Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: ueYhsWCNgTCgJeZCswZVTnx/cMw2zNBudQ9SXpsW60I=
Subject key identifier: 10:BE:DB:19:4D:1D:A1:7A:DF:BA:84:F0:25:A7:13:AE:69:1C:33:D0
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 01974D7C1EA3DC96F5400B64BCDAE9B9D27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 03:01:09 +0000
Manifest this update: Sun 08 Jun 2025 03:01:09 +0000
Manifest next update: Mon 09 Jun 2025 03:01:09 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: BAgZ6koHdSyBLbhP4jFzVWfOWREaIUqKYobYujndSns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:1e:a3:dc:96:f5:40:0b:64:bc:da:e9:b9:d2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Jun 8 03:01:09 2025 GMT
Not After : Jun 9 03:01:09 2025 GMT
Subject: CN=10bedb194d1da17adfba84f025a713ae691c33d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:18:11:fd:10:aa:19:3b:c9:2a:c2:2b:16:
2b:65:3b:02:87:ff:67:75:06:c5:eb:16:7a:19:c9:
e6:17:83:46:ae:8b:e9:78:43:07:00:22:66:5c:7e:
eb:d9:c0:41:ba:23:15:0f:d1:b7:3c:36:df:ee:1b:
9e:ac:e9:ec:01:1c:fc:bd:bb:c5:e7:1a:dd:06:6b:
9b:3d:63:f4:9e:40:f4:56:b2:0f:c7:64:22:78:0e:
e5:56:a4:4a:e4:a6:f5:31:2c:fb:7e:34:2b:a3:35:
48:3d:4f:63:b7:6e:21:d0:18:09:27:e4:f2:5e:c2:
57:4b:f7:de:36:67:46:33:89:9a:42:f5:34:a6:f9:
8e:6b:8b:cb:21:46:e0:7e:11:0e:5d:d6:92:36:24:
e6:07:d6:ff:e1:d1:b0:1d:05:46:fe:a0:7a:b1:b8:
4b:28:51:03:03:69:1f:d6:0a:6e:4e:ec:0f:71:a6:
af:da:50:50:f9:d3:18:11:72:33:67:fe:2e:6a:91:
b5:0f:74:a1:db:a4:75:22:90:2d:58:bd:29:fe:17:
5c:cd:3d:b4:8c:17:db:bf:d4:05:dd:01:25:7e:b7:
23:27:26:2d:c7:62:1d:1e:0f:f9:e5:48:0f:44:c7:
53:2d:e4:89:af:9f:01:aa:0b:69:e3:f2:1f:d5:a8:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:DB:19:4D:1D:A1:7A:DF:BA:84:F0:25:A7:13:AE:69:1C:33:D0
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4e:43:8e:9c:8a:c5:a1:49:8c:38:61:5b:19:97:de:c0:af:
bc:a5:68:c2:89:f6:8d:ed:df:45:46:9b:1b:5b:45:30:f7:7f:
f2:3c:a1:22:19:67:77:14:20:ca:4f:27:c9:19:02:f9:9e:5e:
ec:ea:41:27:a7:cb:33:39:4d:2f:dc:16:3d:e3:1b:29:e3:67:
6f:68:16:5c:e4:f8:5c:75:83:33:43:47:ca:5f:32:6f:bd:bb:
7e:72:38:5c:cb:e7:7a:0c:cc:23:69:02:08:23:e6:7d:80:54:
b9:60:44:2a:3f:de:b0:89:44:8b:4f:c4:cd:c2:dd:c5:c2:52:
a4:3a:8a:14:ad:01:49:07:e4:8c:5a:08:6f:3b:a8:46:f5:1f:
e2:e8:30:db:22:3e:91:b8:44:f2:8c:97:4a:21:aa:c9:62:2c:
54:9e:12:c8:fe:fd:11:96:ae:e4:59:92:21:aa:d5:eb:0b:e6:
57:e5:7a:ff:18:1e:e9:62:06:86:a8:04:b7:08:a4:36:c0:8b:
25:53:cb:7d:aa:31:ca:5b:88:5c:9e:9c:e4:f8:35:ed:61:0c:
da:80:63:68:5a:35:8f:c5:0d:07:03:d5:8f:bc:35:56:85:f9:
76:6c:e8:ee:6f:5b:42:41:63:f8:77:49:22:18:6e:a9:40:6f:
dc:01:88:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfB6j3Jb1QAtkvNrpudJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZmIwMjQzMjY4ODY3NDI2MGM2ZDAxMmE1OTdkNzBiY2Q1
MTQ5YzQwHhcNMjUwNjA4MDMwMTA5WhcNMjUwNjA5MDMwMTA5WjAzMTEwLwYDVQQD
EygxMGJlZGIxOTRkMWRhMTdhZGZiYTg0ZjAyNWE3MTNhZTY5MWMzM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKwYEf0Qqhk7ySrCKxYrZTsCh/9n
dQbF6xZ6GcnmF4NGrovpeEMHACJmXH7r2cBBuiMVD9G3PDbf7huerOnsARz8vbvF
5xrdBmubPWP0nkD0VrIPx2QieA7lVqRK5Kb1MSz7fjQrozVIPU9jt24h0BgJJ+Ty
XsJXS/feNmdGM4maQvU0pvmOa4vLIUbgfhEOXdaSNiTmB9b/4dGwHQVG/qB6sbhL
KFEDA2kf1gpuTuwPcaav2lBQ+dMYEXIzZ/4uapG1D3Sh26R1IpAtWL0p/hdczT20
jBfbv9QF3QElfrcjJyYtx2IdHg/55UgPRMdTLeSJr58Bqgtp4/If1ai1awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBC+2xlNHaF637qE8CWnE65pHDPQMB8GA1UdIwQY
MBaAFKz7AkMmiGdCYMbQEqWX1wvNUUnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNDE3OTQtZDYxOS00Yzc0LTgyNGQt
MzFkNzAxMGE3MjU2LzEvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNDE3OTQtZDYxOS00Yzc0LTgyNGQtMzFkNzAxMGE3MjU2
LzEvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcU5DjpyK
xaFJjDhhWxmX3sCvvKVowon2je3fRUabG1tFMPd/8jyhIhlndxQgyk8nyRkC+Z5e
7OpBJ6fLMzlNL9wWPeMbKeNnb2gWXOT4XHWDM0NHyl8yb727fnI4XMvnegzMI2kC
CCPmfYBUuWBEKj/esIlEi0/EzcLdxcJSpDqKFK0BSQfkjFoIbzuoRvUf4ugw2yI+
kbhE8oyXSiGqyWIsVJ4SyP79EZau5FmSIarV6wvmV+V6/xge6WIGhqgEtwikNsCL
JVPLfaoxyluIXJ6c5Pg17WEM2oBjaFo1j8UNBwPVj7w1VoX5dmzo7m9bQkFj+HdJ
IhhuqUBv3AGIPQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:29:49 2025 by rpki-client