVNeFfy51/4ZdoqrTF5RJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:16:d1:42:5a:a0:b4:2b:5c:4d:11:50:aa:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jun 8 02:01:02 2025 GMT
Not After : Jun 9 02:01:02 2025 GMT
Subject: CN=c72c0ae09dd914d7e9a5046af2894e8094f38af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:4c:13:2f:b1:12:d9:3f:76:70:d5:84:fc:
9d:af:b6:f5:37:db:6b:15:83:dc:15:0e:a7:fe:9a:
e7:e2:26:4d:03:51:2c:c8:a0:c1:f4:4a:97:b2:57:
7e:8d:a2:52:8d:3c:f9:3a:ec:d4:a3:05:10:96:92:
86:11:31:e3:46:7a:02:82:62:09:ec:31:04:eb:f2:
97:5d:b4:60:4e:e1:c7:7d:f9:5d:a3:cd:49:4c:b0:
0b:08:a0:52:41:5b:3e:1e:d7:bc:0d:ff:a0:4e:ab:
a5:42:e7:a0:93:1f:49:b9:86:4a:a0:af:1f:c4:dc:
8f:f0:73:97:41:7e:89:92:19:ca:e6:ae:08:8b:f3:
e9:75:11:3b:44:e5:83:f4:e7:68:ec:cf:e4:b7:ae:
e7:3e:29:07:a9:f9:b0:22:9d:8b:ea:40:3a:60:af:
dd:93:30:bb:3d:26:a2:cd:80:b2:c7:82:48:3b:1e:
a3:7c:53:ab:53:e6:70:d7:3f:6a:3f:44:df:87:c5:
fc:f1:40:28:c0:1e:bf:ae:d5:43:66:a3:e0:36:63:
31:97:f7:30:6a:9c:ef:33:0d:2d:26:9c:69:d5:1e:
c5:50:cb:44:86:ec:13:94:b7:7e:1e:b8:9b:27:fe:
be:f1:59:0d:1d:07:f6:bd:47:e5:93:3d:6f:67:e7:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2C:0A:E0:9D:D9:14:D7:E9:A5:04:6A:F2:89:4E:80:94:F3:8A:F3
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f4:11:a2:d5:79:09:c4:cd:ae:f6:40:e1:60:29:c2:03:aa:
98:07:9c:3a:01:2c:fc:49:8e:65:ad:82:c7:56:b1:31:26:a4:
55:5f:d2:a2:bd:84:ec:91:ae:ec:4c:15:21:d6:e3:bb:be:11:
a4:8b:9d:4c:a3:24:69:0f:29:c5:a7:64:fa:84:98:00:83:ac:
2c:d2:70:cf:3e:ed:24:dc:95:a5:01:b5:69:52:25:9c:08:c1:
84:72:f2:06:d8:cb:0f:f1:b5:25:bb:c4:15:3f:a0:a1:67:ca:
94:1b:fe:29:66:a4:6e:d4:32:5e:cc:c6:82:3f:5f:cd:07:a3:
33:0e:e1:6a:9a:09:ef:5e:f1:fb:74:80:35:63:a0:95:6b:ff:
2b:00:af:c8:b6:84:6e:22:78:94:20:ba:3d:f4:4c:86:40:67:
aa:97:7a:88:0c:39:0f:5b:86:00:c2:40:0f:d6:db:de:40:71:
55:12:2c:8c:4c:f7:48:83:a7:71:e2:0a:8b:46:22:48:5e:85:
ec:de:1a:70:20:94:79:43:e3:d7:12:0f:e5:85:d4:ab:cd:f5:
e6:a6:92:0d:1e:27:6b:98:97:b2:fd:59:d2:07:32:a4:3f:06:
7a:b5:fd:92:51:81:b7:76:c2:fd:e1:96:b0:d5:5e:08:2b:b0:
4e:8c:66:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRRbRQlqgtCtcTRFQqn0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx
NTQ0NGQwHhcNMjUwNjA4MDIwMTAyWhcNMjUwNjA5MDIwMTAyWjAzMTEwLwYDVQQD
EyhjNzJjMGFlMDlkZDkxNGQ3ZTlhNTA0NmFmMjg5NGU4MDk0ZjM4YWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcdMEy+xEtk/dnDVhPydr7b1N9tr
FYPcFQ6n/prn4iZNA1EsyKDB9EqXsld+jaJSjTz5OuzUowUQlpKGETHjRnoCgmIJ
7DEE6/KXXbRgTuHHffldo81JTLALCKBSQVs+Hte8Df+gTqulQuegkx9JuYZKoK8f
xNyP8HOXQX6JkhnK5q4Ii/PpdRE7ROWD9Odo7M/kt67nPikHqfmwIp2L6kA6YK/d
kzC7PSaizYCyx4JIOx6jfFOrU+Zw1z9qP0Tfh8X88UAowB6/rtVDZqPgNmMxl/cw
apzvMw0tJpxp1R7FUMtEhuwTlLd+HribJ/6+8VkNHQf2vUflkz1vZ+fkrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcsCuCd2RTX6aUEavKJToCU84rzMB8GA1UdIwQY
MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt
ZjBkMmI5NDNjYjUzLzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz
LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfQRotV5
CcTNrvZA4WApwgOqmAecOgEs/EmOZa2Cx1axMSakVV/Sor2E7JGu7EwVIdbju74R
pIudTKMkaQ8pxadk+oSYAIOsLNJwzz7tJNyVpQG1aVIlnAjBhHLyBtjLD/G1JbvE
FT+goWfKlBv+KWakbtQyXszGgj9fzQejMw7hapoJ717x+3SANWOglWv/KwCvyLaE
biJ4lCC6PfRMhkBnqpd6iAw5D1uGAMJAD9bb3kBxVRIsjEz3SIOnceIKi0YiSF6F
7N4acCCUeUPj1xIP5YXUq8315qaSDR4na5iXsv1Z0gcypD8GerX9klGBt3bC/eGW
sNVeCCuwToxmCA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:05:21 2025 by rpki-client