Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: EgIEy9bqvuj50u+DvQQpUgTrxTJZSw8l76urQpMIBFw=
Subject key identifier: 4E:86:9A:FE:95:7A:53:76:D4:CD:94:8F:E4:2E:B3:E4:08:58:FC:3F
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 0198D404454B2A03688919E7F2A256A73D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 1648
Signing time: Fri 22 Aug 2025 23:01:46 +0000
Manifest this update: Fri 22 Aug 2025 23:01:46 +0000
Manifest next update: Sat 23 Aug 2025 23:01:46 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: WmjZtofathIFlK58cN0ZkN8l5xmkc5r6h99NHmgl/CI=)
2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:45:4b:2a:03:68:89:19:e7:f2:a2:56:a7:3d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Aug 22 23:01:46 2025 GMT
Not After : Aug 23 23:01:46 2025 GMT
Subject: CN=4e869afe957a5376d4cd948fe42eb3e40858fc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:ce:4b:cf:8e:c0:dc:4f:57:f1:93:05:07:
0e:e5:42:1e:58:18:a1:b5:78:a9:50:86:f0:be:03:
69:55:65:04:04:30:11:8c:0b:0c:ab:50:8b:bf:ff:
b7:10:c9:3e:f4:5c:66:d6:8e:ac:a8:7e:e0:54:c0:
3a:b3:8c:d4:bd:f8:7f:da:c2:12:81:b8:62:66:93:
15:79:6e:a8:7a:4a:42:9b:c1:91:c3:66:ea:90:33:
87:cf:e7:4f:60:2c:96:9c:02:c6:17:52:00:fa:b0:
16:21:1d:b2:d0:2a:31:f6:68:3b:11:16:91:e7:32:
e7:c7:a8:b1:6e:ff:1d:64:af:e3:01:c3:1f:51:96:
d1:af:ca:4b:f8:b0:16:92:b6:43:e1:a2:84:fa:a7:
08:ec:b7:9e:d6:d0:84:6d:20:c3:35:85:36:67:fd:
d5:c2:7a:f0:83:48:af:fe:d3:e5:25:db:e9:50:a4:
a0:61:e7:76:3f:57:00:ee:6d:66:2a:e3:e8:33:f4:
02:85:a7:66:04:3d:48:7d:0c:1a:80:a7:d6:c3:35:
cf:6f:f4:69:60:13:a2:e4:bc:6d:99:3c:3c:2f:bc:
1c:15:33:96:ee:c7:6c:4d:45:81:ac:72:62:8c:16:
86:ba:40:5a:8b:00:ac:f3:34:be:ed:9d:0c:ef:e9:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:86:9A:FE:95:7A:53:76:D4:CD:94:8F:E4:2E:B3:E4:08:58:FC:3F
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6f:de:df:8e:c5:49:0c:9d:af:47:b1:fd:ff:7f:43:31:a4:
dd:a4:f3:1a:9b:c8:a1:7e:de:1c:a7:d9:fa:76:4f:64:c3:8a:
b4:c2:14:16:45:0b:1f:b9:54:cc:fd:c6:23:b4:95:57:bf:16:
3a:49:08:31:56:fe:df:66:18:af:34:b8:3c:86:c3:36:4b:bd:
2d:02:56:2f:20:18:38:8f:20:12:a7:73:b0:65:33:2f:a6:24:
c1:fb:e1:92:88:5a:82:2d:2a:2e:8e:38:75:26:12:95:a1:37:
f8:fd:59:15:9f:32:20:d0:44:46:07:8e:d6:52:a4:92:80:9f:
aa:36:a8:77:74:ea:ea:dc:cd:34:f5:a1:9f:a3:36:b3:cf:a2:
cb:57:2b:81:0b:72:ed:50:d8:6d:d3:d3:9b:49:96:87:47:22:
32:86:69:d9:cc:b6:5f:50:f6:bf:5c:58:e5:d5:8d:8f:42:33:
6d:3b:e9:8c:91:c1:71:6c:f0:9e:d9:04:c1:05:72:38:a7:35:
c0:c6:9f:63:fc:4c:b1:66:6d:ac:94:a5:35:ee:8c:dc:47:ef:
b3:26:6d:90:85:2f:13:9d:72:03:99:6a:e1:c5:df:b3:70:30:
fa:b9:34:a5:a7:18:4b:f6:c9:4c:48:f2:ca:e0:07:6f:4a:94:
95:e3:c2:2c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjUBEVLKgNoiRnn8qJWpz1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDE4NjNjYmRlYzFiNTk2ZGFjZWViOTAxYTA4NTNkNmM4
N2U3NTYwHhcNMjUwODIyMjMwMTQ2WhcNMjUwODIzMjMwMTQ2WjAzMTEwLwYDVQQD
Eyg0ZTg2OWFmZTk1N2E1Mzc2ZDRjZDk0OGZlNDJlYjNlNDA4NThmYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OPOS8+OwNxPV/GTBQcO5UIeWBih
tXipUIbwvgNpVWUEBDARjAsMq1CLv/+3EMk+9Fxm1o6sqH7gVMA6s4zUvfh/2sIS
gbhiZpMVeW6oekpCm8GRw2bqkDOHz+dPYCyWnALGF1IA+rAWIR2y0Cox9mg7ERaR
5zLnx6ixbv8dZK/jAcMfUZbRr8pL+LAWkrZD4aKE+qcI7Lee1tCEbSDDNYU2Z/3V
wnrwg0iv/tPlJdvpUKSgYed2P1cA7m1mKuPoM/QChadmBD1IfQwagKfWwzXPb/Rp
YBOi5LxtmTw8L7wcFTOW7sdsTUWBrHJijBaGukBaiwCs8zS+7Z0M7+kBewIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE6Gmv6VelN21M2Uj+Qus+QIWPw/MB8GA1UdIwQY
MBaAFPrRhjy97BtZbazuuQGghT1sh+dWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10R0dQTDNzRzFsdHJPNjVBYUNGUFd5SDUxWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZGRkYTdlLWEwMzctNGQzOC05NTU1
LTBhMTEwYzQ5NzQ5Yy8xLzEtdEdHUEwzc0cxbHRyTzY1QWFDRlBXeUg1MVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmL2RkZGE3ZS1hMDM3LTRkMzgtOTU1NS0wYTExMGM0OTc0
OWMvMS8xLXRHR1BMM3NHMWx0ck82NUFhQ0ZQV3lINTFZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2/e
347FSQydr0ex/f9/QzGk3aTzGpvIoX7eHKfZ+nZPZMOKtMIUFkULH7lUzP3GI7SV
V78WOkkIMVb+32YYrzS4PIbDNku9LQJWLyAYOI8gEqdzsGUzL6Ykwfvhkohagi0q
Lo44dSYSlaE3+P1ZFZ8yINBERgeO1lKkkoCfqjaod3Tq6tzNNPWhn6M2s8+iy1cr
gQty7VDYbdPTm0mWh0ciMoZp2cy2X1D2v1xY5dWNj0IzbTvpjJHBcWzwntkEwQVy
OKc1wMafY/xMsWZtrJSlNe6M3EfvsyZtkIUvE51yA5lq4cXfs3Aw+rk0pacYS/bJ
TEjyyuAHb0qUlePCLA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:18 2025 by rpki-client