Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: 79+brU3jIk3SpKCd0nsRqmuEyW40HPk0GJxuFJXie/8=
Subject key identifier: C4:42:B2:E2:B8:DF:79:62:81:7A:54:32:81:72:EA:64:57:9A:0E:45
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 0198D54DD0D41AD2D2D0EB3089FA9153B72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 1608
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: 7SlOtfATwLbcM2+ryCRgRu7AHaqcjbZRtnpauHSnRLA=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d0:d4:1a:d2:d2:d0:eb:30:89:fa:91:53:b7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=c442b2e2b8df7962817a54328172ea64579a0e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:b5:d2:34:96:b5:3b:62:72:3a:0d:c5:0f:
5c:35:f9:0e:4f:ee:bb:b6:1f:68:6e:eb:3a:68:5f:
fc:f7:3d:e4:bc:92:95:85:5f:de:02:f0:4d:10:e7:
bc:9d:1a:19:64:08:fe:48:7a:28:4e:21:e0:8e:b5:
be:9e:99:68:b5:11:45:46:07:42:96:75:5c:4c:6a:
23:23:3f:73:a1:ba:6c:e8:b1:e6:42:e3:4c:46:e5:
b4:46:d2:ef:7b:63:9b:38:fd:92:48:e6:d5:ca:2e:
f4:6d:ce:7e:ce:64:45:dd:3f:1a:55:f2:c4:60:85:
39:02:d9:bc:61:a4:37:c5:78:61:58:80:42:8f:6b:
b3:4a:40:b3:61:48:38:8d:bb:4e:3b:10:81:9c:3c:
c2:bc:52:d8:29:41:d8:92:d0:bb:76:57:b4:7b:1a:
7c:dd:75:94:58:18:44:da:4f:9b:e2:d8:73:27:06:
82:45:6a:ca:5f:48:7f:be:d7:07:54:b6:a1:37:84:
47:58:73:c6:31:5e:b3:cd:68:6b:78:7a:66:bb:87:
be:22:66:c3:1d:9d:49:1e:06:03:54:b4:dc:e7:31:
fa:1f:71:35:6b:c2:e9:22:17:71:fb:1d:24:a5:33:
04:e8:41:ad:f6:37:3b:9f:c0:b6:08:82:1a:e1:9a:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:42:B2:E2:B8:DF:79:62:81:7A:54:32:81:72:EA:64:57:9A:0E:45
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:09:b1:a4:25:0f:91:49:e0:51:ec:59:f2:b6:bb:c7:86:64:
6e:44:d6:05:b8:9b:ea:4e:3f:76:b9:5d:74:4a:33:0e:66:fe:
48:62:40:a1:eb:5d:cc:a5:62:7a:3e:35:61:44:99:9a:28:91:
88:30:b9:4d:1d:89:02:51:5c:ee:11:22:23:22:b7:76:31:41:
98:00:b3:18:2c:9c:04:45:12:70:fb:3a:77:f3:a4:5e:6c:79:
87:fa:bb:55:27:88:31:0e:28:0d:eb:1d:30:ef:87:a1:bf:72:
cf:17:45:10:0c:2b:6d:c6:76:59:0c:2d:e5:2b:0e:59:e4:38:
ad:9a:b6:32:9b:0c:29:e6:38:c0:d9:48:59:dc:73:44:93:83:
6b:4d:64:20:22:1c:5f:d3:e6:8d:ee:b4:4e:46:5a:a8:a4:8c:
03:53:1d:93:3d:ff:c1:ab:38:8e:50:b5:d9:6d:ae:f0:90:af:
d9:c0:ce:35:10:ac:ec:a5:da:b6:31:14:6e:b3:2f:f6:70:1a:
2e:5d:59:1a:7b:88:fa:1a:f9:ae:70:8e:79:88:d7:87:32:02:
e6:63:fd:36:45:68:29:3f:00:7a:52:cc:6a:10:a3:73:18:44:
2c:fd:7a:26:66:ba:7b:b2:a4:68:0e:b1:f8:60:b6:ee:10:b2:
f5:5f:c9:90
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjVTdDUGtLS0OswifqRU7cqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzQyZDc3N2QwODI0MTZhMmQ4NDdkNDAwM2EzMzFiNTBl
MjQyM2UwHhcNMjUwODIzMDUwMTQzWhcNMjUwODI0MDUwMTQzWjAzMTEwLwYDVQQD
EyhjNDQyYjJlMmI4ZGY3OTYyODE3YTU0MzI4MTcyZWE2NDU3OWEwZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEe10jSWtTticjoNxQ9cNfkOT+67
th9obus6aF/89z3kvJKVhV/eAvBNEOe8nRoZZAj+SHooTiHgjrW+nplotRFFRgdC
lnVcTGojIz9zobps6LHmQuNMRuW0RtLve2ObOP2SSObVyi70bc5+zmRF3T8aVfLE
YIU5Atm8YaQ3xXhhWIBCj2uzSkCzYUg4jbtOOxCBnDzCvFLYKUHYktC7dle0exp8
3XWUWBhE2k+b4thzJwaCRWrKX0h/vtcHVLahN4RHWHPGMV6zzWhreHpmu4e+ImbD
HZ1JHgYDVLTc5zH6H3E1a8LpIhdx+x0kpTME6EGt9jc7n8C2CIIa4Zq7MwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMRCsuK433ligXpUMoFy6mRXmg5FMB8GA1UdIwQY
MBaAFPl0LXd9CCQWothH1AA6MxtQ4kI+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YUXRkMzBJSkJhaTJFZlVBRG96RzFEaVFqNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDgyNzA4LWMxZDQtNDBmYy05MzIx
LTY2OThiOTMyMzNkNi8xLzEtWFF0ZDMwSUpCYWkyRWZVQURvekcxRGlRajQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q0LzQ4MjcwOC1jMWQ0LTQwZmMtOTMyMS02Njk4YjkzMjMz
ZDYvMS8xLVhRdGQzMElKQmFpMkVmVUFEb3pHMURpUWo0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQmx
pCUPkUngUexZ8ra7x4ZkbkTWBbib6k4/drlddEozDmb+SGJAoetdzKViej41YUSZ
miiRiDC5TR2JAlFc7hEiIyK3djFBmACzGCycBEUScPs6d/OkXmx5h/q7VSeIMQ4o
DesdMO+Hob9yzxdFEAwrbcZ2WQwt5SsOWeQ4rZq2MpsMKeY4wNlIWdxzRJODa01k
ICIcX9Pmje60TkZaqKSMA1Mdkz3/was4jlC12W2u8JCv2cDONRCs7KXatjEUbrMv
9nAaLl1ZGnuI+hr5rnCOeYjXhzIC5mP9NkVoKT8AelLMahCjcxhELP16Jma6e7Kk
aA6x+GC27hCy9V/JkA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:59 2025 by rpki-client