Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier: BhpGwdbHppV0sL2xDX5nzj9hViPQSulnUKOJVGYhzT0=
Subject key identifier: CB:48:E0:E7:E4:72:68:0A:B1:54:4C:AC:84:C5:32:13:89:61:B8:42
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 0198D6CD2268F9DDA189FA70CAC47B202D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 12:00:24 +0000
Manifest this update: Sat 23 Aug 2025 12:00:24 +0000
Manifest next update: Sun 24 Aug 2025 12:00:24 +0000
Files and hashes: 1: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: Q+FkSYRSbI3PQC/j1EaMn5kwOv3weevzygSS/7v+gAk=)
2: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (hash: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:22:68:f9:dd:a1:89:fa:70:ca:c4:7b:20:2d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Aug 23 12:00:24 2025 GMT
Not After : Aug 24 12:00:24 2025 GMT
Subject: CN=cb48e0e7e472680ab1544cac84c532138961b842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:52:9b:62:f9:8c:52:07:af:69:d4:1a:7d:
04:cf:ca:cf:08:bc:9f:0d:0e:11:35:56:e7:bc:62:
05:05:b4:18:10:d4:d0:24:6e:62:9c:d0:e4:e4:f8:
a3:b3:dd:eb:c9:26:f8:d4:db:01:f7:f7:45:49:2c:
51:32:a6:6b:59:18:77:9e:d5:41:a0:f3:2c:e2:4e:
5b:e4:83:e2:7a:7d:97:94:82:06:b6:97:4d:19:48:
c5:e1:ee:1e:71:bb:5d:18:bf:cd:d3:65:45:ec:fd:
5f:22:1e:53:e9:4e:3e:39:4e:56:a1:94:25:79:9a:
52:89:08:7c:9f:50:3c:72:74:9e:e6:d5:ad:29:50:
5e:8b:ce:de:64:8a:5c:eb:dc:5a:1f:3b:88:2f:e6:
f5:14:6e:cc:7b:bc:2b:61:d2:20:32:65:b8:3d:93:
5e:7b:46:76:74:54:b3:0f:e6:57:53:7e:a0:ac:a4:
5c:5d:58:b4:f9:8f:b5:c9:94:4c:a8:b0:b7:8b:3b:
66:80:18:99:17:8e:16:d7:76:dd:44:35:17:b1:46:
ff:47:a1:e4:3b:2c:a5:98:17:b6:e0:f6:11:f7:66:
d5:ce:38:6f:0e:dc:f0:02:cf:1f:92:4e:af:cf:52:
53:21:a4:10:ce:3c:c6:98:64:7f:a4:f1:a4:0d:9e:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:48:E0:E7:E4:72:68:0A:B1:54:4C:AC:84:C5:32:13:89:61:B8:42
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:11:fc:cc:8a:c7:c0:3a:d7:e2:ba:1f:e7:65:43:2c:fd:3a:
6e:04:e4:01:43:3c:14:af:db:05:23:f4:c9:bd:fb:d4:60:72:
12:18:be:8b:17:1f:74:40:df:78:70:8f:b7:d8:2b:dc:f3:11:
f2:d7:4c:bd:f6:a9:44:fe:b2:fe:06:b2:85:ff:7e:bf:91:3f:
5e:9d:94:0d:b1:0d:92:7e:ac:ea:4a:18:75:16:06:b8:86:ba:
c6:33:38:4a:95:d9:ce:26:98:9e:5d:a1:68:f4:66:65:1c:b5:
cc:36:a6:50:f6:23:4c:db:63:af:c7:84:53:9a:3c:e8:ef:34:
24:f0:d7:4b:6b:51:43:42:2e:1d:26:49:cc:ed:a8:5e:49:d7:
7c:12:c7:87:71:ce:b5:7e:ee:5b:55:36:b5:0a:9f:a9:92:5e:
f5:e4:b7:05:b7:f1:72:12:84:30:51:14:0a:c4:50:9d:ed:ce:
68:78:e8:66:b1:45:41:46:e1:12:d6:72:40:80:43:0f:50:c4:
18:bf:b8:7e:e7:c4:54:ee:a5:60:dd:82:01:7d:9e:d6:2f:c0:
46:c6:8c:b4:9c:32:d0:57:f1:a9:26:b9:fa:60:ff:b3:e0:ca:
f6:aa:33:e3:49:63:e1:cb:f4:2f:c6:00:bc:d8:7d:4c:e5:c0:
bb:c6:af:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzSJo+d2hifpwysR7IC08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjc5NmM1YTk4NTQ1MzJlOWVkNjM4ZDFjMzlhNTQxYzJk
ODk1MmMwHhcNMjUwODIzMTIwMDI0WhcNMjUwODI0MTIwMDI0WjAzMTEwLwYDVQQD
EyhjYjQ4ZTBlN2U0NzI2ODBhYjE1NDRjYWM4NGM1MzIxMzg5NjFiODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNVSm2L5jFIHr2nUGn0Ez8rPCLyf
DQ4RNVbnvGIFBbQYENTQJG5inNDk5Pijs93rySb41NsB9/dFSSxRMqZrWRh3ntVB
oPMs4k5b5IPien2XlIIGtpdNGUjF4e4ecbtdGL/N02VF7P1fIh5T6U4+OU5WoZQl
eZpSiQh8n1A8cnSe5tWtKVBei87eZIpc69xaHzuIL+b1FG7Me7wrYdIgMmW4PZNe
e0Z2dFSzD+ZXU36grKRcXVi0+Y+1yZRMqLC3iztmgBiZF44W13bdRDUXsUb/R6Hk
OyylmBe24PYR92bVzjhvDtzwAs8fkk6vz1JTIaQQzjzGmGR/pPGkDZ4OAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtI4OfkcmgKsVRMrITFMhOJYbhCMB8GA1UdIwQY
MBaAFP4nlsWphUUy6e1jjRw5pUHC2JUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYmExODYtZTRkMi00NWUxLWE5Mzgt
MGU0YWIyNjM3YmVkLzEvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYmExODYtZTRkMi00NWUxLWE5MzgtMGU0YWIyNjM3YmVk
LzEvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzhH8zIrH
wDrX4rof52VDLP06bgTkAUM8FK/bBSP0yb371GByEhi+ixcfdEDfeHCPt9gr3PMR
8tdMvfapRP6y/gayhf9+v5E/Xp2UDbENkn6s6koYdRYGuIa6xjM4SpXZziaYnl2h
aPRmZRy1zDamUPYjTNtjr8eEU5o86O80JPDXS2tRQ0IuHSZJzO2oXknXfBLHh3HO
tX7uW1U2tQqfqZJe9eS3BbfxchKEMFEUCsRQne3OaHjoZrFFQUbhEtZyQIBDD1DE
GL+4fufEVO6lYN2CAX2e1i/ARsaMtJwy0FfxqSa5+mD/s+DK9qoz40lj4cv0L8YA
vNh9TOXAu8av/g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:42 2025 by rpki-client