Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: oPnvzbct15WMIlMp57+hfAg7dvI/ytoneF6Vh48CUtY=
Subject key identifier: 86:62:3D:E0:D6:0B:9E:76:C2:20:C8:A9:37:B6:9E:4D:73:D7:86:A3
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 0197B70F1546F83C04DD8871B20032B7D815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 10E2
Signing time: Sat 28 Jun 2025 15:01:48 +0000
Manifest this update: Sat 28 Jun 2025 15:01:48 +0000
Manifest next update: Sun 29 Jun 2025 15:01:48 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: l6s6zqTAzAylrACC8IkQFnJysrZ3SkMZA9ZAVm07Siw=)
2: hFyZQJl9hpSR8MJm5zkkVJyeSKs.roa (hash: dBm/3kMdhPMhsMOkCigtCWUETZQaJ96SgQ6JbE9wZAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:15:46:f8:3c:04:dd:88:71:b2:00:32:b7:d8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Jun 28 15:01:48 2025 GMT
Not After : Jun 29 15:01:48 2025 GMT
Subject: CN=86623de0d60b9e76c220c8a937b69e4d73d786a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:1e:a4:bd:fe:07:c6:95:42:89:e2:e9:88:
a2:fd:a4:86:9f:b7:6e:50:8e:5b:1a:97:18:80:b4:
6d:39:44:31:c1:d6:f5:df:28:2b:aa:74:02:60:1c:
24:74:07:26:e2:4b:7e:1d:80:d6:ec:a2:bc:4d:1c:
65:e1:35:67:47:f9:95:80:28:d5:b5:b9:e2:e5:bc:
7d:b7:15:94:6b:03:cf:b1:3e:40:02:5c:33:3f:bb:
74:d6:26:73:ec:64:a0:bb:54:87:2c:4c:f2:a8:5d:
9e:c7:c8:02:92:63:c0:e5:38:ce:3e:f0:75:1c:1a:
dc:b8:a2:55:2d:70:c2:5c:ab:28:da:1f:40:5e:e3:
59:e6:8a:fb:8f:6c:6e:c3:bc:7c:9e:12:e1:a3:40:
26:df:74:66:2d:8d:51:9f:e5:80:48:af:ba:4e:2b:
cd:fd:77:e7:ea:b0:b4:6e:c6:0b:6a:1e:ff:d3:68:
4e:35:08:d0:a0:47:48:aa:f0:36:42:b6:fb:97:0e:
04:3e:46:37:8b:30:ab:1f:88:da:6f:cd:90:05:7a:
a5:3c:4b:3e:f5:29:be:df:92:ac:ac:cb:4f:c1:19:
de:79:99:2f:11:d5:45:d2:67:4a:d0:7d:04:1a:b2:
82:a5:7b:cd:f6:9c:3c:cb:01:a3:07:36:72:0f:e1:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:62:3D:E0:D6:0B:9E:76:C2:20:C8:A9:37:B6:9E:4D:73:D7:86:A3
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4c:76:35:46:33:1c:3a:39:5d:b0:8d:a9:18:52:d3:26:62:
8b:2b:70:f7:a4:34:7f:f9:67:cb:86:7d:f9:dc:9e:5f:5e:b7:
84:93:e0:38:f4:5a:65:0d:c8:16:f3:4a:cb:ff:57:93:f4:8f:
ab:ab:71:81:49:db:1f:94:b6:e7:33:80:3a:50:7b:03:ed:6c:
7c:70:9a:0f:4f:51:42:6a:78:71:73:c2:4a:0c:21:01:da:7a:
30:35:90:69:e2:17:96:b7:46:57:34:dd:02:ac:49:36:94:18:
94:8e:d7:e0:47:a5:e1:b3:03:98:78:12:db:d1:96:c6:9c:11:
80:1b:33:b0:96:8e:d1:b6:25:d7:a8:ad:36:f7:74:11:1d:0c:
24:6a:db:c5:65:44:f0:db:6d:c1:52:28:94:48:b5:08:63:fc:
52:18:0a:b7:f7:d4:4d:3a:56:a6:ce:0b:db:39:e4:23:f1:a8:
8d:82:48:da:2c:76:4c:55:b2:50:66:b0:1d:db:c9:bf:96:66:
55:62:44:91:db:e5:51:21:44:ed:8d:44:19:7e:61:e8:56:33:
a4:55:be:bd:22:3e:b5:3e:70:79:86:61:86:a5:63:b9:f9:a8:
23:a4:96:ed:fd:7b:81:ab:05:a5:a8:34:ef:ba:02:ff:e1:02:
c2:1e:ca:4a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe3DxVG+DwE3YhxsgAyt9gVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Y2FhNzk3YjkwMGZjMzU1ZmMyNDEyNDY3NzUxZWViMmMx
YzY0YmUwHhcNMjUwNjI4MTUwMTQ4WhcNMjUwNjI5MTUwMTQ4WjAzMTEwLwYDVQQD
Eyg4NjYyM2RlMGQ2MGI5ZTc2YzIyMGM4YTkzN2I2OWU0ZDczZDc4NmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrQepL3+B8aVQoni6Yii/aSGn7du
UI5bGpcYgLRtOUQxwdb13ygrqnQCYBwkdAcm4kt+HYDW7KK8TRxl4TVnR/mVgCjV
tbni5bx9txWUawPPsT5AAlwzP7t01iZz7GSgu1SHLEzyqF2ex8gCkmPA5TjOPvB1
HBrcuKJVLXDCXKso2h9AXuNZ5or7j2xuw7x8nhLho0Am33RmLY1Rn+WASK+6TivN
/Xfn6rC0bsYLah7/02hONQjQoEdIqvA2Qrb7lw4EPkY3izCrH4jab82QBXqlPEs+
9Sm+35KsrMtPwRneeZkvEdVF0mdK0H0EGrKCpXvN9pw8ywGjBzZyD+FlaQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIZiPeDWC552wiDIqTe2nk1z14ajMB8GA1UdIwQY
MBaAFPjKp5e5APw1X8JBJGd1HussHGS+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NcW5sN2tBX0RWZndrRWtaM1VlNnl3Y1pMNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMWI1NWNmLWJlOTQtNDlhZC05ZWI4
LTlkYjNkNDRjNmQyZi8xLzEtTXFubDdrQV9EVmZ3a0VrWjNVZTZ5d2NaTDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ3LzFiNTVjZi1iZTk0LTQ5YWQtOWViOC05ZGIzZDQ0YzZk
MmYvMS8xLU1xbmw3a0FfRFZmd2tFa1ozVWU2eXdjWkw0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUx2
NUYzHDo5XbCNqRhS0yZiiytw96Q0f/lny4Z9+dyeX163hJPgOPRaZQ3IFvNKy/9X
k/SPq6txgUnbH5S25zOAOlB7A+1sfHCaD09RQmp4cXPCSgwhAdp6MDWQaeIXlrdG
VzTdAqxJNpQYlI7X4Eel4bMDmHgS29GWxpwRgBszsJaO0bYl16itNvd0ER0MJGrb
xWVE8NttwVIolEi1CGP8UhgKt/fUTTpWps4L2znkI/GojYJI2ix2TFWyUGawHdvJ
v5ZmVWJEkdvlUSFE7Y1EGX5h6FYzpFW+vSI+tT5weYZhhqVjufmoI6SW7f17gasF
pag077oC/+ECwh7KSg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:06 2025 by rpki-client