Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: GI2GQf4eIYUMo/8RXBOzl+sBNBhOBCm6JkH3X+gKZdg=
Subject key identifier: 6C:F6:11:9A:E1:A7:B3:C4:8F:3A:14:B3:CD:25:98:FE:77:95:0C:94
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 0197512192A638F9EA1E7CC30FA896E1BFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 20:00:44 +0000
Manifest this update: Sun 08 Jun 2025 20:00:44 +0000
Manifest next update: Mon 09 Jun 2025 20:00:44 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: Uy1oIQN6XrQcF4dAiZxUF0fdcIXacPdp0Kq0LGxJNT4=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:92:a6:38:f9:ea:1e:7c:c3:0f:a8:96:e1:bf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Jun 8 20:00:44 2025 GMT
Not After : Jun 9 20:00:44 2025 GMT
Subject: CN=6cf6119ae1a7b3c48f3a14b3cd2598fe77950c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:70:35:93:ff:05:41:ce:62:73:06:ae:10:
37:d6:3a:e8:fc:4b:42:29:35:49:56:a2:e9:1b:82:
4e:f6:14:a5:cc:e2:2a:eb:5a:81:a5:2e:96:3d:b1:
46:db:51:a2:36:88:14:67:cd:0e:e6:40:d6:63:52:
10:00:30:41:e0:7d:d6:60:6f:70:ec:2e:ed:87:d4:
3e:f9:03:d5:50:47:cf:2d:58:3e:16:d2:d7:24:18:
17:2a:8c:d4:19:91:2c:93:78:ad:a8:49:8f:ef:99:
45:1d:a7:1c:d6:5b:23:3a:d7:46:5c:bb:46:e7:91:
50:98:db:a9:9d:d4:59:b0:e9:37:14:cf:b1:b7:8e:
38:9f:f8:78:f7:2f:6d:51:4d:3e:4c:ff:c3:c6:35:
75:9a:2b:0a:8d:87:41:9a:a0:b8:57:23:58:48:19:
06:8c:c3:8a:a0:25:52:a4:43:48:b4:73:e3:eb:c8:
25:de:58:d7:b4:19:63:49:1a:8a:ff:76:89:bf:06:
e1:99:48:eb:3e:44:85:17:d9:1a:14:22:4a:83:7a:
dd:48:f6:be:98:dd:63:b7:1e:ad:49:2b:c4:62:f7:
28:dd:55:6b:80:83:90:79:ab:b8:aa:c0:c7:4c:0c:
b3:75:93:a0:bf:15:90:9e:9a:af:20:96:ce:57:e8:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:11:9A:E1:A7:B3:C4:8F:3A:14:B3:CD:25:98:FE:77:95:0C:94
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:26:09:4b:2b:50:e2:a6:91:e5:3e:42:b1:15:c8:f5:3d:12:
0e:c0:5f:7d:4c:72:32:ed:d9:56:b0:3a:fb:66:0c:06:d4:6b:
30:6b:9d:b0:37:86:33:e1:83:b7:cf:b9:53:28:df:d8:f5:71:
a3:91:21:38:91:c9:90:37:f5:ae:36:b2:03:51:2b:be:68:e2:
21:d3:80:a1:31:96:9c:e0:73:82:be:f4:99:b0:86:a8:cd:f7:
f7:43:c2:7f:d2:85:d3:54:9c:c5:87:97:0b:36:b4:da:5b:ef:
cb:19:08:17:9f:8f:08:2a:4b:a8:a5:0d:03:27:6a:06:ba:80:
1e:ef:b6:98:33:2a:e8:48:de:2b:c6:7f:1e:f9:c7:22:af:b4:
14:57:7f:d9:0c:bc:02:78:df:25:ec:35:89:ef:31:01:a1:be:
e2:af:64:d9:ed:9b:6b:17:1b:44:04:de:2c:83:39:99:28:a4:
93:19:1e:21:bb:6b:53:8e:d6:20:b9:3f:36:3a:03:2d:16:b4:
31:f4:39:03:65:f1:7b:5d:6d:7c:97:b3:f7:70:e8:8b:b6:42:
46:3b:83:59:4e:86:55:5e:ae:3c:f6:4e:db:09:52:15:0b:c4:
03:a0:9f:5c:5f:2e:34:02:15:60:13:77:f3:f8:52:0b:20:1f:
42:c7:e4:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIZKmOPnqHnzDD6iW4b/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjUwNjA4MjAwMDQ0WhcNMjUwNjA5MjAwMDQ0WjAzMTEwLwYDVQQD
Eyg2Y2Y2MTE5YWUxYTdiM2M0OGYzYTE0YjNjZDI1OThmZTc3OTUwYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomxwNZP/BUHOYnMGrhA31jro/EtC
KTVJVqLpG4JO9hSlzOIq61qBpS6WPbFG21GiNogUZ80O5kDWY1IQADBB4H3WYG9w
7C7th9Q++QPVUEfPLVg+FtLXJBgXKozUGZEsk3itqEmP75lFHacc1lsjOtdGXLtG
55FQmNupndRZsOk3FM+xt444n/h49y9tUU0+TP/DxjV1misKjYdBmqC4VyNYSBkG
jMOKoCVSpENItHPj68gl3ljXtBljSRqK/3aJvwbhmUjrPkSFF9kaFCJKg3rdSPa+
mN1jtx6tSSvEYvco3VVrgIOQeau4qsDHTAyzdZOgvxWQnpqvIJbOV+hxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz2EZrhp7PEjzoUs80lmP53lQyUMB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiYJSytQ
4qaR5T5CsRXI9T0SDsBffUxyMu3ZVrA6+2YMBtRrMGudsDeGM+GDt8+5Uyjf2PVx
o5EhOJHJkDf1rjayA1ErvmjiIdOAoTGWnOBzgr70mbCGqM3390PCf9KF01ScxYeX
Cza02lvvyxkIF5+PCCpLqKUNAydqBrqAHu+2mDMq6EjeK8Z/HvnHIq+0FFd/2Qy8
AnjfJew1ie8xAaG+4q9k2e2baxcbRATeLIM5mSikkxkeIbtrU47WILk/NjoDLRa0
MfQ5A2Xxe11tfJez93Doi7ZCRjuDWU6GVV6uPPZO2wlSFQvEA6CfXF8uNAIVYBN3
8/hSCyAfQsfkyA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:15 2025 by rpki-client