Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: 9PZa7qczqP+gD6Kx5t0qPRNJ2pmnRR11mRsX2zhBCMI=
Subject key identifier: E7:ED:3B:1E:E0:65:20:D0:53:53:53:8F:BF:27:37:4D:81:7D:04:5B
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 01987A1B46A425272165348FDEBB21D13B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 11EC
Signing time: Tue 05 Aug 2025 12:01:04 +0000
Manifest this update: Tue 05 Aug 2025 12:01:04 +0000
Manifest next update: Wed 06 Aug 2025 12:01:04 +0000
Files and hashes: 1: AzENH95bt8URAYkHoVsIpFCsCKo.roa (hash: AH2b85dRr2FxufgtlMVISLL90V2KJDLxN1PjWzu3Llc=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: ywPlbTTHfMlRPtmm1fbbGddF2ciQQKfuQr75erULB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:46:a4:25:27:21:65:34:8f:de:bb:21:d1:3b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Aug 5 12:01:04 2025 GMT
Not After : Aug 6 12:01:04 2025 GMT
Subject: CN=e7ed3b1ee06520d05353538fbf27374d817d045b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:9c:19:ef:bf:b1:a8:3a:7c:a2:29:1b:88:
69:61:35:0b:32:ae:65:99:80:84:65:8b:2e:b9:4e:
f8:6f:72:36:1e:3c:cb:0c:e6:0c:dd:4e:da:c2:35:
ea:85:bb:e3:5c:5e:23:01:e1:5e:00:81:8a:e5:3d:
f7:32:0c:7f:7f:2a:8f:96:8e:ee:66:1e:3d:38:e9:
85:75:11:94:c7:2c:18:1c:61:45:3e:a4:d5:c0:fc:
3f:17:ea:bd:e9:86:32:30:68:39:53:46:51:07:a7:
89:8a:8b:b2:ad:90:d2:ea:46:1f:43:b0:57:7e:af:
86:ed:7c:b4:69:1d:83:43:ea:36:09:f8:f3:33:b2:
9a:af:8c:6a:c5:c2:4b:be:49:4b:f5:07:40:7e:51:
7d:ef:41:15:36:07:3e:5b:26:8f:12:5d:c6:fe:0c:
1c:23:0d:d4:2e:57:f8:be:5e:f2:11:e6:80:ef:a0:
63:98:9e:96:70:df:af:4c:f2:ac:67:3f:02:b3:a0:
cb:87:7e:e6:f6:ae:1c:d3:d6:c3:85:55:38:b9:55:
91:8d:a3:30:b6:43:06:51:49:c2:4f:d8:0f:32:77:
62:61:55:1b:7b:11:4c:cc:18:4f:b5:97:aa:64:c7:
76:bb:ad:ed:75:d3:58:9a:e0:ce:85:35:30:fd:8c:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:3B:1E:E0:65:20:D0:53:53:53:8F:BF:27:37:4D:81:7D:04:5B
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:98:0b:70:de:9b:a1:97:9b:31:c5:0d:ad:d7:43:63:1a:21:
3f:cf:7f:85:1d:50:43:90:b3:8d:ab:50:6c:5b:f6:a3:aa:35:
49:24:1f:72:a8:17:8c:91:99:b8:61:44:c2:9f:8f:d3:2a:be:
1b:d5:3f:32:9c:86:7a:02:8b:62:7e:7e:81:9e:6b:6e:dd:de:
b1:26:6c:27:19:2d:a5:69:01:cc:1e:21:90:15:ad:d2:ed:82:
1c:ac:36:14:f4:21:6d:f5:d7:62:36:ae:9f:4f:f7:d5:d0:6c:
05:d8:2d:29:d6:d9:80:06:4d:3e:f9:ab:71:d6:fc:c0:ec:d7:
fc:ee:88:88:07:24:9b:d6:77:a5:e0:f5:9b:e8:69:3e:3e:e8:
b5:71:39:e9:b8:88:3d:11:4d:eb:9a:a0:65:a3:48:d2:78:1e:
f0:f0:5a:17:80:39:8a:d8:f5:38:42:55:44:1b:ac:56:67:c4:
22:77:0f:2d:63:d0:82:57:e7:ed:a0:32:2a:02:bd:38:9f:28:
de:79:0e:ea:03:9a:b0:6e:86:87:df:fa:fa:34:0b:f8:9d:4b:
1f:63:8e:a0:76:b4:56:2c:bc:6d:66:b9:65:06:87:bb:f0:66:
26:4d:59:7e:4a:21:d4:e6:5d:83:aa:ba:a9:2b:5e:e2:6e:8d:
79:a0:64:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6G0akJSchZTSP3rsh0TtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWQ0NzJmYTUzODIwNGYxYzIzZThiNmE3NTgwNzNiODBj
ZmMxOTkwHhcNMjUwODA1MTIwMTA0WhcNMjUwODA2MTIwMTA0WjAzMTEwLwYDVQQD
EyhlN2VkM2IxZWUwNjUyMGQwNTM1MzUzOGZiZjI3Mzc0ZDgxN2QwNDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUOcGe+/sag6fKIpG4hpYTULMq5l
mYCEZYsuuU74b3I2HjzLDOYM3U7awjXqhbvjXF4jAeFeAIGK5T33Mgx/fyqPlo7u
Zh49OOmFdRGUxywYHGFFPqTVwPw/F+q96YYyMGg5U0ZRB6eJiouyrZDS6kYfQ7BX
fq+G7Xy0aR2DQ+o2CfjzM7Kar4xqxcJLvklL9QdAflF970EVNgc+WyaPEl3G/gwc
Iw3ULlf4vl7yEeaA76BjmJ6WcN+vTPKsZz8Cs6DLh37m9q4c09bDhVU4uVWRjaMw
tkMGUUnCT9gPMndiYVUbexFMzBhPtZeqZMd2u63tddNYmuDOhTUw/Ywu4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOftOx7gZSDQU1NTj78nN02BfQRbMB8GA1UdIwQY
MBaAFJhdRy+lOCBPHCPotqdYBzuAz8GZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTIt
ZWRjMzE2MjIyNjQ0LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTItZWRjMzE2MjIyNjQ0
LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZgLcN6b
oZebMcUNrddDYxohP89/hR1QQ5CzjatQbFv2o6o1SSQfcqgXjJGZuGFEwp+P0yq+
G9U/MpyGegKLYn5+gZ5rbt3esSZsJxktpWkBzB4hkBWt0u2CHKw2FPQhbfXXYjau
n0/31dBsBdgtKdbZgAZNPvmrcdb8wOzX/O6IiAckm9Z3peD1m+hpPj7otXE56biI
PRFN65qgZaNI0nge8PBaF4A5itj1OEJVRBusVmfEIncPLWPQglfn7aAyKgK9OJ8o
3nkO6gOasG6Gh9/6+jQL+J1LH2OOoHa0Viy8bWa5ZQaHu/BmJk1Zfkoh1OZdg6q6
qSte4m6NeaBkBA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:27 2025 by rpki-client