Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: RSXWB3jmzN8V/X8FlZj+kQXz7m1k+DL83aQ9pOtx+vU=
Subject key identifier: 18:30:D5:94:86:EB:AB:58:7C:31:46:AA:33:9E:0C:E1:E2:F9:D1:01
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019741E59B3820B81941BE3440CA934525F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 1580
Signing time: Thu 05 Jun 2025 21:00:55 +0000
Manifest this update: Thu 05 Jun 2025 21:00:55 +0000
Manifest next update: Fri 06 Jun 2025 21:00:55 +0000
Files and hashes: 1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=)
2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: 3ZJ2jk0S4X0dD+hVVGgA7UX250I0GzoXcVrq7lZHxkM=)
4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:e5:9b:38:20:b8:19:41:be:34:40:ca:93:45:25:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jun 5 21:00:55 2025 GMT
Not After : Jun 6 21:00:55 2025 GMT
Subject: CN=1830d59486ebab587c3146aa339e0ce1e2f9d101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:93:ff:d7:62:25:fb:f3:72:f9:3a:05:dc:
ed:04:cb:15:83:eb:9f:d7:98:30:8f:36:be:93:36:
b1:1b:d9:f0:32:fa:7c:2c:52:54:af:85:79:d2:45:
57:40:90:9c:5e:5a:5e:6b:b8:87:0e:ad:cd:63:da:
c2:fe:78:ca:db:22:48:91:38:7c:f6:be:10:5c:c0:
bf:6e:3e:b1:14:88:83:78:e3:25:79:27:fb:bc:f1:
68:cd:9c:4b:36:de:89:c6:b6:be:3d:38:11:8e:45:
99:ca:12:70:21:74:58:23:0e:d6:f6:08:34:73:0d:
f5:65:84:64:4e:0c:04:b0:86:5f:ef:50:a0:c0:57:
64:43:51:5c:0e:81:11:43:88:56:2a:ef:7f:2a:21:
4d:53:55:4e:f2:e2:fb:a3:32:f1:92:80:03:61:25:
9d:88:eb:18:fe:be:12:d0:df:53:1f:d9:9b:2e:d3:
aa:1f:f3:51:f6:d0:0d:2a:cc:09:74:04:2c:05:bd:
76:73:7f:52:95:cb:d8:26:7f:8c:d9:11:ec:6c:5a:
d9:69:01:6e:da:26:bc:2f:45:fb:4f:78:cb:4c:5a:
a7:b5:75:20:03:6e:7b:97:3b:b4:dc:7c:aa:40:21:
28:d0:f0:4e:02:fa:dc:bc:13:aa:53:4c:70:6e:36:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:30:D5:94:86:EB:AB:58:7C:31:46:AA:33:9E:0C:E1:E2:F9:D1:01
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b7:11:cc:6d:9b:c0:e6:32:34:48:4e:a1:e3:85:6f:77:2f:
a6:08:d5:54:60:7f:c3:bb:98:79:5f:88:d4:33:1e:b7:01:44:
3e:62:6a:10:68:99:83:f1:96:fc:51:87:a9:e1:1a:e8:78:e8:
02:25:f6:9f:ee:68:b7:07:a4:39:f4:43:4b:87:f7:21:0b:18:
45:f6:c4:0a:07:ba:04:99:c5:1f:00:0f:f4:6a:09:79:9e:b0:
72:be:20:28:de:da:c9:4d:55:ea:d9:8d:61:40:f8:24:43:66:
a4:a1:bf:df:c5:bb:03:33:02:cd:c4:15:90:07:8f:36:a3:69:
1d:37:e6:ea:99:f8:33:b2:f1:d9:b4:a4:11:b5:b9:ca:aa:02:
58:1b:a1:a4:e5:83:61:be:8c:9b:f5:a6:8a:10:8b:4e:5a:ef:
81:7d:ae:a6:89:aa:f9:6d:7c:78:c0:28:2f:e5:24:e1:a8:62:
7b:a9:94:75:53:e5:0c:1e:1f:d9:dd:9b:c2:93:00:56:eb:c6:
74:23:a2:25:f0:ff:5f:76:90:2d:2d:fa:3a:e0:ff:8b:d0:e2:
33:9c:5d:c1:99:bb:66:9e:51:d8:37:f8:75:17:85:59:72:1d:
6a:67:e0:11:94:5e:78:be:4d:97:6a:de:68:cb:5f:6e:b5:34:
64:ca:ae:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdB5Zs4ILgZQb40QMqTRSX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTc3YzcwOGFmMGJhMWY4MTU0OWM5Zjg3MDg5NTU5Mzkw
MTY3YTUwHhcNMjUwNjA1MjEwMDU1WhcNMjUwNjA2MjEwMDU1WjAzMTEwLwYDVQQD
EygxODMwZDU5NDg2ZWJhYjU4N2MzMTQ2YWEzMzllMGNlMWUyZjlkMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj2T/9diJfvzcvk6BdztBMsVg+uf
15gwjza+kzaxG9nwMvp8LFJUr4V50kVXQJCcXlpea7iHDq3NY9rC/njK2yJIkTh8
9r4QXMC/bj6xFIiDeOMleSf7vPFozZxLNt6Jxra+PTgRjkWZyhJwIXRYIw7W9gg0
cw31ZYRkTgwEsIZf71CgwFdkQ1FcDoERQ4hWKu9/KiFNU1VO8uL7ozLxkoADYSWd
iOsY/r4S0N9TH9mbLtOqH/NR9tANKswJdAQsBb12c39SlcvYJn+M2RHsbFrZaQFu
2ia8L0X7T3jLTFqntXUgA257lzu03HyqQCEo0PBOAvrcvBOqU0xwbjZXSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgw1ZSG66tYfDFGqjOeDOHi+dEBMB8GA1UdIwQY
MBaAFKynfHCK8LofgVScn4cIlVk5AWelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYt
MjhiMTllM2ZkNGE2LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYtMjhiMTllM2ZkNGE2
LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbcRzG2b
wOYyNEhOoeOFb3cvpgjVVGB/w7uYeV+I1DMetwFEPmJqEGiZg/GW/FGHqeEa6Hjo
AiX2n+5otwekOfRDS4f3IQsYRfbECge6BJnFHwAP9GoJeZ6wcr4gKN7ayU1V6tmN
YUD4JENmpKG/38W7AzMCzcQVkAePNqNpHTfm6pn4M7Lx2bSkEbW5yqoCWBuhpOWD
Yb6Mm/WmihCLTlrvgX2upomq+W18eMAoL+Uk4ahie6mUdVPlDB4f2d2bwpMAVuvG
dCOiJfD/X3aQLS36OuD/i9DiM5xdwZm7Zp5R2Df4dReFWXIdamfgEZReeL5Nl2re
aMtfbrU0ZMqusQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 03:08:38 2025 by rpki-client