Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: Uo+fBL3mxiIghskizduh/qdF/XuMgiCf8HPmeUtUNCs=
Subject key identifier: E6:2A:C1:51:72:4B:AB:A1:A7:1F:58:58:52:6C:E7:D2:18:22:AD:7B
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 01974A0CECEB2378A4F198589F0083A60FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 11:00:50 +0000
Manifest this update: Sat 07 Jun 2025 11:00:50 +0000
Manifest next update: Sun 08 Jun 2025 11:00:50 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: oS4ntuJj2ul03QqNhkuMrXKTD0xGz2JUEOLHT0rb1eM=)
2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:ec:eb:23:78:a4:f1:98:58:9f:00:83:a6:0f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Jun 7 11:00:50 2025 GMT
Not After : Jun 8 11:00:50 2025 GMT
Subject: CN=e62ac151724baba1a71f5858526ce7d21822ad7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:67:4b:1b:63:55:3c:2c:b6:67:68:25:20:
0c:cc:cd:38:8e:88:26:33:dd:50:2b:ec:d9:ce:91:
27:65:e1:42:19:b6:f9:18:df:95:b1:32:9f:68:8d:
1d:15:db:ec:68:cc:65:57:73:64:6a:6a:78:ad:be:
57:32:be:10:f3:09:fa:9c:b6:2f:10:3d:fa:e5:dc:
c3:73:58:09:f1:a8:14:36:50:5f:b7:51:a7:a6:2d:
5f:8d:e0:82:77:14:19:4c:76:d1:84:6f:03:ee:f9:
e7:d0:2d:de:ff:c3:d4:73:74:48:2c:7f:ee:bb:43:
05:55:8d:6a:3f:c9:e3:b6:cf:64:85:31:24:f6:2e:
ed:2c:f3:1d:0c:0e:04:ec:d8:5f:cc:ce:34:4f:7e:
07:e2:5d:55:4a:c3:ae:80:3d:80:5e:81:6c:0b:17:
4a:b1:36:bc:98:5a:eb:65:a8:a6:1c:29:7b:34:f4:
f1:17:bf:bb:5e:8c:43:8a:13:bb:9d:df:b5:44:22:
f7:71:23:06:af:65:82:d9:09:3e:1c:f3:a8:67:e7:
46:9b:68:07:e9:61:41:af:b1:7c:a6:21:cb:0b:c7:
8a:e2:30:90:ca:5e:7f:04:c9:41:a6:45:57:35:30:
27:77:37:0c:50:82:a8:ba:ba:6a:02:2f:89:d1:91:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2A:C1:51:72:4B:AB:A1:A7:1F:58:58:52:6C:E7:D2:18:22:AD:7B
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:23:af:71:62:6b:35:ba:39:d1:34:87:47:bb:a5:e3:a5:66:
28:6a:0c:6c:4c:8c:2b:f1:74:d3:47:7d:92:b2:7f:a9:d1:1f:
03:49:74:6c:78:fa:4e:9b:65:07:62:3a:e4:d3:c6:dc:3e:9d:
5b:4b:ed:ee:88:24:7d:8a:73:e1:0b:be:98:a5:fd:ad:98:26:
82:84:69:95:93:ff:77:bc:07:0f:c8:9e:97:da:a6:b4:91:ca:
ce:2d:bd:d1:bc:42:26:0c:72:c1:72:a6:71:95:38:3e:5a:9a:
7b:74:87:54:bb:4b:0a:98:44:a4:c5:d9:2b:74:90:d6:fb:fe:
e5:ce:6d:9f:5e:5a:e7:35:25:d7:bc:6e:b6:ad:36:da:87:a7:
1b:2e:65:b6:92:a0:47:f1:ec:be:34:bd:9c:e9:81:ba:76:3e:
e7:5e:3b:51:ee:e8:98:47:08:fa:e1:a8:ac:b3:d7:7d:f1:1d:
eb:ef:1b:11:bc:8c:71:0b:5d:c1:dc:95:91:cb:cf:f9:43:e4:
e8:37:8e:81:f8:20:08:7b:f5:4f:8a:0a:59:46:fa:94:22:e4:
32:1c:f7:c5:21:ea:36:b0:b9:c0:5e:a8:a7:92:b2:8a:30:37:
77:1d:8a:d3:91:e9:f2:a4:b7:eb:90:c9:29:87:52:ee:4a:6b:
24:cf:4e:36
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdKDOzrI3ik8ZhYnwCDpg/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMjNhZWI2YTVkOWEzNGI4MzYwNzc3Nzc3NmZiODc2NGZi
NzZmMDAwHhcNMjUwNjA3MTEwMDUwWhcNMjUwNjA4MTEwMDUwWjAzMTEwLwYDVQQD
EyhlNjJhYzE1MTcyNGJhYmExYTcxZjU4NTg1MjZjZTdkMjE4MjJhZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ5nSxtjVTwstmdoJSAMzM04jogm
M91QK+zZzpEnZeFCGbb5GN+VsTKfaI0dFdvsaMxlV3Nkamp4rb5XMr4Q8wn6nLYv
ED365dzDc1gJ8agUNlBft1Gnpi1fjeCCdxQZTHbRhG8D7vnn0C3e/8PUc3RILH/u
u0MFVY1qP8njts9khTEk9i7tLPMdDA4E7NhfzM40T34H4l1VSsOugD2AXoFsCxdK
sTa8mFrrZaimHCl7NPTxF7+7XoxDihO7nd+1RCL3cSMGr2WC2Qk+HPOoZ+dGm2gH
6WFBr7F8piHLC8eK4jCQyl5/BMlBpkVXNTAndzcMUIKourpqAi+J0ZHghwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOYqwVFyS6uhpx9YWFJs59IYIq17MB8GA1UdIwQY
MBaAFPojrral2aNLg2B3d3dvuHZPt28AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1pT3V0cVhabzB1RFlIZDNkMi00ZGstM2J3QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzZlNmYwLWViMmMtNGNmOC04NTY1
LWIzNjNiYjZjYWEwMi8xLzEtaU91dHFYWm8wdURZSGQzZDItNGRrLTNid0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJjLzM2ZTZmMC1lYjJjLTRjZjgtODU2NS1iMzYzYmI2Y2Fh
MDIvMS8xLWlPdXRxWFpvMHVEWUhkM2QyLTRkay0zYndBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyOv
cWJrNbo50TSHR7ul46VmKGoMbEyMK/F000d9krJ/qdEfA0l0bHj6TptlB2I65NPG
3D6dW0vt7ogkfYpz4Qu+mKX9rZgmgoRplZP/d7wHD8iel9qmtJHKzi290bxCJgxy
wXKmcZU4Plqae3SHVLtLCphEpMXZK3SQ1vv+5c5tn15a5zUl17xutq022oenGy5l
tpKgR/HsvjS9nOmBunY+5147Ue7omEcI+uGorLPXffEd6+8bEbyMcQtdwdyVkcvP
+UPk6DeOgfggCHv1T4oKWUb6lCLkMhz3xSHqNrC5wF6op5KyijA3dx2K05Hp8qS3
65DJKYdS7kprJM9ONg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:33 2025 by rpki-client