Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: N2zYuTJLmvIKqib8eAcQi5BB6LxrHQ+ancIIhuCVGSU=
Subject key identifier: F5:D6:FE:89:B5:0F:32:BE:68:37:D1:7A:8A:04:45:4B:E0:7D:10:E4
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 0198D77390D16AB65360F5CB963A1430EDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 0440
Signing time: Sat 23 Aug 2025 15:02:11 +0000
Manifest this update: Sat 23 Aug 2025 15:02:11 +0000
Manifest next update: Sun 24 Aug 2025 15:02:11 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: xVkPhwtr6VjCSmIEJn1oTkxe2jZREcsKwjNpp7KO+mk=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:90:d1:6a:b6:53:60:f5:cb:96:3a:14:30:ed:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Aug 23 15:02:11 2025 GMT
Not After : Aug 24 15:02:11 2025 GMT
Subject: CN=f5d6fe89b50f32be6837d17a8a04454be07d10e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a5:7f:78:1b:0c:9e:94:8d:8e:23:e8:1c:63:
71:48:0f:60:dd:43:67:fc:ed:2e:06:66:c9:93:66:
01:ae:2a:fb:46:10:c0:84:a8:6b:4a:99:25:01:72:
88:ca:dd:5f:02:24:70:29:ec:41:a7:94:5b:66:93:
ff:7e:94:ab:d3:a9:6c:ab:35:5f:ce:c3:36:15:40:
7a:56:b2:47:63:47:36:14:fc:1e:7f:26:0b:18:f0:
9a:ed:2f:7c:a2:5c:22:78:f5:ec:c7:c9:4a:97:b3:
02:88:13:be:0b:f6:45:fd:3d:ea:8c:03:e8:eb:83:
21:ca:d0:14:2f:e5:fe:40:80:b1:16:2f:d7:e9:b8:
a6:6b:83:6c:a3:5e:0e:5c:30:b1:73:65:79:16:6d:
2e:24:6c:a5:86:51:d2:7a:a4:35:93:4c:36:20:63:
cb:bf:c8:c5:39:f2:11:f7:43:0d:df:2f:57:62:34:
c6:49:ed:60:7b:98:81:e4:e6:71:32:cd:03:6f:ee:
f3:67:9d:bf:bb:29:a7:8f:4d:a7:9a:ac:8a:37:be:
36:00:26:12:26:2d:fe:14:9b:21:d1:2e:0e:62:bd:
c2:33:32:b1:3e:41:f2:6c:81:a5:aa:9c:96:45:a8:
07:9e:8e:1a:02:a3:89:5d:f6:a8:48:2e:b9:81:86:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:FE:89:B5:0F:32:BE:68:37:D1:7A:8A:04:45:4B:E0:7D:10:E4
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7e:ce:eb:37:31:a9:08:8c:11:b5:4c:ea:a2:33:f3:6e:88:
c3:ec:30:b7:76:32:ca:52:20:90:ee:2e:e0:e7:ff:03:ed:de:
a2:d4:2f:11:16:a6:51:a2:fd:bd:8a:ff:7b:9e:34:b2:31:44:
13:53:ca:33:8c:fb:d3:7d:92:6e:91:b6:ab:d1:94:1f:67:43:
39:47:6b:2e:92:c7:4f:05:20:1d:7a:ec:49:df:af:08:f7:63:
fe:70:ee:b0:09:c9:d1:1f:e5:ba:ac:b2:ac:41:7d:20:54:34:
59:43:49:91:ff:dc:7d:7e:19:fd:d9:67:35:fe:b9:9f:9b:30:
e8:77:18:d5:57:9f:74:77:d4:89:f8:16:2f:aa:57:3e:d6:5e:
02:22:40:e1:f2:6c:81:30:12:cd:cc:f4:47:b0:6c:25:bd:4e:
02:85:5c:df:6b:c7:a5:3f:61:d5:5f:a4:5e:d8:fe:36:ac:51:
7d:2b:b9:be:5c:10:3b:4e:1b:81:30:fc:5b:25:4a:e8:82:32:
78:1a:b3:4e:88:0a:3d:39:44:f9:97:31:6b:b2:3f:cb:a0:a7:
58:51:dc:16:ab:6c:36:57:5e:83:f5:89:ab:f5:97:3f:37:82:
2e:1c:67:a3:03:91:ac:5c:38:83:99:9a:e9:0e:02:0d:6e:bb:
94:71:09:2c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjXc5DRarZTYPXLljoUMO36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTJmMDVmY2Q1OWZkMTY4NmY5MjljNjdiZWRjZWY1OWU1
NTBkZjIwHhcNMjUwODIzMTUwMjExWhcNMjUwODI0MTUwMjExWjAzMTEwLwYDVQQD
EyhmNWQ2ZmU4OWI1MGYzMmJlNjgzN2QxN2E4YTA0NDU0YmUwN2QxMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86V/eBsMnpSNjiPoHGNxSA9g3UNn
/O0uBmbJk2YBrir7RhDAhKhrSpklAXKIyt1fAiRwKexBp5RbZpP/fpSr06lsqzVf
zsM2FUB6VrJHY0c2FPwefyYLGPCa7S98olwiePXsx8lKl7MCiBO+C/ZF/T3qjAPo
64MhytAUL+X+QICxFi/X6bima4Nso14OXDCxc2V5Fm0uJGylhlHSeqQ1k0w2IGPL
v8jFOfIR90MN3y9XYjTGSe1ge5iB5OZxMs0Db+7zZ52/uymnj02nmqyKN742ACYS
Ji3+FJsh0S4OYr3CMzKxPkHybIGlqpyWRagHno4aAqOJXfaoSC65gYazmwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPXW/om1DzK+aDfReooERUvgfRDkMB8GA1UdIwQY
MBaAFPsS8F/NWf0WhvkpxnvtzvWeVQ3yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14THdYODFaX1JhRy1TbkdlLTNPOVo1VkRmSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvYTAzN2QxLWVhN2MtNGM4NS04MTI4
LWQ0ZDBhYWI3MDFiZi8xLzEteEx3WDgxWl9SYUctU25HZS0zTzlaNVZEZkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5L2EwMzdkMS1lYTdjLTRjODUtODEyOC1kNGQwYWFiNzAx
YmYvMS8xLXhMd1g4MVpfUmFHLVNuR2UtM085WjVWRGZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmH7O
6zcxqQiMEbVM6qIz826Iw+wwt3YyylIgkO4u4Of/A+3eotQvERamUaL9vYr/e540
sjFEE1PKM4z7032SbpG2q9GUH2dDOUdrLpLHTwUgHXrsSd+vCPdj/nDusAnJ0R/l
uqyyrEF9IFQ0WUNJkf/cfX4Z/dlnNf65n5sw6HcY1VefdHfUifgWL6pXPtZeAiJA
4fJsgTASzcz0R7BsJb1OAoVc32vHpT9h1V+kXtj+NqxRfSu5vlwQO04bgTD8WyVK
6IIyeBqzTogKPTlE+Zcxa7I/y6CnWFHcFqtsNldeg/WJq/WXPzeCLhxnowORrFw4
g5ma6Q4CDW67lHEJLA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:30:58 2025 by rpki-client