Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: cTX2n47AhJuYxb6ERGRoe1O+N5e9W3APLcfuhWcW/b8=
Subject key identifier: E5:10:CA:B4:7A:76:AF:52:A3:00:03:C9:46:42:58:11:9E:5C:C4:98
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 0198745099CA26FBF1732245CDBFF2E9FD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:35 +0000
Manifest this update: Mon 04 Aug 2025 09:01:35 +0000
Manifest next update: Tue 05 Aug 2025 09:01:35 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: F9uhFWViNsbDcV0tI55H7wAFsNM9iVinZVnJBkI43Xs=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:99:ca:26:fb:f1:73:22:45:cd:bf:f2:e9:fd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Aug 4 09:01:35 2025 GMT
Not After : Aug 5 09:01:35 2025 GMT
Subject: CN=e510cab47a76af52a30003c9464258119e5cc498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:c6:20:73:98:26:1d:27:8d:00:78:d5:aa:
55:61:00:cf:0d:eb:3b:8f:d2:e0:23:1e:95:7c:1e:
14:29:5b:25:2a:aa:6b:90:1b:87:e0:0e:74:4a:21:
58:65:eb:3a:0d:da:b4:ba:13:3c:bc:64:f4:0e:fd:
5f:00:06:38:6e:94:92:b9:a0:99:11:7b:68:c4:c0:
b5:72:05:6e:2d:d7:5d:00:84:9c:e5:bd:58:9e:14:
6e:6b:3a:96:ab:2b:47:80:6e:eb:21:4e:85:6f:46:
34:f0:8b:ba:5c:f3:88:4e:d1:c9:62:80:00:10:f6:
ef:28:61:55:bd:04:e5:d9:67:c4:7d:99:ac:d2:23:
60:ad:46:99:08:48:a7:49:ea:d6:96:ef:62:cc:ff:
10:0f:df:cd:0f:2e:f9:35:82:cf:40:39:a7:6d:c2:
ba:84:4a:d9:43:36:83:8e:a6:48:2a:4b:3e:1c:60:
89:80:ec:c8:e2:5a:43:e6:b6:bf:eb:fc:46:9b:7f:
fd:7a:92:d0:9b:75:e5:50:94:da:90:da:c7:a7:af:
70:e4:11:9c:7f:82:7d:31:35:f5:b0:75:24:12:1e:
b1:03:3d:71:d6:42:72:31:16:2e:66:f4:49:86:3f:
8f:a6:33:90:9c:33:ff:2a:6c:2f:19:77:d2:05:90:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:10:CA:B4:7A:76:AF:52:A3:00:03:C9:46:42:58:11:9E:5C:C4:98
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f9:83:3f:da:c1:9b:cc:e1:9c:69:39:38:23:36:56:2a:1d:
ff:5f:cb:9e:ea:fc:30:7c:49:6e:fb:3c:e4:13:fa:09:98:e3:
bd:d0:70:f5:3a:4d:04:73:76:d7:81:92:60:2f:15:b4:bf:1d:
7c:b3:a7:1c:43:7a:64:a1:11:c4:1e:e5:51:c7:93:65:eb:e4:
91:c0:dc:8c:a6:9f:b4:c1:53:2d:33:12:9d:56:ab:1b:b0:50:
3d:81:63:bf:de:74:b8:17:bb:11:ce:97:6d:6f:1f:72:77:f2:
f7:27:46:b7:13:9e:aa:89:66:36:ec:97:eb:b0:7a:d5:30:01:
df:ef:d5:29:32:e3:90:1a:94:d2:08:4a:66:74:dc:40:cb:e8:
96:d4:2b:92:7c:64:0d:0e:16:5c:50:05:92:26:4a:df:b3:bc:
e8:13:92:34:d4:6a:cb:6c:78:37:04:7f:6e:82:98:32:0c:80:
7d:ba:26:86:a0:50:e3:81:51:90:5a:7c:7f:81:46:c4:92:6a:
9f:1a:94:df:b4:59:a5:bd:1e:87:65:e1:a8:9e:97:06:61:ad:
8d:ed:ce:99:22:0e:62:f5:36:f1:37:6f:84:be:b3:4b:63:23:
78:21:72:3a:81:1d:41:6c:15:79:81:53:9c:e9:b6:d1:42:f9:
04:fc:13:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UJnKJvvxcyJFzb/y6f0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTQwYjUxOGQ3NWZiZWZkNjE2YmZkOTRjZjA1ZmQyNWJh
NDg4YjYwHhcNMjUwODA0MDkwMTM1WhcNMjUwODA1MDkwMTM1WjAzMTEwLwYDVQQD
EyhlNTEwY2FiNDdhNzZhZjUyYTMwMDAzYzk0NjQyNTgxMTllNWNjNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i/GIHOYJh0njQB41apVYQDPDes7
j9LgIx6VfB4UKVslKqprkBuH4A50SiFYZes6Ddq0uhM8vGT0Dv1fAAY4bpSSuaCZ
EXtoxMC1cgVuLdddAISc5b1YnhRuazqWqytHgG7rIU6Fb0Y08Iu6XPOITtHJYoAA
EPbvKGFVvQTl2WfEfZms0iNgrUaZCEinSerWlu9izP8QD9/NDy75NYLPQDmnbcK6
hErZQzaDjqZIKks+HGCJgOzI4lpD5ra/6/xGm3/9epLQm3XlUJTakNrHp69w5BGc
f4J9MTX1sHUkEh6xAz1x1kJyMRYuZvRJhj+PpjOQnDP/KmwvGXfSBZBFZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUQyrR6dq9SowADyUZCWBGeXMSYMB8GA1UdIwQY
MBaAFNNUC1GNdfvv1ha/2UzwX9JbpIi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMt
YjMwMTYyZTNjY2MwLzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMtYjMwMTYyZTNjY2Mw
LzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfmDP9rB
m8zhnGk5OCM2Viod/1/Lnur8MHxJbvs85BP6CZjjvdBw9TpNBHN214GSYC8VtL8d
fLOnHEN6ZKERxB7lUceTZevkkcDcjKaftMFTLTMSnVarG7BQPYFjv950uBe7Ec6X
bW8fcnfy9ydGtxOeqolmNuyX67B61TAB3+/VKTLjkBqU0ghKZnTcQMvoltQrknxk
DQ4WXFAFkiZK37O86BOSNNRqy2x4NwR/boKYMgyAfbomhqBQ44FRkFp8f4FGxJJq
nxqU37RZpb0eh2XhqJ6XBmGtje3OmSIOYvU28TdvhL6zS2MjeCFyOoEdQWwVeYFT
nOm20UL5BPwTog==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:28 2025 by rpki-client