Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier: n0BDo+gGxiX5K9ySBrFjXthgN6UT/US3rb8iHYbysZs=
Subject key identifier: B5:33:15:3D:D7:DE:45:60:37:60:FE:3C:2E:80:A5:92:91:76:5D:9C
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial: 0198D4043DAAC70954C73E198228DA010859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number: 0D83
Signing time: Fri 22 Aug 2025 23:01:44 +0000
Manifest this update: Fri 22 Aug 2025 23:01:44 +0000
Manifest next update: Sat 23 Aug 2025 23:01:44 +0000
Files and hashes: 1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: 7+gQZfqKHr556BiGPIQI+YWjAzSI/SVBHdtxD8gZNYg=)
2: 8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa (hash: c2krYBPX6FJP/S5DK6Bqlhz1YaUFixNmTfTx7RgZ1eo=)
3: AKY3-lmq_F-hZTNjYE8VF5Dbfhg.roa (hash: SNTyErzebd/AsxAYfH3hc+mIWE58J4HLCDSVxz7/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:3d:aa:c7:09:54:c7:3e:19:82:28:da:01:08:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Validity
Not Before: Aug 22 23:01:44 2025 GMT
Not After : Aug 23 23:01:44 2025 GMT
Subject: CN=b533153dd7de45603760fe3c2e80a59291765d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:52:f7:e8:49:0b:0f:65:39:92:3e:7a:55:
f0:66:d2:3d:ff:93:75:0a:02:10:c9:0d:af:fa:92:
e6:47:03:fe:6e:83:fa:f2:8f:32:cb:08:c3:ae:c0:
39:5a:23:2f:d9:82:73:13:a5:7b:89:7f:b0:cb:b7:
d6:b1:ce:21:5f:ab:1d:85:34:a8:fc:2f:14:3a:84:
7b:a9:c8:40:84:fa:0c:8e:6b:01:d8:b8:90:f4:5a:
7a:58:88:ae:8e:73:52:2a:a7:da:6a:ae:b5:ae:41:
ad:fe:af:c7:bb:1b:0b:f5:d0:3e:29:82:3e:7b:fe:
da:4a:70:ff:81:e0:a2:62:c0:89:ee:3d:6f:b3:a6:
a2:10:7c:7d:57:d5:d2:a2:33:61:c0:bd:c5:85:5f:
4c:2b:da:b0:bb:d4:0a:04:ed:89:d5:fb:a5:8d:e9:
cc:36:c2:01:83:8e:75:0b:6e:83:4c:37:5c:c1:44:
3b:3a:1f:a5:26:a1:2a:5a:31:eb:da:f7:05:0f:b2:
3f:3f:ff:9e:76:b1:78:49:38:8b:02:2b:cf:20:e5:
5e:32:20:55:37:ad:3c:75:db:ce:40:de:f4:3a:54:
7e:52:b7:5e:e3:3c:76:a7:bb:ee:ad:c9:94:58:45:
dc:2f:49:72:69:1e:d3:06:91:44:9d:c9:f2:44:bf:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:33:15:3D:D7:DE:45:60:37:60:FE:3C:2E:80:A5:92:91:76:5D:9C
X509v3 Authority Key Identifier:
keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:24:b8:0a:f5:f6:bc:c1:9c:9f:a5:8f:1c:d7:09:a3:94:02:
a2:04:db:c7:db:d6:c7:e1:4a:96:21:23:dd:00:b4:ca:ff:48:
e8:01:b6:bd:9e:30:3d:de:ee:3c:03:0a:c5:bf:6d:e5:e2:0c:
ad:af:21:2c:81:04:4d:e7:9f:9c:55:e6:24:fe:a4:21:5b:e6:
17:8d:a6:7e:3b:d2:d6:9b:d9:2a:52:f5:7c:23:34:0e:2c:d6:
ca:c4:f4:ca:87:a7:f9:4f:d3:a9:37:b6:3d:1d:8b:66:6c:32:
df:77:eb:9d:79:23:82:f4:5c:91:15:3b:f0:ed:30:b7:db:43:
a8:89:85:e0:18:12:24:30:f7:f9:c1:e6:d6:d4:9e:ab:e0:64:
b6:37:b9:83:f8:64:26:de:15:1c:c4:f0:b3:d3:ec:11:21:23:
57:36:ff:36:82:aa:41:e6:78:d9:23:6c:81:29:e7:0b:1b:6d:
6c:9e:d1:42:ad:b9:3c:b1:8e:67:e2:05:47:aa:5a:68:9d:81:
6a:f3:70:aa:40:3f:6f:5c:97:47:61:c3:e2:93:28:0b:59:ea:
dc:4d:44:62:b0:81:c5:52:ff:d6:ec:c8:55:5b:e8:9e:ee:03:
f5:24:b0:84:a6:79:19:b2:54:ee:a9:67:ca:9e:25:8d:42:34:
96:b0:de:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBD2qxwlUxz4ZgijaAQhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmI0NTJhMGFlMzNkZmE1MmFhYWFjYmE3OTRkZjFhZjZi
YzQzMzQwHhcNMjUwODIyMjMwMTQ0WhcNMjUwODIzMjMwMTQ0WjAzMTEwLwYDVQQD
EyhiNTMzMTUzZGQ3ZGU0NTYwMzc2MGZlM2MyZTgwYTU5MjkxNzY1ZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+9S9+hJCw9lOZI+elXwZtI9/5N1
CgIQyQ2v+pLmRwP+boP68o8yywjDrsA5WiMv2YJzE6V7iX+wy7fWsc4hX6sdhTSo
/C8UOoR7qchAhPoMjmsB2LiQ9Fp6WIiujnNSKqfaaq61rkGt/q/HuxsL9dA+KYI+
e/7aSnD/geCiYsCJ7j1vs6aiEHx9V9XSojNhwL3FhV9MK9qwu9QKBO2J1fuljenM
NsIBg451C26DTDdcwUQ7Oh+lJqEqWjHr2vcFD7I/P/+edrF4STiLAivPIOVeMiBV
N608ddvOQN70OlR+Urde4zx2p7vurcmUWEXcL0lyaR7TBpFEncnyRL+/fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUzFT3X3kVgN2D+PC6ApZKRdl2cMB8GA1UdIwQY
MBaAFNb7RSoK4z36Uqqqy6eU3xr2vEM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ0RktncmpQZnBTcXFyTHA1VGZHdmE4UXpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYmRkN2UtYTcyOS00OWFkLTg1YWEt
Zjc1OTYyZDMwZTM2LzEvMXZ0RktncmpQZnBTcXFyTHA1VGZHdmE4UXpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zYmRkN2UtYTcyOS00OWFkLTg1YWEtZjc1OTYyZDMwZTM2
LzEvMXZ0RktncmpQZnBTcXFyTHA1VGZHdmE4UXpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyS4CvX2
vMGcn6WPHNcJo5QCogTbx9vWx+FKliEj3QC0yv9I6AG2vZ4wPd7uPAMKxb9t5eIM
ra8hLIEETeefnFXmJP6kIVvmF42mfjvS1pvZKlL1fCM0DizWysT0yoen+U/TqTe2
PR2LZmwy33frnXkjgvRckRU78O0wt9tDqImF4BgSJDD3+cHm1tSeq+Bktje5g/hk
Jt4VHMTws9PsESEjVzb/NoKqQeZ42SNsgSnnCxttbJ7RQq25PLGOZ+IFR6paaJ2B
avNwqkA/b1yXR2HD4pMoC1nq3E1EYrCBxVL/1uzIVVvonu4D9SSwhKZ5GbJU7qln
yp4ljUI0lrDe0Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:50 2025 by rpki-client