Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
File: 1kBlpUFdmUI5AUXyJHkB2TZFidc.mft (raw, json)
Hash identifier: c6iboJROvziSr8zbKE0YG2KG5PG+DQYgFUvUAa2Ss1Y=
Subject key identifier: 14:BA:17:12:22:26:4F:84:56:33:07:8A:06:9E:96:39:37:67:EC:E5
Authority key identifier: D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
Certificate issuer: /CN=d64065a5415d9942390145f2247901d9364589d7
Certificate serial: 0198D4A829BEFAA3D85FB86226DC4A5213C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
Manifest number: 0B1D
Signing time: Sat 23 Aug 2025 02:00:47 +0000
Manifest this update: Sat 23 Aug 2025 02:00:47 +0000
Manifest next update: Sun 24 Aug 2025 02:00:47 +0000
Files and hashes: 1: 1kBlpUFdmUI5AUXyJHkB2TZFidc.crl (hash: KQlYlIyNqrPXJb5GleJOxpVE/oThHcPZjSUyGFr47u8=)
2: 6rPFWOjVfpn28_M8t16r5KAzkLA.roa (hash: wER3Gq8nSGCzekLgZFtgVD/F8/GF6EezM87XvHZecI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:29:be:fa:a3:d8:5f:b8:62:26:dc:4a:52:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64065a5415d9942390145f2247901d9364589d7
Validity
Not Before: Aug 23 02:00:47 2025 GMT
Not After : Aug 24 02:00:47 2025 GMT
Subject: CN=14ba171222264f845633078a069e96393767ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:6e:f4:c0:99:39:3d:ca:e1:2b:e4:71:1a:
32:76:2a:d1:05:80:97:34:84:06:e7:de:15:4a:fb:
65:7c:d0:37:dd:4e:2f:8e:5d:5e:1d:9b:70:8f:ac:
05:ed:d0:5e:1e:bb:4b:ad:6c:2a:b5:38:57:64:9d:
45:a4:6a:16:dc:71:64:7b:98:03:26:43:5b:af:00:
53:61:80:4b:f3:a9:a1:98:e4:62:41:34:42:c3:dc:
36:3f:f3:98:b3:1e:03:52:ea:35:29:7d:d1:c4:da:
e7:5c:e0:90:b5:5f:a2:e6:dd:38:7e:17:c7:0e:02:
1c:00:6c:e8:d1:5d:60:47:97:dd:d5:15:33:5e:de:
e9:32:3c:74:79:98:06:23:a9:61:13:82:b0:04:8c:
b2:2f:81:a8:ab:c4:e4:de:bd:ae:1b:4e:5d:08:39:
7e:2b:59:14:1e:c8:00:f3:04:48:a4:35:d1:4b:69:
58:34:1e:1e:99:53:63:11:01:c7:74:a8:e6:ff:19:
e2:5e:68:23:91:9c:37:07:8f:8e:15:46:5c:9b:ac:
45:fc:7a:f3:85:ac:17:d9:0f:a2:d7:a4:9c:7c:fd:
95:65:42:30:ba:95:92:12:23:dd:eb:70:2d:95:36:
03:5c:7b:81:7b:3c:3a:a2:b7:33:bc:03:f7:b4:ac:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BA:17:12:22:26:4F:84:56:33:07:8A:06:9E:96:39:37:67:EC:E5
X509v3 Authority Key Identifier:
keyid:D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2a:d2:dc:99:01:8b:86:d6:4e:98:05:26:18:17:4a:d9:fd:
5b:36:65:76:a5:b1:2b:a7:55:5a:2b:1c:c4:fe:a6:be:68:b7:
3a:b5:6c:07:3e:91:a8:f0:a8:e8:a2:b2:3a:0c:81:e8:9f:93:
91:68:3b:7f:8d:60:bf:ac:9b:ec:ac:9d:92:aa:0a:c1:8b:ad:
db:7d:c6:12:49:9b:de:af:b8:e6:7d:81:6b:1b:a4:fc:46:8e:
3a:28:fa:b0:10:05:9b:b6:81:87:c2:5e:87:81:94:06:3a:0e:
52:b1:79:d5:e4:10:da:f5:8e:9a:96:a8:27:14:80:0d:86:9e:
44:06:a0:a2:56:a3:aa:bb:e4:7f:88:92:c0:b0:bc:ec:58:ac:
4c:02:92:22:a9:9c:9c:f9:75:02:c4:17:fc:64:55:68:4f:1d:
f1:c0:55:57:7a:b2:b2:e5:21:90:bc:3e:cd:a8:38:f3:c6:2c:
df:ce:8e:b6:5c:a7:46:45:6a:ad:ca:3c:ae:04:62:26:63:e0:
1f:5e:06:51:ac:4d:5d:18:69:ef:06:de:03:77:3a:64:42:e8:
e9:44:75:6c:1e:70:02:18:83:be:19:14:3c:e0:9c:59:8f:6b:
fc:b7:24:b7:ea:46:99:d2:3e:a3:86:45:c0:b9:a1:a1:33:ed:
07:a3:21:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqCm++qPYX7hiJtxKUhPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDA2NWE1NDE1ZDk5NDIzOTAxNDVmMjI0NzkwMWQ5MzY0
NTg5ZDcwHhcNMjUwODIzMDIwMDQ3WhcNMjUwODI0MDIwMDQ3WjAzMTEwLwYDVQQD
EygxNGJhMTcxMjIyMjY0Zjg0NTYzMzA3OGEwNjllOTYzOTM3NjdlY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni1u9MCZOT3K4SvkcRoydirRBYCX
NIQG594VSvtlfNA33U4vjl1eHZtwj6wF7dBeHrtLrWwqtThXZJ1FpGoW3HFke5gD
JkNbrwBTYYBL86mhmORiQTRCw9w2P/OYsx4DUuo1KX3RxNrnXOCQtV+i5t04fhfH
DgIcAGzo0V1gR5fd1RUzXt7pMjx0eZgGI6lhE4KwBIyyL4Goq8Tk3r2uG05dCDl+
K1kUHsgA8wRIpDXRS2lYNB4emVNjEQHHdKjm/xniXmgjkZw3B4+OFUZcm6xF/Hrz
hawX2Q+i16ScfP2VZUIwupWSEiPd63AtlTYDXHuBezw6orczvAP3tKxTGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS6FxIiJk+EVjMHigaeljk3Z+zlMB8GA1UdIwQY
MBaAFNZAZaVBXZlCOQFF8iR5Adk2RYnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtCbHBVRmRtVUk1QVVYeUpIa0IyVFpGaWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85YTJkODYtMGY1ZS00NDZiLWFkMjkt
ZjhhZjJkMGFlMjhjLzEvMWtCbHBVRmRtVUk1QVVYeUpIa0IyVFpGaWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85YTJkODYtMGY1ZS00NDZiLWFkMjktZjhhZjJkMGFlMjhj
LzEvMWtCbHBVRmRtVUk1QVVYeUpIa0IyVFpGaWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCrS3JkB
i4bWTpgFJhgXStn9WzZldqWxK6dVWiscxP6mvmi3OrVsBz6RqPCo6KKyOgyB6J+T
kWg7f41gv6yb7KydkqoKwYut233GEkmb3q+45n2Baxuk/EaOOij6sBAFm7aBh8Je
h4GUBjoOUrF51eQQ2vWOmpaoJxSADYaeRAagolajqrvkf4iSwLC87FisTAKSIqmc
nPl1AsQX/GRVaE8d8cBVV3qysuUhkLw+zag488Ys386OtlynRkVqrco8rgRiJmPg
H14GUaxNXRhp7wbeA3c6ZELo6UR1bB5wAhiDvhkUPOCcWY9r/Lckt+pGmdI+o4ZF
wLmhoTPtB6MhyA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:29 2025 by rpki-client