Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: AmJnzdDm44fBvhnlgdqypxm6pdjwqxQ6PRMcQCVbrI4=
Subject key identifier: 66:D6:93:DB:3B:C3:1F:76:A6:68:FC:8E:4A:4B:AF:F3:4F:86:4C:8F
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019767E08A2969323A6BAB89ACAC1F9281D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 068A
Signing time: Fri 13 Jun 2025 06:00:58 +0000
Manifest this update: Fri 13 Jun 2025 06:00:58 +0000
Manifest next update: Sat 14 Jun 2025 06:00:58 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: 07fizwqrkzw36JRUi3I45K+G1vLXlgxIYfI3XUFzMpQ=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:8a:29:69:32:3a:6b:ab:89:ac:ac:1f:92:81:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jun 13 06:00:58 2025 GMT
Not After : Jun 14 06:00:58 2025 GMT
Subject: CN=66d693db3bc31f76a668fc8e4a4baff34f864c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:e5:98:cc:9d:2d:29:7d:e9:79:a1:dc:39:
c7:67:1f:d6:fc:9a:0f:08:0e:77:04:e9:e3:93:43:
81:8d:14:3f:53:de:0c:c9:89:94:62:b4:73:71:c9:
df:3c:26:b6:b2:a5:ce:ea:0e:dd:90:d4:40:75:5f:
b8:0f:30:d7:e1:1f:3e:8e:bc:aa:bc:ef:61:7b:20:
34:0d:ef:8d:11:82:a6:23:e3:1c:81:6e:f9:e1:d5:
2b:df:a9:78:54:49:40:55:a2:b2:aa:04:ff:b8:93:
3a:a8:14:5e:fd:a9:3e:24:8a:dc:6f:77:ef:a5:63:
35:7e:2c:a8:ad:b5:da:ad:ce:92:a3:59:97:98:19:
49:2b:b4:2a:15:bf:6f:ea:55:8f:dd:c6:a0:b5:9d:
5a:ca:9b:78:e4:b0:58:e9:74:2e:86:20:84:d9:3b:
5f:6e:b0:db:d1:56:5d:c2:70:02:8c:23:6e:91:a2:
34:f5:64:02:96:76:ef:7e:ee:10:a4:e6:98:0d:2d:
3f:79:3c:d0:1b:3b:5b:75:b5:91:b1:84:0d:cc:85:
be:ed:78:ba:da:65:d7:42:ce:a1:21:8d:9b:3f:f6:
20:18:3e:37:19:22:a5:09:eb:cf:d0:6f:58:d1:7a:
9e:e4:5d:e6:ff:23:28:00:e6:7c:b5:d8:0f:5f:1b:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D6:93:DB:3B:C3:1F:76:A6:68:FC:8E:4A:4B:AF:F3:4F:86:4C:8F
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4a:8d:d5:0b:8e:84:58:c1:95:d6:74:cf:21:b9:6f:ce:4e:
35:22:49:33:b0:43:56:de:8b:c7:5e:3b:40:a9:78:ca:0a:35:
d5:78:64:f8:81:65:ba:2d:d9:70:a7:79:18:59:ad:d4:7e:0a:
bb:e1:f9:9d:bd:ad:70:35:9d:e4:ea:95:ec:4c:bf:86:ee:dd:
67:f9:28:97:9a:3d:5f:5c:b2:3f:a6:86:ce:8d:d3:e6:41:f0:
ff:3d:74:d7:92:28:37:17:e6:21:c6:73:81:04:3c:ae:2c:ea:
fb:6c:7f:c2:4e:6a:d9:d1:df:0c:46:0c:d8:90:84:a1:c2:3d:
51:29:d0:fa:8a:59:98:db:9e:e2:a3:4e:21:8c:1f:81:c9:a3:
5b:1e:95:5d:40:f4:3d:eb:36:b1:10:51:16:28:f7:27:89:60:
a0:4c:7a:a4:d5:53:15:12:60:ff:5c:ff:16:0a:13:6f:4d:6d:
7a:95:a6:ac:c2:65:f6:87:51:b6:7f:72:ff:b1:59:53:88:be:
6e:fb:cf:e4:14:a0:76:f4:b7:a3:7f:bc:2b:60:cf:65:33:e2:
04:d9:52:bd:19:25:fd:47:62:d7:12:5d:0d:ad:bd:69:e8:35:
d5:72:83:9d:2f:05:f4:e6:61:db:c9:50:03:70:5a:c2:1a:7d:
86:60:e1:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdn4IopaTI6a6uJrKwfkoHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx
YThlNzgwHhcNMjUwNjEzMDYwMDU4WhcNMjUwNjE0MDYwMDU4WjAzMTEwLwYDVQQD
Eyg2NmQ2OTNkYjNiYzMxZjc2YTY2OGZjOGU0YTRiYWZmMzRmODY0YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzflmMydLSl96Xmh3DnHZx/W/JoP
CA53BOnjk0OBjRQ/U94MyYmUYrRzccnfPCa2sqXO6g7dkNRAdV+4DzDX4R8+jryq
vO9heyA0De+NEYKmI+McgW754dUr36l4VElAVaKyqgT/uJM6qBRe/ak+JIrcb3fv
pWM1fiyorbXarc6So1mXmBlJK7QqFb9v6lWP3cagtZ1aypt45LBY6XQuhiCE2Ttf
brDb0VZdwnACjCNukaI09WQClnbvfu4QpOaYDS0/eTzQGztbdbWRsYQNzIW+7Xi6
2mXXQs6hIY2bP/YgGD43GSKlCevP0G9Y0Xqe5F3m/yMoAOZ8tdgPXxvWAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbWk9s7wx92pmj8jkpLr/NPhkyPMB8GA1UdIwQY
MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt
MzA3OWQ1ODhhYTk5LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5
LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkqN1QuO
hFjBldZ0zyG5b85ONSJJM7BDVt6Lx147QKl4ygo11Xhk+IFlui3ZcKd5GFmt1H4K
u+H5nb2tcDWd5OqV7Ey/hu7dZ/kol5o9X1yyP6aGzo3T5kHw/z1015IoNxfmIcZz
gQQ8rizq+2x/wk5q2dHfDEYM2JCEocI9USnQ+opZmNue4qNOIYwfgcmjWx6VXUD0
Pes2sRBRFij3J4lgoEx6pNVTFRJg/1z/FgoTb01tepWmrMJl9odRtn9y/7FZU4i+
bvvP5BSgdvS3o3+8K2DPZTPiBNlSvRkl/Udi1xJdDa29aeg11XKDnS8F9OZh28lQ
A3Bawhp9hmDhrg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 12:43:26 2025 by rpki-client