Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: gCMVrYebnomR0ebskTNxgdj/vG9SgUp/jegNZn2zS30=
Subject key identifier: 4A:8E:49:26:38:D5:4F:8F:9D:3B:95:A6:44:E4:D6:3C:6A:96:D2:B8
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 0197488C7C3992057F17D5203D78975322DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 0171
Signing time: Sat 07 Jun 2025 04:00:55 +0000
Manifest this update: Sat 07 Jun 2025 04:00:55 +0000
Manifest next update: Sun 08 Jun 2025 04:00:55 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: GMS+IQY8cNPBBgEPNfW3hACnyuKz972724KbaqmYvSs=)
2: CG9KoNDYQYANjw8jkpEMfgifFYg.roa (hash: a/8GNnkxdjWR/BpDGvDmUNc0bdNHqrlCI9YD9Z7wQW0=)
3: cZUoXKNyODDdYDJJ689IFt9l7Fg.roa (hash: 2dlPle1Oc1/h21vw5YqVsut1uxLZie17Tr86ybW+M80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:7c:39:92:05:7f:17:d5:20:3d:78:97:53:22:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Jun 7 04:00:55 2025 GMT
Not After : Jun 8 04:00:55 2025 GMT
Subject: CN=4a8e492638d54f8f9d3b95a644e4d63c6a96d2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:77:85:6d:cb:36:3f:c0:28:e0:7c:65:c2:
95:a8:08:15:f0:71:c6:d8:7a:33:67:65:8e:38:7a:
3f:99:c6:8c:7e:6b:25:d8:c2:6e:13:ac:0c:d2:bc:
24:99:7e:1a:51:79:0b:69:f6:ba:9a:06:69:58:38:
e2:a4:32:d6:6c:fb:33:bc:ee:0e:21:a3:e5:0f:39:
c8:84:fc:84:d3:83:79:2a:0a:7d:a0:36:de:b2:2a:
ab:9e:07:24:ef:4d:bf:ed:56:dd:b6:b9:44:cd:30:
5e:18:6e:6e:2c:38:31:bd:67:27:6a:37:b0:ca:ae:
63:4a:36:9d:13:7b:99:8a:6a:0f:4d:a7:23:da:41:
9e:ed:a8:53:17:1d:9b:73:c6:f0:1b:02:aa:df:84:
be:f2:30:c9:87:f5:5a:12:93:3f:90:cf:e6:92:9d:
f1:c7:ca:fa:ac:91:ea:0b:88:ee:ba:b6:b3:13:85:
14:6d:98:08:d0:58:af:96:30:77:f0:d0:61:55:8e:
97:03:e0:a3:91:b7:fc:f2:25:ab:de:d1:c2:5a:8e:
a6:46:01:52:bd:ab:a5:a7:e7:da:9f:8d:39:f8:41:
1e:c1:c7:43:4a:a7:1a:58:7c:13:8b:17:23:da:49:
3b:3c:26:eb:3b:e6:9d:17:37:bf:92:06:b7:bb:d8:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:49:26:38:D5:4F:8F:9D:3B:95:A6:44:E4:D6:3C:6A:96:D2:B8
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:b0:0e:e4:6c:e5:a2:1d:07:d0:66:c8:77:65:36:5d:8a:
9a:5a:ee:98:b1:1c:20:da:ee:06:22:12:28:a2:fa:38:7e:ea:
e5:26:e2:b6:77:10:0f:56:b0:7f:6b:c4:b6:93:1f:2a:0d:a3:
25:2b:42:7e:95:ac:c7:04:61:ac:46:9b:bd:1f:ad:8f:45:0c:
b4:9b:e9:3d:26:de:55:68:8c:4b:01:33:7b:2a:0d:f5:b1:cd:
dd:d7:f3:51:0f:6c:2c:d4:82:24:bf:e8:0f:97:1d:96:25:c0:
b1:4f:31:8d:8a:a9:d7:99:f7:bc:a4:d6:4d:00:e7:4f:d8:61:
20:18:76:5f:a0:5a:de:27:c2:73:24:79:3c:9e:08:ea:82:7c:
c0:70:3a:9c:aa:8e:b1:b2:73:64:ea:b4:fd:2d:7c:bb:6d:7f:
35:18:08:ea:df:f6:36:0a:34:af:ea:5b:cb:fe:63:e2:9f:60:
72:69:08:a1:09:2d:61:7f:ab:4f:a4:be:ae:b0:ee:38:07:4f:
b1:07:58:08:43:2d:6a:06:18:e2:a0:8a:a9:59:93:89:73:55:
65:3b:08:14:ee:f2:a5:6e:62:42:82:f8:fd:bc:fb:94:87:23:
66:ff:c4:ec:02:4f:81:d4:84:71:4e:bb:67:a5:f7:05:ce:e1:
42:8a:38:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjHw5kgV/F9UgPXiXUyLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODQzY2Q2MWQ4ZmZmMWY2Y2ZiMzgwYWUyNDNiZTBiMWQ5
NDM1YWIwHhcNMjUwNjA3MDQwMDU1WhcNMjUwNjA4MDQwMDU1WjAzMTEwLwYDVQQD
Eyg0YThlNDkyNjM4ZDU0ZjhmOWQzYjk1YTY0NGU0ZDYzYzZhOTZkMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf53hW3LNj/AKOB8ZcKVqAgV8HHG
2HozZ2WOOHo/mcaMfmsl2MJuE6wM0rwkmX4aUXkLafa6mgZpWDjipDLWbPszvO4O
IaPlDznIhPyE04N5Kgp9oDbesiqrngck702/7VbdtrlEzTBeGG5uLDgxvWcnajew
yq5jSjadE3uZimoPTacj2kGe7ahTFx2bc8bwGwKq34S+8jDJh/VaEpM/kM/mkp3x
x8r6rJHqC4juurazE4UUbZgI0FivljB38NBhVY6XA+Cjkbf88iWr3tHCWo6mRgFS
vaulp+fan405+EEewcdDSqcaWHwTixcj2kk7PCbrO+adFze/kga3u9iEcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqOSSY41U+PnTuVpkTk1jxqltK4MB8GA1UdIwQY
MBaAFNaEPNYdj/8fbPs4CuJDvgsdlDWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80NGNjN2MtYTZiNS00ZGE2LWFmOGUt
ZWVjZDA5ZDkwYzY1LzEvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80NGNjN2MtYTZiNS00ZGE2LWFmOGUtZWVjZDA5ZDkwYzY1
LzEvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcmwDuRs
5aIdB9BmyHdlNl2KmlrumLEcINruBiISKKL6OH7q5SbitncQD1awf2vEtpMfKg2j
JStCfpWsxwRhrEabvR+tj0UMtJvpPSbeVWiMSwEzeyoN9bHN3dfzUQ9sLNSCJL/o
D5cdliXAsU8xjYqp15n3vKTWTQDnT9hhIBh2X6Ba3ifCcyR5PJ4I6oJ8wHA6nKqO
sbJzZOq0/S18u21/NRgI6t/2Ngo0r+pby/5j4p9gcmkIoQktYX+rT6S+rrDuOAdP
sQdYCEMtagYY4qCKqVmTiXNVZTsIFO7ypW5iQoL4/bz7lIcjZv/E7AJPgdSEcU67
Z6X3Bc7hQoo4aQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:30 2025 by rpki-client