Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: jNW5Zat3BNmhxljEuSRV6Ssi2AlOPvoZODBOrnmZROM=
Subject key identifier: 4E:38:BF:E4:97:02:F6:70:2E:F5:DD:75:F7:6B:F3:C0:69:C4:E7:5C
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 01975CB8057F7D6E5366CF4C0C23F39BF69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 02:00:53 +0000
Manifest this update: Wed 11 Jun 2025 02:00:53 +0000
Manifest next update: Thu 12 Jun 2025 02:00:53 +0000
Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: Qv6WjcdHHc6MQaaoMV+fIb6dBgGtDYGbIqchSkK7ASI=)
2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:05:7f:7d:6e:53:66:cf:4c:0c:23:f3:9b:f6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Jun 11 02:00:53 2025 GMT
Not After : Jun 12 02:00:53 2025 GMT
Subject: CN=4e38bfe49702f6702ef5dd75f76bf3c069c4e75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:68:62:88:b4:ba:20:d2:47:c9:de:a0:25:
be:71:e3:38:c3:d1:43:02:49:c7:21:a2:1e:35:7a:
63:f8:b6:02:a4:38:c5:84:25:2b:a2:f2:9f:f2:df:
35:bf:d1:6c:8d:14:ff:ab:43:84:5a:54:95:29:61:
6d:05:a1:c5:ab:90:bc:03:12:31:1a:1f:45:33:cf:
cd:00:a2:bf:ed:61:c5:bb:47:2a:d0:b1:1d:e4:4b:
4a:b3:39:72:9d:4f:5d:02:49:79:52:61:69:c0:49:
9c:c4:bf:a7:eb:d9:ed:a3:56:e1:95:6c:dd:2a:4c:
e7:d4:40:13:75:ef:d4:d5:8c:7b:6a:c8:49:59:49:
e0:dd:30:11:02:f5:08:36:e8:8d:3f:a8:f8:dc:af:
68:52:37:d1:ed:68:3e:1f:53:4b:9a:5a:f4:bf:79:
ef:df:90:43:0c:11:10:11:66:b6:a1:e5:ee:93:70:
8a:eb:56:5a:1f:d1:7c:4b:d5:b0:6d:ca:b0:76:ad:
67:37:f6:a4:db:da:44:5f:91:4d:4e:3d:6e:c3:d9:
95:6f:ee:f4:c8:f0:0f:34:9d:1c:af:4d:0d:7f:5d:
23:84:25:b9:0c:e9:89:21:84:23:26:b3:83:31:7e:
56:67:58:c0:55:30:77:cd:39:dc:58:7b:24:65:74:
60:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:38:BF:E4:97:02:F6:70:2E:F5:DD:75:F7:6B:F3:C0:69:C4:E7:5C
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b1:8c:bc:1a:97:66:7f:fa:8f:83:a6:1c:c8:ee:14:ce:39:
f8:e0:de:79:a7:8b:b2:85:3e:83:c7:75:90:73:28:f2:ab:2a:
a2:e4:77:19:bf:4f:24:88:c5:14:a9:75:db:5a:cd:94:aa:1a:
f8:26:e0:52:3f:98:6f:70:b0:7c:80:54:34:bf:24:fd:2e:c8:
bc:61:c5:ad:76:8f:b1:29:3c:75:70:48:21:28:74:41:9e:f6:
a8:c5:0e:ae:1d:6e:94:02:d4:f4:b0:4c:17:a4:49:91:1b:b2:
23:db:9e:fb:5f:b6:6f:e5:c8:bf:a6:06:c2:b8:d6:5a:23:53:
35:a3:03:01:71:bd:35:2a:4e:58:5f:7d:c8:a3:ac:ee:56:6d:
48:8a:6e:e0:a3:e6:51:fb:af:75:9e:51:b6:b1:3e:14:57:bb:
f9:b1:12:46:a2:48:7a:15:4f:ef:c6:1d:83:0a:44:b5:a0:9d:
47:0f:03:10:24:e1:89:57:30:82:68:38:a2:84:cb:ca:fc:d0:
04:e6:37:c9:d6:60:d0:bb:c9:a6:5d:b0:97:b4:fd:0a:4c:5f:
9c:53:df:de:c2:b1:62:84:ce:82:76:5e:f4:88:1b:44:49:7e:
25:84:8a:52:1d:a3:ba:51:04:33:03:7c:b8:f9:b8:01:eb:6c:
0f:0b:65:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcuAV/fW5TZs9MDCPzm/aeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzRiNzg0ZDgxNjZlOGJkMGY0N2Q3MjBmZGU1ZmFlYzE2
NDViMzQwHhcNMjUwNjExMDIwMDUzWhcNMjUwNjEyMDIwMDUzWjAzMTEwLwYDVQQD
Eyg0ZTM4YmZlNDk3MDJmNjcwMmVmNWRkNzVmNzZiZjNjMDY5YzRlNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcZoYoi0uiDSR8neoCW+ceM4w9FD
AknHIaIeNXpj+LYCpDjFhCUrovKf8t81v9FsjRT/q0OEWlSVKWFtBaHFq5C8AxIx
Gh9FM8/NAKK/7WHFu0cq0LEd5EtKszlynU9dAkl5UmFpwEmcxL+n69nto1bhlWzd
Kkzn1EATde/U1Yx7ashJWUng3TARAvUINuiNP6j43K9oUjfR7Wg+H1NLmlr0v3nv
35BDDBEQEWa2oeXuk3CK61ZaH9F8S9Wwbcqwdq1nN/ak29pEX5FNTj1uw9mVb+70
yPAPNJ0cr00Nf10jhCW5DOmJIYQjJrODMX5WZ1jAVTB3zTncWHskZXRgLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE44v+SXAvZwLvXddfdr88BpxOdcMB8GA1UdIwQY
MBaAFAHEt4TYFm6L0PR9cg/eX67BZFs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMt
NWI1YmViMTA1MTNiLzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMtNWI1YmViMTA1MTNi
LzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbGMvBqX
Zn/6j4OmHMjuFM45+ODeeaeLsoU+g8d1kHMo8qsqouR3Gb9PJIjFFKl121rNlKoa
+CbgUj+Yb3CwfIBUNL8k/S7IvGHFrXaPsSk8dXBIISh0QZ72qMUOrh1ulALU9LBM
F6RJkRuyI9ue+1+2b+XIv6YGwrjWWiNTNaMDAXG9NSpOWF99yKOs7lZtSIpu4KPm
UfuvdZ5RtrE+FFe7+bESRqJIehVP78YdgwpEtaCdRw8DECThiVcwgmg4ooTLyvzQ
BOY3ydZg0LvJpl2wl7T9CkxfnFPf3sKxYoTOgnZe9IgbREl+JYSKUh2julEEMwN8
uPm4AetsDwtlBg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:27:49 2025 by rpki-client