Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
File: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft (raw, json)
Hash identifier: cYw+D40A8cNxpfn21dmfhw8tLvBrkhRMXaTPSSsZ7Z8=
Subject key identifier: 1F:57:25:F0:6F:8F:3C:5F:78:41:57:83:24:A4:65:7C:36:33:32:C1
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial: 0198D5BC41A91E86474D92324543F56E7BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
Manifest number: 3D
Signing time: Sat 23 Aug 2025 07:02:21 +0000
Manifest this update: Sat 23 Aug 2025 07:02:21 +0000
Manifest next update: Sun 24 Aug 2025 07:02:21 +0000
Files and hashes: 1: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl (hash: FD67TD/vgnIZq+dzPRJFxbQ/qL8zQ6dMnXYBkT4gLy4=)
2: 1j10fGgoumz7WTH368PI_luQFZo.roa (hash: I8kLuezU2XygaqC04v/laZ7klhdBf+W1z6e/cSddoJA=)
3: warGeR8KF_Qduq42XjiOHRQiVOo.roa (hash: rRr5EdH0nhSwX6FyG7IpMNhRuhDpGs/F3/vvkFXiG7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:41:a9:1e:86:47:4d:92:32:45:43:f5:6e:7b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Validity
Not Before: Aug 23 07:02:21 2025 GMT
Not After : Aug 24 07:02:21 2025 GMT
Subject: CN=1f5725f06f8f3c5f7841578324a4657c363332c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:b6:68:aa:a4:1c:06:1c:df:1e:57:c8:3c:
20:43:ce:bc:b4:c5:9f:81:10:15:98:33:a1:76:ae:
dd:05:46:3c:2b:a4:a8:6b:87:28:df:13:af:c6:3d:
ba:63:06:b5:56:d9:b3:41:90:09:e3:c6:cb:15:2e:
01:31:6a:78:2d:8a:e0:f9:8c:87:5a:a2:2a:69:16:
85:66:f6:4d:ee:2e:5d:3d:eb:ef:a6:ab:9b:ad:51:
86:f4:2a:75:92:a6:94:3b:d8:fd:37:0b:e7:bd:6f:
7a:e8:c5:c9:a5:68:16:55:d7:c5:a2:fd:dd:d0:8e:
da:33:a4:de:91:72:d2:ca:ad:51:42:ad:1f:5f:ce:
1d:2e:07:bd:05:6d:2a:b8:40:70:7d:b5:49:c1:40:
40:55:3b:6e:54:b1:51:08:c3:87:94:45:5e:3e:07:
82:be:fc:8d:b7:69:0b:6b:7f:00:a0:80:b1:bb:f5:
28:1f:e2:b6:97:f5:94:97:9f:f3:b8:54:86:78:67:
8f:cc:00:5e:d4:c2:da:7b:10:7a:8a:36:64:41:02:
ba:19:b4:ea:5c:76:75:1b:d9:ab:ed:a8:6d:71:fc:
72:a8:89:b3:ea:bc:a9:3f:de:44:60:de:df:a6:f8:
34:30:03:ca:55:2c:d5:65:59:d3:2e:e1:ad:0c:1b:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:25:F0:6F:8F:3C:5F:78:41:57:83:24:A4:65:7C:36:33:32:C1
X509v3 Authority Key Identifier:
keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:23:50:2d:1b:f0:7d:3e:54:3e:5e:2b:95:9f:fe:ae:c6:59:
0d:f5:e5:e0:7b:ee:b4:f5:89:28:eb:27:89:65:c5:ed:12:59:
e3:88:cf:c8:d4:6f:b6:99:0d:4f:27:18:d1:b5:b0:7c:77:35:
20:e0:f3:ff:e0:c5:cc:72:6a:46:30:5d:4b:03:76:98:53:f5:
20:ee:35:eb:f3:b8:71:db:6b:60:ee:f0:26:62:f5:24:b7:ae:
96:a9:ea:28:c3:99:88:88:ea:bc:20:09:76:27:3e:b3:ac:84:
57:ed:4a:80:db:ba:50:75:30:46:db:bc:e7:7c:2a:38:98:a8:
8f:5e:f7:2d:83:fd:f5:9c:2c:54:2b:6f:53:59:9b:35:2d:90:
a1:e7:ab:86:90:f4:ff:d5:04:d8:94:46:ee:29:73:bf:4e:e7:
61:1c:33:98:f4:bf:cb:8c:6c:0f:61:42:83:04:38:03:13:a4:
e7:bd:0b:61:06:0f:6c:39:61:ed:65:24:81:90:b8:72:14:c9:
20:e5:3e:2b:10:e8:22:47:48:d4:a6:86:c4:87:53:b4:09:f6:
93:51:98:53:11:e5:d9:a0:51:5e:1a:85:b0:2f:34:75:94:00:
26:58:ef:19:b2:d5:f3:8d:b3:82:91:c9:53:fe:ec:2c:90:89:
46:0c:d8:7b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjVvEGpHoZHTZIyRUP1bnuyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Yjc2MDBlNzgxZjkzMDViODhjYTQ5MzFhN2RiMDA5Zjhj
NzJiM2EwHhcNMjUwODIzMDcwMjIxWhcNMjUwODI0MDcwMjIxWjAzMTEwLwYDVQQD
EygxZjU3MjVmMDZmOGYzYzVmNzg0MTU3ODMyNGE0NjU3YzM2MzMzMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh+2aKqkHAYc3x5XyDwgQ868tMWf
gRAVmDOhdq7dBUY8K6Soa4co3xOvxj26Ywa1VtmzQZAJ48bLFS4BMWp4LYrg+YyH
WqIqaRaFZvZN7i5dPevvpqubrVGG9Cp1kqaUO9j9NwvnvW966MXJpWgWVdfFov3d
0I7aM6TekXLSyq1RQq0fX84dLge9BW0quEBwfbVJwUBAVTtuVLFRCMOHlEVePgeC
vvyNt2kLa38AoICxu/UoH+K2l/WUl5/zuFSGeGePzABe1MLaexB6ijZkQQK6GbTq
XHZ1G9mr7ahtcfxyqImz6rypP95EYN7fpvg0MAPKVSzVZVnTLuGtDBvPMQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFB9XJfBvjzxfeEFXgySkZXw2MzLBMB8GA1UdIwQY
MBaAFPi3YA54H5MFuIykkxp9sAn4xys6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MZGdEbmdma3dXNGpLU1RHbjJ3Q2ZqSEt6by5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvYjNmZWNlLTkwNWYtNGNiMy05YTlh
LWU1YWZlMjYzZjBhMi8xLzEtTGRnRG5nZmt3VzRqS1NUR24yd0NmakhLem8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzEyL2IzZmVjZS05MDVmLTRjYjMtOWE5YS1lNWFmZTI2M2Yw
YTIvMS8xLUxkZ0RuZ2Zrd1c0aktTVEduMndDZmpIS3pvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECNQ
LRvwfT5UPl4rlZ/+rsZZDfXl4HvutPWJKOsniWXF7RJZ44jPyNRvtpkNTycY0bWw
fHc1IODz/+DFzHJqRjBdSwN2mFP1IO416/O4cdtrYO7wJmL1JLeulqnqKMOZiIjq
vCAJdic+s6yEV+1KgNu6UHUwRtu853wqOJioj173LYP99ZwsVCtvU1mbNS2Qoeer
hpD0/9UE2JRG7ilzv07nYRwzmPS/y4xsD2FCgwQ4AxOk570LYQYPbDlh7WUkgZC4
chTJIOU+KxDoIkdI1KaGxIdTtAn2k1GYUxHl2aBRXhqFsC80dZQAJljvGbLV842z
gpHJU/7sLJCJRgzYew==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:33 2025 by rpki-client