Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: bcMcnVzUhJatl9zW8NpP+56NCflR91WRcyXx7HV+hO0=
Subject key identifier: 88:03:CA:D9:FC:95:2C:9C:07:FD:A5:D3:BF:9D:85:1D:02:77:3D:4B
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 01988921981E7FFC4E8A12762588873F2768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 161E
Signing time: Fri 08 Aug 2025 10:02:16 +0000
Manifest this update: Fri 08 Aug 2025 10:02:16 +0000
Manifest next update: Sat 09 Aug 2025 10:02:16 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: VJLpH7VDDL5q/5ZZIjhdLimEVJ3+7mfUAN7uihweryA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:98:1e:7f:fc:4e:8a:12:76:25:88:87:3f:27:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Aug 8 10:02:16 2025 GMT
Not After : Aug 9 10:02:16 2025 GMT
Subject: CN=8803cad9fc952c9c07fda5d3bf9d851d02773d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:f3:33:89:36:00:87:6e:0b:78:46:44:08:
bd:d4:e2:94:23:80:3d:c1:44:bc:60:0f:86:97:8f:
02:04:65:df:9c:a1:8c:55:fa:3f:e8:e2:98:2e:f7:
a9:b6:31:ba:c7:0d:b9:e0:22:a0:3a:0a:a0:cf:78:
53:65:eb:0e:f5:b2:34:e2:b3:06:e0:16:99:70:7c:
b2:97:2e:a7:e6:52:f2:0b:d8:f6:1e:4c:99:66:02:
94:5b:4a:fd:98:fe:02:e2:62:73:5e:76:d0:84:be:
e1:d6:94:68:37:6a:36:c3:d9:61:b7:04:3d:40:c4:
65:3c:80:e3:9e:8a:56:16:6f:3c:4a:f2:cd:5c:8f:
5d:54:d8:29:51:72:3b:d2:ab:fd:b2:63:2e:99:49:
50:97:d2:fe:74:a3:dd:4f:f0:c3:03:50:70:8a:78:
ad:f9:f6:e9:59:60:70:61:72:fa:7a:1b:58:ea:6e:
fd:15:16:98:8c:68:ea:96:6f:86:60:bf:44:67:22:
d5:fd:3c:66:43:1b:05:85:72:20:4e:cb:0b:66:bf:
70:e4:77:31:d5:44:75:b8:ea:a0:12:fc:5b:2f:29:
6f:84:cd:ce:89:99:f2:98:84:4c:c7:c9:66:be:dc:
59:64:79:6f:26:3c:d7:76:ae:61:9a:da:4a:fe:1a:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:03:CA:D9:FC:95:2C:9C:07:FD:A5:D3:BF:9D:85:1D:02:77:3D:4B
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:24:de:6f:fb:ef:32:1d:9b:03:25:35:db:a6:c8:b1:86:07:
58:b2:ec:ba:7b:92:b7:51:d9:d0:16:84:41:5e:39:06:b5:f8:
5b:78:91:e7:93:30:6d:55:c4:5d:32:1a:26:7f:4b:ec:db:81:
a1:19:0a:41:cf:e4:54:d4:96:e3:30:c2:5f:34:a9:25:ed:01:
97:b5:cd:d8:e7:82:7b:7d:86:eb:ce:f9:3a:b3:24:21:b5:63:
21:e2:e5:c0:7e:62:4e:b3:53:88:6c:7d:88:b1:06:69:2a:4f:
7b:98:5e:b5:cf:92:94:60:f1:49:b0:75:3f:a5:a4:5f:4f:ca:
39:7f:d7:67:42:37:65:95:3f:f0:da:ce:1e:52:ad:51:58:19:
c6:99:d5:ac:dd:d4:bb:f7:71:e6:a1:9b:a5:ed:40:99:1c:19:
a2:17:a5:3c:bb:4d:a3:58:f7:71:f7:a9:d2:3e:9d:c3:3f:9b:
e8:cb:1a:25:1c:ac:cb:04:93:5a:8e:d2:a0:6f:a0:76:e0:ef:
eb:76:72:9e:ef:8d:c3:02:c9:93:bc:28:14:0a:d2:ce:db:ea:
99:09:7f:88:bf:a9:3e:85:23:c4:f3:fc:78:1b:02:5e:48:2f:
10:da:c0:e2:5c:9b:e0:16:fb:ec:57:a5:31:8f:84:2e:a0:3c:
86:4f:2c:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIZgef/xOihJ2JYiHPydoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTI4M2NjYmYxMTY5OGI2ZjIyZWMxN2I1ZjYzZTNhNTNl
NDExMjAwHhcNMjUwODA4MTAwMjE2WhcNMjUwODA5MTAwMjE2WjAzMTEwLwYDVQQD
Eyg4ODAzY2FkOWZjOTUyYzljMDdmZGE1ZDNiZjlkODUxZDAyNzczZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCfzM4k2AIduC3hGRAi91OKUI4A9
wUS8YA+Gl48CBGXfnKGMVfo/6OKYLveptjG6xw254CKgOgqgz3hTZesO9bI04rMG
4BaZcHyyly6n5lLyC9j2HkyZZgKUW0r9mP4C4mJzXnbQhL7h1pRoN2o2w9lhtwQ9
QMRlPIDjnopWFm88SvLNXI9dVNgpUXI70qv9smMumUlQl9L+dKPdT/DDA1Bwinit
+fbpWWBwYXL6ehtY6m79FRaYjGjqlm+GYL9EZyLV/TxmQxsFhXIgTssLZr9w5Hcx
1UR1uOqgEvxbLylvhM3OiZnymIRMx8lmvtxZZHlvJjzXdq5hmtpK/hp7WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgDytn8lSycB/2l07+dhR0Cdz1LMB8GA1UdIwQY
MBaAFNXig8y/EWmLbyLsF7X2PjpT5BEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDIt
MGY2MmJiZDliNTY4LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDItMGY2MmJiZDliNTY4
LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayTeb/vv
Mh2bAyU126bIsYYHWLLsunuSt1HZ0BaEQV45BrX4W3iR55MwbVXEXTIaJn9L7NuB
oRkKQc/kVNSW4zDCXzSpJe0Bl7XN2OeCe32G6875OrMkIbVjIeLlwH5iTrNTiGx9
iLEGaSpPe5hetc+SlGDxSbB1P6WkX0/KOX/XZ0I3ZZU/8NrOHlKtUVgZxpnVrN3U
u/dx5qGbpe1AmRwZohelPLtNo1j3cfep0j6dwz+b6MsaJRysywSTWo7SoG+gduDv
63Zynu+NwwLJk7woFArSztvqmQl/iL+pPoUjxPP8eBsCXkgvENrA4lyb4Bb77Fel
MY+ELqA8hk8sCA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:20 2025 by rpki-client