Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: HM0u3gdxbujRdDXEK03Dn0X8AGw08azGG8u5uWe5ZsA=
Subject key identifier: 17:8E:13:BF:7C:61:CB:A6:BD:53:BD:0A:10:58:03:28:CE:DC:3C:E8
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 0197534705BA8B609E1533480631833A8E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 06:00:52 +0000
Manifest this update: Mon 09 Jun 2025 06:00:52 +0000
Manifest next update: Tue 10 Jun 2025 06:00:52 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: fdMRdzaV6W2Xsr8W5D9erfsjsRGDFmjU/XpC7y9MqI8=)
2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:05:ba:8b:60:9e:15:33:48:06:31:83:3a:8e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Jun 9 06:00:52 2025 GMT
Not After : Jun 10 06:00:52 2025 GMT
Subject: CN=178e13bf7c61cba6bd53bd0a10580328cedc3ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:53:e5:98:d7:1d:ae:9f:34:72:48:73:17:
ed:83:c6:d2:82:87:92:65:e3:00:00:d4:dd:a9:5e:
72:90:a4:03:8f:1d:0c:21:92:4e:a1:bc:5d:53:58:
23:f5:1d:5d:6a:d9:44:a5:66:4b:99:9b:b9:64:d1:
ec:bb:9f:39:e7:b0:09:ee:17:36:fc:79:a4:4c:e3:
0a:4b:6a:c3:b3:1b:85:a5:28:21:92:60:92:8c:1e:
77:e9:bc:89:eb:26:26:01:6e:f9:bc:57:6c:7a:08:
7d:47:fa:74:3e:29:57:c5:1c:4a:ec:c5:ee:b2:dc:
c8:4b:fd:6d:58:4b:86:8c:be:b6:5d:22:ce:75:4b:
51:2d:00:c5:69:04:cd:9e:54:84:31:42:cb:d4:b8:
bd:51:b2:05:0c:57:e7:0a:28:52:7e:a9:9d:fd:8d:
e7:18:b3:3c:9a:a9:7b:45:b2:77:d8:9d:be:b1:78:
db:04:c7:4c:71:03:1a:3a:9e:71:e9:7a:d3:c4:72:
8e:0e:d0:bb:a5:e9:f6:8d:a4:84:bc:33:ba:34:75:
58:c0:b8:1b:ab:b1:1a:19:04:90:33:91:21:16:69:
79:91:7c:8a:65:2a:15:d9:bb:92:28:2e:92:5c:5c:
3c:6e:93:f2:33:aa:e9:4c:66:0b:59:9d:38:84:2e:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:13:BF:7C:61:CB:A6:BD:53:BD:0A:10:58:03:28:CE:DC:3C:E8
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:56:e4:e4:21:7e:d5:58:48:fa:1f:b1:07:d6:59:fe:d3:cf:
04:7f:3d:e6:8a:ac:e7:ad:3f:65:5c:9e:70:7b:f2:50:39:0f:
b1:69:8c:d2:55:9d:1e:21:6b:16:46:3b:38:51:1d:b6:0a:84:
d2:0d:85:73:95:39:6f:49:75:a7:e1:ba:74:a3:f0:f5:6b:7c:
78:bf:80:64:1d:3b:f5:55:39:2a:27:28:a4:cc:85:da:ee:02:
c6:9a:e8:54:14:39:15:10:d2:37:55:0e:95:c9:e3:40:eb:2c:
32:89:9b:68:16:4e:c9:b0:bc:88:81:ea:1b:f7:cc:d8:4e:94:
09:87:03:53:51:ec:ad:6f:9f:22:9e:e4:e2:de:a7:43:b3:30:
9f:1f:6d:bd:7b:e3:25:5e:7c:10:03:9c:d2:94:f2:5f:8c:f7:
06:1b:aa:fa:a7:a3:5e:91:98:37:ac:ed:16:ec:0b:a0:3b:77:
27:af:51:1f:7b:03:22:da:f8:42:91:45:75:76:92:7b:d7:2f:
ad:fd:00:0b:05:69:c7:0f:27:ba:2d:04:4f:9e:77:fc:c3:7a:
24:2f:72:e2:28:10:4a:bd:a0:e0:35:b5:d6:ef:6c:7b:e3:6c:
1e:ea:00:17:ed:e1:e9:04:22:2a:f2:c1:73:73:ca:76:b7:e4:
67:8c:e2:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTRwW6i2CeFTNIBjGDOo5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWIzMzZkNTYwNGQ0N2JhZTgxNzIzOGIwZGJiNDk3NzFl
MjQ3MjkwHhcNMjUwNjA5MDYwMDUyWhcNMjUwNjEwMDYwMDUyWjAzMTEwLwYDVQQD
EygxNzhlMTNiZjdjNjFjYmE2YmQ1M2JkMGExMDU4MDMyOGNlZGMzY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcxT5ZjXHa6fNHJIcxftg8bSgoeS
ZeMAANTdqV5ykKQDjx0MIZJOobxdU1gj9R1datlEpWZLmZu5ZNHsu58557AJ7hc2
/HmkTOMKS2rDsxuFpSghkmCSjB536byJ6yYmAW75vFdsegh9R/p0PilXxRxK7MXu
stzIS/1tWEuGjL62XSLOdUtRLQDFaQTNnlSEMULL1Li9UbIFDFfnCihSfqmd/Y3n
GLM8mql7RbJ32J2+sXjbBMdMcQMaOp5x6XrTxHKODtC7pen2jaSEvDO6NHVYwLgb
q7EaGQSQM5EhFml5kXyKZSoV2buSKC6SXFw8bpPyM6rpTGYLWZ04hC4KBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeOE798YcumvVO9ChBYAyjO3DzoMB8GA1UdIwQY
MBaAFJDrM21WBNR7roFyOLDbtJdx4kcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWIt
YjExOTI3NGFkNjU0LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWItYjExOTI3NGFkNjU0
LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflbk5CF+
1VhI+h+xB9ZZ/tPPBH895oqs560/ZVyecHvyUDkPsWmM0lWdHiFrFkY7OFEdtgqE
0g2Fc5U5b0l1p+G6dKPw9Wt8eL+AZB079VU5KicopMyF2u4CxproVBQ5FRDSN1UO
lcnjQOssMombaBZOybC8iIHqG/fM2E6UCYcDU1HsrW+fIp7k4t6nQ7Mwnx9tvXvj
JV58EAOc0pTyX4z3Bhuq+qejXpGYN6ztFuwLoDt3J69RH3sDItr4QpFFdXaSe9cv
rf0ACwVpxw8nui0ET553/MN6JC9y4igQSr2g4DW11u9se+NsHuoAF+3h6QQiKvLB
c3PKdrfkZ4zigA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:24:12 2025 by rpki-client