Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: KQ7YbLDhgWCbx5eQ9/ge+VwwmaGT2DEXVrao6uwZIT4=
Subject key identifier: 08:21:97:7D:89:18:B6:51:BD:0C:EA:B5:D9:CA:B3:C1:F6:6C:D3:22
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 0197B7B30EB5C6A4EA0AD1BAA705D1EEC105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 0F58
Signing time: Sat 28 Jun 2025 18:00:54 +0000
Manifest this update: Sat 28 Jun 2025 18:00:54 +0000
Manifest next update: Sun 29 Jun 2025 18:00:54 +0000
Files and hashes: 1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=)
2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=)
3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: OtwLODwqfv7KqNEXilG7ept8dJaaOXEigZ0zsXvlZQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0e:b5:c6:a4:ea:0a:d1:ba:a7:05:d1:ee:c1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Jun 28 18:00:54 2025 GMT
Not After : Jun 29 18:00:54 2025 GMT
Subject: CN=0821977d8918b651bd0ceab5d9cab3c1f66cd322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:44:7b:d1:47:15:8c:cf:0b:ee:00:75:03:
c0:29:a3:fa:4c:db:74:81:59:14:73:54:11:1c:e8:
6d:33:fb:ec:76:f4:63:1f:5a:77:4c:60:2c:a0:34:
eb:46:a5:2d:8f:fa:38:4c:69:8d:79:0c:9e:bf:fc:
1d:65:09:5b:f6:a8:cd:f9:7c:c9:84:24:68:d1:79:
f6:fe:4e:7b:a1:06:8a:74:75:60:89:d9:21:de:3f:
28:7e:3d:38:7b:9e:1e:e4:10:5b:a0:ec:c6:06:f6:
bc:f3:c0:04:b6:7b:c9:66:d3:c0:f8:38:73:1e:8d:
ed:f5:52:ac:51:db:a3:da:13:f6:36:0c:fb:c0:4b:
b8:73:ce:d2:02:7b:b1:0c:39:50:4e:71:c6:18:7f:
f9:cd:a4:27:e6:b8:b0:d1:90:6f:20:40:5a:c2:38:
e0:95:f2:0d:59:73:2a:c1:38:2f:6b:34:f0:bc:fa:
60:44:a2:ce:c4:64:26:2d:af:7b:78:27:8f:c8:9f:
9d:66:7f:3c:36:1b:15:e2:7f:2b:80:a4:c3:ae:2e:
1a:f6:35:2a:0e:8e:60:53:75:67:d5:84:aa:c2:c3:
04:08:f1:3f:d4:11:d5:92:59:f6:fa:a7:97:59:5c:
f1:59:61:c4:d7:76:e4:5b:33:6b:06:46:21:cf:28:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:21:97:7D:89:18:B6:51:BD:0C:EA:B5:D9:CA:B3:C1:F6:6C:D3:22
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1b:fc:74:c6:aa:8a:1c:7a:a7:f9:4d:bc:28:32:db:a4:1c:
ae:c7:e6:52:ef:02:07:5d:b6:0c:b4:28:0b:2e:3b:60:5f:f0:
d3:e4:d1:30:4f:87:e3:b5:66:29:a6:4d:08:e7:97:f3:b7:b7:
36:81:c0:75:76:7f:24:14:1d:05:ff:4a:86:c7:68:b3:8b:6c:
d2:d7:6e:6f:a5:c1:af:ed:57:e0:01:43:2b:29:01:f6:61:0b:
57:39:08:58:c2:7b:e4:c1:e4:39:ac:43:89:22:63:b7:9b:40:
44:b2:38:a4:0d:e7:e1:96:c2:ad:ad:6f:8b:53:34:48:57:9c:
fe:25:db:67:c3:d9:62:5b:11:74:f0:9b:fb:7f:ce:fd:c2:1b:
ef:1b:d6:19:17:65:1d:6a:f4:36:82:04:04:e3:5e:52:25:87:
bb:41:66:58:a9:1d:03:68:72:dc:fc:c7:88:88:e1:43:2d:a1:
dc:4c:80:f6:69:27:49:6d:39:b7:f6:21:d4:06:3e:93:c8:80:
c8:2c:cf:1e:f4:ab:44:9b:7e:c1:79:de:8b:e7:67:50:86:86:
9f:0b:f8:7a:67:0c:b9:a8:60:e7:b6:23:e2:1a:97:e6:38:1b:
7e:c6:06:e1:41:f9:bd:af:5a:03:4d:3f:34:75:61:7d:cc:7a:
66:db:58:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sw61xqTqCtG6pwXR7sEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTk3YjQwYzZkNDQ2OWY5YjkxNGE3OGRjOGVjNDM5MzIz
YjBmYjgwHhcNMjUwNjI4MTgwMDU0WhcNMjUwNjI5MTgwMDU0WjAzMTEwLwYDVQQD
EygwODIxOTc3ZDg5MThiNjUxYmQwY2VhYjVkOWNhYjNjMWY2NmNkMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPREe9FHFYzPC+4AdQPAKaP6TNt0
gVkUc1QRHOhtM/vsdvRjH1p3TGAsoDTrRqUtj/o4TGmNeQyev/wdZQlb9qjN+XzJ
hCRo0Xn2/k57oQaKdHVgidkh3j8ofj04e54e5BBboOzGBva888AEtnvJZtPA+Dhz
Ho3t9VKsUduj2hP2Ngz7wEu4c87SAnuxDDlQTnHGGH/5zaQn5riw0ZBvIEBawjjg
lfINWXMqwTgvazTwvPpgRKLOxGQmLa97eCePyJ+dZn88NhsV4n8rgKTDri4a9jUq
Do5gU3Vn1YSqwsMECPE/1BHVkln2+qeXWVzxWWHE13bkWzNrBkYhzyiSUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAghl32JGLZRvQzqtdnKs8H2bNMiMB8GA1UdIwQY
MBaAFP9Ze0DG1Eafm5FKeNyOxDkyOw+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMt
ZmZiMmVmNGJmZTI1LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMtZmZiMmVmNGJmZTI1
LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhv8dMaq
ihx6p/lNvCgy26QcrsfmUu8CB122DLQoCy47YF/w0+TRME+H47VmKaZNCOeX87e3
NoHAdXZ/JBQdBf9Khsdos4ts0tdub6XBr+1X4AFDKykB9mELVzkIWMJ75MHkOaxD
iSJjt5tARLI4pA3n4ZbCra1vi1M0SFec/iXbZ8PZYlsRdPCb+3/O/cIb7xvWGRdl
HWr0NoIEBONeUiWHu0FmWKkdA2hy3PzHiIjhQy2h3EyA9mknSW05t/Yh1AY+k8iA
yCzPHvSrRJt+wXnei+dnUIaGnwv4emcMuahg57Yj4hqX5jgbfsYG4UH5va9aA00/
NHVhfcx6ZttYtg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:35 2025 by rpki-client