Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: ilE8zgrzqMDBj0d405RIxbfxjPuZ4yg1sMH2gz8qXC8=
Subject key identifier: AF:A4:51:F2:B8:84:0B:4A:D5:8F:1C:35:8A:4A:9F:D6:DC:6F:AA:6B
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 0198D6988F8F11B14002D661A6549DC2E818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:58 +0000
Manifest this update: Sat 23 Aug 2025 11:02:58 +0000
Manifest next update: Sun 24 Aug 2025 11:02:58 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: WUWovmdD7NWBZ9T07LL+j7GjJn/1jRSc0GSdlAeYm8w=)
2: Rvoozr9-AEirIvl3H78yEjywI3M.roa (hash: C8PH+7JgTNI/2g3gAC+RhVDcD73858pmRmw+QrCbn9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8f:8f:11:b1:40:02:d6:61:a6:54:9d:c2:e8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: Aug 23 11:02:58 2025 GMT
Not After : Aug 24 11:02:58 2025 GMT
Subject: CN=afa451f2b8840b4ad58f1c358a4a9fd6dc6faa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:3f:84:f7:12:55:a8:86:28:d5:4e:08:06:
99:08:24:f1:c1:43:75:27:c4:7a:bf:ff:41:76:8b:
bd:fb:ba:1d:2a:55:a5:af:cb:d1:4e:8c:e4:86:f8:
ee:8d:4a:b6:6b:35:b0:14:36:0b:d0:93:58:f1:5f:
b1:4f:ac:42:60:8b:79:82:9b:af:76:3b:d0:24:3f:
4e:80:8d:3d:b0:ae:c0:82:75:c9:67:a4:4d:f1:50:
54:5d:af:c9:b5:9f:4e:2d:8c:54:70:de:6c:8a:19:
e3:c3:58:b7:22:02:4a:7c:c6:0a:86:fe:4c:c9:c2:
ce:7e:96:07:a5:43:14:45:33:bd:20:19:78:f6:5c:
a7:7d:e3:a1:9e:ff:58:6f:00:2e:d4:8e:c7:da:a0:
4f:4e:8e:39:23:81:df:3b:42:0e:e1:0f:cc:01:bc:
03:de:5d:7a:02:f5:31:87:9e:63:29:70:72:1e:06:
f9:61:cb:13:d4:03:ee:2d:1b:14:f9:d4:15:9b:df:
7e:4c:d5:58:62:92:96:9f:17:58:46:97:9c:17:9e:
a1:48:45:16:de:43:18:a9:4a:07:bd:82:07:f9:07:
0e:15:f4:35:8f:36:be:63:fc:f1:ad:67:bc:5c:36:
34:0c:be:7a:08:b9:50:92:58:7b:25:cd:2a:cf:b2:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:51:F2:B8:84:0B:4A:D5:8F:1C:35:8A:4A:9F:D6:DC:6F:AA:6B
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:53:92:2b:eb:af:57:7c:ac:c4:b4:e1:de:57:2a:0a:cc:
47:7c:0d:22:1c:e8:4c:26:4b:ef:9e:9a:87:01:0d:83:63:47:
20:ad:06:76:79:ec:0e:ec:e8:1a:05:0c:e0:6f:ac:b6:d2:6f:
b1:2d:db:e5:2f:f7:a5:d1:d7:0d:10:c5:58:ff:a9:c0:3b:01:
6c:62:74:99:59:84:7e:e8:6e:4a:b6:d2:54:3e:07:c8:9b:b8:
e8:75:32:48:68:3f:98:f7:52:4d:82:87:d5:22:34:03:5d:ae:
60:ef:14:76:55:af:d4:c0:fc:6a:c0:8c:cf:2f:fc:f3:36:fe:
6b:42:30:be:1f:a7:18:e9:d6:ba:e5:40:ac:c6:f4:b5:3a:d4:
b0:f8:2c:16:30:e8:ba:c6:23:99:5d:1d:ec:40:d3:9e:42:b9:
02:f7:81:90:32:b6:1f:db:0d:bd:6c:69:59:28:4a:28:02:2c:
b0:f7:bb:a6:c8:34:f5:83:c4:24:34:44:08:f6:05:09:1b:b7:
eb:2f:d8:95:df:2f:84:c2:d4:0b:19:e7:54:4e:0e:3c:c0:f9:
45:65:75:d1:46:f2:aa:b6:f9:0f:c4:dd:49:74:e0:e5:e3:79:
71:c3:90:b6:ab:39:1a:26:7b:43:2a:bb:75:50:15:2a:ca:fb:
b2:f2:c0:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmI+PEbFAAtZhplSdwugYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTIxOTZlZjExOTIyMTE1NWUxNjgzZjg5NjdkMjU0NjI1
ZGFlNzEwHhcNMjUwODIzMTEwMjU4WhcNMjUwODI0MTEwMjU4WjAzMTEwLwYDVQQD
EyhhZmE0NTFmMmI4ODQwYjRhZDU4ZjFjMzU4YTRhOWZkNmRjNmZhYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszo/hPcSVaiGKNVOCAaZCCTxwUN1
J8R6v/9Bdou9+7odKlWlr8vRTozkhvjujUq2azWwFDYL0JNY8V+xT6xCYIt5gpuv
djvQJD9OgI09sK7AgnXJZ6RN8VBUXa/JtZ9OLYxUcN5sihnjw1i3IgJKfMYKhv5M
ycLOfpYHpUMURTO9IBl49lynfeOhnv9YbwAu1I7H2qBPTo45I4HfO0IO4Q/MAbwD
3l16AvUxh55jKXByHgb5YcsT1APuLRsU+dQVm99+TNVYYpKWnxdYRpecF56hSEUW
3kMYqUoHvYIH+QcOFfQ1jza+Y/zxrWe8XDY0DL56CLlQklh7Jc0qz7IdMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+kUfK4hAtK1Y8cNYpKn9bcb6prMB8GA1UdIwQY
MBaAFNWiGW7xGSIRVeFoP4ln0lRiXa5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMDYzMzctNjUxNy00MDBiLThjYjUt
N2FmYTBiY2Q3OTc2LzEvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMDYzMzctNjUxNy00MDBiLThjYjUtN2FmYTBiY2Q3OTc2
LzEvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRFTkivr
r1d8rMS04d5XKgrMR3wNIhzoTCZL756ahwENg2NHIK0GdnnsDuzoGgUM4G+sttJv
sS3b5S/3pdHXDRDFWP+pwDsBbGJ0mVmEfuhuSrbSVD4HyJu46HUySGg/mPdSTYKH
1SI0A12uYO8UdlWv1MD8asCMzy/88zb+a0Iwvh+nGOnWuuVArMb0tTrUsPgsFjDo
usYjmV0d7EDTnkK5AveBkDK2H9sNvWxpWShKKAIssPe7psg09YPEJDRECPYFCRu3
6y/Yld8vhMLUCxnnVE4OPMD5RWV10Ubyqrb5D8TdSXTg5eN5ccOQtqs5GiZ7Qyq7
dVAVKsr7svLAFw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:58 2025 by rpki-client