Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: Oo/gG6NbN5pyPzWRY4yl9SVhDe851o8RsMeuwy2qook=
Subject key identifier: A1:FD:FB:76:0D:B8:FB:5B:54:A3:51:07:6D:07:CB:3E:88:E3:52:57
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 0198D5BBFF66FDA250108B9D6F1826874BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 0589
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: +qNp+M6rf3x5ajWblwSynZo5w+LM3sHMIbrSI4iIz/M=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ff:66:fd:a2:50:10:8b:9d:6f:18:26:87:4b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=a1fdfb760db8fb5b54a351076d07cb3e88e35257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:76:19:f4:3c:7f:3d:28:2f:d5:59:28:a2:
01:0c:1c:cd:af:55:f2:bd:d9:d7:44:a6:22:d3:6c:
2b:6f:1d:29:78:1d:37:f5:96:79:0c:64:49:79:dc:
4b:8c:73:f8:63:48:74:28:13:ed:f3:35:5e:e3:d0:
03:7d:a1:8e:db:a7:37:26:06:60:21:d0:b6:3a:b9:
b0:0f:68:14:14:da:ce:31:ce:4d:74:01:8b:07:b4:
20:12:5f:cd:14:bf:9e:c3:7f:56:54:0e:70:6d:c2:
df:e9:71:fb:2c:0d:fc:ec:01:23:df:20:d5:aa:1e:
70:4b:13:77:6e:4f:60:45:10:13:99:64:9c:86:e5:
7a:bc:12:a7:bb:ba:6f:30:17:d1:a3:4a:61:4b:b8:
cc:d0:d1:d3:e3:ca:48:6c:2f:a1:b4:41:7d:40:0e:
d2:96:20:cf:d5:83:63:aa:94:d3:5e:7b:a5:a0:8e:
2b:b4:f6:aa:2e:82:15:ad:7b:fd:9c:51:3d:68:58:
14:fd:8d:d9:b5:52:11:af:c6:66:62:f6:c0:c6:65:
4e:a4:bf:79:4b:b3:58:b9:46:98:dc:22:1f:b5:7c:
13:09:dc:e8:4c:6f:bb:91:54:05:99:a1:e2:ca:4f:
f1:11:51:3c:6d:79:c5:34:b6:ef:5f:2b:51:52:ae:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FD:FB:76:0D:B8:FB:5B:54:A3:51:07:6D:07:CB:3E:88:E3:52:57
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:71:f7:d8:fb:f5:10:56:5b:83:fc:25:1e:47:39:09:fb:a4:
96:ed:75:9a:cc:6c:4b:2b:db:f3:d7:31:8f:d7:3b:d0:8c:01:
42:d5:9d:09:e0:80:a7:38:52:be:40:ae:88:db:1d:cf:21:eb:
4e:4c:60:61:86:a8:3d:e1:2f:3f:f0:0f:d1:9f:75:dc:06:b4:
c7:82:0c:58:45:53:fd:9e:d5:72:bc:1b:bb:3f:21:65:5b:e6:
2c:46:83:02:dc:b8:dc:ae:6e:49:5f:13:9e:3a:68:02:af:94:
03:5b:d4:b6:8f:3d:2b:f3:69:36:96:f2:8b:10:e7:25:55:44:
fc:61:4d:9d:24:4c:83:99:5b:5b:e7:13:a6:0c:aa:ac:89:f3:
d7:2e:c3:c7:88:e6:ba:45:5f:5b:3f:40:cc:f9:8f:6a:5c:0b:
27:51:63:fa:ee:d4:67:53:5a:39:5f:94:51:95:ec:ea:0a:27:
17:e6:81:07:42:2d:4f:da:fa:32:d0:d1:f3:44:69:41:9e:c7:
7d:22:f0:ab:1f:18:a5:98:27:05:e4:be:3d:d9:67:fa:62:7b:
1e:b1:57:62:54:70:dc:b1:eb:6e:e8:82:8d:ee:85:cf:29:a7:
f4:23:fd:54:32:6a:7c:62:b5:bc:c5:16:de:12:eb:ef:3c:91:
79:75:63:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/9m/aJQEIudbxgmh0u5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzI2OWY5ZTkzYjBmYjhiYzRiMWM5NDdhYmM1YjIxZjIx
ZjIzMDUwHhcNMjUwODIzMDcwMjA0WhcNMjUwODI0MDcwMjA0WjAzMTEwLwYDVQQD
EyhhMWZkZmI3NjBkYjhmYjViNTRhMzUxMDc2ZDA3Y2IzZTg4ZTM1MjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy692GfQ8fz0oL9VZKKIBDBzNr1Xy
vdnXRKYi02wrbx0peB039ZZ5DGRJedxLjHP4Y0h0KBPt8zVe49ADfaGO26c3JgZg
IdC2OrmwD2gUFNrOMc5NdAGLB7QgEl/NFL+ew39WVA5wbcLf6XH7LA387AEj3yDV
qh5wSxN3bk9gRRATmWSchuV6vBKnu7pvMBfRo0phS7jM0NHT48pIbC+htEF9QA7S
liDP1YNjqpTTXnuloI4rtPaqLoIVrXv9nFE9aFgU/Y3ZtVIRr8ZmYvbAxmVOpL95
S7NYuUaY3CIftXwTCdzoTG+7kVQFmaHiyk/xEVE8bXnFNLbvXytRUq7D2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKH9+3YNuPtbVKNRB20Hyz6I41JXMB8GA1UdIwQY
MBaAFNbCafnpOw+4vEsclHq8WyHyHyMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEt
Yjc5Y2ZjMjRkM2I3LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEtYjc5Y2ZjMjRkM2I3
LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHH32Pv1
EFZbg/wlHkc5Cfuklu11msxsSyvb89cxj9c70IwBQtWdCeCApzhSvkCuiNsdzyHr
TkxgYYaoPeEvP/AP0Z913Aa0x4IMWEVT/Z7Vcrwbuz8hZVvmLEaDAty43K5uSV8T
njpoAq+UA1vUto89K/NpNpbyixDnJVVE/GFNnSRMg5lbW+cTpgyqrInz1y7Dx4jm
ukVfWz9AzPmPalwLJ1Fj+u7UZ1NaOV+UUZXs6gonF+aBB0ItT9r6MtDR80RpQZ7H
fSLwqx8YpZgnBeS+Pdln+mJ7HrFXYlRw3LHrbuiCje6Fzymn9CP9VDJqfGK1vMUW
3hLr7zyReXVjvw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:29 2025 by rpki-client