Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: QXOYUijbVe2yJhTiOKryGSOa08Tsi9UuhkSPjJQ+BBs=
Subject key identifier: 47:04:7B:3F:7F:AB:9C:38:4A:59:EF:E5:2F:55:33:23:B1:2C:B7:2F
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 0198D6CCD79708ECA3494D50B8DCF191AE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 1177
Signing time: Sat 23 Aug 2025 12:00:05 +0000
Manifest this update: Sat 23 Aug 2025 12:00:05 +0000
Manifest next update: Sun 24 Aug 2025 12:00:05 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: 59BwJvEuMleI5b8nt1mxiZ5r+5gzijvsjjzi5D1QPho=)
2: hFyZQJl9hpSR8MJm5zkkVJyeSKs.roa (hash: dBm/3kMdhPMhsMOkCigtCWUETZQaJ96SgQ6JbE9wZAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:d7:97:08:ec:a3:49:4d:50:b8:dc:f1:91:ae:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Aug 23 12:00:05 2025 GMT
Not After : Aug 24 12:00:05 2025 GMT
Subject: CN=47047b3f7fab9c384a59efe52f553323b12cb72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:69:71:af:34:d0:eb:20:fa:4b:d0:86:90:
e6:4a:a3:44:c4:ad:1d:65:49:26:59:81:38:b6:1a:
9a:50:b1:fb:f0:bf:8d:50:e2:87:1f:c2:9a:ae:08:
7b:84:8d:27:a5:00:b3:aa:a2:44:72:67:cd:1b:c0:
62:36:ec:6b:fe:b8:ac:99:37:1d:a6:32:ba:cc:8d:
6e:38:95:7c:ac:3c:62:eb:30:52:b6:ed:e1:10:a8:
c7:50:f7:b3:54:9c:fe:62:84:9b:94:5e:65:2a:ea:
7f:6e:79:de:b5:20:cf:1f:d2:1c:e2:3b:72:f5:e3:
2d:35:e0:e0:ad:5e:44:b7:b0:46:c2:fa:31:3d:6b:
5e:e9:ca:a0:53:04:68:64:a4:d5:12:4a:55:17:96:
b1:6f:b7:4d:ab:67:46:ed:c8:4a:bb:39:bb:bb:27:
8f:ce:18:2b:6e:ea:73:c1:7e:13:84:ec:e3:a9:98:
7e:25:73:54:a2:0c:79:22:6d:29:84:10:9b:db:6a:
3d:04:33:8d:8e:86:af:ad:33:5b:15:84:44:22:ec:
bc:44:8c:7e:1b:6d:48:4e:cc:1f:ce:8d:17:66:40:
b4:cb:59:33:6a:af:a4:ec:6c:fd:97:ba:88:50:53:
70:98:37:54:e7:de:8d:58:4c:94:cb:5f:73:47:70:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:7B:3F:7F:AB:9C:38:4A:59:EF:E5:2F:55:33:23:B1:2C:B7:2F
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:da:b4:64:15:55:6b:6d:5e:a3:31:6e:6c:b7:f5:c1:1b:60:
b3:11:04:34:b1:e0:9f:2b:93:d5:05:19:5d:a9:49:73:4f:db:
f6:36:90:c8:26:9b:1f:08:94:12:df:04:e3:84:4b:55:50:fe:
77:0c:94:74:99:14:20:58:f4:c9:4b:89:17:59:41:13:47:d3:
10:cd:99:46:fe:3f:f2:ec:4b:00:49:33:cc:a8:52:2a:11:90:
93:b0:3d:a1:17:ca:a3:57:99:81:ce:cb:06:7f:65:b9:74:82:
94:15:0f:66:37:f6:21:ca:6f:45:ad:bc:03:6e:2c:e9:0f:1b:
be:c5:b4:85:c3:3f:91:c5:a2:80:1f:8f:b9:91:03:f2:f4:d5:
2d:ca:cd:b5:b9:e3:e7:07:3d:99:85:14:ec:f5:22:fe:bd:ae:
03:6b:a7:fd:2e:fc:03:f3:f0:90:d1:ce:22:ea:92:0c:2f:8f:
5b:70:57:a6:16:70:b4:87:d7:5e:79:4c:76:73:49:bb:66:1f:
f8:ba:61:9b:e0:e5:91:89:b3:71:f7:84:72:f0:b4:8f:13:ca:
9a:e8:3c:95:41:3b:77:ef:c9:3a:32:55:42:76:77:8c:63:5f:
3e:c7:51:b9:80:6b:05:d4:bd:75:5f:9b:17:f6:a1:d9:70:79:
77:e8:4f:1d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjWzNeXCOyjSU1QuNzxka41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Y2FhNzk3YjkwMGZjMzU1ZmMyNDEyNDY3NzUxZWViMmMx
YzY0YmUwHhcNMjUwODIzMTIwMDA1WhcNMjUwODI0MTIwMDA1WjAzMTEwLwYDVQQD
Eyg0NzA0N2IzZjdmYWI5YzM4NGE1OWVmZTUyZjU1MzMyM2IxMmNiNzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1ppca800Osg+kvQhpDmSqNExK0d
ZUkmWYE4thqaULH78L+NUOKHH8Kargh7hI0npQCzqqJEcmfNG8BiNuxr/rismTcd
pjK6zI1uOJV8rDxi6zBStu3hEKjHUPezVJz+YoSblF5lKup/bnnetSDPH9Ic4jty
9eMtNeDgrV5Et7BGwvoxPWte6cqgUwRoZKTVEkpVF5axb7dNq2dG7chKuzm7uyeP
zhgrbupzwX4ThOzjqZh+JXNUogx5Im0phBCb22o9BDONjoavrTNbFYREIuy8RIx+
G21ITswfzo0XZkC0y1kzaq+k7Gz9l7qIUFNwmDdU596NWEyUy19zR3CJgwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEcEez9/q5w4Slnv5S9VMyOxLLcvMB8GA1UdIwQY
MBaAFPjKp5e5APw1X8JBJGd1HussHGS+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NcW5sN2tBX0RWZndrRWtaM1VlNnl3Y1pMNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMWI1NWNmLWJlOTQtNDlhZC05ZWI4
LTlkYjNkNDRjNmQyZi8xLzEtTXFubDdrQV9EVmZ3a0VrWjNVZTZ5d2NaTDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ3LzFiNTVjZi1iZTk0LTQ5YWQtOWViOC05ZGIzZDQ0YzZk
MmYvMS8xLU1xbmw3a0FfRFZmd2tFa1ozVWU2eXdjWkw0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNq0
ZBVVa21eozFubLf1wRtgsxEENLHgnyuT1QUZXalJc0/b9jaQyCabHwiUEt8E44RL
VVD+dwyUdJkUIFj0yUuJF1lBE0fTEM2ZRv4/8uxLAEkzzKhSKhGQk7A9oRfKo1eZ
gc7LBn9luXSClBUPZjf2IcpvRa28A24s6Q8bvsW0hcM/kcWigB+PuZED8vTVLcrN
tbnj5wc9mYUU7PUi/r2uA2un/S78A/PwkNHOIuqSDC+PW3BXphZwtIfXXnlMdnNJ
u2Yf+Lphm+DlkYmzcfeEcvC0jxPKmug8lUE7d+/JOjJVQnZ3jGNfPsdRuYBrBdS9
dV+bF/ah2XB5d+hPHQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:26 2025 by rpki-client