Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: yvsOl0AMPztoucr8mxQbtn8GPxK/DzzfHHc+9b6YACM=
Subject key identifier: 02:25:EF:78:96:59:43:6B:90:76:B6:D1:7F:76:44:4B:25:C2:54:62
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 0198D65FCAD9D15F41FD8FC2CF8A18A016FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 02D5
Signing time: Sat 23 Aug 2025 10:00:58 +0000
Manifest this update: Sat 23 Aug 2025 10:00:58 +0000
Manifest next update: Sun 24 Aug 2025 10:00:58 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: iLG2pG1wR4rhKGtMdlRQtC4SLqZ24W9cbpTNDF+spc4=)
2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ca:d9:d1:5f:41:fd:8f:c2:cf:8a:18:a0:16:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Aug 23 10:00:58 2025 GMT
Not After : Aug 24 10:00:58 2025 GMT
Subject: CN=0225ef789659436b9076b6d17f76444b25c25462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:0e:8c:63:03:0a:b4:f6:be:5b:7e:cf:01:
a0:35:10:94:2d:93:05:42:e5:bd:54:ed:01:4d:19:
4d:76:c9:91:e3:c2:6b:91:79:60:6e:fb:b3:79:7c:
d7:d7:eb:32:29:27:f9:69:2a:b5:46:b6:73:3a:aa:
96:0d:a5:b2:6a:9b:29:4a:43:5e:ba:6b:69:7d:6b:
f2:dd:5f:c1:75:24:26:90:69:5f:b7:f7:e9:3e:10:
68:5e:67:44:b5:1d:e8:d2:47:48:ce:ba:fb:04:8d:
ef:3b:73:b3:55:1e:76:d6:0d:57:f0:7a:27:5e:44:
1c:9c:87:06:41:7d:36:a2:69:bc:6e:71:37:39:c6:
4c:3b:53:b8:0a:7c:9c:53:53:72:c3:66:a9:34:d0:
ea:91:64:73:93:37:0e:2d:89:a0:0b:88:57:b9:2f:
36:66:25:eb:8f:6c:00:1f:6e:4f:7c:f1:70:a1:06:
29:d8:f6:f3:64:82:b5:ec:a2:e9:42:83:a1:7f:40:
bc:91:b7:52:f0:db:19:92:cc:73:fa:f8:28:1d:c5:
3d:bc:4f:2d:5c:19:2d:66:4b:de:1d:5f:8e:1e:40:
3f:02:0b:0a:ce:0b:04:3d:90:c6:a0:b4:f8:fc:58:
b1:4b:6c:6c:ff:2a:af:d8:04:02:c3:d1:03:f8:75:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:25:EF:78:96:59:43:6B:90:76:B6:D1:7F:76:44:4B:25:C2:54:62
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:5b:51:fd:25:77:b1:f9:ff:d0:48:cb:65:d7:fa:7a:47:
f7:40:55:43:fd:46:c2:29:7e:1e:c0:45:73:a7:f6:d8:92:f5:
49:09:4e:09:6f:78:2f:85:ba:9f:e4:5b:47:e6:e0:68:97:9a:
d1:c1:07:47:46:36:7a:a2:d4:d4:f3:f6:0c:e5:e0:a4:1f:9a:
3a:ba:f8:5a:b7:f0:d3:dd:2d:88:b9:ca:00:90:60:6b:9c:a5:
76:c1:13:e4:a3:2c:23:11:ab:75:61:b3:0b:3d:e6:52:3c:14:
e7:29:d0:1f:04:20:1e:76:d5:2a:3c:5e:27:7f:21:6f:c8:be:
15:e6:bd:2a:d7:b3:42:9e:1f:22:69:3f:60:44:e7:43:65:36:
59:e0:3b:86:a6:7f:7f:f4:cf:dd:72:ae:0d:15:cb:9e:8c:8c:
9f:e7:4a:f1:b6:a6:d3:fe:fa:e4:56:6a:7c:17:49:98:42:b3:
d2:22:a9:be:3f:75:a1:44:f2:e0:3c:14:3b:8d:bf:18:6f:d8:
d3:1a:43:d8:85:0b:82:04:10:98:70:a9:6b:6f:2e:5a:40:56:
4a:55:8f:5f:53:94:d3:5f:1d:7a:34:da:ef:24:6a:c6:b7:c8:
90:92:fe:51:86:bc:5a:57:25:17:23:86:14:3d:45:3b:37:b5:
9e:6a:7b:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8rZ0V9B/Y/Cz4oYoBb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4
MzkwOTcwHhcNMjUwODIzMTAwMDU4WhcNMjUwODI0MTAwMDU4WjAzMTEwLwYDVQQD
EygwMjI1ZWY3ODk2NTk0MzZiOTA3NmI2ZDE3Zjc2NDQ0YjI1YzI1NDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfoOjGMDCrT2vlt+zwGgNRCULZMF
QuW9VO0BTRlNdsmR48JrkXlgbvuzeXzX1+syKSf5aSq1RrZzOqqWDaWyapspSkNe
umtpfWvy3V/BdSQmkGlft/fpPhBoXmdEtR3o0kdIzrr7BI3vO3OzVR521g1X8Hon
XkQcnIcGQX02omm8bnE3OcZMO1O4CnycU1Nyw2apNNDqkWRzkzcOLYmgC4hXuS82
ZiXrj2wAH25PfPFwoQYp2PbzZIK17KLpQoOhf0C8kbdS8NsZksxz+vgoHcU9vE8t
XBktZkveHV+OHkA/AgsKzgsEPZDGoLT4/FixS2xs/yqv2AQCw9ED+HVQxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIl73iWWUNrkHa20X92REslwlRiMB8GA1UdIwQY
MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt
Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm
LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiZbUf0l
d7H5/9BIy2XX+npH90BVQ/1Gwil+HsBFc6f22JL1SQlOCW94L4W6n+RbR+bgaJea
0cEHR0Y2eqLU1PP2DOXgpB+aOrr4Wrfw090tiLnKAJBga5yldsET5KMsIxGrdWGz
Cz3mUjwU5ynQHwQgHnbVKjxeJ38hb8i+Fea9KtezQp4fImk/YETnQ2U2WeA7hqZ/
f/TP3XKuDRXLnoyMn+dK8bam0/765FZqfBdJmEKz0iKpvj91oUTy4DwUO42/GG/Y
0xpD2IULggQQmHCpa28uWkBWSlWPX1OU018dejTa7yRqxrfIkJL+UYa8WlclFyOG
FD1FOze1nmp7UA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:50 2025 by rpki-client