Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: p9JDi4zNca8tE5qoaWpuJB3K8rjIFiAbEdC6vVmT0YY=
Subject key identifier: FA:5A:F5:3C:F7:7E:3F:11:BF:F3:6F:64:8E:C8:27:23:C2:23:17:65
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 01988C58B4D52C579E622978FA7B58629D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 01:01:20 +0000
Manifest this update: Sat 09 Aug 2025 01:01:20 +0000
Manifest next update: Sun 10 Aug 2025 01:01:20 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: 38ApMNgP8ENLRdjrrjNNI4XiKq9zYN/OPQV/Ilug9T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:b4:d5:2c:57:9e:62:29:78:fa:7b:58:62:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Aug 9 01:01:20 2025 GMT
Not After : Aug 10 01:01:20 2025 GMT
Subject: CN=fa5af53cf77e3f11bff36f648ec82723c2231765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:fc:be:a7:1d:dd:f8:9c:1f:fa:0a:22:70:
17:66:e9:77:d7:64:dd:b3:4c:0f:b7:c9:c4:79:d6:
45:71:9b:0e:5e:a1:1b:12:f9:29:e9:28:59:01:1f:
e0:cd:62:d5:b4:c2:61:69:80:5b:a2:03:eb:a1:4e:
bf:be:85:67:79:bb:e5:e4:5a:2e:4b:08:2b:24:0c:
62:d1:c7:56:c5:e5:26:a2:4e:84:ea:42:48:bc:af:
47:52:41:4a:a9:d8:30:6c:16:95:9d:3d:f1:e3:52:
fd:bd:2e:34:af:ae:ca:0d:2a:38:8e:4d:7b:e2:e0:
45:e7:d4:66:80:1a:d0:28:f8:51:a4:ea:4a:a1:b9:
71:11:42:19:c0:f0:37:7c:6d:73:db:3c:00:07:e4:
06:2f:5a:34:94:39:0e:6d:6d:a6:73:ca:72:9a:0f:
98:ca:b9:08:f6:7d:6d:b1:69:22:d1:39:b9:7e:93:
9a:5d:30:d7:73:87:20:16:f7:bf:a3:00:8a:fb:a5:
40:cc:61:68:28:d9:66:51:65:5b:4e:73:6b:d3:af:
31:c6:a6:7c:cf:e2:89:a1:5d:2c:06:8a:b1:03:f3:
11:98:38:23:d9:c1:20:07:88:6a:0d:2b:3a:38:39:
09:b9:06:d3:c0:78:7c:d0:b9:ad:21:1d:25:6a:b0:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:F5:3C:F7:7E:3F:11:BF:F3:6F:64:8E:C8:27:23:C2:23:17:65
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:2c:24:17:1b:a2:5b:04:95:67:47:de:d2:10:33:8d:54:7b:
0e:6b:06:71:5c:b2:02:65:71:21:4f:68:7f:25:7f:ee:87:30:
c9:3b:dd:2b:17:17:34:ce:8d:d8:44:b4:95:df:7e:d0:5c:b1:
15:f3:c9:e6:9d:df:6c:76:10:47:2d:5d:79:29:df:5a:7c:84:
db:c4:ab:53:64:d2:3d:0b:46:40:d8:02:cf:11:1a:ff:eb:61:
1b:ca:60:6c:bd:e1:14:a9:91:27:a6:80:13:e9:2b:e1:6e:72:
b6:50:b9:87:49:3e:13:7c:0b:91:1d:54:2b:e3:13:09:27:73:
e3:b1:64:ff:c4:e3:7a:d4:08:e1:06:ae:8d:ab:4b:4f:c8:57:
a8:0b:94:60:48:2c:97:6c:76:fe:cb:dc:60:8b:70:7c:c4:61:
ec:63:6f:84:b6:97:21:e1:e2:81:50:c6:85:48:07:d3:8c:cd:
19:8f:57:71:fe:c5:de:c2:d6:2f:e0:d9:e4:b1:0b:30:9d:3e:
6c:6e:fb:95:e7:da:22:6d:d2:c4:c2:8b:a3:02:39:6a:e8:87:
ad:a8:6c:34:c6:45:c7:76:67:55:cd:72:5b:bb:4f:92:5d:00:
20:07:87:f0:48:c8:aa:9e:f8:05:64:38:ed:79:08:92:a3:1d:
f3:4b:f9:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMWLTVLFeeYil4+ntYYp0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDU5N2I5NzNhZGExMDUyZjY1YjNlYTFkZTFlNDgyZTIz
ZjNkMmEwHhcNMjUwODA5MDEwMTIwWhcNMjUwODEwMDEwMTIwWjAzMTEwLwYDVQQD
EyhmYTVhZjUzY2Y3N2UzZjExYmZmMzZmNjQ4ZWM4MjcyM2MyMjMxNzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg78vqcd3ficH/oKInAXZul312Td
s0wPt8nEedZFcZsOXqEbEvkp6ShZAR/gzWLVtMJhaYBbogProU6/voVnebvl5Fou
SwgrJAxi0cdWxeUmok6E6kJIvK9HUkFKqdgwbBaVnT3x41L9vS40r67KDSo4jk17
4uBF59RmgBrQKPhRpOpKoblxEUIZwPA3fG1z2zwAB+QGL1o0lDkObW2mc8pymg+Y
yrkI9n1tsWki0Tm5fpOaXTDXc4cgFve/owCK+6VAzGFoKNlmUWVbTnNr068xxqZ8
z+KJoV0sBoqxA/MRmDgj2cEgB4hqDSs6ODkJuQbTwHh80LmtIR0larC0TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpa9Tz3fj8Rv/NvZI7IJyPCIxdlMB8GA1UdIwQY
MBaAFNXVl7lzraEFL2Wz6h3h5ILiPz0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8xMzQ3ZjMtNmM1OC00NmNlLTk5NTIt
ZjI1OGY3ZDUwZDc1LzEvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8xMzQ3ZjMtNmM1OC00NmNlLTk5NTItZjI1OGY3ZDUwZDc1
LzEvMWRXWHVYT3RvUVV2WmJQcUhlSGtndUlfUFNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzywkFxui
WwSVZ0fe0hAzjVR7DmsGcVyyAmVxIU9ofyV/7ocwyTvdKxcXNM6N2ES0ld9+0Fyx
FfPJ5p3fbHYQRy1deSnfWnyE28SrU2TSPQtGQNgCzxEa/+thG8pgbL3hFKmRJ6aA
E+kr4W5ytlC5h0k+E3wLkR1UK+MTCSdz47Fk/8TjetQI4QaujatLT8hXqAuUYEgs
l2x2/svcYItwfMRh7GNvhLaXIeHigVDGhUgH04zNGY9Xcf7F3sLWL+DZ5LELMJ0+
bG77lefaIm3SxMKLowI5auiHrahsNMZFx3ZnVc1yW7tPkl0AIAeH8EjIqp74BWQ4
7XkIkqMd80v55Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 03:00:23 2025 by rpki-client