Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: CVHLDIFNm09TUC6UMczm5D4xFIAeowrngOgkrXOZuYA=
Subject key identifier: 4C:68:CF:55:F9:FB:65:51:E9:0E:9C:3A:62:68:7C:C1:E6:2A:91:B9
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 0198D73B39D0DFDEB38A9563C2F48A834A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 14:00:39 +0000
Manifest this update: Sat 23 Aug 2025 14:00:39 +0000
Manifest next update: Sun 24 Aug 2025 14:00:39 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: p+6Iz6iT8hrr6e/zxStFHKVj7eCqMGgsyI7WTCDDx/E=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:39:d0:df:de:b3:8a:95:63:c2:f4:8a:83:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Aug 23 14:00:39 2025 GMT
Not After : Aug 24 14:00:39 2025 GMT
Subject: CN=4c68cf55f9fb6551e90e9c3a62687cc1e62a91b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:e0:08:de:7b:64:0f:53:2b:08:89:77:24:
fc:a9:bf:bc:04:71:7c:61:8f:0f:bb:f7:e1:6d:17:
98:f3:69:05:f3:b6:53:bf:3b:93:74:cd:6d:97:83:
c9:ad:e9:3b:73:4d:e5:a2:12:10:81:bd:87:21:7d:
20:77:07:23:00:ee:cd:f1:35:70:1c:ab:b9:ef:bd:
60:b4:2d:67:4c:86:10:22:30:cb:84:67:e4:93:a4:
40:38:91:79:3b:4e:3c:a3:d5:5e:b6:0a:2a:5b:81:
cd:34:15:a5:06:4e:99:a0:c3:a2:2d:ed:f8:82:1c:
60:b2:cf:8c:26:22:b8:14:cf:6b:63:43:0a:00:b5:
5a:a7:94:89:57:5e:4d:88:a0:a3:6e:17:2e:a5:13:
38:c6:e3:bf:83:cc:ce:be:92:69:65:94:e4:f3:c5:
85:cb:de:46:c6:85:0c:ea:e6:70:9c:6b:72:e1:32:
37:17:6b:da:f3:b3:12:b5:ec:f0:59:87:f5:d0:5e:
03:0f:fa:5a:32:8c:3f:9b:b5:2d:f9:88:ab:60:10:
33:c9:cb:95:3a:aa:cc:2e:6a:39:76:a3:de:a1:ad:
b8:8d:0f:8e:d3:6f:5a:81:5b:e2:9c:83:72:71:91:
7d:19:d0:e5:04:a6:c2:5d:0c:1c:40:bf:f9:42:89:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:CF:55:F9:FB:65:51:E9:0E:9C:3A:62:68:7C:C1:E6:2A:91:B9
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:10:fd:89:af:72:45:6e:5e:a3:69:67:b7:d3:ec:84:54:6c:
95:ce:28:99:a4:17:12:bc:c6:be:5c:73:52:85:c6:07:4f:38:
8f:23:1f:af:14:92:4c:f6:81:8c:d3:f0:09:8f:e8:e0:57:f9:
8e:dc:3b:76:1d:7d:fb:e9:0b:7c:46:2a:52:fb:5e:f0:a8:a3:
0f:a8:32:a8:da:46:9f:da:46:62:1b:d0:22:5c:44:32:52:32:
25:4b:30:6e:23:d9:93:92:4b:07:69:82:ae:67:a8:47:29:4b:
b2:7c:fd:56:7e:e1:a0:f6:c8:b6:4a:3c:57:0e:ed:60:ae:3d:
3d:71:26:af:ba:38:5b:82:68:8b:b4:a8:7d:83:47:6d:ec:d1:
60:82:23:7f:2c:79:88:e8:13:8d:0f:d2:9f:21:e9:1d:a7:5c:
19:bd:51:3d:81:ec:78:11:8c:b2:19:dc:ef:f7:e7:9a:2d:6a:
6e:70:16:d9:b9:d6:48:73:ef:f4:08:79:f0:db:0d:ff:e3:13:
9e:10:1d:27:73:57:ab:aa:95:65:d5:04:7f:2c:65:c0:de:e9:
01:ee:10:13:d9:9b:ee:d5:59:80:66:62:8e:64:ce:8b:43:bc:
e3:a4:25:4d:14:b9:8b:bd:5c:39:aa:7c:b2:79:36:8c:5c:f8:
4a:52:ca:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOznQ396zipVjwvSKg0qXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YjBjMTFlNjY2NmNmYzFiN2YxYjY5OTRlMGY0MzczMjlh
ZGVjMDQwHhcNMjUwODIzMTQwMDM5WhcNMjUwODI0MTQwMDM5WjAzMTEwLwYDVQQD
Eyg0YzY4Y2Y1NWY5ZmI2NTUxZTkwZTljM2E2MjY4N2NjMWU2MmE5MWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwHgCN57ZA9TKwiJdyT8qb+8BHF8
YY8Pu/fhbReY82kF87ZTvzuTdM1tl4PJrek7c03lohIQgb2HIX0gdwcjAO7N8TVw
HKu5771gtC1nTIYQIjDLhGfkk6RAOJF5O048o9VetgoqW4HNNBWlBk6ZoMOiLe34
ghxgss+MJiK4FM9rY0MKALVap5SJV15NiKCjbhcupRM4xuO/g8zOvpJpZZTk88WF
y95GxoUM6uZwnGty4TI3F2va87MStezwWYf10F4DD/paMow/m7Ut+YirYBAzycuV
OqrMLmo5dqPeoa24jQ+O029agVvinINycZF9GdDlBKbCXQwcQL/5QolfGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExoz1X5+2VR6Q6cOmJofMHmKpG5MB8GA1UdIwQY
MBaAFNSwwR5mZs/Bt/G2mU4PQ3MprewEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2It
Nzk0NTNiNDc0ZTJlLzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2ItNzk0NTNiNDc0ZTJl
LzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRD9ia9y
RW5eo2lnt9PshFRslc4omaQXErzGvlxzUoXGB084jyMfrxSSTPaBjNPwCY/o4Ff5
jtw7dh19++kLfEYqUvte8KijD6gyqNpGn9pGYhvQIlxEMlIyJUswbiPZk5JLB2mC
rmeoRylLsnz9Vn7hoPbItko8Vw7tYK49PXEmr7o4W4Joi7SofYNHbezRYIIjfyx5
iOgTjQ/SnyHpHadcGb1RPYHseBGMshnc7/fnmi1qbnAW2bnWSHPv9Ah58NsN/+MT
nhAdJ3NXq6qVZdUEfyxlwN7pAe4QE9mb7tVZgGZijmTOi0O846QlTRS5i71cOap8
snk2jFz4SlLKdg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:19:19 2025 by rpki-client