Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: FHzLhuatD0xp42WJ4dxkPxhikBFAYG1JjEHJ9xz0hc0=
Subject key identifier: 28:12:89:0F:65:07:25:98:70:D8:2B:02:7F:FB:BF:1E:25:98:A2:BE
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 01975046019EC10FC2A4F352FE4DF94CE9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 16:00:54 +0000
Manifest this update: Sun 08 Jun 2025 16:00:54 +0000
Manifest next update: Mon 09 Jun 2025 16:00:54 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: sREiavTOIqLsSZCMUbfjiwIVKjIhToTgRWhgYk8yZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:01:9e:c1:0f:c2:a4:f3:52:fe:4d:f9:4c:e9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Jun 8 16:00:54 2025 GMT
Not After : Jun 9 16:00:54 2025 GMT
Subject: CN=2812890f6507259870d82b027ffbbf1e2598a2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:2c:94:87:aa:35:06:69:c1:c0:b8:f9:a4:
5d:73:5e:2b:15:78:3d:e0:d8:41:a3:65:6e:b7:94:
a6:93:2d:12:2f:a6:87:31:61:55:c9:54:cd:6e:e3:
aa:f0:a2:d3:1f:31:68:13:f0:d2:35:8d:ea:32:4b:
c5:67:eb:ce:4c:65:63:37:d4:3e:3a:55:42:12:0d:
51:af:d4:23:3b:5c:e7:b6:2a:4f:78:a7:ec:7f:c7:
c0:d6:42:e8:5f:c2:a5:32:a7:30:9b:48:03:f4:e0:
64:36:16:32:66:56:de:7e:84:75:8a:4c:8c:89:5d:
de:0c:8c:e6:bd:ec:7e:cb:e1:d5:62:19:fd:b9:d5:
01:34:9d:ad:7b:e6:d0:3e:4e:42:ab:a9:f3:ad:32:
fa:4e:8b:7d:e0:70:65:a7:e2:13:15:9e:19:29:37:
0d:f7:7e:20:ab:f1:d5:b3:8c:7d:01:97:2f:51:c2:
e4:8e:08:67:d9:85:8f:71:b8:f7:64:ce:a8:5a:a0:
b9:00:c9:2e:aa:17:61:16:ff:81:98:da:4a:7d:0f:
c7:18:93:c3:b7:3b:8b:1c:6d:e6:02:09:60:0b:89:
20:ac:20:bc:00:9d:2e:9b:be:75:9e:92:74:ba:df:
98:ce:64:a0:31:fb:3e:c2:f6:11:c2:6e:23:e6:10:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:89:0F:65:07:25:98:70:D8:2B:02:7F:FB:BF:1E:25:98:A2:BE
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8a:42:a7:6c:4d:09:b6:62:46:b2:89:4a:fd:11:c8:96:e1:
78:cd:d9:da:86:89:57:e1:e1:ac:3f:7c:3b:40:8c:f6:76:63:
57:e3:37:73:6d:20:48:9c:ac:43:21:fb:85:8d:49:6b:2f:6c:
f2:a0:50:70:33:87:92:8e:92:99:18:b9:e7:c9:9f:ea:3b:f7:
e7:bb:46:ea:84:bd:58:02:dc:a3:4f:2e:88:3d:d2:a4:4a:2e:
9e:31:96:9f:81:c2:29:64:12:1c:68:ae:2f:e3:03:bb:5e:6d:
16:7f:a7:3b:3b:0f:92:e5:be:5b:4a:61:b7:62:dc:6c:45:aa:
6e:c7:73:5c:e9:2e:ac:15:5d:f5:dc:93:ed:3b:98:c9:12:ba:
42:aa:46:10:37:3b:2b:5d:ec:ac:01:cc:1c:be:c6:d2:ed:41:
59:01:3b:d8:96:a2:4e:6c:9b:db:10:6f:30:12:d5:69:61:28:
18:ac:f9:42:5e:4e:9d:58:cb:11:89:41:05:33:e1:22:09:2d:
bc:d1:5a:16:db:4a:f0:af:9f:f2:c8:5c:f5:b3:69:82:12:3e:
28:32:ef:77:22:35:93:c1:27:26:8d:76:32:e8:49:42:78:74:
3e:68:85:64:7d:bb:aa:95:ca:b9:35:6a:d9:d7:d5:fe:00:44:
97:46:80:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRgGewQ/CpPNS/k35TOnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWQ0ZTk3ODgxMGU5Nzg5YTc2ZTY4N2E3ZGRkOTc1MjZi
MGQ5YmMwHhcNMjUwNjA4MTYwMDU0WhcNMjUwNjA5MTYwMDU0WjAzMTEwLwYDVQQD
EygyODEyODkwZjY1MDcyNTk4NzBkODJiMDI3ZmZiYmYxZTI1OThhMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bIslIeqNQZpwcC4+aRdc14rFXg9
4NhBo2Vut5Smky0SL6aHMWFVyVTNbuOq8KLTHzFoE/DSNY3qMkvFZ+vOTGVjN9Q+
OlVCEg1Rr9QjO1zntipPeKfsf8fA1kLoX8KlMqcwm0gD9OBkNhYyZlbefoR1ikyM
iV3eDIzmvex+y+HVYhn9udUBNJ2te+bQPk5Cq6nzrTL6Tot94HBlp+ITFZ4ZKTcN
934gq/HVs4x9AZcvUcLkjghn2YWPcbj3ZM6oWqC5AMkuqhdhFv+BmNpKfQ/HGJPD
tzuLHG3mAglgC4kgrCC8AJ0um751npJ0ut+YzmSgMfs+wvYRwm4j5hBgSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgSiQ9lByWYcNgrAn/7vx4lmKK+MB8GA1UdIwQY
MBaAFKQdTpeIEOl4mnbmh6fd2XUmsNm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmIt
MDk1ZTcxODhkMGEwLzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmItMDk1ZTcxODhkMGEw
LzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4pCp2xN
CbZiRrKJSv0RyJbheM3Z2oaJV+HhrD98O0CM9nZjV+M3c20gSJysQyH7hY1Jay9s
8qBQcDOHko6SmRi558mf6jv357tG6oS9WALco08uiD3SpEounjGWn4HCKWQSHGiu
L+MDu15tFn+nOzsPkuW+W0pht2LcbEWqbsdzXOkurBVd9dyT7TuYyRK6QqpGEDc7
K13srAHMHL7G0u1BWQE72JaiTmyb2xBvMBLVaWEoGKz5Ql5OnVjLEYlBBTPhIgkt
vNFaFttK8K+f8shc9bNpghI+KDLvdyI1k8EnJo12MuhJQnh0PmiFZH27qpXKuTVq
2dfV/gBEl0aAVg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:30:21 2025 by rpki-client