Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: cG5fS6gXLkFpUSE6HwED+pxXr72cEQB0WxR84Q8zOhI=
Subject key identifier: 0D:B4:A9:39:67:EA:BB:34:61:96:92:B8:B9:65:54:FE:09:4D:03:78
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 0198D6607BCDC27257ACE9FC70FA054051A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 0528
Signing time: Sat 23 Aug 2025 10:01:43 +0000
Manifest this update: Sat 23 Aug 2025 10:01:43 +0000
Manifest next update: Sun 24 Aug 2025 10:01:43 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: FweucgwL4Z5cINBZmUVyOacGYeniemgrIJ4x21cjvB0=)
2: GwUYPxJQaw648raZgaiMud0BTgo.roa (hash: LGJZt6ikz8yBfuTCs6jZTUAALLEYDfmbRQi7+ExvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7b:cd:c2:72:57:ac:e9:fc:70:fa:05:40:51:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Aug 23 10:01:43 2025 GMT
Not After : Aug 24 10:01:43 2025 GMT
Subject: CN=0db4a93967eabb34619692b8b96554fe094d0378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:3c:fb:92:1c:4c:3c:b8:d6:bd:13:20:27:
8d:4a:30:8d:4e:3a:d2:53:92:63:f4:b6:a2:5c:95:
3e:55:8d:f9:ba:78:ea:3f:7e:c4:d7:25:c4:a9:7e:
9b:e1:72:33:aa:da:24:83:7b:13:a0:cb:60:84:f4:
50:9f:0b:74:b4:bb:e4:a4:68:71:7c:9f:d3:90:37:
18:df:fc:83:e4:25:a5:c4:44:3b:b3:70:07:07:b9:
4f:f3:58:1a:df:28:33:96:80:53:95:7a:50:ee:bb:
ab:cd:79:eb:e8:71:bf:c2:97:f1:72:07:c0:e8:20:
f2:5e:f5:fa:c7:7f:87:c6:1b:07:fb:a0:81:3b:37:
c6:fe:66:03:b9:2a:4c:11:a7:57:d0:ee:59:1b:8c:
7f:80:19:cb:2c:ad:81:ed:3a:11:f4:de:43:35:c1:
33:4b:86:e6:06:ba:ce:63:11:80:ad:ab:99:5e:89:
75:1f:bd:23:6d:bb:fd:a7:59:8e:4a:9d:d3:68:5f:
3c:3c:38:94:97:62:a1:d1:41:6a:20:5f:ae:22:19:
cb:73:31:f1:b1:22:31:e6:fd:f3:98:e8:f5:7f:88:
86:2e:3e:63:5f:dd:22:d6:49:69:1d:be:36:97:64:
c2:e3:05:0e:dd:53:66:65:6d:21:7d:de:04:10:aa:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:A9:39:67:EA:BB:34:61:96:92:B8:B9:65:54:FE:09:4D:03:78
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bf:42:66:05:74:9a:b2:a4:43:4c:7f:47:00:b9:e3:fd:cd:
a9:18:78:ea:93:08:33:11:a5:04:13:5c:b3:fb:5b:23:fd:56:
2d:51:ee:f2:2f:d0:df:b9:24:2f:8b:fc:d6:a7:95:87:32:19:
f4:6c:50:b1:2f:ed:f1:2e:c6:80:85:b1:3e:38:74:0b:13:3f:
21:6a:0d:07:14:67:12:98:52:d9:23:21:24:0d:9c:14:92:6f:
91:d6:82:a6:eb:e9:32:3e:ad:4a:6e:65:d0:fd:2b:a1:77:b1:
21:2f:eb:3d:1b:87:53:36:4a:82:20:ac:58:e2:e6:7f:75:e3:
32:f2:03:7f:65:d9:35:d8:d1:7f:a1:50:a9:e6:38:d8:ad:6b:
bf:41:54:2a:6c:c2:0f:bf:98:9b:05:5d:57:97:3b:6d:cb:96:
fb:53:ba:13:4a:58:bd:1b:9c:53:9e:85:c4:99:72:95:2c:b1:
24:b7:d8:2b:2a:d6:17:3a:75:f5:02:3b:2a:8e:2c:cd:01:70:
76:5e:e4:51:5f:13:65:ae:6f:f4:62:55:93:11:3d:45:05:bd:
14:f3:a4:cd:d7:88:74:d8:cf:52:e1:7e:13:7b:7b:6b:16:8b:
57:da:4e:04:10:92:d4:b3:90:62:44:1b:10:80:06:da:d3:f7:
78:14:28:8f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjWYHvNwnJXrOn8cPoFQFGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjhkYTYwODEzN2Y4NGU0NTQ1MzIwYjRhM2JiMDQ5NjFk
MmIxMmIwHhcNMjUwODIzMTAwMTQzWhcNMjUwODI0MTAwMTQzWjAzMTEwLwYDVQQD
EygwZGI0YTkzOTY3ZWFiYjM0NjE5NjkyYjhiOTY1NTRmZTA5NGQwMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEk8+5IcTDy41r0TICeNSjCNTjrS
U5Jj9LaiXJU+VY35unjqP37E1yXEqX6b4XIzqtokg3sToMtghPRQnwt0tLvkpGhx
fJ/TkDcY3/yD5CWlxEQ7s3AHB7lP81ga3ygzloBTlXpQ7rurzXnr6HG/wpfxcgfA
6CDyXvX6x3+HxhsH+6CBOzfG/mYDuSpMEadX0O5ZG4x/gBnLLK2B7ToR9N5DNcEz
S4bmBrrOYxGArauZXol1H70jbbv9p1mOSp3TaF88PDiUl2Kh0UFqIF+uIhnLczHx
sSIx5v3zmOj1f4iGLj5jX90i1klpHb42l2TC4wUO3VNmZW0hfd4EEKoNmQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA20qTln6rs0YZaSuLllVP4JTQN4MB8GA1UdIwQY
MBaAFPi42mCBN/hORUUyC0o7sElh0rErMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MamFZSUUzLUU1RlJUSUxTanV3U1dIU3NTcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvODA1NTMzLWRiYzUtNDJjMC1iYzc4
LTU3NWIwMzM0NGNiMS8xLzEtTGphWUlFMy1FNUZSVElMU2p1d1NXSFNzU3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzgwNTUzMy1kYmM1LTQyYzAtYmM3OC01NzViMDMzNDRj
YjEvMS8xLUxqYVlJRTMtRTVGUlRJTFNqdXdTV0hTc1NzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqr9C
ZgV0mrKkQ0x/RwC54/3NqRh46pMIMxGlBBNcs/tbI/1WLVHu8i/Q37kkL4v81qeV
hzIZ9GxQsS/t8S7GgIWxPjh0CxM/IWoNBxRnEphS2SMhJA2cFJJvkdaCpuvpMj6t
Sm5l0P0roXexIS/rPRuHUzZKgiCsWOLmf3XjMvIDf2XZNdjRf6FQqeY42K1rv0FU
KmzCD7+YmwVdV5c7bcuW+1O6E0pYvRucU56FxJlylSyxJLfYKyrWFzp19QI7Ko4s
zQFwdl7kUV8TZa5v9GJVkxE9RQW9FPOkzdeIdNjPUuF+E3t7axaLV9pOBBCS1LOQ
YkQbEIAG2tP3eBQojw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:24 2025 by rpki-client