Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: pAhk8Ifz/QWwDBn2UGbOTAta+i30WS8Tv5t/+Kdh1Ps=
Subject key identifier: 2A:46:D0:55:96:3D:D8:F4:25:B9:B6:08:70:32:0E:40:7A:FE:F8:EA
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 01988E1013DC1BE438B52F56A6F274AFCA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 12B7
Signing time: Sat 09 Aug 2025 09:01:15 +0000
Manifest this update: Sat 09 Aug 2025 09:01:15 +0000
Manifest next update: Sun 10 Aug 2025 09:01:15 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: Dcm2FTbs4KpwfTa+hR7/SpvCn0UGQXgvlqyHjx8BsVs=)
2: kLDW8S2AqSM38SEqcZhk6y6H9Zs.roa (hash: 1uyD9ShIaMoUE8tZ7cjyGLh54i2J2KfHSIYSBkC6vac=)
3: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (hash: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:10:13:dc:1b:e4:38:b5:2f:56:a6:f2:74:af:ca:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Aug 9 09:01:15 2025 GMT
Not After : Aug 10 09:01:15 2025 GMT
Subject: CN=2a46d055963dd8f425b9b60870320e407afef8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:64:8f:b0:e0:0e:2f:65:3e:9a:1d:43:02:
d4:0d:7c:43:47:36:b2:04:4b:b0:41:68:c1:b8:74:
2c:9a:e9:69:74:62:8c:7e:5d:10:32:b5:1b:3e:e0:
3f:a3:e9:19:0a:e6:42:57:31:ba:b8:df:3a:24:83:
51:8e:0f:b8:96:86:ce:83:83:8e:1a:d5:00:04:7b:
a8:5c:2e:89:58:6d:36:98:d2:e3:44:e4:89:c3:26:
b2:a5:37:e4:75:e3:bf:26:22:fa:49:58:8b:18:fb:
57:cc:12:d5:8d:19:ac:fe:88:b5:c7:1e:cf:9c:3c:
19:c4:a9:11:f1:ef:76:f2:be:4b:27:8e:59:31:36:
11:5e:7b:3c:b8:66:45:c8:66:ff:00:8e:88:75:6c:
82:f4:40:a9:93:ea:c2:ea:d3:93:9d:df:02:d0:f0:
74:3d:87:cf:7b:1d:56:bd:78:1d:4e:d4:f9:3a:f5:
64:2f:94:b0:e1:a9:c8:dd:7a:e1:e6:b8:b8:8e:3e:
24:06:c7:6e:05:3b:42:e7:3d:35:c5:d1:a0:bf:41:
d9:dc:0f:a2:4e:43:ad:6d:75:dd:69:aa:89:28:3c:
01:3d:c7:a6:70:d7:ee:a6:64:fb:37:6d:b0:da:49:
ed:d0:4b:f8:fb:9f:b3:4d:59:5b:89:da:9e:13:23:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:D0:55:96:3D:D8:F4:25:B9:B6:08:70:32:0E:40:7A:FE:F8:EA
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ca:a7:48:da:72:2e:e9:da:f5:e4:72:4c:b8:0f:49:ba:dd:
4a:6f:82:49:cb:c8:e3:27:36:43:20:a4:05:06:1b:d6:d2:b4:
c4:a0:c2:d2:85:cf:05:bb:15:ad:81:bb:94:6a:31:6f:10:17:
07:a9:d1:97:02:2f:08:75:81:20:5c:6d:0e:c7:1f:97:90:a1:
c4:5d:49:76:68:7d:c7:6b:23:e4:a2:b2:49:7c:32:3f:51:26:
57:91:0f:67:71:f6:7f:1d:4c:94:16:1b:61:fd:5c:78:fa:c8:
a5:1d:46:8d:4a:5e:b0:1d:3a:54:8c:27:58:77:92:c0:d5:6f:
ac:79:a5:4a:80:fe:8d:b5:1f:d5:f5:c1:79:0a:8b:56:29:66:
55:4c:29:09:16:66:83:02:5c:d0:7a:ec:fe:63:00:f4:1f:ab:
af:ae:b6:db:0f:12:b6:85:a7:8f:3a:e0:2e:5c:82:6e:3d:7c:
d7:7e:27:5e:4c:f4:94:22:33:8a:79:b0:e7:e1:e7:d7:33:74:
58:0e:69:4f:ce:e4:fb:e8:ed:fb:33:4c:08:f9:a0:e1:5c:4b:
ce:b0:e4:3f:f2:81:9f:02:14:7a:3b:ea:29:f5:d0:88:7d:8b:
0d:50:0c:94:c7:39:59:17:55:53:04:61:07:c1:dc:d6:7a:51:
bb:b1:13:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOEBPcG+Q4tS9WpvJ0r8qCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NTAwM2UyNGNlY2ZiZjhlOGMxNWZmNjM3ZGQxNWRiNGQ3
ZmFlOTIwHhcNMjUwODA5MDkwMTE1WhcNMjUwODEwMDkwMTE1WjAzMTEwLwYDVQQD
EygyYTQ2ZDA1NTk2M2RkOGY0MjViOWI2MDg3MDMyMGU0MDdhZmVmOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn45kj7DgDi9lPpodQwLUDXxDRzay
BEuwQWjBuHQsmulpdGKMfl0QMrUbPuA/o+kZCuZCVzG6uN86JINRjg+4lobOg4OO
GtUABHuoXC6JWG02mNLjROSJwyaypTfkdeO/JiL6SViLGPtXzBLVjRms/oi1xx7P
nDwZxKkR8e928r5LJ45ZMTYRXns8uGZFyGb/AI6IdWyC9ECpk+rC6tOTnd8C0PB0
PYfPex1WvXgdTtT5OvVkL5Sw4anI3Xrh5ri4jj4kBsduBTtC5z01xdGgv0HZ3A+i
TkOtbXXdaaqJKDwBPcemcNfupmT7N22w2knt0Ev4+5+zTVlbidqeEyMErQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpG0FWWPdj0Jbm2CHAyDkB6/vjqMB8GA1UdIwQY
MBaAFNZQA+JM7Pv46MFf9jfdFdtNf66SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjIt
YTIzNTFmNGU4OTE1LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjItYTIzNTFmNGU4OTE1
LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8qnSNpy
Luna9eRyTLgPSbrdSm+CScvI4yc2QyCkBQYb1tK0xKDC0oXPBbsVrYG7lGoxbxAX
B6nRlwIvCHWBIFxtDscfl5ChxF1Jdmh9x2sj5KKySXwyP1EmV5EPZ3H2fx1MlBYb
Yf1cePrIpR1GjUpesB06VIwnWHeSwNVvrHmlSoD+jbUf1fXBeQqLVilmVUwpCRZm
gwJc0Hrs/mMA9B+rr6622w8StoWnjzrgLlyCbj18134nXkz0lCIzinmw5+Hn1zN0
WA5pT87k++jt+zNMCPmg4VxLzrDkP/KBnwIUejvqKfXQiH2LDVAMlMc5WRdVUwRh
B8Hc1npRu7ET7g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:17 2025 by rpki-client