Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: iNro3xMTwM53hrgB7vCAkCCqTV7lqZC2Q/1i3Yt2q9Q=
Subject key identifier: 1A:73:EB:D0:62:DB:A2:8C:38:09:F2:FD:00:49:13:EA:75:E8:4F:8C
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 0197474283433BD255653ABB1100AC23515B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 0491
Signing time: Fri 06 Jun 2025 22:00:30 +0000
Manifest this update: Fri 06 Jun 2025 22:00:30 +0000
Manifest next update: Sat 07 Jun 2025 22:00:30 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: nzp44DvyPNXNigEFjXQ+ylXrHCy+m68cwWGHDmSs5Y8=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:83:43:3b:d2:55:65:3a:bb:11:00:ac:23:51:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Jun 6 22:00:30 2025 GMT
Not After : Jun 7 22:00:30 2025 GMT
Subject: CN=1a73ebd062dba28c3809f2fd004913ea75e84f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:e0:d0:cb:37:73:33:d4:41:4d:76:22:d9:
33:d6:57:63:2f:40:f1:f0:b8:ef:b2:d4:25:4c:5d:
c2:2b:5d:ae:56:be:a8:90:67:3d:62:6d:a8:1c:f5:
59:16:70:c4:66:bc:4a:a8:8a:9f:58:84:96:52:3b:
4d:3f:a8:25:4d:55:cd:ea:35:0b:90:f8:1d:98:bc:
ed:ff:90:26:49:12:7f:0b:be:48:d9:49:a8:16:c1:
13:10:2d:86:43:55:fb:70:50:b5:be:e2:cf:0a:e0:
20:a6:e9:3a:d1:5a:f4:9e:0b:44:8c:cb:26:ed:25:
a9:01:41:28:80:45:62:e5:f3:dc:c8:7f:39:7b:73:
ea:cf:fb:7a:e8:7a:a5:7e:8c:f4:7e:8e:eb:08:dc:
a9:aa:57:bd:cf:b9:39:bc:09:77:e0:58:d8:9c:16:
8a:d5:dc:33:1f:e4:68:fe:52:23:9d:a7:ad:d3:dc:
ca:c4:30:cd:40:4b:f6:92:6f:f5:23:98:67:70:1b:
44:b1:e2:b2:53:38:71:5c:8b:7b:b6:b2:c5:eb:e6:
3a:ec:e3:88:28:be:f1:6a:99:9d:03:37:71:64:10:
2f:3e:8e:36:6a:d0:6b:a1:74:74:26:61:94:01:6a:
1b:1d:98:60:70:6e:a0:5f:b8:dd:32:83:d8:63:a9:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:73:EB:D0:62:DB:A2:8C:38:09:F2:FD:00:49:13:EA:75:E8:4F:8C
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2a:18:bd:fc:46:71:62:1a:ab:3e:e7:27:32:61:92:8a:0f:
d0:df:4c:61:62:05:24:94:32:0f:20:b9:fa:15:9e:3b:c0:43:
95:a2:0c:2c:fd:d2:30:4c:c4:6e:0b:21:14:fe:47:b7:d1:54:
26:50:58:d0:24:79:79:9a:d9:6b:2b:e1:09:c4:5a:88:c1:f9:
45:d3:53:83:bc:e0:af:62:ef:69:b3:21:19:a2:99:3c:c2:5a:
e1:e0:65:97:b5:01:01:37:c2:bc:5f:84:96:6c:48:c2:9f:7d:
ec:4e:5a:8c:2f:1f:7b:15:12:b2:61:0a:23:98:70:c7:e0:c0:
56:8f:f3:4a:fe:b3:8d:da:2a:da:68:58:01:fb:96:9a:85:75:
21:42:e5:71:b1:cc:b0:29:11:27:55:d7:cd:c4:fa:8e:6f:26:
39:d3:b8:e8:21:c0:e6:f4:ad:e2:98:85:7d:9b:87:fc:77:49:
a6:52:7b:eb:ec:3c:69:7c:fa:e8:75:4d:95:e0:27:b8:7c:2f:
98:1e:51:55:26:3b:51:f5:28:27:5d:4a:6f:e5:7d:d8:1f:66:
cd:36:1c:ad:24:a1:b9:c9:f0:c9:52:2e:dd:b3:b5:8b:4e:16:
02:94:16:dd:78:37:8e:5d:b9:2d:8e:7c:ac:ba:08:1d:8b:17:
1d:0e:c0:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQoNDO9JVZTq7EQCsI1FbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNGUxZWE2NTI4N2EyNGUyMGM2NjNiNTE2MWMxNTEzZjAw
YzhhOGQwHhcNMjUwNjA2MjIwMDMwWhcNMjUwNjA3MjIwMDMwWjAzMTEwLwYDVQQD
EygxYTczZWJkMDYyZGJhMjhjMzgwOWYyZmQwMDQ5MTNlYTc1ZTg0ZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW3g0Ms3czPUQU12Itkz1ldjL0Dx
8LjvstQlTF3CK12uVr6okGc9Ym2oHPVZFnDEZrxKqIqfWISWUjtNP6glTVXN6jUL
kPgdmLzt/5AmSRJ/C75I2UmoFsETEC2GQ1X7cFC1vuLPCuAgpuk60Vr0ngtEjMsm
7SWpAUEogEVi5fPcyH85e3Pqz/t66Hqlfoz0fo7rCNypqle9z7k5vAl34FjYnBaK
1dwzH+Ro/lIjnaet09zKxDDNQEv2km/1I5hncBtEseKyUzhxXIt7trLF6+Y67OOI
KL7xapmdAzdxZBAvPo42atBroXR0JmGUAWobHZhgcG6gX7jdMoPYY6maOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpz69Bi26KMOAny/QBJE+p16E+MMB8GA1UdIwQY
MBaAFO9OHqZSh6JOIMZjtRYcFRPwDIqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hNTJjZWItYzhjOC00MjM2LWEwMzct
NjBhNTc0M2U2ZTFmLzEvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9hNTJjZWItYzhjOC00MjM2LWEwMzctNjBhNTc0M2U2ZTFm
LzEvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyoYvfxG
cWIaqz7nJzJhkooP0N9MYWIFJJQyDyC5+hWeO8BDlaIMLP3SMEzEbgshFP5Ht9FU
JlBY0CR5eZrZayvhCcRaiMH5RdNTg7zgr2LvabMhGaKZPMJa4eBll7UBATfCvF+E
lmxIwp997E5ajC8fexUSsmEKI5hwx+DAVo/zSv6zjdoq2mhYAfuWmoV1IULlcbHM
sCkRJ1XXzcT6jm8mOdO46CHA5vSt4piFfZuH/HdJplJ76+w8aXz66HVNleAnuHwv
mB5RVSY7UfUoJ11Kb+V92B9mzTYcrSShucnwyVIu3bO1i04WApQW3Xg3jl25LY58
rLoIHYsXHQ7Apg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:46 2025 by rpki-client