Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
File: 1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json)
Hash identifier: 2j0UkEaUcEak9pWp78cTDRPHxYHr6XMkXJ9iGlVBKxk=
Subject key identifier: 51:61:07:63:7B:11:5E:36:D1:A9:5C:27:A2:50:E9:68:1F:8B:A5:6E
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial: 019896DBCD5B345F797AE3FF7276BF9B9A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 02:00:43 +0000
Manifest this update: Mon 11 Aug 2025 02:00:43 +0000
Manifest next update: Tue 12 Aug 2025 02:00:43 +0000
Files and hashes: 1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: uYkJVW5TZFvX5w7KCaAR20MttT6/WNcAU5eDiJ+dSrI=)
2: r8Cx9iv2Us-sXIBLH4ymKtjO_pw.roa (hash: zSG7oRCig4axArTg72yLWZy9j2Lnt0Tay8wTKKxpjxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:cd:5b:34:5f:79:7a:e3:ff:72:76:bf:9b:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Validity
Not Before: Aug 11 02:00:43 2025 GMT
Not After : Aug 12 02:00:43 2025 GMT
Subject: CN=516107637b115e36d1a95c27a250e9681f8ba56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:55:1a:24:de:b5:76:65:65:fe:82:1f:5d:01:
73:7c:78:a6:5f:3f:51:48:bc:12:52:ae:9c:80:ba:
7c:34:44:9e:c9:b3:6e:aa:78:e8:5c:b1:4f:db:bf:
0e:2e:46:a6:ff:8a:b6:4e:67:e9:32:76:cc:6c:1d:
07:80:2f:67:3d:87:14:7d:f9:7e:72:d0:f9:00:1c:
3f:c5:52:62:9e:1d:34:65:1d:15:d4:db:85:3c:2c:
97:0d:d7:e5:36:f9:a4:bb:9a:29:31:70:5b:91:1a:
1f:c3:a8:2f:1d:81:63:e0:c1:3d:bc:7b:bf:90:23:
d0:0e:0c:41:57:86:20:e0:4a:2a:3b:00:42:80:39:
ee:b2:56:e5:6d:23:e6:9a:ae:b3:9a:c4:1a:6d:eb:
d3:6d:0a:19:e9:75:0c:7e:f1:2e:41:14:0b:97:61:
0f:d4:77:c0:9f:61:0e:d1:41:c6:4a:78:6e:1e:cc:
62:c7:58:b1:f3:c6:6d:fd:40:84:4c:52:50:81:c0:
a2:66:90:0e:46:30:d9:15:73:16:79:ee:9e:a8:60:
29:23:15:49:b2:72:02:ae:17:cf:48:d7:7f:ab:6c:
cd:e3:1f:1e:50:3d:d4:8b:f6:3a:48:da:22:af:ae:
84:ea:1a:13:35:35:ea:3c:cf:1c:17:d6:56:6e:59:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:61:07:63:7B:11:5E:36:D1:A9:5C:27:A2:50:E9:68:1F:8B:A5:6E
X509v3 Authority Key Identifier:
keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4b:89:47:f1:77:6e:af:ab:03:5b:b4:29:cc:3e:af:a3:f7:
73:2b:84:15:1b:6b:c4:13:f5:39:7a:21:88:da:e2:36:48:5d:
33:fe:69:0d:1f:a3:88:6c:1c:57:c5:0a:59:b8:f6:56:fd:48:
3a:95:3c:f6:f1:1a:a1:36:84:83:a5:38:52:dc:44:9e:24:03:
d1:66:a7:79:c7:36:1a:ab:68:7b:65:05:18:98:d2:3f:8d:52:
1d:60:5c:74:0a:ba:23:d8:82:21:8f:1e:2d:c9:73:d7:14:8d:
db:e4:e7:53:59:a1:07:47:69:59:05:03:a1:c3:7f:b8:6e:2e:
2d:a3:30:66:1c:51:a9:28:41:fd:d4:31:55:6d:c1:03:7e:e5:
8a:d9:be:67:52:2a:85:8b:fe:9e:76:fc:69:be:78:54:56:f8:
b1:7d:27:02:0f:36:0d:f4:cd:66:20:3a:88:14:76:01:23:ca:
6e:dd:69:56:30:b1:71:1e:c9:96:36:44:14:14:9f:fc:3c:69:
91:c2:49:a4:76:d7:4e:29:98:8f:e7:a7:d2:97:e3:f0:88:80:
66:06:1b:8c:53:f9:00:9c:a5:52:d9:95:16:57:28:99:74:c8:
de:c3:17:e7:45:31:b5:00:29:e3:39:b0:c5:f4:af:7f:ec:15:
5e:9c:51:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiW281bNF95euP/cna/m5otMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MzM0M2Y3Y2M2YzIzN2RhM2Y4YjgxMTM4YzA1MWQ4Zjkz
YzljNGQwHhcNMjUwODExMDIwMDQzWhcNMjUwODEyMDIwMDQzWjAzMTEwLwYDVQQD
Eyg1MTYxMDc2MzdiMTE1ZTM2ZDFhOTVjMjdhMjUwZTk2ODFmOGJhNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lUaJN61dmVl/oIfXQFzfHimXz9R
SLwSUq6cgLp8NESeybNuqnjoXLFP278OLkam/4q2TmfpMnbMbB0HgC9nPYcUffl+
ctD5ABw/xVJinh00ZR0V1NuFPCyXDdflNvmku5opMXBbkRofw6gvHYFj4ME9vHu/
kCPQDgxBV4Yg4EoqOwBCgDnuslblbSPmmq6zmsQabevTbQoZ6XUMfvEuQRQLl2EP
1HfAn2EO0UHGSnhuHsxix1ix88Zt/UCETFJQgcCiZpAORjDZFXMWee6eqGApIxVJ
snICrhfPSNd/q2zN4x8eUD3Ui/Y6SNoir66E6hoTNTXqPM8cF9ZWblmAOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFhB2N7EV420alcJ6JQ6Wgfi6VuMB8GA1UdIwQY
MBaAFNYzQ/fMbCN9o/i4ETjAUdj5PJxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS84ZWI1ODEtOWM3NC00OGUxLTgyMWEt
NTMxODBlZWM1NmZiLzEvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS84ZWI1ODEtOWM3NC00OGUxLTgyMWEtNTMxODBlZWM1NmZi
LzEvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEuJR/F3
bq+rA1u0Kcw+r6P3cyuEFRtrxBP1OXohiNriNkhdM/5pDR+jiGwcV8UKWbj2Vv1I
OpU89vEaoTaEg6U4UtxEniQD0Wanecc2Gqtoe2UFGJjSP41SHWBcdAq6I9iCIY8e
Lclz1xSN2+TnU1mhB0dpWQUDocN/uG4uLaMwZhxRqShB/dQxVW3BA37litm+Z1Iq
hYv+nnb8ab54VFb4sX0nAg82DfTNZiA6iBR2ASPKbt1pVjCxcR7JljZEFBSf/Dxp
kcJJpHbXTimYj+en0pfj8IiAZgYbjFP5AJylUtmVFlcomXTI3sMX50UxtQAp4zmw
xfSvf+wVXpxRZQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:37 2025 by rpki-client