Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier: wie0gkRKsoRjbOQjtzX4KPLWelhYroO8IMjjghYmG5Y=
Subject key identifier: 65:20:1E:66:BA:51:AC:AD:05:D2:01:2A:20:A9:40:2A:FC:7C:C6:31
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 01975EDCE68D2CF90BE965E620E93F85C8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number: 128F
Signing time: Wed 11 Jun 2025 12:00:24 +0000
Manifest this update: Wed 11 Jun 2025 12:00:24 +0000
Manifest next update: Thu 12 Jun 2025 12:00:24 +0000
Files and hashes: 1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: IFlSRp/7CZTTgESNNnnUdyXs0pSJmzXWwZn6EpSbwAI=)
2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
3: QaIK-rl-UO6iCpNPezV_L0xU2YU.roa (hash: xhqiUIeuQiCwC9en8JMr8aD8gps5b0AVPyZ6zETgu08=)
4: WOXWvBeCokpSOHl_JrntVW9NKAM.roa (hash: eB6i8745ycqxVgNK38j0RIcjXGqo0GZI7gH9QRyDDJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dc:e6:8d:2c:f9:0b:e9:65:e6:20:e9:3f:85:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Jun 11 12:00:24 2025 GMT
Not After : Jun 12 12:00:24 2025 GMT
Subject: CN=65201e66ba51acad05d2012a20a9402afc7cc631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:92:21:a1:a1:b5:c7:03:a9:1d:2d:93:af:
4b:30:94:cd:17:d1:83:b6:32:16:af:ea:b9:13:60:
5d:20:ad:31:14:10:15:20:9c:89:66:3f:fc:8d:89:
2a:90:91:e6:ee:59:bf:fa:27:b7:62:59:a5:e5:a3:
e8:ca:d5:43:d6:e2:3c:d6:de:bd:06:a5:d7:09:8d:
06:8e:70:61:22:ef:40:7a:d8:56:41:f2:37:15:24:
57:48:79:2e:ae:9c:c0:44:44:09:8d:73:da:f3:74:
34:be:35:03:f6:9c:40:b5:66:a7:9d:b6:b7:b4:e3:
d3:33:69:fb:9e:b3:16:46:b2:15:cc:8d:d6:29:43:
33:6d:76:48:a1:84:6f:7b:5d:71:0c:9f:aa:34:0e:
28:89:95:e0:c6:fb:6b:e2:94:c5:14:8c:3b:c0:4a:
1a:d3:d6:fd:8b:d1:a6:e1:15:1c:94:da:bf:6a:39:
38:87:ff:19:84:4c:29:6b:d4:94:94:9a:53:9b:40:
af:f6:b6:d6:7e:08:d6:50:df:b2:14:6f:9e:8c:92:
ed:30:a5:62:e0:ce:5c:2d:da:64:c8:84:44:84:02:
5d:31:19:6f:97:b4:74:c0:fb:9a:23:17:f7:b8:05:
da:03:ec:aa:36:14:1d:99:20:9a:ba:26:87:c2:86:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:20:1E:66:BA:51:AC:AD:05:D2:01:2A:20:A9:40:2A:FC:7C:C6:31
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:da:9d:9b:87:ac:ea:3e:2a:ef:19:46:19:7a:32:da:74:1a:
4b:d8:29:b4:eb:ed:06:64:f8:0a:c3:ff:3b:dc:33:ee:1a:40:
76:b1:d4:39:f8:18:30:f5:b6:0f:94:8f:4f:69:04:68:64:2e:
bd:31:36:35:00:b0:46:94:0e:97:cb:78:a4:49:e6:41:a4:58:
47:8b:ae:b6:43:1d:5e:d6:fc:d2:d8:92:d5:62:24:40:40:b2:
e7:0f:35:c6:e6:ae:2b:9e:67:cb:8d:b6:98:b6:e9:a7:87:d4:
dd:8c:93:6a:48:30:c2:20:b4:8d:8b:e7:53:44:4f:0c:5c:ab:
40:6e:0f:13:07:2b:88:8d:d2:8f:e4:24:93:45:c8:28:fa:36:
c8:9d:62:bf:c2:2f:ee:89:84:b0:e3:db:e5:0c:05:55:ce:09:
67:22:b6:3c:9e:92:d1:37:8c:8d:1a:88:e4:d8:56:61:bb:09:
0e:fa:90:74:b1:0d:d7:3f:8a:64:a1:ba:8b:0e:f3:b5:30:0b:
48:c5:ca:85:22:79:08:70:79:3a:2c:67:02:5e:69:ed:a8:90:
2f:c9:d5:f5:16:de:00:ca:8c:c0:8e:89:30:80:78:e8:6f:1b:
c1:02:fd:b7:de:f0:e7:d8:f9:46:fc:c8:83:2f:a5:82:9e:fb:
7a:07:98:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZde3OaNLPkL6WXmIOk/hcivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzIzMTAxYjI5NTk2ZmY0NDJkMzc0OTM3M2I4ZTk5ODMz
NTQ2NzAwHhcNMjUwNjExMTIwMDI0WhcNMjUwNjEyMTIwMDI0WjAzMTEwLwYDVQQD
Eyg2NTIwMWU2NmJhNTFhY2FkMDVkMjAxMmEyMGE5NDAyYWZjN2NjNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuamSIaGhtccDqR0tk69LMJTNF9GD
tjIWr+q5E2BdIK0xFBAVIJyJZj/8jYkqkJHm7lm/+ie3Ylml5aPoytVD1uI81t69
BqXXCY0GjnBhIu9AethWQfI3FSRXSHkurpzAREQJjXPa83Q0vjUD9pxAtWannba3
tOPTM2n7nrMWRrIVzI3WKUMzbXZIoYRve11xDJ+qNA4oiZXgxvtr4pTFFIw7wEoa
09b9i9Gm4RUclNq/ajk4h/8ZhEwpa9SUlJpTm0Cv9rbWfgjWUN+yFG+ejJLtMKVi
4M5cLdpkyIREhAJdMRlvl7R0wPuaIxf3uAXaA+yqNhQdmSCauiaHwobM0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUgHma6UaytBdIBKiCpQCr8fMYxMB8GA1UdIwQY
MBaAFNIyMQGylZb/RC03STc7jpmDNUZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YjQxODUtYjA4MC00OThlLThjYzct
NmE2YWY1Yjc0ZDM4LzEvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81YjQxODUtYjA4MC00OThlLThjYzctNmE2YWY1Yjc0ZDM4
LzEvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9qdm4es
6j4q7xlGGXoy2nQaS9gptOvtBmT4CsP/O9wz7hpAdrHUOfgYMPW2D5SPT2kEaGQu
vTE2NQCwRpQOl8t4pEnmQaRYR4uutkMdXtb80tiS1WIkQECy5w81xuauK55ny422
mLbpp4fU3YyTakgwwiC0jYvnU0RPDFyrQG4PEwcriI3Sj+Qkk0XIKPo2yJ1iv8Iv
7omEsOPb5QwFVc4JZyK2PJ6S0TeMjRqI5NhWYbsJDvqQdLEN1z+KZKG6iw7ztTAL
SMXKhSJ5CHB5OixnAl5p7aiQL8nV9RbeAMqMwI6JMIB46G8bwQL9t97w59j5RvzI
gy+lgp77egeYbQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:26:20 2025 by rpki-client