Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier: sBwmxHWt8MtwyR1D2Vv3oVEB0cLldozoPAamKjAv8jw=
Subject key identifier: D1:FB:D1:05:DF:51:87:A8:3F:1B:50:32:8F:E3:C1:88:E6:B2:E8:B8
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial: 0198D4E02CC8F2CD13273E374008C341DD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number: 1518
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: 8QyauUXRrv7PSinFFiCPz3XEyRfxEpaOfMivERueBrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2c:c8:f2:cd:13:27:3e:37:40:08:c3:41:dd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=d1fbd105df5187a83f1b50328fe3c188e6b2e8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:3b:ab:83:39:b3:38:d2:2b:47:17:b7:05:
47:14:17:94:9d:17:a1:15:df:21:4d:98:2b:be:69:
b1:66:f7:41:c5:d6:d2:01:96:97:1b:a5:98:48:bf:
b1:e3:b1:ef:4b:d1:0c:56:fc:7d:b9:d4:85:f2:c2:
70:92:93:d1:0c:30:97:d1:5b:e1:cb:ee:97:f0:67:
78:8e:0f:86:0e:eb:3b:ee:71:21:04:09:fc:d2:d2:
af:42:24:c0:0c:d5:9c:8c:13:3e:df:29:2a:7e:db:
1f:4c:a8:a4:77:cc:5d:4c:14:45:cb:09:5b:a2:ac:
a5:bf:12:ea:a4:1e:2b:4a:2b:88:46:0b:67:ea:a5:
22:6d:c3:1d:ef:c7:0f:9f:a4:93:94:78:43:1b:88:
45:13:eb:05:8a:c9:ea:5c:60:14:10:13:ee:32:07:
d8:ae:57:02:36:58:01:06:f1:b0:3d:57:7d:40:ab:
fb:22:12:e9:04:7b:a9:a3:07:70:3b:51:5d:4c:ae:
30:1a:e5:fb:dc:d2:63:42:46:2d:e4:9b:7c:85:63:
c7:2e:a0:10:d0:bb:00:44:2a:de:40:b5:a9:04:84:
70:e5:f0:44:04:88:d8:71:b9:77:2d:23:2b:bc:55:
98:b8:8a:4d:15:bc:7a:97:3c:f9:e7:1f:5b:00:3e:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FB:D1:05:DF:51:87:A8:3F:1B:50:32:8F:E3:C1:88:E6:B2:E8:B8
X509v3 Authority Key Identifier:
keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:96:55:84:23:a1:e9:b4:72:3b:f6:9b:ab:7c:b2:1f:5f:c1:
9b:5e:27:a5:79:22:3b:7e:33:34:86:54:b8:ad:52:86:a5:ac:
71:32:56:69:08:11:14:a5:cb:32:89:76:cc:81:88:14:e8:79:
f4:a6:64:4d:5e:8a:10:27:9f:6f:e7:d9:a6:64:c8:fc:3a:cd:
90:30:5b:44:56:80:c5:69:a7:7f:d7:16:5d:1a:a0:e0:84:9b:
47:19:8e:2e:1d:a1:92:f3:e1:32:91:b1:ff:39:19:fd:6b:27:
6d:3d:53:25:e9:07:f7:28:73:2c:8a:13:ce:3c:62:c8:25:03:
0e:e1:0b:20:b2:90:d5:1e:80:c1:bb:4c:30:f7:dd:26:3d:4f:
25:e9:48:df:f0:4a:56:bd:be:34:00:28:c3:28:67:d4:54:ac:
f9:97:5e:e3:74:b9:42:27:61:1c:fd:b8:ef:4f:5e:2c:2e:5c:
15:6a:66:38:83:27:af:70:5e:ba:ea:01:f7:8b:c5:8d:dd:7c:
1a:cd:f5:d2:5c:54:b4:1c:49:d1:11:af:84:2f:b9:84:6c:3a:
7a:f2:0a:ed:7a:f9:cc:ef:40:87:16:2f:5b:a1:3c:95:f7:08:
29:f2:f7:58:a8:11:9d:20:32:72:f9:32:36:25:20:c3:5c:5f:
3b:8b:f7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4CzI8s0TJz43QAjDQd0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOGNkNWJkYTM0NjEwYWRhZmVkMWZlZDQzYTIyMzQ1ZjA3
NjdlN2YwHhcNMjUwODIzMDMwMTU3WhcNMjUwODI0MDMwMTU3WjAzMTEwLwYDVQQD
EyhkMWZiZDEwNWRmNTE4N2E4M2YxYjUwMzI4ZmUzYzE4OGU2YjJlOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphc7q4M5szjSK0cXtwVHFBeUnReh
Fd8hTZgrvmmxZvdBxdbSAZaXG6WYSL+x47HvS9EMVvx9udSF8sJwkpPRDDCX0Vvh
y+6X8Gd4jg+GDus77nEhBAn80tKvQiTADNWcjBM+3ykqftsfTKikd8xdTBRFywlb
oqylvxLqpB4rSiuIRgtn6qUibcMd78cPn6STlHhDG4hFE+sFisnqXGAUEBPuMgfY
rlcCNlgBBvGwPVd9QKv7IhLpBHupowdwO1FdTK4wGuX73NJjQkYt5Jt8hWPHLqAQ
0LsARCreQLWpBIRw5fBEBIjYcbl3LSMrvFWYuIpNFbx6lzz55x9bAD59OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH70QXfUYeoPxtQMo/jwYjmsui4MB8GA1UdIwQY
MBaAFB+M1b2jRhCtr+0f7UOiI0Xwdn5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80OWM2MzAtODBkOC00OTU1LWJhNmUt
ZWU2ZGJmYTk4ZDJlLzEvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80OWM2MzAtODBkOC00OTU1LWJhNmUtZWU2ZGJmYTk4ZDJl
LzEvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJZVhCOh
6bRyO/abq3yyH1/Bm14npXkiO34zNIZUuK1ShqWscTJWaQgRFKXLMol2zIGIFOh5
9KZkTV6KECefb+fZpmTI/DrNkDBbRFaAxWmnf9cWXRqg4ISbRxmOLh2hkvPhMpGx
/zkZ/WsnbT1TJekH9yhzLIoTzjxiyCUDDuELILKQ1R6AwbtMMPfdJj1PJelI3/BK
Vr2+NAAowyhn1FSs+Zde43S5QidhHP24709eLC5cFWpmOIMnr3BeuuoB94vFjd18
Gs310lxUtBxJ0RGvhC+5hGw6evIK7Xr5zO9AhxYvW6E8lfcIKfL3WKgRnSAycvky
NiUgw1xfO4v3AQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:12 2025 by rpki-client