Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: CkC0LaA+8g3gr/9wlpG095bgWZ4Tk+oJ6O39q1iRO34=
Subject key identifier: 9F:F5:CF:A8:5F:8D:85:7E:DF:3B:FF:12:CB:79:27:E4:C8:48:44:0D
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 0198D58360094DC43D754B09A06DBFD6F178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 0FEC
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=)
2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=)
3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: RVZG5iviq8ILfP4ze4tnd8B+8cAtIMLY38+NP6+am/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:60:09:4d:c4:3d:75:4b:09:a0:6d:bf:d6:f1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=9ff5cfa85f8d857edf3bff12cb7927e4c848440d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:23:c8:49:05:d4:55:84:b7:8a:3c:cf:5b:
33:3e:07:6d:94:7f:7b:86:de:3a:79:13:7a:85:df:
3d:3d:0f:db:be:6e:88:8a:a2:c7:44:dc:ce:6b:46:
5b:a7:cb:a5:11:2e:96:ef:d9:98:f4:27:78:3e:a8:
94:bc:8b:71:27:4b:c6:42:2d:3f:77:71:70:62:df:
48:34:b9:b2:48:4d:3d:c2:2f:d3:89:da:14:7d:50:
40:b4:b9:1e:f6:44:09:83:54:e8:52:ce:45:dc:d5:
75:d3:11:e4:62:eb:99:c5:37:92:21:50:61:93:45:
9d:9b:0a:ec:d5:3a:07:cf:a6:72:b4:b0:30:82:68:
16:9f:da:cb:05:e9:05:17:ca:36:0b:70:07:42:a0:
70:1c:3d:2d:58:40:82:75:eb:a3:0e:af:20:2c:b0:
cf:6f:01:1f:55:82:03:84:ed:70:4b:99:06:a9:f3:
61:b4:2e:df:4a:f5:a0:52:0d:5a:10:27:4d:42:ef:
73:1a:6e:5f:ca:6a:2a:d6:20:c8:ed:a3:64:83:df:
01:4a:7f:63:37:05:49:43:60:04:79:05:e6:39:51:
c4:fe:f5:e8:ca:22:72:7d:c4:27:ba:3b:e7:61:d0:
5e:28:af:23:b9:44:a7:bf:a8:77:05:28:7e:18:fd:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F5:CF:A8:5F:8D:85:7E:DF:3B:FF:12:CB:79:27:E4:C8:48:44:0D
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0d:0e:07:18:52:16:42:95:3c:21:f0:ba:a8:9e:dc:02:50:
34:98:cd:24:bf:02:d8:4a:cc:67:6e:d0:95:67:3f:f4:2f:71:
bf:33:8b:42:6e:df:b7:4a:49:1c:c5:73:b9:d5:d0:01:d6:5a:
a3:39:1f:26:18:5a:63:ad:a5:91:af:13:ae:b9:d1:7a:25:93:
7c:6a:ac:d1:0b:53:a6:e8:e6:86:e6:f5:c5:57:0f:4d:7e:2b:
74:e8:37:ea:7a:5c:d5:1a:03:ac:9c:7f:84:15:d5:eb:f5:ea:
cb:73:ac:c9:d2:51:65:c1:c5:7c:72:0f:13:a9:56:8e:02:d1:
b0:91:86:a4:87:2b:d4:42:f8:49:42:3e:c3:17:28:bb:41:f5:
3b:86:0f:06:9d:ac:97:ac:79:8d:dc:af:99:fd:dd:fe:ed:e1:
ec:bf:47:aa:f3:6c:1c:c2:8b:d4:0e:a3:8d:51:3e:28:2c:73:
e4:a0:c8:e7:9a:bd:32:55:6d:8b:b0:e9:d4:66:7e:9a:75:91:
58:24:b8:12:31:61:5f:1f:eb:cb:31:0e:75:6a:c4:af:0c:50:
8b:4d:d2:50:92:80:b1:0a:49:9e:a8:ad:c8:13:2f:e9:23:71:
f6:54:52:6e:c5:42:47:a3:1a:90:01:e5:bd:fd:02:67:4a:9f:
2b:4d:23:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2AJTcQ9dUsJoG2/1vF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTk3YjQwYzZkNDQ2OWY5YjkxNGE3OGRjOGVjNDM5MzIz
YjBmYjgwHhcNMjUwODIzMDYwMDEzWhcNMjUwODI0MDYwMDEzWjAzMTEwLwYDVQQD
Eyg5ZmY1Y2ZhODVmOGQ4NTdlZGYzYmZmMTJjYjc5MjdlNGM4NDg0NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJQjyEkF1FWEt4o8z1szPgdtlH97
ht46eRN6hd89PQ/bvm6IiqLHRNzOa0Zbp8ulES6W79mY9Cd4PqiUvItxJ0vGQi0/
d3FwYt9INLmySE09wi/TidoUfVBAtLke9kQJg1ToUs5F3NV10xHkYuuZxTeSIVBh
k0Wdmwrs1ToHz6ZytLAwgmgWn9rLBekFF8o2C3AHQqBwHD0tWECCdeujDq8gLLDP
bwEfVYIDhO1wS5kGqfNhtC7fSvWgUg1aECdNQu9zGm5fymoq1iDI7aNkg98BSn9j
NwVJQ2AEeQXmOVHE/vXoyiJyfcQnujvnYdBeKK8juUSnv6h3BSh+GP2p7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/1z6hfjYV+3zv/Est5J+TISEQNMB8GA1UdIwQY
MBaAFP9Ze0DG1Eafm5FKeNyOxDkyOw+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMt
ZmZiMmVmNGJmZTI1LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMtZmZiMmVmNGJmZTI1
LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhg0OBxhS
FkKVPCHwuqie3AJQNJjNJL8C2ErMZ27QlWc/9C9xvzOLQm7ft0pJHMVzudXQAdZa
ozkfJhhaY62lka8TrrnReiWTfGqs0QtTpujmhub1xVcPTX4rdOg36npc1RoDrJx/
hBXV6/Xqy3OsydJRZcHFfHIPE6lWjgLRsJGGpIcr1EL4SUI+wxcou0H1O4YPBp2s
l6x5jdyvmf3d/u3h7L9HqvNsHMKL1A6jjVE+KCxz5KDI55q9MlVti7Dp1GZ+mnWR
WCS4EjFhXx/ryzEOdWrErwxQi03SUJKAsQpJnqityBMv6SNx9lRSbsVCR6MakAHl
vf0CZ0qfK00jDw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:20 2025 by rpki-client