Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: Jb8rqZnyj9EWwpi6U7o5kCmJisicUL3psXWhCbVmNqU=
Subject key identifier: 49:F6:5D:66:5A:56:3B:08:C0:C5:A4:4D:72:06:ED:54:4C:A2:EA:98
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 0198D65F36C9B13F5FC2AE77DEED68CF8A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:20 +0000
Manifest this update: Sat 23 Aug 2025 10:00:20 +0000
Manifest next update: Sun 24 Aug 2025 10:00:20 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: 2+syES3uAzEsnXbDdohKWowcL5d2kevr6TZMeHHoYRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:36:c9:b1:3f:5f:c2:ae:77:de:ed:68:cf:8a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: Aug 23 10:00:20 2025 GMT
Not After : Aug 24 10:00:20 2025 GMT
Subject: CN=49f65d665a563b08c0c5a44d7206ed544ca2ea98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3b:fe:b0:60:36:5f:15:dc:67:9f:69:61:2d:
11:d5:0c:28:8e:3d:0e:4e:d3:88:86:e6:88:ef:5f:
a3:8f:fe:b9:e1:c5:9b:b0:14:85:c4:7f:71:7d:cf:
6c:c0:7a:85:38:37:c2:79:88:bc:6a:c0:e6:92:2a:
25:92:cd:08:53:9b:3a:4f:c4:aa:71:e9:5e:ac:7d:
5c:c0:6c:38:04:fe:c0:0c:f6:07:87:96:16:26:3f:
19:5d:cc:96:2d:e8:ee:a1:39:49:34:32:a8:65:4a:
c8:7e:07:42:f0:b7:a5:88:48:bc:ea:4c:cb:e0:99:
9c:4a:55:8c:43:57:d1:d4:92:a3:37:c6:87:46:29:
5c:ef:21:29:af:11:76:14:38:f0:3d:17:e3:05:29:
5e:ce:a9:cd:b7:17:1d:7d:a5:1d:fc:5e:fb:b7:20:
c2:e7:8c:73:62:a0:a3:af:d7:06:93:c8:c0:da:0a:
80:80:da:59:84:3f:4e:cf:17:33:e8:a4:52:6e:d3:
15:8a:5a:66:4f:ab:39:d8:80:ae:15:66:ae:ea:ac:
10:6c:cd:5f:76:27:fb:1a:64:62:b2:0d:8a:9e:4b:
ce:c5:31:b1:57:e3:e3:5a:da:68:7a:f9:ab:26:5c:
96:5b:52:5d:ed:af:35:a5:6e:f9:99:78:84:97:38:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F6:5D:66:5A:56:3B:08:C0:C5:A4:4D:72:06:ED:54:4C:A2:EA:98
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:94:0d:40:ae:cc:7e:87:47:ca:24:71:10:b5:14:47:ba:8d:
83:88:81:59:d0:a8:8c:be:4b:cd:ec:39:a8:27:19:1f:4e:03:
1c:ce:de:03:3f:e2:b6:1d:cf:44:96:99:5b:e2:db:d2:a9:25:
6a:48:95:ff:43:a5:1d:d5:47:5e:86:2c:c7:bc:80:f0:9b:a1:
44:5e:b5:37:47:ba:7f:76:81:7d:1d:5a:43:32:cf:89:de:8b:
48:75:2b:2d:39:50:a4:54:7f:0a:c3:fd:98:e2:ce:ab:a0:6d:
90:dc:ac:02:b6:3a:cb:b1:37:11:7d:d8:b5:3e:a2:89:34:eb:
95:3d:c3:ca:d5:39:ed:b6:9c:b9:c4:af:16:23:b1:bd:1f:ba:
2b:d8:4c:68:76:7f:aa:ae:d2:fd:8a:af:5d:03:68:14:c8:a9:
78:87:28:25:7d:e7:a9:97:4d:77:c6:02:76:37:0f:bd:73:c9:
3e:a3:85:bd:a0:da:47:25:0a:17:22:1d:65:94:33:cb:14:3e:
ff:ce:bf:68:be:5b:5a:27:f9:86:fe:73:64:90:19:eb:09:61:
7b:39:e1:83:85:37:5e:35:19:a7:a4:9a:c9:c0:dd:25:12:14:
e0:3a:f4:30:06:7f:e5:f0:2d:ba:f8:f5:29:58:6a:b4:e3:af:
d8:f4:d6:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXzbJsT9fwq533u1oz4pRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzVjOTU0ZWUzOWM5MWU1MjVmNjhiMzA3MWNhMDU3OGQ2
YTViYWUwHhcNMjUwODIzMTAwMDIwWhcNMjUwODI0MTAwMDIwWjAzMTEwLwYDVQQD
Eyg0OWY2NWQ2NjVhNTYzYjA4YzBjNWE0NGQ3MjA2ZWQ1NDRjYTJlYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Dv+sGA2XxXcZ59pYS0R1Qwojj0O
TtOIhuaI71+jj/654cWbsBSFxH9xfc9swHqFODfCeYi8asDmkiolks0IU5s6T8Sq
celerH1cwGw4BP7ADPYHh5YWJj8ZXcyWLejuoTlJNDKoZUrIfgdC8LeliEi86kzL
4JmcSlWMQ1fR1JKjN8aHRilc7yEprxF2FDjwPRfjBSlezqnNtxcdfaUd/F77tyDC
54xzYqCjr9cGk8jA2gqAgNpZhD9Ozxcz6KRSbtMVilpmT6s52ICuFWau6qwQbM1f
dif7GmRisg2KnkvOxTGxV+PjWtpoevmrJlyWW1Jd7a81pW75mXiElziUxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn2XWZaVjsIwMWkTXIG7VRMouqYMB8GA1UdIwQY
MBaAFNZ1yVTuOckeUl9oswccoFeNaluuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUt
NTcxN2NmNTJjNzlhLzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUtNTcxN2NmNTJjNzlh
LzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJQNQK7M
fodHyiRxELUUR7qNg4iBWdCojL5Lzew5qCcZH04DHM7eAz/ith3PRJaZW+Lb0qkl
akiV/0OlHdVHXoYsx7yA8JuhRF61N0e6f3aBfR1aQzLPid6LSHUrLTlQpFR/CsP9
mOLOq6BtkNysArY6y7E3EX3YtT6iiTTrlT3DytU57bacucSvFiOxvR+6K9hMaHZ/
qq7S/YqvXQNoFMipeIcoJX3nqZdNd8YCdjcPvXPJPqOFvaDaRyUKFyIdZZQzyxQ+
/86/aL5bWif5hv5zZJAZ6wlheznhg4U3XjUZp6SaycDdJRIU4Dr0MAZ/5fAtuvj1
KVhqtOOv2PTWag==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:55 2025 by rpki-client