Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: GwPsufooYjQk57+T9erFNYxpbB8/Asbk/LPntW2QhD4=
Subject key identifier: AB:91:F5:A9:2F:1A:88:1A:96:21:98:81:8B:56:C2:41:D2:0E:F9:DC
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 01974D4467AF579BA91447E3ECD27A4C83D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 02:00:17 +0000
Manifest this update: Sun 08 Jun 2025 02:00:17 +0000
Manifest next update: Mon 09 Jun 2025 02:00:17 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: dDZzDq4w8aczmSGdVAzELVMyTLAgVTl4hAN2FZNL51Q=)
2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:67:af:57:9b:a9:14:47:e3:ec:d2:7a:4c:83:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Jun 8 02:00:17 2025 GMT
Not After : Jun 9 02:00:17 2025 GMT
Subject: CN=ab91f5a92f1a881a962198818b56c241d20ef9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:59:c5:5d:74:47:db:fa:1c:70:e2:69:6c:
81:5a:75:48:fb:d7:3c:7f:94:63:59:65:3e:b0:f9:
7c:67:97:cb:02:da:14:0b:83:fb:71:6c:d7:21:13:
87:79:77:3a:70:3b:4f:05:cf:f9:ba:ac:a7:8d:6f:
7c:ed:d0:9f:ec:af:07:ea:0d:b5:fd:eb:6b:86:8e:
32:38:e9:a3:f0:d7:71:fc:91:9f:46:b8:dc:ef:02:
22:ca:01:35:a3:49:70:4b:73:96:c1:ff:a9:d9:0c:
ce:c3:6a:9e:cb:d0:2e:75:8e:c5:d3:23:a3:40:1d:
34:89:9a:6f:0f:24:31:d1:4d:a0:25:71:a8:1f:64:
b3:b4:e5:0d:30:79:63:ad:e9:02:60:11:1d:53:3b:
c4:07:40:ee:e4:98:24:ba:10:b3:ad:cb:2a:7f:d4:
22:c7:72:c6:b8:75:6f:78:87:30:0f:64:61:1b:56:
8d:7e:28:6c:3d:83:72:72:83:1e:36:ce:41:71:db:
1b:b3:09:9c:43:9a:af:41:0f:8c:ce:65:7d:c1:ac:
9b:a6:b3:dc:e3:db:66:e0:b3:69:c8:75:c5:d9:21:
1c:5f:c6:33:8e:f4:5c:ac:2b:e5:c6:e6:f4:77:7c:
0d:62:2b:95:fe:3a:7c:49:98:e6:fe:b7:21:d7:07:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:F5:A9:2F:1A:88:1A:96:21:98:81:8B:56:C2:41:D2:0E:F9:DC
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:65:6f:d5:67:0c:18:66:db:fb:7a:ed:e9:7f:64:5c:57:4a:
7e:6a:d8:0c:d8:11:ac:cd:e1:be:91:2e:7b:d9:3a:19:64:12:
64:0f:5f:f5:f6:c6:aa:e2:d2:ca:ac:a4:e2:77:68:08:f7:2e:
30:f7:d8:83:ff:75:51:21:d3:de:ba:e7:72:8c:e4:a4:d9:dd:
01:b3:7c:4a:be:e1:ca:ca:6b:88:25:d6:f1:30:89:0a:99:c9:
b0:1d:93:f0:35:50:da:49:5c:80:55:c0:db:ae:ce:fe:3a:06:
3b:36:66:36:aa:54:6f:2d:9d:a3:c6:c3:28:f9:8c:49:4d:9f:
d3:34:26:20:f6:7e:16:f3:c1:36:4f:47:44:6b:7b:4a:cc:4a:
b0:67:5e:06:51:f7:e9:f4:2d:69:85:97:6a:4e:67:52:cd:e4:
bb:2b:c9:40:45:2d:45:b7:98:28:c2:9b:62:74:12:c8:d0:fb:
f3:93:98:fb:81:88:e0:08:8c:29:47:36:ee:2c:b3:0d:5c:66:
51:19:8f:5a:99:98:a7:45:6d:b9:04:42:7d:4a:45:24:79:ef:
50:bf:50:d6:0c:c1:62:9c:26:08:58:d2:e8:0f:f7:cb:3e:e8:
31:4b:67:e9:db:fe:8c:b4:58:75:52:91:36:5e:18:eb:b2:ef:
8d:47:f8:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRGevV5upFEfj7NJ6TIPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYzg1YzM3YWQyNTI3NGM3MTJjMjQ0NzNlMDc4YWRjZTcz
MmMxZGQwHhcNMjUwNjA4MDIwMDE3WhcNMjUwNjA5MDIwMDE3WjAzMTEwLwYDVQQD
EyhhYjkxZjVhOTJmMWE4ODFhOTYyMTk4ODE4YjU2YzI0MWQyMGVmOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA509ZxV10R9v6HHDiaWyBWnVI+9c8
f5RjWWU+sPl8Z5fLAtoUC4P7cWzXIROHeXc6cDtPBc/5uqynjW987dCf7K8H6g21
/etrho4yOOmj8Ndx/JGfRrjc7wIiygE1o0lwS3OWwf+p2QzOw2qey9AudY7F0yOj
QB00iZpvDyQx0U2gJXGoH2SztOUNMHljrekCYBEdUzvEB0Du5JgkuhCzrcsqf9Qi
x3LGuHVveIcwD2RhG1aNfihsPYNycoMeNs5BcdsbswmcQ5qvQQ+MzmV9waybprPc
49tm4LNpyHXF2SEcX8YzjvRcrCvlxub0d3wNYiuV/jp8SZjm/rch1wewRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuR9akvGogaliGYgYtWwkHSDvncMB8GA1UdIwQY
MBaAFOPIXDetJSdMcSwkRz4HitznMsHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUt
ZGNlM2ZhM2ZiYWU5LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUtZGNlM2ZhM2ZiYWU5
LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGVv1WcM
GGbb+3rt6X9kXFdKfmrYDNgRrM3hvpEue9k6GWQSZA9f9fbGquLSyqyk4ndoCPcu
MPfYg/91USHT3rrncozkpNndAbN8Sr7hyspriCXW8TCJCpnJsB2T8DVQ2klcgFXA
267O/joGOzZmNqpUby2do8bDKPmMSU2f0zQmIPZ+FvPBNk9HRGt7SsxKsGdeBlH3
6fQtaYWXak5nUs3kuyvJQEUtRbeYKMKbYnQSyND785OY+4GI4AiMKUc27iyzDVxm
URmPWpmYp0VtuQRCfUpFJHnvUL9Q1gzBYpwmCFjS6A/3yz7oMUtn6dv+jLRYdVKR
Nl4Y67LvjUf4vg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:52:44 2025 by rpki-client