Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier: ku0VxGwnJ+9XpxGcMahe6ppiUZaTOZfFhZ9uV+UzHFU=
Subject key identifier: FF:58:3A:5B:DB:EC:8F:A1:1E:0C:F1:A6:4A:4C:05:9D:90:82:E6:D9
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 01975346C5BD78F964DA6C9772827405AE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number: 1289
Signing time: Mon 09 Jun 2025 06:00:36 +0000
Manifest this update: Mon 09 Jun 2025 06:00:36 +0000
Manifest next update: Tue 10 Jun 2025 06:00:36 +0000
Files and hashes: 1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: 8jdMsF/b1crsDvC2305/GJhoO2PP1hGdzOlx5t5FIio=)
2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
3: QaIK-rl-UO6iCpNPezV_L0xU2YU.roa (hash: xhqiUIeuQiCwC9en8JMr8aD8gps5b0AVPyZ6zETgu08=)
4: WOXWvBeCokpSOHl_JrntVW9NKAM.roa (hash: eB6i8745ycqxVgNK38j0RIcjXGqo0GZI7gH9QRyDDJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:46:c5:bd:78:f9:64:da:6c:97:72:82:74:05:ae:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Jun 9 06:00:36 2025 GMT
Not After : Jun 10 06:00:36 2025 GMT
Subject: CN=ff583a5bdbec8fa11e0cf1a64a4c059d9082e6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:89:3a:a4:b4:2d:02:27:b6:f2:ce:de:80:
d6:46:48:9c:99:7c:2e:68:cd:5d:ac:44:52:0e:99:
59:60:bf:63:07:5b:56:77:d8:ef:28:9a:ea:23:81:
94:93:1a:ec:e8:78:13:ba:96:ed:e6:7d:2e:27:1d:
75:d0:f8:37:bd:92:2c:89:21:53:77:db:f3:9e:57:
ad:c8:b6:6a:02:5a:70:0e:68:ed:09:49:65:78:2d:
da:5a:bc:fb:a8:f5:07:bb:e9:0a:05:86:40:67:f5:
16:0d:d1:48:2c:23:81:ad:64:05:7c:87:01:ae:18:
8b:e5:c5:53:00:7c:bd:65:51:f6:40:af:22:18:91:
7f:8e:71:04:37:cd:d8:d9:39:fc:ba:a4:a1:6b:a1:
cf:c6:57:6c:d7:7e:71:c7:8c:31:a5:4e:66:27:40:
b4:2b:be:fb:4e:e9:a8:de:40:08:06:65:9d:79:e4:
45:13:28:42:72:b6:a9:8c:c4:89:70:7b:cf:1a:81:
ec:bf:68:93:21:b7:e7:63:65:87:71:e6:13:ad:50:
64:5b:42:6c:e5:b5:1d:24:60:40:95:e6:75:9c:6c:
d6:b6:f5:e4:3d:b0:db:44:97:ac:c4:7f:71:da:82:
d4:5c:af:18:6b:ef:38:2b:81:0b:63:25:d2:98:f2:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:58:3A:5B:DB:EC:8F:A1:1E:0C:F1:A6:4A:4C:05:9D:90:82:E6:D9
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:38:7d:fa:24:f6:a0:8f:db:82:c9:b7:b0:9a:6f:40:fd:c6:
bb:ff:a8:ce:c4:d7:2b:0a:fb:eb:d6:51:be:ad:1b:35:bf:f2:
27:0d:5f:82:51:dd:7f:e0:89:e3:05:d3:ea:2c:3f:0f:a6:c2:
58:8f:4c:5b:6c:98:b7:13:e9:5a:f1:c1:30:98:dc:53:0f:71:
db:95:46:73:f8:4b:38:5b:d4:12:28:75:24:b2:b5:4f:36:6c:
0a:29:23:d2:f7:c8:40:2d:f8:74:b5:1c:45:d2:5f:f0:30:6a:
1f:1d:6e:61:e0:3d:a4:b1:50:20:4d:03:25:d3:93:90:d5:39:
1a:81:b4:4b:1d:57:cb:5b:18:cf:52:48:ab:1b:1e:60:66:8e:
d2:bc:4a:f2:b6:e9:a3:42:c4:22:ae:1d:14:e0:0d:11:47:23:
a9:e1:19:fb:75:0f:fd:91:c6:1c:ee:2f:2b:4e:62:d8:44:c7:
e0:d5:c7:d6:70:9b:70:4d:a2:35:e9:b0:2e:5d:63:3a:9c:58:
12:a8:e4:e1:a2:c3:55:cd:52:4e:67:19:98:fd:cd:2e:1b:ee:
6c:5f:79:42:13:92:2c:b4:7c:13:5e:f7:26:f2:60:6a:d1:2d:
cc:28:6b:c4:19:94:97:11:ad:7a:d0:08:85:6c:a0:32:d0:58:
2c:01:71:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTRsW9ePlk2myXcoJ0Ba5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzIzMTAxYjI5NTk2ZmY0NDJkMzc0OTM3M2I4ZTk5ODMz
NTQ2NzAwHhcNMjUwNjA5MDYwMDM2WhcNMjUwNjEwMDYwMDM2WjAzMTEwLwYDVQQD
EyhmZjU4M2E1YmRiZWM4ZmExMWUwY2YxYTY0YTRjMDU5ZDkwODJlNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fGJOqS0LQIntvLO3oDWRkicmXwu
aM1drERSDplZYL9jB1tWd9jvKJrqI4GUkxrs6HgTupbt5n0uJx110Pg3vZIsiSFT
d9vznletyLZqAlpwDmjtCUlleC3aWrz7qPUHu+kKBYZAZ/UWDdFILCOBrWQFfIcB
rhiL5cVTAHy9ZVH2QK8iGJF/jnEEN83Y2Tn8uqSha6HPxlds135xx4wxpU5mJ0C0
K777Tumo3kAIBmWdeeRFEyhCcrapjMSJcHvPGoHsv2iTIbfnY2WHceYTrVBkW0Js
5bUdJGBAleZ1nGzWtvXkPbDbRJesxH9x2oLUXK8Ya+84K4ELYyXSmPK2+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9YOlvb7I+hHgzxpkpMBZ2QgubZMB8GA1UdIwQY
MBaAFNIyMQGylZb/RC03STc7jpmDNUZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YjQxODUtYjA4MC00OThlLThjYzct
NmE2YWY1Yjc0ZDM4LzEvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81YjQxODUtYjA4MC00OThlLThjYzctNmE2YWY1Yjc0ZDM4
LzEvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTh9+iT2
oI/bgsm3sJpvQP3Gu/+ozsTXKwr769ZRvq0bNb/yJw1fglHdf+CJ4wXT6iw/D6bC
WI9MW2yYtxPpWvHBMJjcUw9x25VGc/hLOFvUEih1JLK1TzZsCikj0vfIQC34dLUc
RdJf8DBqHx1uYeA9pLFQIE0DJdOTkNU5GoG0Sx1Xy1sYz1JIqxseYGaO0rxK8rbp
o0LEIq4dFOANEUcjqeEZ+3UP/ZHGHO4vK05i2ETH4NXH1nCbcE2iNemwLl1jOpxY
Eqjk4aLDVc1STmcZmP3NLhvubF95QhOSLLR8E173JvJgatEtzChrxBmUlxGtetAI
hWygMtBYLAFx8g==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:35:54 2025 by rpki-client