Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: knOnu66P93ENJEb42t5utMlQ+cDQqahRbkBuQgeU0HY=
Subject key identifier: 3F:37:AB:32:4E:8D:96:9E:9B:1F:B0:FF:9D:E9:85:0A:59:5F:64:80
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0198D54E56DB403FB05F99C3C00292A19C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 1384
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: Ux3OTibh60T0Fv86sKIe8/xWJAFKSDaLvGwzDDURgDU=)
2: skjABuaYQdSyDecgxOrBPzscPeU.roa (hash: kzk4xU92DAB+Vcg2V/rYHygGxD8dQRxlWxtwdylCcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:56:db:40:3f:b0:5f:99:c3:c0:02:92:a1:9c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=3f37ab324e8d969e9b1fb0ff9de9850a595f6480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:06:aa:1a:01:3a:f3:c4:f2:25:8d:8a:a7:
84:14:14:81:cc:9b:96:6c:0b:ae:7d:9c:5b:e3:8f:
25:79:dd:df:62:a0:97:55:19:29:4e:c9:1e:01:18:
fe:f6:0c:aa:7e:69:58:19:90:d4:b8:b1:41:8c:a2:
5e:41:ab:19:85:b6:de:4f:c9:62:33:42:c3:c5:80:
d8:28:48:7a:60:06:aa:32:06:50:18:c4:4e:fe:78:
af:68:42:91:d8:b2:0a:21:1b:11:2d:d8:e1:4d:39:
89:8e:b5:77:80:30:cd:e2:60:79:a6:70:95:b2:59:
e8:aa:84:31:42:17:57:01:69:a8:fc:f7:20:05:f1:
c9:98:d7:29:ec:62:d2:0e:5d:7d:43:2f:bd:79:8c:
eb:4c:51:b0:fe:11:2e:10:aa:e0:b1:16:f3:ef:fa:
c6:c3:b4:6a:3e:27:c3:ec:14:f0:59:49:52:07:66:
90:e6:d3:56:43:f6:18:b5:5c:a0:ab:a9:dc:10:1f:
fe:62:55:2b:f8:54:e4:94:81:dc:07:64:8d:9c:55:
6e:ca:c1:ec:ed:94:bf:18:55:ea:fd:f3:89:3c:be:
c0:db:eb:66:f6:5d:69:e8:b0:1f:09:62:aa:f6:1b:
02:96:03:d6:e3:ff:86:0f:3d:35:01:14:66:c1:27:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:37:AB:32:4E:8D:96:9E:9B:1F:B0:FF:9D:E9:85:0A:59:5F:64:80
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:33:4d:e1:bc:82:fe:21:6f:40:de:a1:b4:a1:fa:7a:af:37:
c6:6f:42:80:cc:ae:fd:7c:f9:db:27:dd:fc:cd:22:2e:92:c7:
df:b9:ba:a6:eb:24:f4:86:7a:34:84:34:c6:5e:08:db:d0:f1:
4a:b5:30:01:36:dc:fd:b8:53:09:45:3a:dd:5d:21:bd:78:83:
41:91:67:5d:23:be:a8:d1:4f:be:79:cc:2d:b9:4a:f7:e1:05:
fc:21:9b:e8:48:bf:5c:6d:4d:86:68:fe:92:e5:f5:8b:8f:1e:
21:c4:82:9d:c0:76:32:03:4c:3a:7a:ad:b1:19:52:52:23:75:
58:90:43:c4:bf:67:00:6d:b1:7f:62:2f:0e:52:41:fb:94:63:
36:f9:d5:bd:0a:a0:1a:56:6f:7e:6c:a9:b3:5f:8b:a4:3d:bd:
36:71:28:3d:fa:7f:a0:60:14:db:c1:3a:47:49:f0:59:f5:52:
b2:b1:5a:5a:3d:3b:47:d1:76:cb:be:c3:14:c8:95:bd:ec:ac:
17:99:0e:b8:1d:33:e2:37:9c:c3:fb:50:50:14:8b:2d:fb:47:
87:6a:87:87:ce:14:0b:52:f1:8d:97:24:d4:95:b7:80:d6:df:
77:30:18:86:b3:9d:82:fe:57:16:69:2a:e1:2d:96:79:74:67:
80:6f:95:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTlbbQD+wX5nDwAKSoZxpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx
ZjgzZGYwHhcNMjUwODIzMDUwMjE3WhcNMjUwODI0MDUwMjE3WjAzMTEwLwYDVQQD
EygzZjM3YWIzMjRlOGQ5NjllOWIxZmIwZmY5ZGU5ODUwYTU5NWY2NDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltkGqhoBOvPE8iWNiqeEFBSBzJuW
bAuufZxb448led3fYqCXVRkpTskeARj+9gyqfmlYGZDUuLFBjKJeQasZhbbeT8li
M0LDxYDYKEh6YAaqMgZQGMRO/nivaEKR2LIKIRsRLdjhTTmJjrV3gDDN4mB5pnCV
slnoqoQxQhdXAWmo/PcgBfHJmNcp7GLSDl19Qy+9eYzrTFGw/hEuEKrgsRbz7/rG
w7RqPifD7BTwWUlSB2aQ5tNWQ/YYtVygq6ncEB/+YlUr+FTklIHcB2SNnFVuysHs
7ZS/GFXq/fOJPL7A2+tm9l1p6LAfCWKq9hsClgPW4/+GDz01ARRmwSdU0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD83qzJOjZaemx+w/53phQpZX2SAMB8GA1UdIwQY
MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt
NTg1N2YxYzE3NjI0LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0
LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjNN4byC
/iFvQN6htKH6eq83xm9CgMyu/Xz52yfd/M0iLpLH37m6pusk9IZ6NIQ0xl4I29Dx
SrUwATbc/bhTCUU63V0hvXiDQZFnXSO+qNFPvnnMLblK9+EF/CGb6Ei/XG1Nhmj+
kuX1i48eIcSCncB2MgNMOnqtsRlSUiN1WJBDxL9nAG2xf2IvDlJB+5RjNvnVvQqg
GlZvfmyps1+LpD29NnEoPfp/oGAU28E6R0nwWfVSsrFaWj07R9F2y77DFMiVveys
F5kOuB0z4jecw/tQUBSLLftHh2qHh84UC1LxjZck1JW3gNbfdzAYhrOdgv5XFmkq
4S2WeXRngG+V8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:03 2025 by rpki-client