Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: t3duaRhp3MRHW4l6wc/apPewBAaliwX9SvgKpLnPQ8s=
Subject key identifier: 50:5E:34:F9:29:6D:3E:49:A8:62:50:04:CB:30:2B:6E:A9:26:ED:DF
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 01974D7BBD21A77A9D2A0CCF506D80BD2895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 03:00:44 +0000
Manifest this update: Sun 08 Jun 2025 03:00:44 +0000
Manifest next update: Mon 09 Jun 2025 03:00:44 +0000
Files and hashes: 1: 9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa (hash: MPq4XPIwVMd5VTIFEn8awNds0lwWw2BnIcp13WOQH2k=)
2: BDePhfa6XjPm6GJ2nhEOB22J0Cc.roa (hash: +yLTNZd1DxNd/w4/Tt21tkQYSV5rMNl3vDHxAq0lK+o=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: cq2OLm6OdmzDA7kQQe8mHA9lD1I3Wj4w97Q+b2issV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:bd:21:a7:7a:9d:2a:0c:cf:50:6d:80:bd:28:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Jun 8 03:00:44 2025 GMT
Not After : Jun 9 03:00:44 2025 GMT
Subject: CN=505e34f9296d3e49a8625004cb302b6ea926eddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0d:48:78:9c:05:ff:89:e3:5f:02:b9:c9:3a:
38:46:44:90:c9:1e:86:23:d9:6b:42:27:b6:84:c5:
e7:8f:8e:e0:e0:69:49:4a:86:6f:fc:44:ed:25:37:
12:b0:b9:e0:48:66:c6:fb:34:95:ac:83:56:e0:ed:
e7:8b:1c:98:82:61:bd:98:07:c6:18:20:09:01:f3:
af:85:3a:75:59:32:00:c0:7a:0e:6c:6e:4f:2d:5d:
69:82:ad:af:df:5a:04:c2:8f:a3:6a:4a:66:9d:5e:
9b:45:34:0d:c3:08:77:5d:6f:4b:8b:e9:25:8e:63:
7d:92:67:28:80:18:5e:bf:19:1e:3f:da:99:08:89:
2a:b8:97:24:63:97:5d:b7:a6:6e:3c:7e:f9:c9:a8:
91:53:d2:ae:f2:a8:f9:32:90:6a:f0:e4:31:6e:99:
fb:80:af:26:c3:93:98:3b:68:61:0b:dd:02:44:6b:
80:8e:d4:e9:3a:cc:35:5f:51:87:a3:6a:d2:57:e1:
da:d7:8c:3e:cf:4a:c5:dd:69:5e:d6:1a:d3:19:a3:
5a:55:0e:ed:29:a6:5c:81:2d:80:3d:86:3b:8a:58:
5c:92:3d:35:c9:d6:35:4a:ab:1e:58:87:0c:ba:0e:
f9:72:81:49:f4:19:35:83:7e:d9:5b:35:ca:91:66:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5E:34:F9:29:6D:3E:49:A8:62:50:04:CB:30:2B:6E:A9:26:ED:DF
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:89:da:a5:65:65:bf:b4:0b:9a:e9:52:03:38:d8:c2:e8:91:
3d:df:9e:bd:13:b1:b7:96:d2:f0:1f:cf:8c:19:a9:d4:9d:cb:
11:4a:29:58:d8:88:58:41:6a:b6:b0:19:34:c8:2c:58:42:be:
d9:3d:6c:2d:c4:3e:81:8f:b6:49:59:e5:5c:60:87:46:64:de:
14:92:54:18:0f:61:c2:1e:97:8a:d3:69:e7:52:78:22:ac:50:
4b:3e:c0:17:8a:5d:b3:c2:8c:bb:6c:ea:ab:a6:3b:20:0c:45:
4c:7f:aa:fa:bf:3d:62:3c:71:f5:4d:c8:56:4b:d2:3b:e9:82:
ff:2f:5f:15:6c:2a:b3:e7:d1:61:01:05:59:e8:5b:8d:9e:a4:
b5:2c:06:16:8e:3e:e0:b6:87:5d:4c:b8:35:1d:94:87:2f:1e:
87:39:b0:11:d3:26:e7:1e:95:4b:65:b4:8d:03:ac:20:e5:2a:
54:17:7d:41:1c:55:71:3c:28:84:95:74:a3:ed:55:ec:cf:bc:
d9:1f:99:62:60:bc:8d:80:b8:ce:73:9c:e2:82:7e:f8:57:11:
ae:fb:55:c0:46:54:dd:e4:cf:67:3a:1e:1a:78:11:03:7a:46:
8f:ba:90:47:5e:4a:8d:52:59:a5:10:91:c8:4d:b1:e9:2f:07:
e1:a4:f8:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe70hp3qdKgzPUG2AvSiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl
N2Y2MjkwHhcNMjUwNjA4MDMwMDQ0WhcNMjUwNjA5MDMwMDQ0WjAzMTEwLwYDVQQD
Eyg1MDVlMzRmOTI5NmQzZTQ5YTg2MjUwMDRjYjMwMmI2ZWE5MjZlZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g1IeJwF/4njXwK5yTo4RkSQyR6G
I9lrQie2hMXnj47g4GlJSoZv/ETtJTcSsLngSGbG+zSVrINW4O3nixyYgmG9mAfG
GCAJAfOvhTp1WTIAwHoObG5PLV1pgq2v31oEwo+jakpmnV6bRTQNwwh3XW9Li+kl
jmN9kmcogBhevxkeP9qZCIkquJckY5ddt6ZuPH75yaiRU9Ku8qj5MpBq8OQxbpn7
gK8mw5OYO2hhC90CRGuAjtTpOsw1X1GHo2rSV+Ha14w+z0rF3Wle1hrTGaNaVQ7t
KaZcgS2APYY7ilhckj01ydY1SqseWIcMug75coFJ9Bk1g37ZWzXKkWYxkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBeNPkpbT5JqGJQBMswK26pJu3fMB8GA1UdIwQY
MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt
MWJmZDEwYTg4NDVhLzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh
LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4napWVl
v7QLmulSAzjYwuiRPd+evROxt5bS8B/PjBmp1J3LEUopWNiIWEFqtrAZNMgsWEK+
2T1sLcQ+gY+2SVnlXGCHRmTeFJJUGA9hwh6XitNp51J4IqxQSz7AF4pds8KMu2zq
q6Y7IAxFTH+q+r89Yjxx9U3IVkvSO+mC/y9fFWwqs+fRYQEFWehbjZ6ktSwGFo4+
4LaHXUy4NR2Uhy8ehzmwEdMm5x6VS2W0jQOsIOUqVBd9QRxVcTwohJV0o+1V7M+8
2R+ZYmC8jYC4znOc4oJ++FcRrvtVwEZU3eTPZzoeGngRA3pGj7qQR15KjVJZpRCR
yE2x6S8H4aT4wQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:38:18 2025 by rpki-client