Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: wZqgcNE9wOzqRhmqN4/0Kx8FHxpIIAS3+rc19mgX4ac=
Subject key identifier: 61:1D:DC:89:C3:CC:5D:A8:F4:8C:37:E9:DF:77:9A:44:4B:9C:AE:A6
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 01976CCF9ED6216BDEC37635C12BFB54490F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 0D89
Signing time: Sat 14 Jun 2025 05:00:35 +0000
Manifest this update: Sat 14 Jun 2025 05:00:35 +0000
Manifest next update: Sun 15 Jun 2025 05:00:35 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: Vl+YGa/2HeuM2Usn0DtfvshkTdNmf3Ga6Wk6q/Xa3eI=)
2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:9e:d6:21:6b:de:c3:76:35:c1:2b:fb:54:49:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Jun 14 05:00:35 2025 GMT
Not After : Jun 15 05:00:35 2025 GMT
Subject: CN=611ddc89c3cc5da8f48c37e9df779a444b9caea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:73:8f:f3:51:c9:11:3a:a7:98:b2:42:45:
a0:ae:18:5c:b9:c5:a5:6c:94:9b:7c:f7:f0:0c:5d:
8d:62:7a:72:43:38:7b:57:24:57:10:67:fc:0c:36:
68:2c:2d:3a:f1:6f:77:9b:68:ba:ae:1f:bd:b2:dd:
ae:e9:e9:ff:e7:59:2e:ca:24:50:e1:b5:31:f3:f7:
46:c8:61:96:1f:f2:3c:c3:4d:89:47:f4:47:d8:fd:
13:af:32:34:83:71:e9:17:bd:b4:7a:29:a9:69:48:
5a:8c:54:2e:6c:48:f8:27:d9:b5:f0:bb:73:1c:5b:
40:5d:0c:05:b1:04:dc:50:55:cd:46:7f:f5:a6:bf:
62:dd:86:de:07:ca:b5:54:0b:77:38:a6:af:6d:45:
aa:67:8d:86:a6:8c:77:f7:0c:0f:c0:06:98:e3:34:
5f:ce:26:82:9e:42:cb:c0:76:dd:02:ec:f0:47:dc:
0e:9e:dc:ff:a0:d9:8d:a4:82:b4:40:cb:32:2e:e4:
76:4e:d7:07:e8:ae:d8:85:58:4b:9c:a5:2b:f1:bf:
67:b5:8b:5b:9f:5b:eb:c6:66:e4:b1:7d:f9:12:b6:
28:b7:7c:d9:7d:20:eb:05:51:65:f2:17:7a:cf:90:
36:b4:ab:0e:84:43:8f:fe:9c:93:6b:c9:fc:0f:7c:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:DC:89:C3:CC:5D:A8:F4:8C:37:E9:DF:77:9A:44:4B:9C:AE:A6
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f2:00:e2:09:68:8f:9a:21:3c:d5:01:fe:38:63:71:39:70:
82:76:ee:6c:21:1f:33:f9:34:70:60:50:d8:d4:ce:6c:84:61:
08:9b:41:38:3b:e1:f3:ef:33:05:26:fc:7b:50:9c:da:47:5c:
a9:31:87:48:39:f1:13:91:b4:4e:95:50:4e:b9:c3:72:7b:ff:
c6:4a:ee:f2:72:33:6a:ef:59:d4:13:80:9a:ab:ee:9c:22:5b:
a1:0e:92:3d:d4:c4:cf:4d:5c:98:ee:9e:11:b0:fa:52:46:2c:
86:c0:cd:e6:34:28:e8:66:a1:cc:23:70:c9:78:88:0b:15:42:
ae:47:39:cc:39:1e:0b:31:8e:02:66:44:f7:72:9e:24:3d:14:
9a:51:b5:24:1b:23:0e:de:98:f7:09:a3:b4:81:bd:65:52:96:
71:13:1e:4e:62:66:d3:80:82:70:51:36:3a:0b:b3:59:ec:70:
3c:0a:1a:e5:28:c9:59:8c:37:b3:6a:75:03:be:1a:00:e9:25:
fb:2f:46:13:b6:1b:5f:b6:76:1c:c2:b0:d8:ef:ff:ee:ba:9d:
69:21:55:03:fb:4d:8f:38:60:a8:39:de:60:cf:10:52:25:34:
70:db:5d:5c:0e:3a:34:2e:40:ed:c0:23:25:fa:5c:6b:39:dc:
52:3f:7f:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz57WIWvew3Y1wSv7VEkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YzY1Y2RhNGI2MzBmNzJiZjY0MGQxNmI0MWY3MmY1YTBm
OWQ3NTEwHhcNMjUwNjE0MDUwMDM1WhcNMjUwNjE1MDUwMDM1WjAzMTEwLwYDVQQD
Eyg2MTFkZGM4OWMzY2M1ZGE4ZjQ4YzM3ZTlkZjc3OWE0NDRiOWNhZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrxzj/NRyRE6p5iyQkWgrhhcucWl
bJSbfPfwDF2NYnpyQzh7VyRXEGf8DDZoLC068W93m2i6rh+9st2u6en/51kuyiRQ
4bUx8/dGyGGWH/I8w02JR/RH2P0TrzI0g3HpF720eimpaUhajFQubEj4J9m18Ltz
HFtAXQwFsQTcUFXNRn/1pr9i3YbeB8q1VAt3OKavbUWqZ42Gpox39wwPwAaY4zRf
ziaCnkLLwHbdAuzwR9wOntz/oNmNpIK0QMsyLuR2TtcH6K7YhVhLnKUr8b9ntYtb
n1vrxmbksX35ErYot3zZfSDrBVFl8hd6z5A2tKsOhEOP/pyTa8n8D3xNSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEd3InDzF2o9Iw36d93mkRLnK6mMB8GA1UdIwQY
MBaAFNXGXNpLYw9yv2QNFrQfcvWg+ddRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAt
Y2Q2NTU1ZmNkODJlLzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAtY2Q2NTU1ZmNkODJl
LzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/IA4glo
j5ohPNUB/jhjcTlwgnbubCEfM/k0cGBQ2NTObIRhCJtBODvh8+8zBSb8e1Cc2kdc
qTGHSDnxE5G0TpVQTrnDcnv/xkru8nIzau9Z1BOAmqvunCJboQ6SPdTEz01cmO6e
EbD6UkYshsDN5jQo6GahzCNwyXiICxVCrkc5zDkeCzGOAmZE93KeJD0UmlG1JBsj
Dt6Y9wmjtIG9ZVKWcRMeTmJm04CCcFE2OguzWexwPAoa5SjJWYw3s2p1A74aAOkl
+y9GE7YbX7Z2HMKw2O//7rqdaSFVA/tNjzhgqDneYM8QUiU0cNtdXA46NC5A7cAj
JfpcazncUj9/5g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:11:34 2025 by rpki-client