Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: 8Z+RWX5Yltde5Z2d6eWWu4cMtvDBDBKu0rC0Mx5oFPA=
Subject key identifier: 0B:CD:E3:06:A9:9C:CA:FF:8C:EE:7D:26:B8:0B:68:FC:81:BF:43:BC
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 0198D7E13DA93F2A33FD8D9CB89B5A93441E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 0FF6
Signing time: Sat 23 Aug 2025 17:01:59 +0000
Manifest this update: Sat 23 Aug 2025 17:01:59 +0000
Manifest next update: Sun 24 Aug 2025 17:01:59 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: xjFx1wzFBhevU7zggDf9m1mGU0EFmtU6JEIke8/mCEI=)
2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:3d:a9:3f:2a:33:fd:8d:9c:b8:9b:5a:93:44:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Aug 23 17:01:59 2025 GMT
Not After : Aug 24 17:01:59 2025 GMT
Subject: CN=0bcde306a99ccaff8cee7d26b80b68fc81bf43bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:1b:fa:e1:75:15:57:6e:e3:0d:b5:fd:5b:
98:28:85:36:22:36:17:88:67:e1:af:78:69:b4:74:
4c:e3:4c:48:e4:51:b9:5f:d6:a5:8b:ad:e6:7c:47:
24:03:e9:22:62:94:25:ab:c6:fb:ff:75:59:a6:23:
f4:cf:37:25:0e:6d:54:c6:bd:a1:99:ab:b8:ee:7c:
d1:a8:a0:4d:db:cc:97:a5:3f:44:36:c6:f5:71:af:
0f:db:b9:f5:bf:02:06:dc:9d:c9:8c:2a:71:f1:ca:
c7:62:47:91:af:ca:f2:96:38:86:d9:92:80:37:cd:
5d:b4:7a:5b:de:35:fe:bd:59:50:c4:92:e5:04:0d:
4f:b1:15:97:f7:de:d2:32:1e:f8:ee:5e:6e:48:a0:
03:d9:dc:9c:ac:c4:29:c4:d4:c2:20:47:a8:eb:99:
56:75:02:d6:a3:f9:24:b8:b9:5d:9e:24:c0:4a:72:
8c:90:7c:03:9d:36:06:f7:d0:2b:1a:6f:76:67:59:
0c:6b:1c:7c:d6:38:87:b6:95:a0:8e:3c:ea:ee:36:
fa:76:44:f3:22:8f:61:21:91:81:2b:4c:4e:de:ff:
28:e1:fa:f6:26:d1:a2:e5:b1:4a:62:21:03:0b:28:
a8:2c:13:15:d3:e3:ca:59:fc:c9:f2:28:a8:7f:fc:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:E3:06:A9:9C:CA:FF:8C:EE:7D:26:B8:0B:68:FC:81:BF:43:BC
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b1:69:88:b1:48:df:98:87:42:10:2d:f7:84:88:8d:c3:e1:
e2:c6:1f:ef:93:fe:f5:38:57:16:bc:fc:65:c7:33:2e:f2:33:
1e:10:e6:d5:53:4f:ee:7c:72:f1:4e:c2:e7:32:f3:5f:7c:f0:
9a:60:5e:8b:99:df:7e:47:9a:4f:1d:21:44:da:03:79:85:d5:
6e:3f:87:67:aa:53:55:28:47:b5:9e:1a:d1:b6:4c:57:73:eb:
7b:83:51:d1:1a:fb:06:d6:9a:1b:a2:d3:d4:f3:5f:84:0d:fe:
11:f5:82:98:07:76:73:48:d7:05:4c:db:a5:cb:b1:cc:eb:7f:
94:af:15:4b:36:17:d4:51:0e:6c:83:2f:bb:a2:61:d0:9c:28:
68:cc:63:25:fe:42:6f:bb:59:e0:03:43:7d:5a:b4:86:bc:fd:
a1:13:48:f4:3e:a7:55:c8:a0:bd:da:47:80:40:24:68:3a:13:
c4:aa:d0:60:c4:8a:0c:35:a0:c0:45:8b:cb:04:08:2a:fa:8f:
49:e0:21:de:42:02:f3:81:3e:61:fb:19:6d:fa:5e:65:f7:ae:
09:10:d6:92:1b:b3:c8:c5:d1:c9:58:a2:32:a6:ea:8c:8d:29:
4e:7a:75:71:d3:5d:95:c3:66:43:93:4c:84:87:8b:c3:19:06:
c5:ec:98:6e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjX4T2pPyoz/Y2cuJtak0QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTVlNjU5NGRjMzcwNTNjZTk4YmQ1ODg5MDYzNTkxYjM1
ZTJkODAwHhcNMjUwODIzMTcwMTU5WhcNMjUwODI0MTcwMTU5WjAzMTEwLwYDVQQD
EygwYmNkZTMwNmE5OWNjYWZmOGNlZTdkMjZiODBiNjhmYzgxYmY0M2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrsb+uF1FVdu4w21/VuYKIU2IjYX
iGfhr3hptHRM40xI5FG5X9ali63mfEckA+kiYpQlq8b7/3VZpiP0zzclDm1Uxr2h
mau47nzRqKBN28yXpT9ENsb1ca8P27n1vwIG3J3JjCpx8crHYkeRr8ryljiG2ZKA
N81dtHpb3jX+vVlQxJLlBA1PsRWX997SMh747l5uSKAD2dycrMQpxNTCIEeo65lW
dQLWo/kkuLldniTASnKMkHwDnTYG99ArGm92Z1kMaxx81jiHtpWgjjzq7jb6dkTz
Io9hIZGBK0xO3v8o4fr2JtGi5bFKYiEDCyioLBMV0+PKWfzJ8iiof/xr9wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAvN4wapnMr/jO59JrgLaPyBv0O8MB8GA1UdIwQY
MBaAFPuV5llNw3BTzpi9WIkGNZGzXi2AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01WG1XVTNEY0ZQT21MMVlpUVkxa2JOZUxZQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNzgxNzhmLTIxOTktNDhlMC05MDFk
LWJkYTIxNWI4MTYzNi8xLzEtNVhtV1UzRGNGUE9tTDFZaVFZMWtiTmVMWUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JiLzc4MTc4Zi0yMTk5LTQ4ZTAtOTAxZC1iZGEyMTViODE2
MzYvMS8xLTVYbVdVM0RjRlBPbUwxWWlRWTFrYk5lTFlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7Fp
iLFI35iHQhAt94SIjcPh4sYf75P+9ThXFrz8ZcczLvIzHhDm1VNP7nxy8U7C5zLz
X3zwmmBei5nffkeaTx0hRNoDeYXVbj+HZ6pTVShHtZ4a0bZMV3Pre4NR0Rr7Btaa
G6LT1PNfhA3+EfWCmAd2c0jXBUzbpcuxzOt/lK8VSzYX1FEObIMvu6Jh0JwoaMxj
Jf5Cb7tZ4ANDfVq0hrz9oRNI9D6nVcigvdpHgEAkaDoTxKrQYMSKDDWgwEWLywQI
KvqPSeAh3kIC84E+YfsZbfpeZfeuCRDWkhuzyMXRyViiMqbqjI0pTnp1cdNdlcNm
Q5NMhIeLwxkGxeyYbg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:06:05 2025 by rpki-client