Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: s0ZaAeSNiyZ4qH2fp8WUSB73qrG2XgD8GOxmd/8l5Ew=
Subject key identifier: 4C:7C:5B:39:92:EE:0D:A0:35:3C:CD:93:28:C9:24:D1:86:89:45:E1
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 0197500F21AD9259ACDC0C1A1746306836D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 1513
Signing time: Sun 08 Jun 2025 15:00:58 +0000
Manifest this update: Sun 08 Jun 2025 15:00:58 +0000
Manifest next update: Mon 09 Jun 2025 15:00:58 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: LH+i0HvrtwCHgBTq1Q+V1Q5AEnrTZFcF4XYLfqkn0Dg=)
2: s1SLHtKOtkgq5r5rHF__j6OHoGY.roa (hash: KY4xp5ySp/G6GnIfRT4waP6fnoRJIDEZEgF7zNS/QEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:21:ad:92:59:ac:dc:0c:1a:17:46:30:68:36:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Jun 8 15:00:58 2025 GMT
Not After : Jun 9 15:00:58 2025 GMT
Subject: CN=4c7c5b3992ee0da0353ccd9328c924d1868945e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:44:36:60:78:d4:d9:cb:8c:cd:99:a4:bf:0c:
d5:99:9c:ed:fd:af:c7:40:c8:29:eb:b0:5c:d9:40:
d6:6f:56:7b:e7:30:06:a3:55:b3:33:5d:cf:b0:84:
35:70:65:d8:d5:f9:50:b9:e2:24:a7:85:56:42:fa:
63:cf:9a:05:06:f7:60:46:a9:f6:16:51:82:f9:82:
0a:00:45:3c:f5:b4:07:04:84:b6:77:5e:6e:a7:b2:
3e:ab:f4:da:63:25:30:b5:41:36:2e:bb:8d:dd:f2:
2a:ec:12:39:a7:fd:51:38:45:86:2b:c2:f8:aa:8b:
73:a6:bf:6b:3f:76:8d:45:e4:26:e9:46:ac:ff:49:
16:59:2a:ad:49:16:7d:b4:fb:78:5f:f2:1a:6a:f1:
51:85:2b:cc:a5:da:75:5b:3e:55:00:2a:d1:a7:98:
bc:b4:85:c4:ff:38:f5:9c:3e:da:e1:eb:d1:17:c1:
b3:be:ce:26:c6:7c:a6:d2:be:d1:40:e1:5a:59:82:
38:af:4c:7f:bf:69:b6:a6:1b:b7:57:44:c5:b9:3a:
04:a6:11:ec:7a:ff:5a:da:ed:88:cf:ab:23:f9:6e:
35:94:13:f5:3e:87:7b:e8:8a:3a:58:fd:98:31:c7:
77:2c:c9:b4:be:dc:03:fb:22:e0:e2:89:82:41:40:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7C:5B:39:92:EE:0D:A0:35:3C:CD:93:28:C9:24:D1:86:89:45:E1
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:92:ae:d2:75:5f:5e:ec:79:0b:ab:b9:4e:8e:41:96:b1:42:
30:57:bc:aa:5a:35:bc:a8:c7:6e:47:b4:e5:c9:93:9f:06:da:
e7:c4:d9:99:94:22:c6:81:88:7b:f8:53:3a:0e:53:d2:87:31:
2c:d1:1a:88:1d:f8:9b:02:cd:c1:ad:28:bd:a9:6f:53:1f:35:
2f:54:6e:02:b7:57:5d:48:a0:60:bc:2a:9c:50:e1:54:70:99:
94:d2:dc:9f:ea:79:4d:ec:47:de:ca:73:87:a2:34:27:6d:d7:
db:9a:7b:ca:a0:25:50:c7:4c:f1:88:c1:e8:ea:5b:9f:84:0c:
cd:b0:f0:fb:cf:3c:4d:31:f2:4e:4e:ac:c1:8f:b5:99:47:cd:
f1:39:53:e4:10:ff:0d:3a:be:8b:22:6d:84:1d:96:5f:15:f5:
08:94:bf:8f:70:ac:6c:05:b0:66:26:49:72:89:20:16:d0:a6:
1a:68:11:e7:c0:b2:ea:9d:2b:b0:83:40:ee:a3:57:53:63:f2:
19:80:a4:4a:d5:16:06:05:d2:28:62:50:41:63:ad:c1:b1:55:
ab:d9:a2:9c:77:8a:87:4d:7f:76:c8:28:55:6b:15:0a:dd:6e:
2a:39:c1:10:1b:c1:f5:10:24:1b:7f:96:7e:84:12:9f:3a:99:
7d:f9:b5:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDyGtklms3AwaF0YwaDbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTAzOWFlZWU2MjEwM2IyODhjNmM4Yjk2OTJjZjU4MDg3
NDNlMjEwHhcNMjUwNjA4MTUwMDU4WhcNMjUwNjA5MTUwMDU4WjAzMTEwLwYDVQQD
Eyg0YzdjNWIzOTkyZWUwZGEwMzUzY2NkOTMyOGM5MjRkMTg2ODk0NWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kQ2YHjU2cuMzZmkvwzVmZzt/a/H
QMgp67Bc2UDWb1Z75zAGo1WzM13PsIQ1cGXY1flQueIkp4VWQvpjz5oFBvdgRqn2
FlGC+YIKAEU89bQHBIS2d15up7I+q/TaYyUwtUE2LruN3fIq7BI5p/1ROEWGK8L4
qotzpr9rP3aNReQm6Uas/0kWWSqtSRZ9tPt4X/IaavFRhSvMpdp1Wz5VACrRp5i8
tIXE/zj1nD7a4evRF8Gzvs4mxnym0r7RQOFaWYI4r0x/v2m2phu3V0TFuToEphHs
ev9a2u2Iz6sj+W41lBP1Pod76Io6WP2YMcd3LMm0vtwD+yLg4omCQUC06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx8WzmS7g2gNTzNkyjJJNGGiUXhMB8GA1UdIwQY
MBaAFNSgOa7uYhA7KIxsi5aSz1gIdD4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzkt
NjJjZTg0ZjcwNzVlLzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzktNjJjZTg0ZjcwNzVl
LzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpKu0nVf
Xux5C6u5To5BlrFCMFe8qlo1vKjHbke05cmTnwba58TZmZQixoGIe/hTOg5T0ocx
LNEaiB34mwLNwa0ovalvUx81L1RuArdXXUigYLwqnFDhVHCZlNLcn+p5TexH3spz
h6I0J23X25p7yqAlUMdM8YjB6Opbn4QMzbDw+888TTHyTk6swY+1mUfN8TlT5BD/
DTq+iyJthB2WXxX1CJS/j3CsbAWwZiZJcokgFtCmGmgR58Cy6p0rsINA7qNXU2Py
GYCkStUWBgXSKGJQQWOtwbFVq9minHeKh01/dsgoVWsVCt1uKjnBEBvB9RAkG3+W
foQSnzqZffm1RQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:03:09 2025 by rpki-client