Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File: _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier: DY7DqmGFKt6/tEOdrEn0GH2gfY4BpH8AXY7u5Imnyuk=
Subject key identifier: 32:D5:A2:86:BF:6F:5A:B9:CF:6B:F6:22:C8:A2:2C:00:59:DF:7D:E5
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer: /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial: 0198D705BDB611BB6A3C12A3151E6DA8277A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 13:02:14 +0000
Manifest this update: Sat 23 Aug 2025 13:02:14 +0000
Manifest next update: Sun 24 Aug 2025 13:02:14 +0000
Files and hashes: 1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: G7lxCpq5wavRh5+C1+o8HyegOyjWt1E8VnDg3M8yaTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:bd:b6:11:bb:6a:3c:12:a3:15:1e:6d:a8:27:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Validity
Not Before: Aug 23 13:02:14 2025 GMT
Not After : Aug 24 13:02:14 2025 GMT
Subject: CN=32d5a286bf6f5ab9cf6bf622c8a22c0059df7de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:f7:a2:2c:a7:9d:27:b2:48:65:65:af:20:
9a:c1:9c:4f:42:65:9f:ad:1e:11:43:d3:e0:0b:36:
26:3e:bc:d5:0c:8a:39:07:4f:b3:9d:f5:37:05:27:
27:80:e8:49:e9:7f:77:c5:e2:a0:77:8b:62:bf:3b:
bd:aa:de:90:a1:fc:e8:72:46:89:5b:6a:2d:5a:03:
10:bc:7c:40:12:cf:f5:ab:1b:85:20:63:79:fa:f3:
28:bb:55:a5:ed:c3:9c:e9:ec:11:f4:73:ab:24:98:
39:46:4b:9e:02:3d:72:f8:c3:1b:fb:4b:10:6c:2d:
44:df:14:69:ae:23:56:0f:bc:0e:40:48:69:e0:2d:
99:67:a3:ab:b5:79:fd:02:84:4e:95:be:65:36:a8:
68:0d:a8:b0:3d:59:0a:cd:10:9c:01:5e:b2:8b:e7:
06:25:3b:b1:8b:08:5d:41:5b:54:b7:a1:35:b5:72:
19:6e:ae:d0:77:2d:e9:23:4a:39:f6:4b:ce:6e:8c:
8d:ea:31:e4:30:fb:94:05:43:fc:e3:1b:44:27:76:
8d:1a:4b:31:48:2c:71:30:b1:10:63:85:0a:24:8b:
0b:3a:91:17:33:db:c6:bc:fd:28:25:be:de:d3:2b:
b6:c7:69:8d:1b:7c:96:19:9b:87:59:9b:00:2b:09:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D5:A2:86:BF:6F:5A:B9:CF:6B:F6:22:C8:A2:2C:00:59:DF:7D:E5
X509v3 Authority Key Identifier:
keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0a:8d:32:66:f2:b1:0d:c7:f5:61:02:88:18:d6:32:a4:85:
e1:44:ab:e6:7a:e6:33:eb:9f:a3:7f:34:04:76:19:8c:c1:34:
79:c9:49:02:37:c0:4e:11:9b:a1:48:58:50:a9:ca:e2:cb:a8:
3e:74:4d:d9:c0:14:d9:78:98:5c:3c:21:b0:ef:14:8c:76:5c:
a3:54:7f:c4:cb:36:c4:ba:67:d1:49:32:ae:2a:e6:3c:20:3c:
36:fc:24:9c:e0:50:25:ff:db:37:5b:46:f9:d1:5a:8d:7b:a9:
08:2e:43:d3:ce:76:06:20:5c:d9:47:e6:45:fa:62:0b:89:a2:
e0:4d:c5:86:76:ab:ec:52:14:74:e7:cd:76:14:36:a6:65:2c:
98:b9:bc:f7:8a:b9:5b:3e:30:78:8d:5c:6c:9b:30:8e:c1:62:
e0:1a:e9:bf:a1:fe:b2:4a:7e:33:64:81:7b:49:be:e2:5c:0e:
76:b4:a8:13:77:5b:88:68:5c:38:61:4c:e6:b0:b4:fe:e2:b3:
de:28:ad:a4:1c:a2:7b:d2:8a:2d:79:c7:e6:e3:d3:0b:47:4c:
1a:04:b1:b7:52:31:cc:83:87:ab:1c:fd:6c:eb:87:37:8c:1e:
ef:a9:28:30:4b:40:4c:25:f3:51:23:37:c3:01:72:3d:11:1d:
0e:e5:f8:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBb22EbtqPBKjFR5tqCd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTU0OTE5OTMxYzY3YmQyNjUwZmM0ZTBjNzNjMmZiM2Uy
MjhkOTUwHhcNMjUwODIzMTMwMjE0WhcNMjUwODI0MTMwMjE0WjAzMTEwLwYDVQQD
EygzMmQ1YTI4NmJmNmY1YWI5Y2Y2YmY2MjJjOGEyMmMwMDU5ZGY3ZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1v3oiynnSeySGVlryCawZxPQmWf
rR4RQ9PgCzYmPrzVDIo5B0+znfU3BScngOhJ6X93xeKgd4tivzu9qt6QofzockaJ
W2otWgMQvHxAEs/1qxuFIGN5+vMou1Wl7cOc6ewR9HOrJJg5RkueAj1y+MMb+0sQ
bC1E3xRpriNWD7wOQEhp4C2ZZ6OrtXn9AoROlb5lNqhoDaiwPVkKzRCcAV6yi+cG
JTuxiwhdQVtUt6E1tXIZbq7Qdy3pI0o59kvOboyN6jHkMPuUBUP84xtEJ3aNGksx
SCxxMLEQY4UKJIsLOpEXM9vGvP0oJb7e0yu2x2mNG3yWGZuHWZsAKwlf6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLVooa/b1q5z2v2IsiiLABZ333lMB8GA1UdIwQY
MBaAFP9VSRmTHGe9JlD8Tgxzwvs+Io2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yMzI0NGQtNDg4Ni00NzBiLWIxZmMt
MjkwYWE0MzE4Y2FhLzEvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yMzI0NGQtNDg4Ni00NzBiLWIxZmMtMjkwYWE0MzE4Y2Fh
LzEvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwqNMmby
sQ3H9WECiBjWMqSF4USr5nrmM+ufo380BHYZjME0eclJAjfAThGboUhYUKnK4suo
PnRN2cAU2XiYXDwhsO8UjHZco1R/xMs2xLpn0UkyrirmPCA8NvwknOBQJf/bN1tG
+dFajXupCC5D0852BiBc2UfmRfpiC4mi4E3Fhnar7FIUdOfNdhQ2pmUsmLm894q5
Wz4weI1cbJswjsFi4Brpv6H+skp+M2SBe0m+4lwOdrSoE3dbiGhcOGFM5rC0/uKz
3iitpByie9KKLXnH5uPTC0dMGgSxt1IxzIOHqxz9bOuHN4we76koMEtATCXzUSM3
wwFyPREdDuX47Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:06:13 2025 by rpki-client