Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: DweXOvIVAXWT1ZThTZxZbcLLxsPpp62DEuJA7ijYko8=
Subject key identifier: 6C:C7:AF:51:D7:52:5A:57:08:2E:C0:95:47:CA:F8:84:8E:DC:A3:03
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 0198D5156DAAF610E5334F37E79687EF05D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 04:00:07 +0000
Manifest this update: Sat 23 Aug 2025 04:00:07 +0000
Manifest next update: Sun 24 Aug 2025 04:00:07 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: cJycF9SPtzzpAG72rh4wdl/nT7+d/S8oUeWeEU6+CPY=)
2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6d:aa:f6:10:e5:33:4f:37:e7:96:87:ef:05:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Aug 23 04:00:07 2025 GMT
Not After : Aug 24 04:00:07 2025 GMT
Subject: CN=6cc7af51d7525a57082ec09547caf8848edca303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:1b:b1:c7:bf:16:11:e5:b3:4b:31:35:62:
3f:54:2e:80:5c:65:1d:0a:df:71:7a:b9:0a:19:05:
a5:84:4e:b7:63:6b:87:4c:bd:83:58:c7:a7:24:fb:
c9:dc:7d:a9:61:f3:48:fa:78:87:25:ac:93:5f:bf:
32:18:c2:e1:05:42:da:3b:03:75:24:af:f7:b7:e6:
68:c3:39:93:fb:1f:90:f4:2b:fe:29:27:ad:d1:f9:
16:fa:71:bf:9b:f2:91:de:bb:dc:40:40:b3:62:77:
0b:fa:17:24:e2:f6:34:16:13:81:83:6b:10:8d:39:
ec:9c:75:8e:34:38:8a:dd:51:53:d3:8d:3e:e7:d9:
13:e2:a6:0c:f8:f9:a1:f2:c7:08:f4:4b:7a:cc:5c:
24:ad:8a:30:91:f5:fa:ab:fe:3c:fd:8f:14:20:a6:
ca:9c:db:7a:96:c7:d5:64:06:3c:56:0a:83:14:97:
3d:51:b5:3b:da:14:26:0a:38:a7:89:98:d3:bd:be:
40:be:9c:c2:f4:4d:93:e0:8e:2e:8f:d7:29:14:d3:
a7:a2:aa:c2:eb:9f:cf:83:97:d9:b1:a8:b4:ce:51:
4b:b2:33:9d:3b:af:c2:a9:6a:df:57:2b:38:0a:69:
4e:0e:a4:09:58:c9:8d:48:04:a4:0c:62:2c:02:a8:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C7:AF:51:D7:52:5A:57:08:2E:C0:95:47:CA:F8:84:8E:DC:A3:03
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:08:57:86:d3:1d:94:c9:9a:a4:9f:72:84:f4:44:c1:f5:df:
b3:6f:cb:d6:c0:14:70:05:73:d1:c9:2e:f7:dd:e3:0b:a3:8d:
a5:ee:78:42:52:9d:97:77:5f:67:93:2f:fb:b2:ad:e3:3e:22:
ca:00:cb:e8:8b:bf:1e:83:e4:b3:23:8d:1f:b2:fe:4f:56:dc:
25:4b:f1:89:a6:ce:f6:01:c3:04:31:f5:82:9b:2e:6e:44:74:
47:82:9c:b7:ff:bb:db:cb:9a:c5:97:96:d2:ff:3a:8c:02:08:
db:d7:87:3d:be:e1:1a:9c:27:c1:b5:a9:93:ca:5c:ff:4d:7b:
68:7a:61:41:bc:a8:ce:c4:34:af:9e:6d:6e:74:42:17:c6:2b:
c6:0d:79:a0:15:97:f2:7c:ae:a7:db:d1:25:e8:7c:58:c1:a3:
d4:e7:e5:2d:2d:6e:27:98:3f:79:16:a9:93:4f:dc:26:94:6c:
10:38:1c:bf:5f:26:91:68:e2:a8:43:cc:10:c6:e4:cc:d5:35:
89:08:e0:0b:a8:1d:42:a9:6b:bc:3c:d6:c3:7d:4c:30:32:35:
b2:ba:3e:b4:ed:ea:74:e7:e5:2c:b1:fc:03:d4:5f:eb:7a:f5:
76:a1:7e:0d:11:de:ef:58:8b:90:ba:50:4b:a9:c1:62:e7:ad:
57:2e:76:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFW2q9hDlM08355aH7wXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjM1N2M1NDk0OWYyMGI0MDA4ODNlZDhjOThkMzczMWMz
Y2I0OTUwHhcNMjUwODIzMDQwMDA3WhcNMjUwODI0MDQwMDA3WjAzMTEwLwYDVQQD
Eyg2Y2M3YWY1MWQ3NTI1YTU3MDgyZWMwOTU0N2NhZjg4NDhlZGNhMzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEEbsce/FhHls0sxNWI/VC6AXGUd
Ct9xerkKGQWlhE63Y2uHTL2DWMenJPvJ3H2pYfNI+niHJayTX78yGMLhBULaOwN1
JK/3t+ZowzmT+x+Q9Cv+KSet0fkW+nG/m/KR3rvcQECzYncL+hck4vY0FhOBg2sQ
jTnsnHWONDiK3VFT040+59kT4qYM+Pmh8scI9Et6zFwkrYowkfX6q/48/Y8UIKbK
nNt6lsfVZAY8VgqDFJc9UbU72hQmCjiniZjTvb5AvpzC9E2T4I4uj9cpFNOnoqrC
65/Pg5fZsai0zlFLsjOdO6/CqWrfVys4CmlODqQJWMmNSASkDGIsAqhsawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzHr1HXUlpXCC7AlUfK+ISO3KMDMB8GA1UdIwQY
MBaAFNbzV8VJSfILQAiD7YyY03McPLSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTkt
MDVmMDllZjg2ZTdiLzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTktMDVmMDllZjg2ZTdi
LzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwhXhtMd
lMmapJ9yhPREwfXfs2/L1sAUcAVz0cku993jC6ONpe54QlKdl3dfZ5Mv+7Kt4z4i
ygDL6Iu/HoPksyONH7L+T1bcJUvxiabO9gHDBDH1gpsubkR0R4Kct/+728uaxZeW
0v86jAII29eHPb7hGpwnwbWpk8pc/017aHphQbyozsQ0r55tbnRCF8Yrxg15oBWX
8nyup9vRJeh8WMGj1OflLS1uJ5g/eRapk0/cJpRsEDgcv18mkWjiqEPMEMbkzNU1
iQjgC6gdQqlrvDzWw31MMDI1sro+tO3qdOflLLH8A9Rf63r1dqF+DRHe71iLkLpQ
S6nBYuetVy52LQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:54 2025 by rpki-client