Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: QCtiHnCcA6vgt1dADzX335E1NZOyNQ8ULUxm0pNKfzI=
Subject key identifier: 4D:86:21:E8:05:24:B0:59:04:41:50:A7:35:33:13:D8:00:D5:AE:D6
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 019758DAF49FBC2DE230783772C02861723D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 08:00:33 +0000
Manifest this update: Tue 10 Jun 2025 08:00:33 +0000
Manifest next update: Wed 11 Jun 2025 08:00:33 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: t0fEETBTEnWBneUmPbMaku0eRbw888sNoF177DtdRXo=)
2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:f4:9f:bc:2d:e2:30:78:37:72:c0:28:61:72:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Jun 10 08:00:33 2025 GMT
Not After : Jun 11 08:00:33 2025 GMT
Subject: CN=4d8621e80524b059044150a7353313d800d5aed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:c2:55:25:2b:2b:ff:4a:14:3c:42:56:38:
3f:5b:ea:1e:a1:d4:87:ad:0f:ef:0a:79:bb:96:2f:
67:81:04:af:b9:fe:1f:0a:27:74:0f:2e:dc:cf:58:
38:51:97:e8:b6:fc:1a:bf:45:83:c2:f8:b5:ce:f5:
34:77:8f:4d:fd:0f:32:f6:48:d6:5d:e9:bc:07:38:
47:46:98:31:63:84:38:f1:a3:de:70:07:82:a8:b2:
8c:54:b0:b6:5a:2c:f1:5c:00:f5:68:c3:84:db:6e:
a7:e3:77:57:65:e2:c1:8e:e6:f5:a7:84:1d:5c:b2:
89:5a:dd:7a:98:2e:d8:ff:45:33:b0:b7:d2:bb:96:
30:4e:db:1f:5c:43:86:9e:ce:e8:19:51:3f:d9:ef:
fe:e2:41:08:ba:5e:e6:ae:e2:27:da:e3:a2:46:4d:
c2:32:40:f6:13:93:3b:28:25:78:5d:bc:67:1f:bc:
5f:cc:ec:95:75:b3:aa:86:47:a2:f7:3e:37:47:74:
58:b0:49:a9:8d:c6:f0:81:32:ca:40:f3:2c:11:b1:
f6:1f:18:ae:45:d7:2b:51:f1:42:22:bb:40:1e:64:
e0:ba:52:d3:4a:c7:ef:4c:f2:04:72:bb:03:17:34:
e4:8f:87:7f:a3:5f:8c:9c:7b:25:16:fe:c2:14:d8:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:21:E8:05:24:B0:59:04:41:50:A7:35:33:13:D8:00:D5:AE:D6
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:21:a6:88:80:01:6a:4b:0b:6d:3d:08:92:40:44:28:05:b3:
c2:18:d6:aa:88:74:6e:79:fe:7d:30:c1:8a:9e:34:fa:be:a8:
23:46:3c:1f:0a:08:d3:d9:20:4a:0c:7d:d1:c5:57:8a:3f:a4:
da:02:32:af:e9:07:39:36:ef:17:a9:fc:17:d9:ad:d7:60:dd:
86:42:59:66:0d:46:5b:06:a2:01:a1:7c:09:ef:fe:7c:55:29:
cd:8d:79:a2:a5:08:a7:f7:1d:0f:13:c4:f1:bb:fb:8e:c8:9f:
47:22:e2:80:dd:83:14:74:ad:1d:b0:d1:de:85:48:9d:25:06:
46:21:bd:82:4e:9f:88:f8:fe:1f:fc:7d:19:ea:f4:aa:65:ad:
36:f2:49:b1:89:65:2a:2f:4f:79:0e:da:b4:13:57:4a:fe:c0:
d0:9f:3b:4a:d1:1e:c7:96:7f:1e:9e:37:6f:35:b9:74:6d:65:
f6:ea:9a:49:3a:13:d7:27:a7:a1:12:f3:a5:0c:25:c3:94:c8:
51:7c:ad:56:f5:40:2c:fa:f7:63:5c:7b:af:31:ea:17:3f:89:
0c:69:18:ab:e3:6d:8a:72:33:51:9f:d3:fe:4a:61:b5:67:91:
cf:05:e8:7a:0f:2d:7c:2d:97:fa:ef:d8:bb:84:e5:1b:ff:bf:
8a:d0:d2:9b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdY2vSfvC3iMHg3csAoYXI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5
MDMwNDEwHhcNMjUwNjEwMDgwMDMzWhcNMjUwNjExMDgwMDMzWjAzMTEwLwYDVQQD
Eyg0ZDg2MjFlODA1MjRiMDU5MDQ0MTUwYTczNTMzMTNkODAwZDVhZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFzCVSUrK/9KFDxCVjg/W+oeodSH
rQ/vCnm7li9ngQSvuf4fCid0Dy7cz1g4UZfotvwav0WDwvi1zvU0d49N/Q8y9kjW
Xem8BzhHRpgxY4Q48aPecAeCqLKMVLC2WizxXAD1aMOE226n43dXZeLBjub1p4Qd
XLKJWt16mC7Y/0UzsLfSu5YwTtsfXEOGns7oGVE/2e/+4kEIul7mruIn2uOiRk3C
MkD2E5M7KCV4XbxnH7xfzOyVdbOqhkei9z43R3RYsEmpjcbwgTLKQPMsEbH2Hxiu
RdcrUfFCIrtAHmTgulLTSsfvTPIEcrsDFzTkj4d/o1+MnHslFv7CFNh+sQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE2GIegFJLBZBEFQpzUzE9gA1a7WMB8GA1UdIwQY
MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3
LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi
NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiGm
iIABaksLbT0IkkBEKAWzwhjWqoh0bnn+fTDBip40+r6oI0Y8HwoI09kgSgx90cVX
ij+k2gIyr+kHOTbvF6n8F9mt12DdhkJZZg1GWwaiAaF8Ce/+fFUpzY15oqUIp/cd
DxPE8bv7jsifRyLigN2DFHStHbDR3oVInSUGRiG9gk6fiPj+H/x9Ger0qmWtNvJJ
sYllKi9PeQ7atBNXSv7A0J87StEex5Z/Hp43bzW5dG1l9uqaSToT1yenoRLzpQwl
w5TIUXytVvVALPr3Y1x7rzHqFz+JDGkYq+NtinIzUZ/T/kphtWeRzwXoeg8tfC2X
+u/Yu4TlG/+/itDSmw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 17:49:27 2025 by rpki-client