
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
File: 1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json)
Hash identifier: aovdSTz2S4DJ95Ky3uocQ7YsVQlIT1KnArNvkBYjJoU=
Subject key identifier: BC:2C:52:D6:35:0C:62:5C:60:48:45:11:70:D6:46:1A:F0:F8:6D:35
Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Certificate issuer: /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Certificate serial: 0198880E37C07549B751DB09E0A33C22D728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
Manifest number: 161E
Signing time: Fri 08 Aug 2025 05:01:29 +0000
Manifest this update: Fri 08 Aug 2025 05:01:29 +0000
Manifest next update: Sat 09 Aug 2025 05:01:29 +0000
Files and hashes: 1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: tPg5SBnvWOIWClcfYnMIw01zBnOPZrRmLSwdJ8C7uD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0e:37:c0:75:49:b7:51:db:09:e0:a3:3c:22:d7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Validity
Not Before: Aug 8 05:01:29 2025 GMT
Not After : Aug 9 05:01:29 2025 GMT
Subject: CN=bc2c52d6350c625c6048451170d6461af0f86d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:9d:f5:5b:5c:a8:c3:ff:d7:0b:f8:9c:89:
73:4d:b0:e1:fb:6e:d6:a8:a9:69:c3:0f:c3:ce:23:
94:3d:ca:e6:c2:51:3e:25:82:ef:be:5d:fc:18:9b:
25:8a:93:74:1a:0d:15:0c:b9:35:5c:55:0f:16:e5:
ef:2c:0f:4c:b9:8d:22:1a:5c:07:d1:4e:1f:0d:e9:
41:70:1a:6f:b6:94:26:27:e1:1f:0b:3c:99:ec:dd:
70:12:ac:59:d3:68:58:39:7b:9f:ff:80:18:af:59:
51:5a:3a:32:2d:e0:5f:69:c5:4e:20:cb:71:2b:43:
c7:49:dd:28:ad:b1:6d:2c:5e:4a:01:a9:3f:43:71:
e2:20:58:ff:06:56:85:1a:9d:85:49:ec:1c:ac:a2:
9f:cf:04:e4:46:8a:93:34:bf:4c:28:b9:59:8f:a6:
21:32:07:a4:b5:8a:b1:1e:92:af:43:79:3d:39:14:
6a:dd:50:b1:52:e4:04:14:de:5b:d2:84:7d:3c:de:
9f:a7:81:75:c1:26:89:e0:70:0b:2e:85:8f:7b:65:
e7:8a:0a:94:bf:d9:59:64:8a:63:ca:59:09:8b:dc:
12:c5:46:88:fa:46:a9:31:8e:14:97:9f:7a:ce:01:
a5:3d:e5:4f:42:50:5a:c3:82:b1:66:5b:52:0d:e6:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2C:52:D6:35:0C:62:5C:60:48:45:11:70:D6:46:1A:F0:F8:6D:35
X509v3 Authority Key Identifier:
keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8a:b1:e9:aa:58:35:93:00:07:4c:31:61:4a:11:b4:70:42:
10:86:5d:a4:70:04:19:40:d8:cf:bd:7a:5c:45:27:55:93:e8:
06:30:37:61:06:18:75:6e:ca:38:77:a2:db:3f:25:1d:fd:83:
87:2c:ce:5c:30:ed:c4:4b:9f:98:2d:b7:62:ca:46:c8:73:48:
b6:7a:af:eb:62:64:04:9d:03:35:2f:72:c1:bc:57:e2:71:7e:
47:fc:97:e1:ba:0f:82:69:f6:57:e5:0c:7e:df:31:a9:ea:a0:
fb:bc:5a:ed:2f:45:02:ef:86:9d:96:50:51:b3:0c:66:42:df:
ae:4c:a6:20:75:75:09:96:c8:dc:2f:30:c4:28:3a:31:37:a3:
fe:ea:9b:d4:7d:86:34:46:a6:98:50:d0:0c:d6:c6:1d:c3:b7:
7a:06:c2:2a:23:12:9f:ba:5d:5e:43:58:5d:c7:ae:72:05:95:
ee:2b:d7:ca:ee:41:82:d6:15:e5:23:4b:58:70:06:62:73:9f:
4c:68:37:45:5c:48:f0:bd:91:29:de:69:5a:cf:19:10:32:49:
27:3e:af:fc:32:9c:67:5c:a7:96:15:08:cc:50:03:2f:c5:89:
c7:65:5c:bf:50:dd:0d:42:fb:15:c6:9c:5e:d3:73:e4:97:01:
c8:d3:04:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIDjfAdUm3UdsJ4KM8ItcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDg1Y2VkZjA5ZDgyZjc5MmMxODBkOTBhNWE5YTIzNmQ2
YTcwNWMwHhcNMjUwODA4MDUwMTI5WhcNMjUwODA5MDUwMTI5WjAzMTEwLwYDVQQD
EyhiYzJjNTJkNjM1MGM2MjVjNjA0ODQ1MTE3MGQ2NDYxYWYwZjg2ZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ad9VtcqMP/1wv4nIlzTbDh+27W
qKlpww/DziOUPcrmwlE+JYLvvl38GJslipN0Gg0VDLk1XFUPFuXvLA9MuY0iGlwH
0U4fDelBcBpvtpQmJ+EfCzyZ7N1wEqxZ02hYOXuf/4AYr1lRWjoyLeBfacVOIMtx
K0PHSd0orbFtLF5KAak/Q3HiIFj/BlaFGp2FSewcrKKfzwTkRoqTNL9MKLlZj6Yh
MgektYqxHpKvQ3k9ORRq3VCxUuQEFN5b0oR9PN6fp4F1wSaJ4HALLoWPe2XnigqU
v9lZZIpjylkJi9wSxUaI+kapMY4Ul596zgGlPeVPQlBaw4KxZltSDeZ7ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwsUtY1DGJcYEhFEXDWRhrw+G01MB8GA1UdIwQY
MBaAFNXYXO3wnYL3ksGA2QpamiNtanBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAt
YjFmN2M3MWIyMDFiLzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAtYjFmN2M3MWIyMDFi
LzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoqx6apY
NZMAB0wxYUoRtHBCEIZdpHAEGUDYz716XEUnVZPoBjA3YQYYdW7KOHei2z8lHf2D
hyzOXDDtxEufmC23YspGyHNItnqv62JkBJ0DNS9ywbxX4nF+R/yX4boPgmn2V+UM
ft8xqeqg+7xa7S9FAu+GnZZQUbMMZkLfrkymIHV1CZbI3C8wxCg6MTej/uqb1H2G
NEammFDQDNbGHcO3egbCKiMSn7pdXkNYXceucgWV7ivXyu5BgtYV5SNLWHAGYnOf
TGg3RVxI8L2RKd5pWs8ZEDJJJz6v/DKcZ1ynlhUIzFADL8WJx2Vcv1DdDUL7Fcac
XtNz5JcByNME5A==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:08 2025 by rpki-client