Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: UMn6uY2zsxNZlmbvYprQ2TPUgi5mxM5C+HcBoxRX8bY=
Subject key identifier: F2:1A:D1:2B:D7:CF:D1:1A:82:47:87:19:6A:5C:09:FB:AE:49:64:BF
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 019874500D1755E269FD91055F48134267DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 0104
Signing time: Mon 04 Aug 2025 09:00:59 +0000
Manifest this update: Mon 04 Aug 2025 09:00:59 +0000
Manifest next update: Tue 05 Aug 2025 09:00:59 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: 4I/BdoUM9QKD9htCvrqcRUFz4S7Qxtof7OTr1zDD2Rc=)
2: 2w_iKrPjyXvCCJbs0F7ZOxiGDMg.roa (hash: nKdejJ8/KPh01N5ujViM/1f8ednF50B5j98TO8WaB8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0d:17:55:e2:69:fd:91:05:5f:48:13:42:67:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Aug 4 09:00:59 2025 GMT
Not After : Aug 5 09:00:59 2025 GMT
Subject: CN=f21ad12bd7cfd11a824787196a5c09fbae4964bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:c4:3c:f2:4b:f2:54:55:7b:cd:05:1c:0a:
fe:41:e5:6a:b0:ec:66:d6:65:b0:60:15:0f:2c:a2:
3a:b6:89:5b:65:44:90:88:e3:95:82:fa:d9:fd:11:
3c:cf:2e:6d:44:f2:19:9d:28:56:42:5b:c5:7f:eb:
fe:c7:0a:05:50:10:b5:1e:8f:92:a1:f0:cf:1b:3d:
13:02:80:4d:cb:0d:f5:03:14:47:51:fd:83:80:13:
be:5f:b5:4e:b4:96:19:61:14:c7:01:35:89:9a:89:
89:9a:23:c3:00:60:b5:64:6d:01:1a:ea:ec:48:9c:
52:e5:52:3e:dd:ab:82:9c:a5:d9:25:d7:4f:a0:58:
5d:67:72:7c:89:a2:cf:0a:c4:32:d3:df:64:d2:4f:
f4:80:e6:5e:93:a4:79:cf:59:de:02:5d:a7:a9:16:
2d:ba:d6:12:c5:89:dc:e8:03:df:a7:fc:f8:3d:0e:
ab:0a:28:54:59:ea:9a:24:05:77:0b:d2:25:91:87:
8b:b3:3f:21:8c:f8:97:a7:d1:e4:7c:59:7f:04:2a:
9f:a5:c3:15:4e:b1:45:70:3a:3d:f1:92:1d:a9:81:
86:62:a3:58:03:40:ce:97:5b:c5:48:54:f0:cb:85:
61:3b:ae:2e:c1:1a:30:b1:b1:48:d5:76:84:cd:fb:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1A:D1:2B:D7:CF:D1:1A:82:47:87:19:6A:5C:09:FB:AE:49:64:BF
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fc:a0:7a:d1:a7:65:39:68:82:59:17:32:b8:f5:60:5e:8a:
ec:03:b9:d0:a5:5c:bb:f7:9e:13:73:b6:d5:bd:0c:84:91:e6:
af:a9:fe:98:05:8a:5e:2e:59:8b:3c:77:30:78:84:eb:2e:7c:
44:8d:05:8d:9a:0d:52:df:97:5e:0a:48:77:9b:23:74:f5:72:
f0:5c:d7:aa:07:63:98:3d:7c:f9:0c:2c:74:9c:b3:a1:6a:9d:
87:56:0e:a6:2f:15:d5:46:47:d7:9e:4a:2d:71:a1:54:80:1e:
43:8e:b4:b8:2a:53:f7:cf:da:a2:52:dd:c3:1a:67:21:f6:cd:
d0:ef:88:be:76:2c:21:a6:4b:c9:01:3b:41:4c:59:7b:1c:93:
37:c3:bd:30:9e:14:d1:b9:78:bc:3e:67:cc:77:bd:b1:d1:63:
64:68:a5:1f:61:85:0c:43:2f:8c:1e:00:48:8b:12:a9:00:6b:
9d:bc:57:d4:47:99:98:db:8a:3a:05:d9:42:6a:4b:d6:93:13:
a7:f6:ce:c1:47:8a:93:4b:2a:da:83:b8:be:96:39:02:fc:33:
d6:56:9d:68:d6:46:4d:fc:d6:a8:fd:bf:cf:87:05:e3:e5:e6:
64:c2:0e:b1:f4:48:3e:3f:6e:c8:f9:63:01:7b:d5:8c:71:30:
4a:f1:3b:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UA0XVeJp/ZEFX0gTQmfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjhhOTI2MzQ5N2M4ZDU0ZTA1NDk2NDYwZDQzOWNkNmUw
NjkyNjAwHhcNMjUwODA0MDkwMDU5WhcNMjUwODA1MDkwMDU5WjAzMTEwLwYDVQQD
EyhmMjFhZDEyYmQ3Y2ZkMTFhODI0Nzg3MTk2YTVjMDlmYmFlNDk2NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta/EPPJL8lRVe80FHAr+QeVqsOxm
1mWwYBUPLKI6tolbZUSQiOOVgvrZ/RE8zy5tRPIZnShWQlvFf+v+xwoFUBC1Ho+S
ofDPGz0TAoBNyw31AxRHUf2DgBO+X7VOtJYZYRTHATWJmomJmiPDAGC1ZG0BGurs
SJxS5VI+3auCnKXZJddPoFhdZ3J8iaLPCsQy099k0k/0gOZek6R5z1neAl2nqRYt
utYSxYnc6APfp/z4PQ6rCihUWeqaJAV3C9IlkYeLsz8hjPiXp9HkfFl/BCqfpcMV
TrFFcDo98ZIdqYGGYqNYA0DOl1vFSFTwy4VhO64uwRowsbFI1XaEzft+KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIa0SvXz9EagkeHGWpcCfuuSWS/MB8GA1UdIwQY
MBaAFNb4qSY0l8jVTgVJZGDUOc1uBpJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYt
NmY4M2I3MDhiMzIwLzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYtNmY4M2I3MDhiMzIw
LzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPygetGn
ZTloglkXMrj1YF6K7AO50KVcu/eeE3O21b0MhJHmr6n+mAWKXi5Zizx3MHiE6y58
RI0FjZoNUt+XXgpId5sjdPVy8FzXqgdjmD18+QwsdJyzoWqdh1YOpi8V1UZH155K
LXGhVIAeQ460uCpT98/aolLdwxpnIfbN0O+IvnYsIaZLyQE7QUxZexyTN8O9MJ4U
0bl4vD5nzHe9sdFjZGilH2GFDEMvjB4ASIsSqQBrnbxX1EeZmNuKOgXZQmpL1pMT
p/bOwUeKk0sq2oO4vpY5Avwz1ladaNZGTfzWqP2/z4cF4+XmZMIOsfRIPj9uyPlj
AXvVjHEwSvE7nA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:52 2025 by rpki-client