Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier: nUtwAT7yMZggo2T8Phv7p2abrWo00/Jk9CGICYoLivY=
Subject key identifier: DD:50:0F:89:94:AA:7D:10:1F:21:98:07:2A:F8:BD:CA:FE:47:2F:05
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 019751FD70F72D2CA966CE629F26427391A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number: 08DB
Signing time: Mon 09 Jun 2025 00:00:53 +0000
Manifest this update: Mon 09 Jun 2025 00:00:53 +0000
Manifest next update: Tue 10 Jun 2025 00:00:53 +0000
Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: Gpn4FHo+4rFjj3sBBEmiH36byovX4PsAJPvzA1zJSrE=)
2: p41jrQB80nM3Fi93nL78jR6iBMo.roa (hash: nJZUqGT5BG1vu4ck1mxKQBzWxDOQCEnlZy8FawGaQcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:70:f7:2d:2c:a9:66:ce:62:9f:26:42:73:91:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Jun 9 00:00:53 2025 GMT
Not After : Jun 10 00:00:53 2025 GMT
Subject: CN=dd500f8994aa7d101f2198072af8bdcafe472f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:f3:ab:c0:d6:35:e8:3c:19:a8:6c:54:75:
d0:5f:35:6e:37:15:99:9b:59:58:80:c9:30:83:9b:
c3:f6:fd:d1:3c:a8:e3:71:4a:fb:46:4e:b1:b6:0f:
12:e3:95:84:90:99:20:b5:1f:6b:9e:53:6c:96:5d:
80:97:7a:86:f5:ef:6b:8d:69:c0:06:78:42:16:5a:
b9:5c:11:4a:45:d9:e4:f0:67:b2:ee:37:f7:e1:2f:
d3:3b:66:44:d7:fd:12:c4:e9:57:0b:18:2c:f0:5f:
73:87:42:e5:dc:b8:2b:d0:2c:e6:73:9a:56:b9:9e:
e1:59:32:ed:a4:64:22:9d:3b:68:4e:65:b4:b7:d1:
76:ea:6f:6a:d3:98:f4:48:f9:e1:53:bb:47:01:48:
34:6c:d5:bb:80:8c:1d:4c:b3:3e:c6:ca:c1:78:ea:
9c:97:53:59:f0:ae:2b:47:2e:72:ea:9c:65:b5:0a:
3e:ec:0e:7e:89:7d:0e:f1:90:77:0c:37:80:ed:3f:
87:f1:b3:ee:24:ab:e2:17:45:dc:04:dd:df:14:7a:
5e:4a:98:13:c3:2c:e1:bd:f7:21:8c:b6:ba:63:34:
3d:9f:92:6f:bf:ce:e2:b7:20:7a:09:cb:c4:91:ef:
8b:41:7d:8b:44:ce:a4:52:09:2b:59:1a:cf:a6:db:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:50:0F:89:94:AA:7D:10:1F:21:98:07:2A:F8:BD:CA:FE:47:2F:05
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:08:18:21:58:8a:0c:f3:20:a1:d5:fa:ed:e6:8d:ae:a6:9d:
38:64:2d:45:ea:90:74:32:7c:61:f5:a1:47:ee:cb:38:cd:78:
08:cd:73:92:98:25:8c:54:14:70:1d:f1:c0:10:c3:ac:af:7d:
a2:87:aa:6e:71:80:ee:95:d7:b9:78:73:fc:71:34:48:c1:28:
75:ec:6d:d2:74:74:c6:75:3c:1c:59:f0:17:04:7a:f6:53:3f:
64:2a:2b:9b:5d:ca:01:de:b1:0d:c0:3e:77:20:9e:f0:cd:fd:
14:98:f2:d5:01:5b:04:fd:c8:cd:f4:13:87:6b:86:b6:31:8b:
67:a8:50:f6:c6:4e:97:c1:2c:11:3e:de:da:38:00:65:0d:c6:
0c:2d:91:88:01:5b:a9:84:f9:2d:2e:a3:18:b6:fc:4e:a7:aa:
d8:c4:f7:14:60:0f:ca:12:75:35:3c:22:2d:2e:ed:fa:9b:bb:
ca:8d:f5:68:00:6a:fc:43:e9:85:57:1f:58:1e:61:bc:f6:40:
28:42:3e:6a:65:2b:0a:aa:e5:14:27:0d:d1:8f:6e:64:a0:d4:
b3:f8:22:67:6f:43:96:2e:fa:38:ab:d7:8d:05:06:80:a1:2f:
e4:16:97:3f:27:c8:a9:ea:4e:c2:38:7e:5e:bc:f0:bb:d2:1f:
a6:df:f9:a5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdR/XD3LSypZs5inyZCc5GmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjY1MTI0YWViNjAzYTBkZDVjNWNlZTFhMGFiNjUyMTM5
N2RiNjAwHhcNMjUwNjA5MDAwMDUzWhcNMjUwNjEwMDAwMDUzWjAzMTEwLwYDVQQD
EyhkZDUwMGY4OTk0YWE3ZDEwMWYyMTk4MDcyYWY4YmRjYWZlNDcyZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSzzq8DWNeg8GahsVHXQXzVuNxWZ
m1lYgMkwg5vD9v3RPKjjcUr7Rk6xtg8S45WEkJkgtR9rnlNsll2Al3qG9e9rjWnA
BnhCFlq5XBFKRdnk8Gey7jf34S/TO2ZE1/0SxOlXCxgs8F9zh0Ll3Lgr0Czmc5pW
uZ7hWTLtpGQinTtoTmW0t9F26m9q05j0SPnhU7tHAUg0bNW7gIwdTLM+xsrBeOqc
l1NZ8K4rRy5y6pxltQo+7A5+iX0O8ZB3DDeA7T+H8bPuJKviF0XcBN3fFHpeSpgT
wyzhvfchjLa6YzQ9n5Jvv87ityB6CcvEke+LQX2LRM6kUgkrWRrPptu9bQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN1QD4mUqn0QHyGYByr4vcr+Ry8FMB8GA1UdIwQY
MBaAFPq2USSutgOg3Vxc7hoKtlITl9tgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yWlJKSzYyQTZEZFhGenVHZ3EyVWhPWDIyQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZWYxNjk5LThjMTMtNDIzNS1hNTg5
LTYzZmU2YmU2MmRjOS8xLzEtclpSSks2MkE2RGRYRnp1R2dxMlVoT1gyMkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzllL2VmMTY5OS04YzEzLTQyMzUtYTU4OS02M2ZlNmJlNjJk
YzkvMS8xLXJaUkpLNjJBNkRkWEZ6dUdncTJVaE9YMjJBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAgY
IViKDPMgodX67eaNrqadOGQtReqQdDJ8YfWhR+7LOM14CM1zkpgljFQUcB3xwBDD
rK99ooeqbnGA7pXXuXhz/HE0SMEodext0nR0xnU8HFnwFwR69lM/ZCorm13KAd6x
DcA+dyCe8M39FJjy1QFbBP3IzfQTh2uGtjGLZ6hQ9sZOl8EsET7e2jgAZQ3GDC2R
iAFbqYT5LS6jGLb8Tqeq2MT3FGAPyhJ1NTwiLS7t+pu7yo31aABq/EPphVcfWB5h
vPZAKEI+amUrCqrlFCcN0Y9uZKDUs/giZ29Dli76OKvXjQUGgKEv5BaXPyfIqepO
wjh+Xrzwu9Ifpt/5pQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:58:57 2025 by rpki-client