Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: FF8NH3S6LT6pd7hgbblvk9Wjty0CX/UPgOtB5K2BPng=
Subject key identifier: FF:8C:52:5A:9E:9B:87:9E:7D:0D:A2:0C:F9:A1:D4:50:C2:B6:48:08
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 019880C27B30F0F262E77DD15F355C5B29EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 19:01:25 +0000
Manifest this update: Wed 06 Aug 2025 19:01:25 +0000
Manifest next update: Thu 07 Aug 2025 19:01:25 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: z3lNfT0rRsasMYTjKnhi3yzoae6LS5dgWMBLf7aKCcM=)
2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:7b:30:f0:f2:62:e7:7d:d1:5f:35:5c:5b:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Aug 6 19:01:25 2025 GMT
Not After : Aug 7 19:01:25 2025 GMT
Subject: CN=ff8c525a9e9b879e7d0da20cf9a1d450c2b64808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:d7:2b:b8:f7:1b:7b:81:12:0b:04:30:60:
ff:8f:02:ee:d8:f6:03:84:5a:dd:a9:64:1d:84:1f:
51:c8:47:90:af:7f:72:3d:9c:78:c5:e8:29:4a:5d:
d1:36:11:cf:d9:84:f6:f3:f9:2d:32:c0:28:fc:a0:
eb:92:29:bc:e9:97:f3:a5:b5:be:b3:6f:61:61:1d:
e1:b7:a1:7d:b4:fc:1b:66:01:30:59:db:5c:1f:ec:
34:b2:99:6f:3d:f5:9b:a1:b9:4a:f0:e1:bf:c4:26:
67:ef:ad:8e:b4:07:21:21:c0:e9:e2:a2:84:9c:50:
9b:53:e8:b6:d0:b4:70:e4:2c:7a:81:b0:ef:6e:02:
c0:ec:3c:dc:6c:78:d9:6e:b3:67:c3:a2:84:1f:9d:
c5:99:ce:db:e9:8e:19:bb:91:e6:77:2c:48:a7:85:
a5:2d:be:21:4d:f4:b1:e2:b6:6e:50:91:d5:d9:59:
13:4b:39:a4:93:bb:84:cb:93:b2:10:93:f0:8b:be:
d2:1c:50:0f:21:de:aa:37:61:bd:17:75:5c:0d:c6:
68:82:af:e4:80:27:36:44:b6:da:45:c1:d6:93:bb:
1e:21:a9:c4:84:ba:0e:ba:cb:20:73:bc:15:99:d0:
98:71:a7:aa:d5:e3:d8:06:8b:61:69:bd:be:de:36:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8C:52:5A:9E:9B:87:9E:7D:0D:A2:0C:F9:A1:D4:50:C2:B6:48:08
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:94:eb:af:6f:4a:e2:78:29:f5:fc:48:c2:30:7b:ef:be:bc:
30:1a:1c:e7:7a:75:34:71:d2:8b:82:55:b4:49:ad:cf:6e:92:
18:74:eb:aa:d7:96:0a:3f:af:51:59:84:1f:f0:cb:66:e2:36:
67:f7:93:4d:5c:28:e8:66:86:4c:cf:ad:41:5e:1c:c9:f3:ea:
1d:70:3b:a7:dc:9d:5c:07:9b:10:92:ee:3f:9c:c3:5b:f7:f8:
38:65:cd:f2:94:61:9e:f6:25:cd:3c:3a:47:7a:bb:97:a2:1f:
a4:e0:b2:eb:99:74:b5:02:b6:50:56:4a:73:95:7a:58:3c:29:
11:f7:26:de:17:77:64:f0:a4:7b:6b:75:f1:20:e9:9d:d2:63:
bb:79:b8:ac:11:94:42:f1:51:74:12:54:d5:0f:5d:c3:2c:f3:
ba:ad:ba:7a:45:ff:35:a6:8b:31:7f:86:a9:e5:a7:a4:7a:02:
44:81:b4:cf:ca:73:be:6e:e0:bd:1a:3f:00:8a:da:c8:9e:b1:
63:84:79:0d:c7:3b:71:67:3d:77:8d:d3:95:c4:e3:10:82:39:
13:f2:e7:2c:00:76:6a:29:23:35:ed:aa:55:5e:55:53:8c:4e:
2c:05:18:f1:44:fa:31:07:60:88:ed:32:37:73:31:0f:ee:c7:
2e:fc:93:0a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiAwnsw8PJi533RXzVcWynvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTVkMjg3NzEzMmFhYWRjZGY1NDA1OGFjYmY5ZTA3ZWRk
YjU5OGMwHhcNMjUwODA2MTkwMTI1WhcNMjUwODA3MTkwMTI1WjAzMTEwLwYDVQQD
EyhmZjhjNTI1YTllOWI4NzllN2QwZGEyMGNmOWExZDQ1MGMyYjY0ODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol3XK7j3G3uBEgsEMGD/jwLu2PYD
hFrdqWQdhB9RyEeQr39yPZx4xegpSl3RNhHP2YT28/ktMsAo/KDrkim86ZfzpbW+
s29hYR3ht6F9tPwbZgEwWdtcH+w0splvPfWboblK8OG/xCZn762OtAchIcDp4qKE
nFCbU+i20LRw5Cx6gbDvbgLA7DzcbHjZbrNnw6KEH53Fmc7b6Y4Zu5HmdyxIp4Wl
Lb4hTfSx4rZuUJHV2VkTSzmkk7uEy5OyEJPwi77SHFAPId6qN2G9F3VcDcZogq/k
gCc2RLbaRcHWk7seIanEhLoOussgc7wVmdCYcaeq1ePYBothab2+3jbjEQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP+MUlqem4eefQ2iDPmh1FDCtkgIMB8GA1UdIwQY
MBaAFPpV0odxMqqtzfVAWKy/ngft21mMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sWFNoM0V5cXEzTjlVQllyTC1lQi0zYldZdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzVi
LWVhZjlkYTRhZGVmNi8xLzEtbFhTaDNFeXFxM045VUJZckwtZUItM2JXWXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzAyLzkyZDIwOC1hMjJhLTQyMWMtOGM1Yi1lYWY5ZGE0YWRl
ZjYvMS8xLWxYU2gzRXlxcTNOOVVCWXJMLWVCLTNiV1l3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpTr
r29K4ngp9fxIwjB77768MBoc53p1NHHSi4JVtEmtz26SGHTrqteWCj+vUVmEH/DL
ZuI2Z/eTTVwo6GaGTM+tQV4cyfPqHXA7p9ydXAebEJLuP5zDW/f4OGXN8pRhnvYl
zTw6R3q7l6IfpOCy65l0tQK2UFZKc5V6WDwpEfcm3hd3ZPCke2t18SDpndJju3m4
rBGUQvFRdBJU1Q9dwyzzuq26ekX/NaaLMX+GqeWnpHoCRIG0z8pzvm7gvRo/AIra
yJ6xY4R5Dcc7cWc9d43TlcTjEII5E/LnLAB2aikjNe2qVV5VU4xOLAUY8UT6MQdg
iO0yN3MxD+7HLvyTCg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:23 2025 by rpki-client