Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: 5JCKOkJf6Kip5CJIR9rUYsB359eEzKaHHw7PEISe+WM=
Subject key identifier: 96:44:9C:6A:13:C3:F2:9C:AC:16:7D:07:E5:7F:B9:CC:75:01:30:46
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 0198D65EF602B384160F5A4E52011FF8336C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 1473
Signing time: Sat 23 Aug 2025 10:00:04 +0000
Manifest this update: Sat 23 Aug 2025 10:00:04 +0000
Manifest next update: Sun 24 Aug 2025 10:00:04 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: rCGutqcYXSkisj7vhS+8tZsdkBU+/PrD2eyszJC9yRo=)
2: LlAa--5nsX3tUHGAFZ_HSMFrn7I.roa (hash: 3b1C9Ph3SGavY+PSGpBTlLw28V2WqXhlaeYP73oghL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:f6:02:b3:84:16:0f:5a:4e:52:01:1f:f8:33:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Aug 23 10:00:04 2025 GMT
Not After : Aug 24 10:00:04 2025 GMT
Subject: CN=96449c6a13c3f29cac167d07e57fb9cc75013046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:86:47:66:39:8c:57:b8:00:a6:37:c5:79:
bd:0e:20:56:36:7f:29:12:c9:69:45:b0:97:90:fb:
40:60:20:44:0c:a6:21:d7:1b:be:13:bd:4d:da:44:
6c:1b:f5:90:6d:f0:29:78:d3:51:4f:c2:b5:af:75:
4b:ef:58:ed:63:4c:7e:34:fb:df:07:7c:92:ce:da:
24:f5:8f:da:b3:66:f0:69:fa:7d:0f:4f:80:57:5f:
5e:c4:1b:8f:37:a2:8b:9a:f6:52:cc:dd:f3:ca:00:
e4:00:6c:77:c9:d1:f0:e6:b6:bd:f0:62:64:0b:2b:
f4:db:79:bb:0a:0c:cd:0a:fd:5b:a5:c4:c7:c1:d9:
4d:df:dc:b2:66:d5:21:99:e9:3c:41:db:96:1a:15:
84:08:68:e4:a9:72:08:89:7c:64:d2:cc:97:bb:af:
50:f5:03:8d:57:a8:81:24:d4:70:1d:97:13:60:ca:
54:14:58:15:06:77:05:35:df:67:f3:90:34:fa:8a:
25:84:b5:8d:a7:b4:e8:2a:50:4f:2f:2f:33:2d:98:
71:a5:ea:a5:c6:ec:24:55:80:68:d5:23:42:c9:60:
12:7b:1e:64:f2:8f:05:30:0e:81:9d:5b:07:46:35:
96:f7:3a:e8:67:e7:5e:60:a9:86:70:5f:71:6c:04:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:44:9C:6A:13:C3:F2:9C:AC:16:7D:07:E5:7F:B9:CC:75:01:30:46
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6f:67:72:27:a6:bb:4a:a8:6b:3c:97:74:de:b2:93:d9:bf:
e5:40:dd:45:ba:d8:f7:0f:58:bf:50:25:e1:db:95:c5:1a:ba:
20:20:c5:bd:02:13:fb:3f:32:b3:a1:8f:49:d5:92:a7:44:e3:
12:e2:00:fd:ab:29:c2:34:90:73:64:77:95:cf:2e:6f:66:3e:
d2:e0:ec:f4:d8:74:e7:ce:6b:63:1e:64:45:6b:f8:2f:74:3a:
46:24:fa:26:ea:3b:59:3f:e1:3a:ed:e7:53:15:84:97:fa:62:
ab:58:21:98:8f:99:58:1f:62:08:7d:46:94:57:cc:f9:bf:f2:
4b:06:15:31:fc:04:81:50:fd:ef:2d:65:8d:8d:6a:e3:b4:42:
b3:3f:e2:60:23:8f:c7:85:3a:ef:2c:77:0a:e7:e2:2b:03:75:
e6:53:87:e2:45:60:22:80:b9:de:0b:db:e9:a0:ba:b8:b7:df:
9a:f4:ca:9f:18:03:4b:6d:d5:65:45:46:60:67:f2:ae:31:2b:
74:37:eb:26:17:fa:d6:c3:c9:94:b4:26:b1:79:c2:a3:bb:04:
59:23:4a:35:0a:e3:78:09:5b:85:c9:66:0b:6b:0a:6d:c9:98:
82:e0:fb:3b:84:88:96:03:4d:be:17:4b:26:9a:dd:f0:3c:65:
f7:62:f3:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXvYCs4QWD1pOUgEf+DNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODRlMGNlZTU3NWM2MTkwNTNmOGVlMmIxMDA0Y2M0NDJm
ZDJjZWQwHhcNMjUwODIzMTAwMDA0WhcNMjUwODI0MTAwMDA0WjAzMTEwLwYDVQQD
Eyg5NjQ0OWM2YTEzYzNmMjljYWMxNjdkMDdlNTdmYjljYzc1MDEzMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3uGR2Y5jFe4AKY3xXm9DiBWNn8p
EslpRbCXkPtAYCBEDKYh1xu+E71N2kRsG/WQbfApeNNRT8K1r3VL71jtY0x+NPvf
B3ySztok9Y/as2bwafp9D0+AV19exBuPN6KLmvZSzN3zygDkAGx3ydHw5ra98GJk
Cyv023m7CgzNCv1bpcTHwdlN39yyZtUhmek8QduWGhWECGjkqXIIiXxk0syXu69Q
9QONV6iBJNRwHZcTYMpUFFgVBncFNd9n85A0+oolhLWNp7ToKlBPLy8zLZhxpeql
xuwkVYBo1SNCyWASex5k8o8FMA6BnVsHRjWW9zroZ+deYKmGcF9xbAS4GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZEnGoTw/KcrBZ9B+V/ucx1ATBGMB8GA1UdIwQY
MBaAFNSE4M7ldcYZBT+O4rEATMRC/SztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEt
ZWMwMjYyYWIzM2YxLzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEtZWMwMjYyYWIzM2Yx
LzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ29nciem
u0qoazyXdN6yk9m/5UDdRbrY9w9Yv1Al4duVxRq6ICDFvQIT+z8ys6GPSdWSp0Tj
EuIA/aspwjSQc2R3lc8ub2Y+0uDs9Nh0585rYx5kRWv4L3Q6RiT6Juo7WT/hOu3n
UxWEl/piq1ghmI+ZWB9iCH1GlFfM+b/ySwYVMfwEgVD97y1ljY1q47RCsz/iYCOP
x4U67yx3CufiKwN15lOH4kVgIoC53gvb6aC6uLffmvTKnxgDS23VZUVGYGfyrjEr
dDfrJhf61sPJlLQmsXnCo7sEWSNKNQrjeAlbhclmC2sKbcmYguD7O4SIlgNNvhdL
Jprd8Dxl92Lzqg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:01 2025 by rpki-client