Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: gDDqLjXdTewe4YqpGPZdtHIHv4L3i60A16sF4Ix/438=
Subject key identifier: A3:98:A3:2A:B0:B6:D1:3C:81:33:B1:8F:5E:AB:D0:0A:50:62:F6:F3
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 019747796DABBD1BB891CFBBDF17D13AB40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 121D
Signing time: Fri 06 Jun 2025 23:00:29 +0000
Manifest this update: Fri 06 Jun 2025 23:00:29 +0000
Manifest next update: Sat 07 Jun 2025 23:00:29 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: tIXxVmiIeRbP9jjPjX/WjW3isdU0zJG04zSCy8uQZFM=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:6d:ab:bd:1b:b8:91:cf:bb:df:17:d1:3a:b4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Jun 6 23:00:29 2025 GMT
Not After : Jun 7 23:00:29 2025 GMT
Subject: CN=a398a32ab0b6d13c8133b18f5eabd00a5062f6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:6d:8b:bb:be:61:2a:ed:c4:4b:9f:5c:d4:
b0:6c:ff:b5:ad:5b:2c:ef:84:c3:cc:81:f9:3f:93:
4e:5a:88:55:4a:3d:f3:b0:90:4c:d5:a8:73:f5:3b:
df:f8:2e:ed:f4:cc:bc:4d:42:e7:d9:ba:6d:c8:5b:
dc:c0:6a:1a:1f:2e:4f:58:32:60:52:82:0b:e2:75:
c7:74:8a:5f:6c:7a:f1:2f:68:45:aa:eb:11:7c:75:
b3:49:5e:6a:24:d0:1a:39:18:5f:35:63:d6:63:39:
d6:05:be:67:9d:8a:ea:c3:14:b3:a7:ee:e0:fe:f7:
e5:29:88:c2:7a:25:7c:fc:1c:65:b9:1d:91:09:f6:
5a:3c:e6:6a:93:e4:a3:8f:ca:e4:15:f2:66:19:52:
36:2b:da:ce:8f:c2:7b:45:2f:6f:84:b0:2d:fb:31:
78:d2:7b:2e:03:f2:7f:77:a1:ba:81:db:d8:9a:83:
fe:85:84:c7:f8:16:26:e2:c2:a7:3e:1d:fa:15:47:
da:b0:86:77:db:9a:9a:4e:6f:fb:ab:fe:ff:48:58:
1e:5b:03:49:32:29:f1:22:33:d1:37:e0:9a:40:45:
a6:c6:ca:8f:9c:f1:22:12:11:a7:11:ee:2f:a4:fc:
cc:7c:b9:a1:6d:ba:3d:fd:cc:21:04:97:a3:b1:be:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:98:A3:2A:B0:B6:D1:3C:81:33:B1:8F:5E:AB:D0:0A:50:62:F6:F3
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9d:63:e3:9e:c8:e4:6a:d7:29:d1:ff:78:a7:16:c6:d3:fb:
49:2f:4f:21:25:b7:b0:2c:0f:8f:da:f8:ef:81:3b:ad:96:60:
50:9a:bf:87:af:b3:20:98:f3:68:12:8a:9e:f7:a3:13:29:6a:
a4:61:1f:da:60:f6:91:29:ea:63:16:8f:a4:72:39:95:00:e3:
80:f2:7e:60:f6:fd:80:50:e5:10:e1:ad:e9:a1:f8:09:d4:e3:
b4:b7:d2:9e:c8:d5:26:84:44:64:d0:9e:67:c9:42:31:7f:98:
52:c3:f2:81:8d:e3:7f:41:0d:76:7d:79:a1:41:a4:f0:00:e0:
5d:6c:ab:4c:c2:01:15:bc:eb:d4:a2:d3:3e:70:20:58:5b:e8:
47:34:d7:9c:47:07:5e:cc:2c:c5:4a:19:5f:3e:65:d1:8a:70:
9f:52:e6:06:c7:76:bf:68:f4:1d:20:f9:93:96:6f:16:10:02:
71:50:6c:ab:24:e8:19:36:19:3d:f0:98:45:52:99:e0:91:34:
e7:2c:55:07:01:62:ba:78:1e:20:8f:c9:7c:c7:40:5b:9b:85:
73:66:02:43:3d:96:ce:b3:6e:c6:fd:92:20:4e:41:63:80:26:
1d:09:38:b9:f7:82:e1:17:00:69:aa:3f:39:27:1f:76:fb:49:
fd:14:c4:b9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdHeW2rvRu4kc+73xfROrQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjRhMWY3Y2E0MGI1ODExNmU2YmM4MzhlMDYyZjljNzEy
MjI4YTQwHhcNMjUwNjA2MjMwMDI5WhcNMjUwNjA3MjMwMDI5WjAzMTEwLwYDVQQD
EyhhMzk4YTMyYWIwYjZkMTNjODEzM2IxOGY1ZWFiZDAwYTUwNjJmNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru5ti7u+YSrtxEufXNSwbP+1rVss
74TDzIH5P5NOWohVSj3zsJBM1ahz9Tvf+C7t9My8TULn2bptyFvcwGoaHy5PWDJg
UoIL4nXHdIpfbHrxL2hFqusRfHWzSV5qJNAaORhfNWPWYznWBb5nnYrqwxSzp+7g
/vflKYjCeiV8/BxluR2RCfZaPOZqk+Sjj8rkFfJmGVI2K9rOj8J7RS9vhLAt+zF4
0nsuA/J/d6G6gdvYmoP+hYTH+BYm4sKnPh36FUfasIZ325qaTm/7q/7/SFgeWwNJ
MinxIjPRN+CaQEWmxsqPnPEiEhGnEe4vpPzMfLmhbbo9/cwhBJejsb7KPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKOYoyqwttE8gTOxj16r0ApQYvbzMB8GA1UdIwQY
MBaAFPpkoffKQLWBFua8g44GL5xxIiikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tU2g5OHBBdFlFVzVyeURqZ1l2bkhFaUtLUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVm
LTViODNkMGU5NjAxMi8xLzEtbVNoOThwQXRZRVc1cnlEamdZdm5IRWlLS1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNmL2JhMjdmYi0yNTUwLTQ5YWQtYjBlZi01YjgzZDBlOTYw
MTIvMS8xLW1TaDk4cEF0WUVXNXJ5RGpnWXZuSEVpS0tRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJ1j
457I5GrXKdH/eKcWxtP7SS9PISW3sCwPj9r474E7rZZgUJq/h6+zIJjzaBKKnvej
EylqpGEf2mD2kSnqYxaPpHI5lQDjgPJ+YPb9gFDlEOGt6aH4CdTjtLfSnsjVJoRE
ZNCeZ8lCMX+YUsPygY3jf0ENdn15oUGk8ADgXWyrTMIBFbzr1KLTPnAgWFvoRzTX
nEcHXswsxUoZXz5l0Ypwn1LmBsd2v2j0HSD5k5ZvFhACcVBsqyToGTYZPfCYRVKZ
4JE05yxVBwFiungeII/JfMdAW5uFc2YCQz2WzrNuxv2SIE5BY4AmHQk4ufeC4RcA
aao/OScfdvtJ/RTEuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:14:46 2025 by rpki-client