Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: OBP9IJJE6yE1zprflO4ZKdKLC/mQ5drSIdec94ZNaw8=
Subject key identifier: E1:C1:67:D9:CB:FF:FD:A1:29:93:6A:DF:B1:FF:FC:10:A6:93:A6:DB
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 0198D54E35E860A8213A7737F706043F5501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 1069
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: LaejPdVAXa9Em9XLdVJ5zLCrHYO0BfVWAzXS8VMOeug=)
2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=)
3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:35:e8:60:a8:21:3a:77:37:f7:06:04:3f:55:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=e1c167d9cbfffda129936adfb1fffc10a693a6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:b2:e2:e0:27:e8:a4:47:89:78:b8:e7:15:
e0:d4:42:84:fb:dd:0f:75:9d:f1:cc:e1:af:f3:9a:
d7:9d:78:01:e8:b7:fb:2e:d7:3b:d3:a9:99:72:f1:
17:f7:b0:21:ab:00:c8:ec:0a:06:92:95:bc:2b:61:
c9:89:73:be:a4:2a:52:ae:b7:f3:cc:3e:95:9a:7c:
da:5a:b2:65:31:a8:38:47:4f:6b:d7:0a:dc:25:bf:
61:88:42:cb:ee:33:1b:9f:d8:57:6c:7e:62:fa:4e:
88:d4:67:f4:c1:c8:58:51:10:2e:36:6e:c4:c3:07:
cc:b2:4f:31:2e:1c:b7:dd:55:66:9c:64:97:31:0c:
fd:eb:a1:4c:6f:f2:21:3a:fe:eb:c9:f2:7c:02:86:
e6:30:4d:77:39:e1:82:ba:a9:f1:88:5d:85:65:b6:
ae:cb:52:4f:04:8b:e0:6d:bc:91:93:59:0b:bc:3f:
b6:9f:65:e0:17:36:ab:ec:55:a7:83:c8:ea:8d:6a:
f4:30:bf:91:23:95:d5:71:87:73:54:d0:32:24:f7:
5b:88:37:a5:47:7e:71:8b:d3:7d:47:a3:92:38:2c:
92:ca:f5:78:7c:fd:3b:8f:7a:02:81:07:48:58:48:
a3:e9:73:fc:08:2d:7e:de:e5:22:73:12:8f:b3:c1:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C1:67:D9:CB:FF:FD:A1:29:93:6A:DF:B1:FF:FC:10:A6:93:A6:DB
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:61:68:4b:79:0a:ba:6c:36:53:4b:42:f6:58:ef:e1:8a:90:
88:81:f3:e6:0a:e7:a5:36:a8:7d:de:bb:8c:d4:bf:46:5f:b6:
96:ad:d4:1a:ce:0d:5b:67:63:2c:8d:41:18:6b:ac:c2:e1:0e:
d6:3c:9d:55:5c:bb:4b:d3:22:35:f5:da:fc:8c:50:bc:ff:85:
f3:3d:73:2b:47:c8:54:ab:95:f0:da:fb:04:b7:47:25:76:eb:
e6:06:0f:33:3a:2b:79:a3:42:7a:53:41:37:c3:20:d7:c4:d3:
e7:62:57:53:32:32:72:db:d9:d7:e8:1c:9c:96:05:b8:40:3b:
2a:ff:e9:1b:b4:e2:a1:93:07:0c:65:d6:38:5f:38:1b:39:4f:
6a:87:1e:31:32:ce:42:5d:0b:61:97:46:67:22:89:14:f2:17:
d6:2a:12:54:08:d5:b8:09:00:a0:17:91:c7:ba:ac:19:a3:7f:
fa:7f:6c:f1:e9:5d:5c:05:f9:17:46:55:64:e8:6b:f6:e4:e4:
3d:5e:d8:5e:13:72:e9:c4:79:61:2d:09:bb:fb:c4:4b:3f:e7:
e1:41:5c:cf:08:0d:ba:d2:82:90:80:c5:f1:c1:14:fa:61:16:
77:78:52:3b:5e:dd:c0:49:7d:f7:4c:30:7a:ff:0b:16:5f:b6:
0c:54:3a:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjXoYKghOnc39wYEP1UBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5
YjhkYTcwHhcNMjUwODIzMDUwMjA5WhcNMjUwODI0MDUwMjA5WjAzMTEwLwYDVQQD
EyhlMWMxNjdkOWNiZmZmZGExMjk5MzZhZGZiMWZmZmMxMGE2OTNhNmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+yy4uAn6KRHiXi45xXg1EKE+90P
dZ3xzOGv85rXnXgB6Lf7Ltc706mZcvEX97AhqwDI7AoGkpW8K2HJiXO+pCpSrrfz
zD6VmnzaWrJlMag4R09r1wrcJb9hiELL7jMbn9hXbH5i+k6I1Gf0wchYURAuNm7E
wwfMsk8xLhy33VVmnGSXMQz966FMb/IhOv7ryfJ8AobmME13OeGCuqnxiF2FZbau
y1JPBIvgbbyRk1kLvD+2n2XgFzar7FWng8jqjWr0ML+RI5XVcYdzVNAyJPdbiDel
R35xi9N9R6OSOCySyvV4fP07j3oCgQdIWEij6XP8CC1+3uUicxKPs8FAowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHBZ9nL//2hKZNq37H//BCmk6bbMB8GA1UdIwQY
MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt
ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh
LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWFoS3kK
umw2U0tC9ljv4YqQiIHz5grnpTaofd67jNS/Rl+2lq3UGs4NW2djLI1BGGuswuEO
1jydVVy7S9MiNfXa/IxQvP+F8z1zK0fIVKuV8Nr7BLdHJXbr5gYPMzoreaNCelNB
N8Mg18TT52JXUzIyctvZ1+gcnJYFuEA7Kv/pG7TioZMHDGXWOF84GzlPaoceMTLO
Ql0LYZdGZyKJFPIX1ioSVAjVuAkAoBeRx7qsGaN/+n9s8eldXAX5F0ZVZOhr9uTk
PV7YXhNy6cR5YS0Ju/vESz/n4UFczwgNutKCkIDF8cEU+mEWd3hSO17dwEl990ww
ev8LFl+2DFQ6xg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:44 2025 by rpki-client