Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: EUF3Var03o/AqDtaLb2sJ3qDJCYgb8VH1L6CQYbOGe8=
Subject key identifier: BD:4E:F2:C9:4E:8F:0E:62:54:EF:28:B3:8D:15:FB:21:BA:23:B5:5B
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 01988B4613B7DE6E81B9650FF315F0151F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 070C
Signing time: Fri 08 Aug 2025 20:01:22 +0000
Manifest this update: Fri 08 Aug 2025 20:01:22 +0000
Manifest next update: Sat 09 Aug 2025 20:01:22 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: u/UmG0nMF1Og+xB2OzN6dycP3jqiTdNgG5MRhEEuZ5Y=)
2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:46:13:b7:de:6e:81:b9:65:0f:f3:15:f0:15:1f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Aug 8 20:01:22 2025 GMT
Not After : Aug 9 20:01:22 2025 GMT
Subject: CN=bd4ef2c94e8f0e6254ef28b38d15fb21ba23b55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:ad:79:68:6f:7c:55:d3:e8:42:11:b3:68:
0b:9f:78:0d:c2:01:49:22:86:7f:cb:e8:87:06:6f:
b2:4e:1b:43:e4:ba:d8:c7:c6:e9:b3:5a:49:4e:e4:
78:6e:a1:60:1c:70:2d:79:a0:19:2c:3f:6c:7d:a2:
91:99:00:69:e7:e8:df:5a:51:ee:d1:47:00:2b:46:
00:1b:47:ed:90:00:5d:28:d0:3c:ad:5f:49:00:5e:
e9:44:cc:ba:4b:7e:6a:07:64:e6:09:3c:6e:87:db:
65:d9:47:c2:7b:85:28:6d:1d:7b:3b:46:be:c8:1d:
35:19:5c:7e:e1:93:00:a3:14:0a:99:8d:12:bb:30:
a6:67:b4:ff:20:c4:09:ce:53:82:ea:c7:75:61:6b:
c8:a9:38:f6:b6:cd:25:f3:bc:c0:6a:64:b8:21:23:
bb:10:78:20:c8:b8:4c:70:fc:ca:e6:50:d6:57:90:
4b:ed:65:1c:90:6b:8c:7c:6c:28:a6:b8:1f:94:2a:
0f:4e:63:c4:a7:85:7b:d0:45:db:16:29:eb:b3:ee:
4f:c9:58:61:ca:03:5b:62:1c:d7:f3:21:93:42:95:
72:ea:25:39:36:d2:e6:f5:a1:96:ee:de:b3:ca:56:
b9:87:69:dc:d4:aa:e6:05:87:39:84:09:7c:c2:a7:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4E:F2:C9:4E:8F:0E:62:54:EF:28:B3:8D:15:FB:21:BA:23:B5:5B
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0a:ca:3e:6e:ff:e0:72:f7:ca:25:60:ef:18:6d:9a:21:8d:
d5:21:c9:49:8c:02:cf:a3:bf:3c:07:fc:23:04:77:71:70:d0:
73:b9:1f:f3:28:5b:aa:f6:01:7f:a8:36:84:34:dc:88:d4:38:
60:ac:f8:6f:72:67:41:2e:da:2d:81:b7:aa:92:2f:c8:53:39:
43:ad:d0:0b:03:60:c2:0c:70:cf:98:38:df:49:32:ef:3e:3a:
88:bd:8b:9f:ed:8a:76:80:de:a5:79:ed:ff:c2:be:2a:99:46:
b8:c4:e0:08:87:dd:87:63:7e:e6:43:f2:6c:24:c4:4e:b9:33:
0a:9c:1b:61:00:54:65:d8:3c:77:df:1a:4c:a3:ec:42:4d:d4:
38:bf:e7:75:6e:ac:9b:4a:ee:cd:0c:dc:b7:29:44:22:1d:00:
9c:3f:8a:83:87:ba:43:9f:b9:84:0b:24:74:29:ea:b3:b4:bc:
3b:9f:e1:2f:11:86:83:f4:59:9e:ba:29:0e:0e:06:61:6b:71:
25:b4:2a:59:0e:22:06:61:9c:d1:1a:36:f3:b6:99:ac:87:fd:
10:2c:bc:9f:93:b7:dd:07:18:28:40:81:00:54:18:85:74:68:
24:ce:a4:4f:16:75:d1:cf:f9:5c:aa:3d:53:17:b2:b3:99:0c:
f2:af:85:bd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiLRhO33m6BuWUP8xXwFR8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4
NDgzZmMwHhcNMjUwODA4MjAwMTIyWhcNMjUwODA5MjAwMTIyWjAzMTEwLwYDVQQD
EyhiZDRlZjJjOTRlOGYwZTYyNTRlZjI4YjM4ZDE1ZmIyMWJhMjNiNTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6ateWhvfFXT6EIRs2gLn3gNwgFJ
IoZ/y+iHBm+yThtD5LrYx8bps1pJTuR4bqFgHHAteaAZLD9sfaKRmQBp5+jfWlHu
0UcAK0YAG0ftkABdKNA8rV9JAF7pRMy6S35qB2TmCTxuh9tl2UfCe4UobR17O0a+
yB01GVx+4ZMAoxQKmY0SuzCmZ7T/IMQJzlOC6sd1YWvIqTj2ts0l87zAamS4ISO7
EHggyLhMcPzK5lDWV5BL7WUckGuMfGwoprgflCoPTmPEp4V70EXbFinrs+5PyVhh
ygNbYhzX8yGTQpVy6iU5NtLm9aGW7t6zyla5h2nc1KrmBYc5hAl8wqf37wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL1O8slOjw5iVO8os40V+yG6I7VbMB8GA1UdIwQY
MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3
LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk
NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEArK
Pm7/4HL3yiVg7xhtmiGN1SHJSYwCz6O/PAf8IwR3cXDQc7kf8yhbqvYBf6g2hDTc
iNQ4YKz4b3JnQS7aLYG3qpIvyFM5Q63QCwNgwgxwz5g430ky7z46iL2Ln+2KdoDe
pXnt/8K+KplGuMTgCIfdh2N+5kPybCTETrkzCpwbYQBUZdg8d98aTKPsQk3UOL/n
dW6sm0ruzQzctylEIh0AnD+Kg4e6Q5+5hAskdCnqs7S8O5/hLxGGg/RZnropDg4G
YWtxJbQqWQ4iBmGc0Ro287aZrIf9ECy8n5O33QcYKECBAFQYhXRoJM6kTxZ10c/5
XKo9Uxeys5kM8q+FvQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:11 2025 by rpki-client