Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
File: IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json)
Hash identifier: C+5jy97PizBDMvidR41lRctw4DWKnNJzzKSbwqdqP60=
Subject key identifier: 1D:C8:FA:9C:72:46:6F:DC:58:19:77:58:1F:C0:54:7A:98:F6:EE:48
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 0198D54E31513E312533579F264594D63EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
Manifest number: 1523
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: 6MoDovb85gsc33BqCCkbPNQWP1U.roa (hash: 1RImcsgD4pBgfw1iXWIukE1oXT/AN/WjUPCnMVqomR8=)
2: A3E0-Bx-SkOraAi3ILNLwbtK2q8.roa (hash: oflLVWiMQR/h5//frwNh8Zh/ixGNkdyJmqiH96c6izM=)
3: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: kHUI7xUSemRt0nhSmjecUYoLs+ZjiWrnswZQWlJvJ90=)
4: ZtZZEAiMokBjnJ6RL0fW_WRtUvg.roa (hash: HYmFAXxKVnFTMBP2WvTIUya5uxGXpwouKqV1Y54fjKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:31:51:3e:31:25:33:57:9f:26:45:94:d6:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=1dc8fa9c72466fdc581977581fc0547a98f6ee48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:f4:22:02:50:2e:b7:af:68:7c:3e:ca:fa:
10:b8:e6:7b:57:5f:27:91:15:7b:9f:15:53:52:62:
6f:a8:c6:fa:ee:0c:a7:27:d1:b8:25:cf:25:06:59:
f8:0d:b8:b1:81:dd:57:27:b1:41:75:25:f7:f3:0b:
f2:ed:3d:3d:50:e7:d6:5d:fd:3b:d2:08:87:ed:1d:
5c:29:2e:da:b4:31:69:9a:78:7b:77:35:5e:62:6c:
6e:58:bc:ff:b8:a3:77:c6:d9:7b:f8:18:5b:bc:42:
bc:ed:61:3e:8e:9c:4e:74:d1:e2:ba:40:42:cb:b6:
c4:d3:df:25:11:92:bb:a4:e0:29:1f:af:e9:82:a8:
2a:f5:60:f1:9d:41:c8:95:07:a0:fa:bb:61:34:ae:
04:9c:0d:0e:43:b0:6d:be:be:cb:1b:d5:6c:f6:95:
95:1e:62:83:02:dd:e4:7e:71:9f:59:96:f7:88:be:
e2:20:b9:8c:c9:13:1f:52:47:e6:e8:f4:58:d7:5e:
02:c7:df:78:a7:9b:f7:9b:6e:17:31:51:95:3e:8e:
06:cb:b1:72:29:a8:80:0e:65:d1:aa:40:af:d6:a8:
c0:a4:97:fc:da:3b:cd:e9:10:49:55:a2:b2:e4:5a:
48:25:4d:3f:d0:ff:08:32:0f:c9:23:d2:2b:7a:b5:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C8:FA:9C:72:46:6F:DC:58:19:77:58:1F:C0:54:7A:98:F6:EE:48
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:95:d6:32:f7:d0:2e:20:0f:c4:af:ad:f2:71:51:3b:c6:87:
78:24:f7:78:1c:2b:97:cd:39:57:a1:5d:5d:49:99:4d:76:59:
b6:8e:31:cb:20:31:fb:75:ed:da:23:16:06:1e:2d:69:5c:eb:
08:2c:c7:dd:be:c6:c0:a0:3f:b6:a5:4e:6a:b8:8d:c5:e6:b6:
da:29:d8:4b:55:1b:d3:4e:15:98:d2:51:69:fb:05:67:3b:4e:
fe:bd:34:42:94:2f:28:80:36:e5:b9:1c:80:f2:85:ab:98:6b:
43:91:91:8c:66:13:2a:f1:88:28:ff:4b:07:85:34:23:f5:f4:
4e:02:01:d6:23:b0:61:28:8a:f1:8a:59:aa:66:f6:4b:9c:23:
32:e3:a3:f1:49:0e:0c:79:26:88:b3:55:c1:bc:87:a5:fc:ef:
2c:25:b0:3a:aa:ba:f1:92:87:47:ad:0d:5c:dd:3a:f4:8e:d5:
8f:54:33:c8:69:37:fc:eb:de:74:d1:0c:1e:a2:66:32:c6:c5:
cc:e0:7e:d2:a2:21:74:17:48:fb:60:30:7f:86:27:1c:2a:50:
23:01:f4:4f:38:dc:4f:53:1c:0b:85:83:e8:57:2d:27:a5:d2:
e7:f3:a7:cf:f2:09:3d:7a:95:e8:e3:6d:c8:4e:2a:1d:41:a2:
0e:c4:14:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjFRPjElM1efJkWU1j66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzc1MTJlNTM1NWU4MTVhY2YwNjQ2MDNmOGFlM2Y1NTI4
YTVlM2IwHhcNMjUwODIzMDUwMjA4WhcNMjUwODI0MDUwMjA4WjAzMTEwLwYDVQQD
EygxZGM4ZmE5YzcyNDY2ZmRjNTgxOTc3NTgxZmMwNTQ3YTk4ZjZlZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nr0IgJQLrevaHw+yvoQuOZ7V18n
kRV7nxVTUmJvqMb67gynJ9G4Jc8lBln4Dbixgd1XJ7FBdSX38wvy7T09UOfWXf07
0giH7R1cKS7atDFpmnh7dzVeYmxuWLz/uKN3xtl7+BhbvEK87WE+jpxOdNHiukBC
y7bE098lEZK7pOApH6/pgqgq9WDxnUHIlQeg+rthNK4EnA0OQ7Btvr7LG9Vs9pWV
HmKDAt3kfnGfWZb3iL7iILmMyRMfUkfm6PRY114Cx994p5v3m24XMVGVPo4Gy7Fy
KaiADmXRqkCv1qjApJf82jvN6RBJVaKy5FpIJU0/0P8IMg/JI9IrerWuVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3I+pxyRm/cWBl3WB/AVHqY9u5IMB8GA1UdIwQY
MBaAFCA3US5TVegVrPBkYD+K4/VSil47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEt
YzJiYTI0NjUzZjdiLzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEtYzJiYTI0NjUzZjdi
LzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZXWMvfQ
LiAPxK+t8nFRO8aHeCT3eBwrl805V6FdXUmZTXZZto4xyyAx+3Xt2iMWBh4taVzr
CCzH3b7GwKA/tqVOariNxea22inYS1Ub004VmNJRafsFZztO/r00QpQvKIA25bkc
gPKFq5hrQ5GRjGYTKvGIKP9LB4U0I/X0TgIB1iOwYSiK8YpZqmb2S5wjMuOj8UkO
DHkmiLNVwbyHpfzvLCWwOqq68ZKHR60NXN069I7Vj1QzyGk3/OvedNEMHqJmMsbF
zOB+0qIhdBdI+2Awf4YnHCpQIwH0TzjcT1McC4WD6FctJ6XS5/Onz/IJPXqV6ONt
yE4qHUGiDsQU3w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:59 2025 by rpki-client