Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
File: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft (raw, json)
Hash identifier: lxf1xMubzIbzcTIgwbsFpfriWPId/9Z5JCT8pEPpnO4=
Subject key identifier: B0:32:9A:27:D3:74:CC:20:56:C6:D5:63:12:A5:D3:13:C2:0C:B4:35
Authority key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Certificate issuer: /CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Certificate serial: 0197B6A2445DF0DC07A3F8247BCBED8CEEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
Manifest number: 0C5D
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl (hash: Gfz6DuAAWQSng4lWzzrZTpZZQyZDcNMzbj76PUWCmrk=)
2: 1-eEKcv2-HlB3jOunD8sGEQP3iuo.roa (hash: 1bxmvhYpMOeABQ7wYp60dzQC7ktJL7nqMNn/zKkAUDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:44:5d:f0:dc:07:a3:f8:24:7b:cb:ed:8c:ee:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=b0329a27d374cc2056c6d56312a5d313c20cb435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:11:e2:a7:11:1a:83:d7:e6:0a:78:19:ee:
22:88:a7:0a:94:3a:47:be:5f:4f:58:53:96:01:e4:
5c:f5:ba:9b:b7:bf:db:b4:08:30:43:d9:aa:75:17:
94:46:e0:81:1c:09:b9:60:d1:8c:68:db:67:e2:71:
4e:d7:63:2c:01:e5:4e:41:44:27:39:5a:8a:59:8f:
53:82:90:25:95:e4:5c:5d:a0:5b:7a:e1:ba:5d:d5:
48:13:cb:f1:8e:10:72:8a:ec:62:9a:85:63:26:d7:
d5:0a:67:b0:7b:bf:4e:ab:0a:19:6b:bf:fe:d5:35:
bc:30:d1:8e:f7:01:f0:7f:99:bd:2b:23:3a:af:cd:
f4:cb:c1:74:40:6d:3c:92:b7:98:8b:04:09:b6:d7:
ad:c6:94:ee:87:29:7f:03:03:1c:5d:11:5b:d7:ad:
73:d8:dc:0c:f4:94:2c:bc:4e:a6:d0:8c:2d:17:5e:
c5:e8:7d:d2:6c:13:50:c5:b2:83:33:4f:9a:5d:5a:
81:fe:0c:e1:56:05:d2:c5:b6:d5:c6:3d:3d:a4:6f:
2b:62:e2:01:9f:a7:a9:d0:f5:b8:cd:c0:d1:92:49:
b9:8b:75:9f:7a:da:37:98:fa:4c:5a:89:fd:29:dd:
61:09:dd:75:9d:b9:d0:53:24:b9:ae:1f:7c:35:14:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:32:9A:27:D3:74:CC:20:56:C6:D5:63:12:A5:D3:13:C2:0C:B4:35
X509v3 Authority Key Identifier:
keyid:F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4c:40:d1:24:a9:e4:e6:35:24:4b:78:c3:76:ee:8d:0c:8f:
0d:3f:8c:1c:65:70:a2:1b:eb:cc:b1:cd:47:b1:b0:d4:c3:a8:
71:d6:39:12:b9:14:67:70:38:d2:79:ff:e8:7e:90:31:0d:2c:
5a:1a:8e:b6:4e:6a:0c:84:e6:95:68:1b:a8:f2:f6:44:69:fc:
b1:b6:1d:99:29:85:40:42:42:58:ac:d1:4f:5b:12:f9:4c:8e:
89:c7:e5:0b:6c:f5:b0:24:b7:0a:47:0e:11:74:25:49:ac:85:
b0:8f:ce:57:2f:71:62:80:a3:76:00:71:ce:fe:78:4c:c1:31:
24:92:4c:db:9c:13:8b:d0:8b:01:5e:57:1e:d7:ee:0b:81:fb:
ee:f0:f3:03:81:75:d0:11:9d:6c:18:68:cb:1f:0a:2a:2a:6f:
77:29:2d:2d:64:52:76:ab:61:97:b2:b8:5e:99:e3:f8:db:7c:
b1:0b:3b:74:68:ab:91:34:80:d4:6d:44:6a:28:fb:04:f5:49:
71:bc:73:6c:aa:b1:88:f1:38:15:d0:82:87:f3:96:4b:30:c2:
eb:c3:46:bf:04:e5:78:cb:84:7d:08:1c:a0:fc:d5:65:b5:aa:
52:1a:31:08:81:dd:52:ed:0e:43:07:17:3f:e5:38:15:eb:1a:
88:56:8f:bc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe2okRd8NwHo/gke8vtjO7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YTE2ZDFmNGM3YTY1M2UzZTIwZjg0ZDliYTU5ZmRiMjdj
MmE2MWYwHhcNMjUwNjI4MTMwMjU3WhcNMjUwNjI5MTMwMjU3WjAzMTEwLwYDVQQD
EyhiMDMyOWEyN2QzNzRjYzIwNTZjNmQ1NjMxMmE1ZDMxM2MyMGNiNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLgR4qcRGoPX5gp4Ge4iiKcKlDpH
vl9PWFOWAeRc9bqbt7/btAgwQ9mqdReURuCBHAm5YNGMaNtn4nFO12MsAeVOQUQn
OVqKWY9TgpAlleRcXaBbeuG6XdVIE8vxjhByiuximoVjJtfVCmewe79OqwoZa7/+
1TW8MNGO9wHwf5m9KyM6r830y8F0QG08kreYiwQJttetxpTuhyl/AwMcXRFb161z
2NwM9JQsvE6m0IwtF17F6H3SbBNQxbKDM0+aXVqB/gzhVgXSxbbVxj09pG8rYuIB
n6ep0PW4zcDRkkm5i3Wfeto3mPpMWon9Kd1hCd11nbnQUyS5rh98NRSqIQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLAymifTdMwgVsbVYxKl0xPCDLQ1MB8GA1UdIwQY
MBaAFPmhbR9MemU+PiD4TZuln9snwqYfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1hRnRIMHg2WlQ0LUlQaE5tNldmMnlmQ3BoOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvOThjMWI1LTMzOTYtNGQ5Yy1iY2Fj
LTk5MjYyN2VlYTllYS8xLzEtYUZ0SDB4NlpUNC1JUGhObTZXZjJ5ZkNwaDgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ZmLzk4YzFiNS0zMzk2LTRkOWMtYmNhYy05OTI2MjdlZWE5
ZWEvMS8xLWFGdEgweDZaVDQtSVBoTm02V2YyeWZDcGg4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgExA
0SSp5OY1JEt4w3bujQyPDT+MHGVwohvrzLHNR7Gw1MOocdY5ErkUZ3A40nn/6H6Q
MQ0sWhqOtk5qDITmlWgbqPL2RGn8sbYdmSmFQEJCWKzRT1sS+UyOicflC2z1sCS3
CkcOEXQlSayFsI/OVy9xYoCjdgBxzv54TMExJJJM25wTi9CLAV5XHtfuC4H77vDz
A4F10BGdbBhoyx8KKipvdyktLWRSdqthl7K4Xpnj+Nt8sQs7dGirkTSA1G1Eaij7
BPVJcbxzbKqxiPE4FdCCh/OWSzDC68NGvwTleMuEfQgcoPzVZbWqUhoxCIHdUu0O
QwcXP+U4FesaiFaPvA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:49 2025 by rpki-client