Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: FqPLmWkjF5nimrVT563QkRWwZ9jznOctfN5rji1mMCQ=
Subject key identifier: 87:D4:D4:9E:1B:DE:F1:B6:D0:3C:16:03:D4:CC:EE:D9:B2:F7:7A:AB
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 0198D4047E59AAAF42CB493A3235BEF720EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 158D
Signing time: Fri 22 Aug 2025 23:02:00 +0000
Manifest this update: Fri 22 Aug 2025 23:02:00 +0000
Manifest next update: Sat 23 Aug 2025 23:02:00 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: bbCn4ysX6HZzOS1eio0Od1La5PAA4zuPKOWWAyjbX4o=)
2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:7e:59:aa:af:42:cb:49:3a:32:35:be:f7:20:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Aug 22 23:02:00 2025 GMT
Not After : Aug 23 23:02:00 2025 GMT
Subject: CN=87d4d49e1bdef1b6d03c1603d4cceed9b2f77aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:ea:2c:ac:13:f5:f9:29:01:1f:ce:40:8e:
69:38:cc:1a:77:97:6d:91:3c:ab:d2:2b:10:59:bc:
40:29:da:7c:ff:99:4f:be:69:6f:a5:70:0c:79:04:
5f:ad:f1:e1:52:53:e9:ad:4e:2e:5f:e3:79:3f:4d:
81:89:02:97:ce:2b:e6:75:da:d2:46:cf:17:a9:f0:
ca:84:64:8f:b2:2b:1c:9c:b8:5e:e9:07:04:32:73:
ef:9d:79:ed:a3:d8:23:51:9c:b5:75:1e:11:3a:15:
22:cd:02:9e:72:c9:ba:67:46:78:d9:ab:d5:fb:dc:
06:25:c2:75:14:e2:80:9c:0b:4b:e7:eb:6a:50:7d:
e5:70:94:d9:55:4c:62:62:32:fc:11:1c:85:3c:e1:
c0:e1:00:6c:80:1b:ec:59:79:1c:18:8c:8d:11:98:
1b:e5:e6:ff:fb:2f:7a:32:1b:a5:1b:67:61:a8:d6:
6b:0e:03:e8:09:31:63:a8:27:16:cb:50:84:79:1b:
39:0f:38:a2:1f:60:ee:70:af:65:82:ae:f6:87:b2:
5f:2f:e1:2a:86:f3:b0:e5:be:20:0c:c0:59:67:3c:
df:49:3e:39:eb:4f:70:1d:25:92:a3:6e:89:67:c4:
e4:9d:9b:3d:54:75:95:66:95:d3:30:47:f0:3a:ae:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D4:D4:9E:1B:DE:F1:B6:D0:3C:16:03:D4:CC:EE:D9:B2:F7:7A:AB
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:94:f4:d4:4e:6d:c6:b8:b6:5f:d8:57:d6:b9:29:ee:cf:2d:
d8:2a:1c:87:5b:7b:4e:bb:e9:c9:7b:2f:00:74:42:ca:d1:87:
ff:ae:73:c8:49:d1:7d:5b:a1:ff:99:89:7d:6c:7a:5e:bb:e6:
e9:51:77:9b:46:06:cc:cc:3a:32:3a:ea:a2:e0:d7:0d:2a:3a:
75:89:99:c5:fb:12:01:a6:65:df:bc:a8:2c:ec:a8:c1:16:52:
0b:f3:fe:cb:56:fa:f1:1f:48:74:c8:9e:c7:79:ce:42:3f:a4:
d0:7e:17:3b:67:47:3c:1b:6f:b6:f9:40:ed:fe:48:21:d0:81:
2a:e6:26:f7:38:70:3a:b1:23:e6:da:b8:fa:d3:50:77:67:15:
83:9a:83:39:41:f3:fc:00:c2:2c:d9:8c:98:a7:4e:b4:5b:f1:
a6:0f:c4:d4:7d:19:08:74:44:57:5a:ff:1e:08:79:4b:b0:7e:
f5:ec:a4:46:c6:06:a0:ee:99:36:c2:7b:50:bd:9b:e6:66:63:
1e:04:1f:26:da:c3:4f:58:73:5f:ec:3e:fa:a0:83:29:00:7c:
fd:d4:98:47:72:ce:e7:9e:fc:6c:63:ec:5a:e4:52:ac:d2:b6:
8d:e7:c6:82:fa:e4:8e:41:f7:71:1a:e8:fc:5a:1a:da:f1:68:
11:2e:e9:c2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjUBH5Zqq9Cy0k6MjW+9yDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4M2NjYWVmOWM5MTEyMGVjNmZiMTRmZjRjNGM1NzQ1YTAy
MzliNzcwHhcNMjUwODIyMjMwMjAwWhcNMjUwODIzMjMwMjAwWjAzMTEwLwYDVQQD
Eyg4N2Q0ZDQ5ZTFiZGVmMWI2ZDAzYzE2MDNkNGNjZWVkOWIyZjc3YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJDqLKwT9fkpAR/OQI5pOMwad5dt
kTyr0isQWbxAKdp8/5lPvmlvpXAMeQRfrfHhUlPprU4uX+N5P02BiQKXzivmddrS
Rs8XqfDKhGSPsiscnLhe6QcEMnPvnXnto9gjUZy1dR4ROhUizQKecsm6Z0Z42avV
+9wGJcJ1FOKAnAtL5+tqUH3lcJTZVUxiYjL8ERyFPOHA4QBsgBvsWXkcGIyNEZgb
5eb/+y96MhulG2dhqNZrDgPoCTFjqCcWy1CEeRs5DziiH2DucK9lgq72h7JfL+Eq
hvOw5b4gDMBZZzzfST45609wHSWSo26JZ8TknZs9VHWVZpXTMEfwOq57IwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIfU1J4b3vG20DwWA9TM7tmy93qrMB8GA1UdIwQY
MBaAFPg8yu+ckRIOxvsU/0xMV0WgI5t3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Eeks3NXlSRWc3Ry14VF9URXhYUmFBam0zYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNDVmY2Q1LTg4MTItNDMyZC1iNTM3
LTc2OTgyZjAzZWEwYy8xLzEtRHpLNzV5UkVnN0cteFRfVEV4WFJhQWptM2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JmLzQ1ZmNkNS04ODEyLTQzMmQtYjUzNy03Njk4MmYwM2Vh
MGMvMS8xLUR6Szc1eVJFZzdHLXhUX1RFeFhSYUFqbTNjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapT0
1E5txri2X9hX1rkp7s8t2Coch1t7TrvpyXsvAHRCytGH/65zyEnRfVuh/5mJfWx6
Xrvm6VF3m0YGzMw6MjrqouDXDSo6dYmZxfsSAaZl37yoLOyowRZSC/P+y1b68R9I
dMiex3nOQj+k0H4XO2dHPBtvtvlA7f5IIdCBKuYm9zhwOrEj5tq4+tNQd2cVg5qD
OUHz/ADCLNmMmKdOtFvxpg/E1H0ZCHREV1r/Hgh5S7B+9eykRsYGoO6ZNsJ7UL2b
5mZjHgQfJtrDT1hzX+w++qCDKQB8/dSYR3LO5578bGPsWuRSrNK2jefGgvrkjkH3
cRro/Foa2vFoES7pwg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:55 2025 by rpki-client