Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier: s2pvOSCX8UYFZZlw1Z4OnO0a6GAuD9Wllbn86wC5wJI=
Subject key identifier: E3:6D:30:60:00:BC:AF:53:1F:CF:6E:E8:5E:98:1B:9C:C3:6F:0C:41
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial: 0198D515CF5ACAB73134DACC88E76551F17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number: 156D
Signing time: Sat 23 Aug 2025 04:00:32 +0000
Manifest this update: Sat 23 Aug 2025 04:00:32 +0000
Manifest next update: Sun 24 Aug 2025 04:00:32 +0000
Files and hashes: 1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=)
2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: Sq0AO5hm4kqNxxDoX3BnWZ5ANVhRoIWHyk/tq2rQl8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:cf:5a:ca:b7:31:34:da:cc:88:e7:65:51:f1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Validity
Not Before: Aug 23 04:00:32 2025 GMT
Not After : Aug 24 04:00:32 2025 GMT
Subject: CN=e36d306000bcaf531fcf6ee85e981b9cc36f0c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:cd:bd:1e:8c:40:c3:39:bc:32:f6:87:d2:ae:
a9:23:f2:1d:6c:1b:01:a6:84:9f:9b:27:ae:bd:9e:
96:b7:40:94:54:a1:4c:20:07:29:d0:e7:bd:0d:0c:
e0:2a:44:e0:36:01:9f:0d:2f:99:79:76:fd:a9:4c:
f8:cf:0d:41:e4:12:e9:00:ac:09:16:28:56:74:1a:
7f:09:20:0f:6a:e1:2e:67:a1:41:7e:a2:92:1f:3b:
ab:56:33:5c:1b:b3:b1:91:34:78:ee:08:b8:d8:16:
30:c3:af:8e:f2:8b:6a:c6:ae:20:1c:52:cb:1b:95:
c2:7e:cb:55:e0:69:36:65:7c:ed:c6:8d:ee:d9:45:
45:fa:81:5f:7a:ac:97:45:4d:31:7e:8b:de:61:91:
7c:13:6f:53:49:94:ca:d9:94:f5:40:cb:9e:5c:cf:
03:25:85:5c:9d:37:42:90:d6:83:7a:47:47:9f:1f:
79:c1:4d:81:c2:56:56:f9:e0:1f:cb:a1:37:a9:53:
bf:bb:10:ac:f7:43:a2:02:d5:99:1f:00:16:ac:31:
c2:78:6e:41:9d:ef:b4:a1:2e:35:c7:0b:bb:3d:2b:
aa:6a:aa:f4:48:b8:d6:e9:eb:9f:a2:f5:27:c4:4f:
81:09:c0:e5:2d:94:a2:16:da:59:35:d4:42:e9:ba:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6D:30:60:00:BC:AF:53:1F:CF:6E:E8:5E:98:1B:9C:C3:6F:0C:41
X509v3 Authority Key Identifier:
keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e4:23:37:32:f1:4f:3a:99:d4:20:af:87:e7:52:c0:ad:fd:
6d:f8:99:98:d5:e2:32:e0:f4:49:ef:bd:71:c3:6b:b0:26:d3:
4e:c9:f6:f8:d5:07:3a:d4:88:22:17:73:77:2c:f9:17:d9:75:
e0:e0:1b:ab:a9:ec:66:e4:15:b4:20:b1:25:91:46:16:6d:fe:
2a:30:79:8f:da:5d:78:7f:ca:b4:ed:39:3e:f3:d9:a6:83:f2:
b4:0e:c3:dc:63:da:4b:0f:39:8b:1e:53:fb:d7:bc:59:ba:10:
67:83:85:63:ca:9a:6d:be:eb:a9:4e:d4:d6:29:25:a4:9f:fc:
63:b9:a5:af:3a:32:f2:ac:ee:0c:8b:60:e0:78:26:fc:09:f2:
c4:1b:bb:7c:3e:03:b0:2b:d5:a9:25:ce:bf:7c:a4:f0:b4:2e:
5c:72:fa:04:96:e2:86:3d:c4:66:9c:3d:65:3f:dc:83:a1:7a:
92:4e:f4:96:0e:5f:94:ee:11:0d:ae:4e:61:5e:f9:a8:36:0b:
e7:38:1c:5e:3e:29:64:0b:1c:38:e9:91:be:3a:01:35:17:33:
4a:2d:b6:3f:19:99:99:84:6b:c5:39:c0:39:72:88:54:c0:58:
28:4a:fb:cf:b8:31:1d:54:ad:fa:86:e6:63:30:7a:33:21:80:
37:ac:4e:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFc9ayrcxNNrMiOdlUfF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWIzMzZjM2U0ODk3YTUyYjM5YzNhZGFhZWNjZWM2YmY3
MGNlN2QwHhcNMjUwODIzMDQwMDMyWhcNMjUwODI0MDQwMDMyWjAzMTEwLwYDVQQD
EyhlMzZkMzA2MDAwYmNhZjUzMWZjZjZlZTg1ZTk4MWI5Y2MzNmYwYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+M29HoxAwzm8MvaH0q6pI/IdbBsB
poSfmyeuvZ6Wt0CUVKFMIAcp0Oe9DQzgKkTgNgGfDS+ZeXb9qUz4zw1B5BLpAKwJ
FihWdBp/CSAPauEuZ6FBfqKSHzurVjNcG7OxkTR47gi42BYww6+O8otqxq4gHFLL
G5XCfstV4Gk2ZXztxo3u2UVF+oFfeqyXRU0xfoveYZF8E29TSZTK2ZT1QMueXM8D
JYVcnTdCkNaDekdHnx95wU2BwlZW+eAfy6E3qVO/uxCs90OiAtWZHwAWrDHCeG5B
ne+0oS41xwu7PSuqaqr0SLjW6eufovUnxE+BCcDlLZSiFtpZNdRC6boHQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONtMGAAvK9TH89u6F6YG5zDbwxBMB8GA1UdIwQY
MBaAFHdbM2w+SJelKznDrarszsa/cM59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2Qt
M2RjMTQxNzBkNjJhLzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2QtM2RjMTQxNzBkNjJh
LzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuQjNzLx
TzqZ1CCvh+dSwK39bfiZmNXiMuD0Se+9ccNrsCbTTsn2+NUHOtSIIhdzdyz5F9l1
4OAbq6nsZuQVtCCxJZFGFm3+KjB5j9pdeH/KtO05PvPZpoPytA7D3GPaSw85ix5T
+9e8WboQZ4OFY8qabb7rqU7U1iklpJ/8Y7mlrzoy8qzuDItg4Hgm/AnyxBu7fD4D
sCvVqSXOv3yk8LQuXHL6BJbihj3EZpw9ZT/cg6F6kk70lg5flO4RDa5OYV75qDYL
5zgcXj4pZAscOOmRvjoBNRczSi22PxmZmYRrxTnAOXKIVMBYKEr7z7gxHVSt+obm
YzB6MyGAN6xOLA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:57 2025 by rpki-client