Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: 1EFXcN2e9q6J0zxEkCC6487JBRC+DG7AbmV0pYStr2s=
Subject key identifier: AE:9F:48:BB:62:5A:C2:9F:3B:17:98:A0:8F:53:A0:8C:4B:E3:6C:21
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 0198D697F7438237A0A6F2CAC2167FD17D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:20 +0000
Manifest this update: Sat 23 Aug 2025 11:02:20 +0000
Manifest next update: Sun 24 Aug 2025 11:02:20 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: rpsROGp0FWnZZFGrODjqn5Zw4FpHicd1GVaL5MvMHo4=)
2: RRxWR41Hund7xXvTLqB2r5qi970.roa (hash: rUpiHcsIUELuq5TefHF1+krXhbgfuQVPMP1TCObsJG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f7:43:82:37:a0:a6:f2:ca:c2:16:7f:d1:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Aug 23 11:02:20 2025 GMT
Not After : Aug 24 11:02:20 2025 GMT
Subject: CN=ae9f48bb625ac29f3b1798a08f53a08c4be36c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:1b:4d:7c:0a:69:0a:85:28:0e:24:44:3b:
fa:35:09:52:43:c4:29:e5:6b:23:de:bb:bf:c1:50:
02:18:fc:32:f6:95:ff:db:01:22:3b:bb:38:59:7e:
31:11:20:b6:f5:82:f5:8c:7b:e0:27:d0:7e:a5:92:
e0:04:db:14:a4:30:11:33:22:de:fc:a4:3e:08:e1:
7d:d8:78:ad:1a:ac:ab:13:3f:d5:bb:8f:b7:d9:e9:
db:7e:d0:99:9d:35:98:ea:51:a7:4a:29:cc:33:e1:
95:2a:93:35:d8:e1:bb:9b:0f:24:e6:18:59:f3:a9:
9e:87:38:26:d8:24:0e:dd:44:e8:12:b3:ad:a2:39:
3d:7f:a4:37:c6:99:84:59:2e:38:23:0e:51:c9:84:
12:30:1c:3c:38:0c:84:a2:66:8f:e6:d7:62:7c:58:
7c:c0:6c:fc:45:c4:e2:4a:76:df:ac:19:72:28:52:
d2:a8:85:99:fe:17:07:56:91:41:85:f5:60:67:55:
b2:e7:61:42:7d:30:b0:3f:a4:3f:bd:9f:4e:7a:25:
c0:3c:33:65:53:f0:64:ec:36:ba:bc:02:4f:40:04:
c0:b7:42:37:f5:db:a4:2d:ce:35:fb:ac:25:bc:a7:
d2:46:7f:20:5d:16:fa:64:81:ad:93:d4:8a:89:74:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9F:48:BB:62:5A:C2:9F:3B:17:98:A0:8F:53:A0:8C:4B:E3:6C:21
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e4:01:d6:8b:c4:a1:d3:0d:e8:95:bb:ff:a1:bf:44:7f:20:
e0:c1:87:2d:0a:93:d0:5f:4c:b2:21:62:7c:fe:8d:4d:4d:25:
9f:0d:87:06:aa:36:08:c1:1d:05:82:2c:55:90:88:79:20:f7:
8e:8b:71:2f:58:32:a1:4a:5a:2c:ec:25:1e:12:1f:40:e5:f3:
c4:48:3e:6f:24:87:22:d1:45:5e:4d:58:65:ec:8b:0b:cb:a4:
49:2c:c9:57:13:58:55:94:5a:1d:a1:c3:9d:0e:57:57:64:87:
19:0f:9f:a5:90:5d:6c:f0:85:7b:df:48:34:ab:21:fe:de:e0:
6f:05:82:15:a8:30:c9:76:0d:f2:54:a9:a1:46:44:38:9d:a2:
2d:b5:53:c8:74:e6:1d:d6:df:ac:02:5d:0a:0d:d5:02:6a:32:
f3:55:16:60:af:0b:7e:b4:9f:f5:75:4c:71:5f:28:30:94:b3:
de:0f:d2:75:de:11:e6:50:1c:92:c4:9e:88:9a:a5:6d:eb:80:
75:74:0a:52:20:c7:5b:b4:84:5a:f1:34:4a:ec:48:28:26:44:
e4:85:d1:47:13:cd:29:aa:bd:3d:c3:bb:58:f7:ed:36:d2:9c:
86:12:38:f8:13:cf:a3:9f:fb:77:ab:48:25:02:9c:fe:ea:46:
c4:2c:72:c9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjWl/dDgjegpvLKwhZ/0X2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTY1OWU3ZWVmNmQ3M2I2ODZlYjFkMjk1NmM3MWYzYmU1
YmJkNzcwHhcNMjUwODIzMTEwMjIwWhcNMjUwODI0MTEwMjIwWjAzMTEwLwYDVQQD
EyhhZTlmNDhiYjYyNWFjMjlmM2IxNzk4YTA4ZjUzYTA4YzRiZTM2YzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9kbTXwKaQqFKA4kRDv6NQlSQ8Qp
5Wsj3ru/wVACGPwy9pX/2wEiO7s4WX4xESC29YL1jHvgJ9B+pZLgBNsUpDARMyLe
/KQ+COF92HitGqyrEz/Vu4+32enbftCZnTWY6lGnSinMM+GVKpM12OG7mw8k5hhZ
86mehzgm2CQO3UToErOtojk9f6Q3xpmEWS44Iw5RyYQSMBw8OAyEomaP5tdifFh8
wGz8RcTiSnbfrBlyKFLSqIWZ/hcHVpFBhfVgZ1Wy52FCfTCwP6Q/vZ9OeiXAPDNl
U/Bk7Da6vAJPQATAt0I39dukLc41+6wlvKfSRn8gXRb6ZIGtk9SKiXSMPwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK6fSLtiWsKfOxeYoI9ToIxL42whMB8GA1UdIwQY
MBaAFPnmWefu9tc7aG6x0pVscfO+W713MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lWlo1LTcyMXp0b2JySFNsV3h4ODc1YnZYYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZmI4ZGI1LTExODktNDM1MS1iZGU3
LTIwNmJjY2E3ODQyMS8xLzEtZVpaNS03MjF6dG9ickhTbFd4eDg3NWJ2WGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JmL2ZiOGRiNS0xMTg5LTQzNTEtYmRlNy0yMDZiY2NhNzg0
MjEvMS8xLWVaWjUtNzIxenRvYnJIU2xXeHg4NzVidlhjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+QB
1ovEodMN6JW7/6G/RH8g4MGHLQqT0F9MsiFifP6NTU0lnw2HBqo2CMEdBYIsVZCI
eSD3jotxL1gyoUpaLOwlHhIfQOXzxEg+bySHItFFXk1YZeyLC8ukSSzJVxNYVZRa
HaHDnQ5XV2SHGQ+fpZBdbPCFe99INKsh/t7gbwWCFagwyXYN8lSpoUZEOJ2iLbVT
yHTmHdbfrAJdCg3VAmoy81UWYK8LfrSf9XVMcV8oMJSz3g/Sdd4R5lAcksSeiJql
beuAdXQKUiDHW7SEWvE0SuxIKCZE5IXRRxPNKaq9PcO7WPftNtKchhI4+BPPo5/7
d6tIJQKc/upGxCxyyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:00 2025 by rpki-client