Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: /8I/vFq7zXJFX9msA3SgRxxUpI9G3hT5Ay4615ovPw8=
Subject key identifier: A4:9E:B6:62:52:71:76:FD:6C:66:4D:8B:9A:7E:28:94:BC:64:9B:23
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019745F8BD7AE8DEE00E2664B4143A5E50F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 10A2
Signing time: Fri 06 Jun 2025 16:00:18 +0000
Manifest this update: Fri 06 Jun 2025 16:00:18 +0000
Manifest next update: Sat 07 Jun 2025 16:00:18 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: fI147laleEHGIV0GQYJE13DGJm1+JPqn678OoFne8Yc=)
2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:bd:7a:e8:de:e0:0e:26:64:b4:14:3a:5e:50:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Jun 6 16:00:18 2025 GMT
Not After : Jun 7 16:00:18 2025 GMT
Subject: CN=a49eb662527176fd6c664d8b9a7e2894bc649b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:29:b6:0e:9d:7d:02:19:f0:de:38:8b:4c:
9d:07:de:a7:8f:6c:d5:5a:34:41:3f:b4:3a:0d:2a:
52:17:4d:bc:d0:55:07:23:04:64:96:ce:f5:27:79:
65:0c:63:9a:09:e3:b2:af:47:af:69:06:75:45:7f:
41:a8:c1:9f:70:e8:53:4d:51:f4:3d:3e:f9:69:d3:
8f:0c:f6:5f:4c:72:bd:bd:a1:dd:81:c7:3a:30:0e:
a1:05:f2:bd:88:7e:dd:78:7e:21:28:1d:b5:0b:e8:
3f:fd:82:ed:f1:ba:3c:9b:d6:e5:bf:28:4d:be:0a:
10:28:de:27:be:d8:62:ae:14:82:08:90:d0:d5:6e:
4e:19:a3:bf:b4:35:c6:d4:de:97:b8:be:7e:ef:f5:
65:a8:b3:1d:ea:a8:80:e2:57:06:e0:06:02:73:74:
e0:39:b3:d8:6d:5b:09:c3:e0:66:8e:8f:5a:3a:81:
35:58:f0:45:36:c0:9e:75:6a:eb:a9:14:a5:3e:9a:
9c:44:ee:c4:50:b4:ad:1e:9e:d0:2e:3c:13:5b:c9:
26:9d:93:f5:c4:5a:eb:c7:17:26:de:1e:3d:35:4a:
87:a1:30:6e:b1:f1:f6:e9:b4:3a:0d:70:ca:27:5a:
ba:6d:95:76:70:84:dc:9b:a0:1c:c1:85:da:1e:84:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:B6:62:52:71:76:FD:6C:66:4D:8B:9A:7E:28:94:BC:64:9B:23
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:21:ee:43:39:90:c7:08:f1:37:2f:e3:ac:9c:1e:5f:be:7a:
55:b9:0a:be:03:f5:83:62:0e:82:f9:b7:6f:26:8c:ec:9c:76:
a2:cc:0f:aa:09:0b:5a:20:74:58:0a:55:f1:74:33:c1:31:52:
2d:e1:cb:cc:8d:08:a7:18:31:e4:60:f0:e9:18:73:48:f7:e6:
62:f1:fb:8a:95:e5:55:c9:27:8a:a4:86:95:62:7a:54:32:47:
02:07:17:05:e4:33:c5:e2:64:c3:e4:3e:07:e0:5f:a3:53:66:
c1:cc:08:e6:80:22:09:b0:95:b0:cf:d3:7a:e7:8d:14:3b:0e:
99:c1:59:e8:29:bf:9e:3b:c3:a4:dc:85:0a:59:2c:a1:1b:70:
5a:89:fa:75:27:89:0c:53:f6:53:95:68:2f:5f:2c:16:fb:fe:
87:ee:70:f3:26:a0:fa:d7:9a:52:eb:11:4d:b0:a1:f8:6e:e3:
9d:a0:1e:10:62:1e:a1:fa:4d:e0:c2:d9:b0:59:4d:12:74:24:
da:2b:ab:78:0b:59:f7:54:75:d3:6a:e8:44:cb:4d:39:be:7e:
eb:f5:72:44:cc:ec:06:f7:26:0d:a8:5e:ef:17:36:20:e9:27:
06:59:fd:c4:e2:4e:9d:02:89:66:8e:95:67:18:80:5f:87:ef:
5a:74:2f:c6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdF+L166N7gDiZktBQ6XlD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzA3ODIxMjMwZTdiYTgxYTRkNDcxYTU5MWU3OGVhNzU5
YzY5MzQwHhcNMjUwNjA2MTYwMDE4WhcNMjUwNjA3MTYwMDE4WjAzMTEwLwYDVQQD
EyhhNDllYjY2MjUyNzE3NmZkNmM2NjRkOGI5YTdlMjg5NGJjNjQ5YjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx30ptg6dfQIZ8N44i0ydB96nj2zV
WjRBP7Q6DSpSF0280FUHIwRkls71J3llDGOaCeOyr0evaQZ1RX9BqMGfcOhTTVH0
PT75adOPDPZfTHK9vaHdgcc6MA6hBfK9iH7deH4hKB21C+g//YLt8bo8m9blvyhN
vgoQKN4nvthirhSCCJDQ1W5OGaO/tDXG1N6XuL5+7/VlqLMd6qiA4lcG4AYCc3Tg
ObPYbVsJw+Bmjo9aOoE1WPBFNsCedWrrqRSlPpqcRO7EULStHp7QLjwTW8kmnZP1
xFrrxxcm3h49NUqHoTBusfH26bQ6DXDKJ1q6bZV2cITcm6AcwYXaHoTTNQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKSetmJScXb9bGZNi5p+KJS8ZJsjMB8GA1UdIwQY
MBaAFPoweCEjDnuoGk1HGlkeeOp1nGk0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qQjRJU01PZTZnYVRVY2FXUjU0Nm5XY2FUUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTEwZjY3LTFmZmMtNDFjNC1hMmVh
LWYxZTY1Zjk3Yzg5YS8xLzEtakI0SVNNT2U2Z2FUVWNhV1I1NDZuV2NhVFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NlLzkxMGY2Ny0xZmZjLTQxYzQtYTJlYS1mMWU2NWY5N2M4
OWEvMS8xLWpCNElTTU9lNmdhVFVjYVdSNTQ2bldjYVRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCHu
QzmQxwjxNy/jrJweX756VbkKvgP1g2IOgvm3byaM7Jx2oswPqgkLWiB0WApV8XQz
wTFSLeHLzI0Ipxgx5GDw6RhzSPfmYvH7ipXlVckniqSGlWJ6VDJHAgcXBeQzxeJk
w+Q+B+Bfo1NmwcwI5oAiCbCVsM/TeueNFDsOmcFZ6Cm/njvDpNyFClksoRtwWon6
dSeJDFP2U5VoL18sFvv+h+5w8yag+teaUusRTbCh+G7jnaAeEGIeofpN4MLZsFlN
EnQk2iureAtZ91R102roRMtNOb5+6/VyRMzsBvcmDahe7xc2IOknBln9xOJOnQKJ
Zo6VZxiAX4fvWnQvxg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:07 2025 by rpki-client