Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: Qv229mZcQ/L5FCiruDUqEeJLzTFLGqdQl6ImtSmnW+Q=
Subject key identifier: D5:A5:E1:17:F3:23:9E:30:A8:65:23:86:26:C5:EB:FF:E1:24:4F:53
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 0198D5BC118D98418D72C4D7F3993C9D3BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0D3C
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: 4hgeD1GXQcdsiyG/qFjax3SOiv6iPkkVhaQ7eov6Ioo=)
2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:11:8d:98:41:8d:72:c4:d7:f3:99:3c:9d:3b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=d5a5e117f3239e30a865238626c5ebffe1244f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:1e:ee:1f:a5:08:3d:7b:ea:7b:36:8d:5a:
cb:68:be:b3:66:d5:d1:77:a8:57:58:d8:b8:1a:c8:
ca:5a:6a:90:3b:ee:88:28:9f:71:47:b0:bb:5c:3b:
9e:fc:da:36:17:12:2f:5f:2f:63:5a:a0:98:51:7f:
c7:62:b0:86:22:a2:9a:3d:59:3a:93:73:97:5b:a7:
86:e9:0c:ce:d0:0f:c7:c6:55:34:35:e3:ad:50:7f:
a3:7e:e7:97:de:57:cd:d8:8d:09:0b:d0:63:87:c5:
2a:e7:7f:8c:96:ab:e6:79:e8:af:0d:92:d5:d5:86:
3a:1a:38:af:90:12:3e:d5:df:af:e7:73:b2:01:f8:
4c:79:93:0e:b3:0e:88:52:63:e3:76:ae:e1:e6:b3:
16:b3:0b:ce:5f:24:29:3e:2b:b0:fc:77:28:e2:2a:
45:bb:ee:19:3f:a1:e6:69:b8:1a:85:1a:5b:29:50:
b2:6f:d6:0f:3e:fb:3d:c8:02:14:1c:76:66:28:43:
30:58:40:bc:95:75:dd:fb:c1:e7:0f:0a:12:7f:61:
af:d1:3e:37:90:5d:f9:24:0c:ae:94:86:e1:16:f1:
eb:6f:84:94:34:fd:19:fa:42:c2:a5:eb:b4:ee:93:
61:8b:e7:81:8b:1b:cd:8b:fb:e0:1d:cb:68:f7:5c:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A5:E1:17:F3:23:9E:30:A8:65:23:86:26:C5:EB:FF:E1:24:4F:53
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:98:9b:21:d8:79:23:8b:7b:77:4a:9b:94:de:5e:4b:2a:31:
d6:b6:8b:4d:43:47:f9:18:43:19:fd:bb:a6:3f:7e:a8:9a:09:
d8:b2:16:89:8a:29:6f:ac:97:20:05:72:47:dc:a6:14:38:f5:
9e:68:bb:19:57:9d:a5:ed:d8:b5:18:40:28:be:6e:88:58:c3:
0d:a7:b4:8f:87:c6:c6:8e:ce:a5:ed:95:e5:b4:3b:1f:ce:2b:
3e:ed:3b:5a:75:99:65:66:90:82:c4:a0:76:c8:56:e7:98:d4:
3f:81:13:38:bd:e2:c1:98:a3:dd:f6:ee:42:53:4d:e5:92:8f:
17:3b:10:44:b4:6b:6d:e6:ab:e1:de:36:47:18:e8:a1:b4:1f:
3d:c7:9b:a3:a6:d5:bc:7c:64:cf:ff:03:8c:49:68:e6:cf:b9:
10:f0:57:5c:24:fd:7a:d4:b5:75:d2:a7:8c:19:c9:a9:2b:33:
b1:59:f5:33:a2:8d:c0:8f:62:7a:50:8e:19:91:3b:02:14:69:
e2:07:17:c3:e3:56:17:23:cc:15:64:ac:21:77:98:95:6a:58:
77:cf:5e:6e:e8:1b:10:00:d4:34:b9:ac:06:7b:f6:69:93:de:
f1:72:82:ed:28:6c:39:aa:d8:92:84:45:da:bb:a4:b4:4b:e2:
94:93:25:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvBGNmEGNcsTX85k8nTumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDg2ZTdkMDczYTllNGQ2OWVjNzE1YzM2MjMxNzY4MDU4
OTRkNWEwHhcNMjUwODIzMDcwMjA4WhcNMjUwODI0MDcwMjA4WjAzMTEwLwYDVQQD
EyhkNWE1ZTExN2YzMjM5ZTMwYTg2NTIzODYyNmM1ZWJmZmUxMjQ0ZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kse7h+lCD176ns2jVrLaL6zZtXR
d6hXWNi4GsjKWmqQO+6IKJ9xR7C7XDue/No2FxIvXy9jWqCYUX/HYrCGIqKaPVk6
k3OXW6eG6QzO0A/HxlU0NeOtUH+jfueX3lfN2I0JC9Bjh8Uq53+MlqvmeeivDZLV
1YY6GjivkBI+1d+v53OyAfhMeZMOsw6IUmPjdq7h5rMWswvOXyQpPiuw/Hco4ipF
u+4ZP6HmabgahRpbKVCyb9YPPvs9yAIUHHZmKEMwWEC8lXXd+8HnDwoSf2Gv0T43
kF35JAyulIbhFvHrb4SUNP0Z+kLCpeu07pNhi+eBixvNi/vgHcto91z+6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWl4RfzI54wqGUjhibF6//hJE9TMB8GA1UdIwQY
MBaAFNTYbn0HOp5NaexxXDYjF2gFiU1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt
OTU1YWQ3OGJjYjA3LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3
LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJibIdh5
I4t7d0qblN5eSyox1raLTUNH+RhDGf27pj9+qJoJ2LIWiYopb6yXIAVyR9ymFDj1
nmi7GVedpe3YtRhAKL5uiFjDDae0j4fGxo7Ope2V5bQ7H84rPu07WnWZZWaQgsSg
dshW55jUP4ETOL3iwZij3fbuQlNN5ZKPFzsQRLRrbear4d42RxjoobQfPcebo6bV
vHxkz/8DjElo5s+5EPBXXCT9etS1ddKnjBnJqSszsVn1M6KNwI9ielCOGZE7AhRp
4gcXw+NWFyPMFWSsIXeYlWpYd89ebugbEADUNLmsBnv2aZPe8XKC7ShsOarYkoRF
2ruktEvilJMlTw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:36 2025 by rpki-client