Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: b1xi4xfWCLwIQUWehAANlX1LikoEqy26HTi+8wDuFrs=
Subject key identifier: 99:77:D5:58:67:B0:95:77:4E:C4:D3:CC:28:98:B4:01:15:9D:0F:E8
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 0198D4044F3FCDE922DA0EA6F09BCF5CF4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 1176
Signing time: Fri 22 Aug 2025 23:01:48 +0000
Manifest this update: Fri 22 Aug 2025 23:01:48 +0000
Manifest next update: Sat 23 Aug 2025 23:01:48 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: G3jMyE25z6F8NCqFGfIAy+GIUoDf2+bqrD9osyZIkY8=)
2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:4f:3f:cd:e9:22:da:0e:a6:f0:9b:cf:5c:f4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Aug 22 23:01:48 2025 GMT
Not After : Aug 23 23:01:48 2025 GMT
Subject: CN=9977d55867b095774ec4d3cc2898b401159d0fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:c7:99:78:e5:0b:1e:bc:f0:56:d0:fc:a7:
53:4e:a5:68:33:dc:39:b5:8d:5c:fc:ea:0d:80:60:
f9:38:bb:0f:4b:95:a6:4f:2e:32:8f:36:3f:1c:71:
8d:ab:da:54:cf:59:58:2d:c3:9d:8b:c6:ff:a7:3f:
f5:b3:33:cb:41:0b:83:bc:b8:c4:9f:b6:b6:1c:56:
b9:4b:70:1b:c2:b4:81:3a:ae:a8:14:7a:ba:77:49:
c6:f0:45:f2:72:c0:43:6f:cc:44:56:3a:0d:3e:e0:
76:3f:49:94:43:5f:9d:c4:c1:49:17:e8:f6:b2:a2:
cc:2c:cc:df:ab:20:f6:4c:1a:f5:06:db:c4:5e:1a:
75:2a:68:8e:d2:cc:34:dd:0b:a7:44:56:90:f6:a4:
2e:56:b3:80:8f:b4:58:8c:48:f7:be:78:3a:55:16:
ad:c7:74:b2:1b:ba:78:f4:34:97:a0:1c:a8:83:07:
96:51:81:d7:18:4e:aa:cf:85:b9:2f:df:b5:a0:c0:
92:96:bd:84:92:90:37:d3:1f:b6:3a:27:db:6d:eb:
13:fc:e2:63:b0:dd:ac:82:51:99:6b:db:bc:c1:e9:
fc:b0:ea:2a:42:9c:b1:24:4e:e3:54:ee:8b:a5:17:
f3:a6:3b:21:06:01:b6:c3:08:07:eb:4b:3a:a7:28:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:77:D5:58:67:B0:95:77:4E:C4:D3:CC:28:98:B4:01:15:9D:0F:E8
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1e:eb:3c:72:d0:41:a1:68:6a:f9:24:fd:81:97:1d:61:df:
02:9a:ad:5b:29:a0:5d:51:cf:c3:c2:2b:b5:76:17:46:2a:ec:
fa:3c:49:c7:11:d7:48:e6:45:d6:ac:4c:6d:36:28:1c:02:9e:
0e:57:46:46:52:72:f7:a3:30:cb:89:ea:a7:7e:46:70:37:19:
42:7e:e2:dd:3a:78:2a:b0:94:30:71:5c:5c:30:0f:f6:ec:a1:
31:78:cb:7c:0c:e7:2b:78:0e:c3:39:1c:8f:8f:e2:db:b4:38:
8f:83:5d:d6:57:5a:34:e1:d6:42:7e:8a:34:84:1d:db:7e:28:
52:81:41:73:cc:21:ec:2b:84:09:be:0b:76:e0:6f:50:09:d5:
ea:da:4b:ea:9f:5b:95:c0:5a:94:3a:cc:9d:41:e1:65:5e:d6:
cb:00:e1:32:90:62:77:31:38:06:ac:be:30:a8:46:5f:29:3b:
b2:b1:42:74:c6:1f:5f:8f:1e:f9:12:28:60:99:6a:fe:23:56:
49:b5:bb:12:af:b9:e2:d7:a9:c7:75:95:f4:60:94:6a:1e:46:
3e:a8:82:2a:c1:01:02:ab:74:58:b0:e0:d4:f2:84:a0:36:76:
0f:13:fd:d8:ea:7d:7b:93:08:14:40:54:6f:4a:db:06:e4:df:
e4:00:2a:ff
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjUBE8/zeki2g6m8JvPXPTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTVhYzVkMjJhZDkwNzhhNzJlMTM2OTk2Mjg3MjQ3ZTlm
MWUxMzEwHhcNMjUwODIyMjMwMTQ4WhcNMjUwODIzMjMwMTQ4WjAzMTEwLwYDVQQD
Eyg5OTc3ZDU1ODY3YjA5NTc3NGVjNGQzY2MyODk4YjQwMTE1OWQwZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwzHmXjlCx688FbQ/KdTTqVoM9w5
tY1c/OoNgGD5OLsPS5WmTy4yjzY/HHGNq9pUz1lYLcOdi8b/pz/1szPLQQuDvLjE
n7a2HFa5S3AbwrSBOq6oFHq6d0nG8EXycsBDb8xEVjoNPuB2P0mUQ1+dxMFJF+j2
sqLMLMzfqyD2TBr1BtvEXhp1KmiO0sw03QunRFaQ9qQuVrOAj7RYjEj3vng6VRat
x3SyG7p49DSXoByogweWUYHXGE6qz4W5L9+1oMCSlr2EkpA30x+2OifbbesT/OJj
sN2sglGZa9u8wen8sOoqQpyxJE7jVO6LpRfzpjshBgG2wwgH60s6pyh8xQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJl31VhnsJV3TsTTzCiYtAEVnQ/oMB8GA1UdIwQY
MBaAFPqlrF0irZB4py4TaZYockfp8eExMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xV3NYU0t0a0hpbkxoTnBsaWh5Ui1ueDRURS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYjU1YzA0LTZkNGEtNDk0OS1hYWE4
LTZlZTFhNzAwYjIxOS8xLzEtcVdzWFNLdGtIaW5MaE5wbGloeVItbng0VEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y5L2I1NWMwNC02ZDRhLTQ5NDktYWFhOC02ZWUxYTcwMGIy
MTkvMS8xLXFXc1hTS3RrSGluTGhOcGxpaHlSLW54NFRFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOx7r
PHLQQaFoavkk/YGXHWHfApqtWymgXVHPw8IrtXYXRirs+jxJxxHXSOZF1qxMbTYo
HAKeDldGRlJy96Mwy4nqp35GcDcZQn7i3Tp4KrCUMHFcXDAP9uyhMXjLfAznK3gO
wzkcj4/i27Q4j4Nd1ldaNOHWQn6KNIQd234oUoFBc8wh7CuECb4LduBvUAnV6tpL
6p9blcBalDrMnUHhZV7WywDhMpBidzE4Bqy+MKhGXyk7srFCdMYfX48e+RIoYJlq
/iNWSbW7Eq+54tepx3WV9GCUah5GPqiCKsEBAqt0WLDg1PKEoDZ2DxP92Op9e5MI
FEBUb0rbBuTf5AAq/w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:17 2025 by rpki-client