Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: b0ZH4+6BtV909jtlxAqIAhSWae9HSEY6Wy7Gx8o42JY=
Subject key identifier: C6:92:18:71:FC:81:1B:B1:A1:5D:A0:21:22:2F:C3:72:20:1D:81:45
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019752A252B98C7238EE196DD870FF4D38A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 067F
Signing time: Mon 09 Jun 2025 03:00:58 +0000
Manifest this update: Mon 09 Jun 2025 03:00:58 +0000
Manifest next update: Tue 10 Jun 2025 03:00:58 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: Ay8JfcZ/InJUvCMFqPuC23MedoM+mMcaXAl7dbKuOSE=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:52:b9:8c:72:38:ee:19:6d:d8:70:ff:4d:38:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jun 9 03:00:58 2025 GMT
Not After : Jun 10 03:00:58 2025 GMT
Subject: CN=c6921871fc811bb1a15da021222fc372201d8145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:d4:b4:a8:bc:8c:9e:75:18:ec:a7:f2:fb:
f8:2d:9f:34:b0:1d:6a:0c:84:8b:7b:44:cb:25:03:
2b:e7:a1:5d:96:84:21:4b:40:8a:65:9c:75:0c:69:
6a:0a:83:28:df:02:7a:e9:2c:3f:c5:a7:9e:ff:91:
26:1c:5b:56:03:27:69:1e:73:7d:d9:a2:36:fd:e3:
8b:b3:c9:f4:4e:55:60:08:76:84:63:d5:f5:01:e6:
90:70:cb:1e:ea:3d:ae:6d:65:ac:d7:52:7e:d5:ef:
e4:e7:b1:59:b6:bb:cc:c3:a5:32:d0:37:84:f2:a9:
58:09:0a:0a:89:a8:71:3d:23:f4:3a:10:a1:e9:85:
2e:80:3c:1d:6f:6b:84:74:f8:53:81:f5:f7:46:32:
7e:d7:79:61:eb:ac:7d:04:1c:cf:1c:d4:f6:24:f6:
3f:37:2b:e6:52:98:c3:d8:b3:6f:a5:f9:37:3a:7e:
18:35:b5:8a:6b:d6:bf:02:32:01:f4:9a:49:ee:29:
d6:a8:31:ef:37:0f:7c:a6:5e:d6:f6:cc:e1:6e:b1:
08:da:7d:ef:63:cb:cd:84:a5:ea:52:55:71:39:86:
fe:8c:08:c0:c8:06:37:f5:aa:c5:a7:3b:81:d2:00:
83:99:b2:8e:27:94:de:bb:1b:79:b5:fe:67:c1:ce:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:18:71:FC:81:1B:B1:A1:5D:A0:21:22:2F:C3:72:20:1D:81:45
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:68:54:60:b7:ee:07:1f:69:63:2b:82:4c:cd:50:03:f6:4f:
01:c3:aa:48:bc:07:fa:ee:86:69:d1:4f:87:5b:14:01:9a:2b:
8d:9b:b7:a3:3e:8f:29:5e:cf:fd:de:c4:b7:a7:49:d3:9b:8a:
e5:4b:13:0d:67:61:1b:bb:85:12:48:51:7d:18:d4:1d:64:36:
63:12:8c:4c:0a:8e:72:7b:f3:8b:7c:ab:81:5c:8b:ff:29:e3:
2d:29:a4:09:22:52:bb:4f:d9:ab:74:5b:1f:36:96:b1:5e:06:
3a:a4:3e:11:66:f0:4e:36:b3:1f:bc:55:80:b0:a6:3a:48:72:
bb:a6:dd:5e:08:b7:a4:72:98:74:ad:47:1d:f8:76:39:1e:e5:
db:24:ba:3a:f0:4d:c5:9c:67:dc:82:b6:a7:bf:ad:f8:c6:bc:
c6:75:be:40:6c:96:96:75:bd:ea:47:99:aa:17:16:2a:38:ca:
54:a3:a7:35:bb:bc:b6:4c:6a:4c:c7:90:1c:99:9b:e2:8b:50:
1b:cf:9a:8c:ea:41:09:e8:21:b0:97:5a:75:12:e5:c0:62:db:
71:6c:de:2e:0b:84:ae:8a:39:f1:8b:02:aa:f8:fd:d7:6a:6e:
f4:c4:2f:90:da:d4:ab:58:e9:3c:ba:5c:75:3b:84:bd:71:34:
3f:e9:59:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSolK5jHI47hlt2HD/TTimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx
YThlNzgwHhcNMjUwNjA5MDMwMDU4WhcNMjUwNjEwMDMwMDU4WjAzMTEwLwYDVQQD
EyhjNjkyMTg3MWZjODExYmIxYTE1ZGEwMjEyMjJmYzM3MjIwMWQ4MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyrUtKi8jJ51GOyn8vv4LZ80sB1q
DISLe0TLJQMr56FdloQhS0CKZZx1DGlqCoMo3wJ66Sw/xaee/5EmHFtWAydpHnN9
2aI2/eOLs8n0TlVgCHaEY9X1AeaQcMse6j2ubWWs11J+1e/k57FZtrvMw6Uy0DeE
8qlYCQoKiahxPSP0OhCh6YUugDwdb2uEdPhTgfX3RjJ+13lh66x9BBzPHNT2JPY/
NyvmUpjD2LNvpfk3On4YNbWKa9a/AjIB9JpJ7inWqDHvNw98pl7W9szhbrEI2n3v
Y8vNhKXqUlVxOYb+jAjAyAY39arFpzuB0gCDmbKOJ5Teuxt5tf5nwc5VaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaSGHH8gRuxoV2gISIvw3IgHYFFMB8GA1UdIwQY
MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt
MzA3OWQ1ODhhYTk5LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5
LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGhUYLfu
Bx9pYyuCTM1QA/ZPAcOqSLwH+u6GadFPh1sUAZorjZu3oz6PKV7P/d7Et6dJ05uK
5UsTDWdhG7uFEkhRfRjUHWQ2YxKMTAqOcnvzi3yrgVyL/ynjLSmkCSJSu0/Zq3Rb
HzaWsV4GOqQ+EWbwTjazH7xVgLCmOkhyu6bdXgi3pHKYdK1HHfh2OR7l2yS6OvBN
xZxn3IK2p7+t+Ma8xnW+QGyWlnW96keZqhcWKjjKVKOnNbu8tkxqTMeQHJmb4otQ
G8+ajOpBCeghsJdadRLlwGLbcWzeLguEroo58YsCqvj912pu9MQvkNrUq1jpPLpc
dTuEvXE0P+lZ1w==
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:31:00 2025 by rpki-client