Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: 1cC2Zfd9YSTx4VKo0Qn/4mfyYuUMlfcNZ2zhySoKMOU=
Subject key identifier: E9:97:64:86:5C:4F:D8:20:83:A6:2C:2D:22:B0:77:9D:E1:F8:77:3E
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019894123AC653CF928AD25D353FD52CEE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 0DC8
Signing time: Sun 10 Aug 2025 13:01:19 +0000
Manifest this update: Sun 10 Aug 2025 13:01:19 +0000
Manifest next update: Mon 11 Aug 2025 13:01:19 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: ZIPrxxIJxBQt03nwGwIJMDjCUzrdRDtJqP0W0dqzZsg=)
2: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (hash: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=)
3: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (hash: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:3a:c6:53:cf:92:8a:d2:5d:35:3f:d5:2c:ee:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Aug 10 13:01:19 2025 GMT
Not After : Aug 11 13:01:19 2025 GMT
Subject: CN=e99764865c4fd82083a62c2d22b0779de1f8773e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:3d:37:d8:71:f3:e7:21:c0:a6:59:cb:bb:
b7:70:e9:f5:b9:86:b3:fe:25:b4:5d:2b:1c:9e:ec:
4b:26:f4:9d:83:be:29:57:3a:99:f9:6b:55:20:0e:
f6:e7:2a:be:9d:86:71:a3:c0:83:cd:d3:79:93:a8:
aa:63:54:12:94:cd:f7:5d:14:4e:b2:ab:b5:29:b4:
ec:c5:65:e1:1c:b8:f7:73:f4:8a:a4:79:f2:a0:d9:
93:ac:c4:1a:c0:23:ec:5c:f7:10:47:ff:eb:36:b7:
0e:ff:ca:ec:28:2b:40:0e:64:b7:c2:f0:43:04:cb:
25:a8:a6:19:30:13:68:72:7b:11:c6:02:fb:56:06:
9d:db:3a:fa:1b:91:ef:1d:55:0a:d3:e3:ed:f7:3d:
ee:95:a7:38:d8:70:9d:1f:16:ee:75:7b:ac:e3:26:
56:2a:4b:55:8f:73:65:88:66:fd:61:b6:f7:1b:a3:
dc:a2:30:60:92:68:5e:94:ca:83:6b:6a:f2:68:ed:
72:89:ff:2f:19:b1:5b:a1:28:ee:d8:3f:0f:7b:df:
85:4d:8f:ef:b2:e4:a0:b2:d8:5d:1e:ec:b4:04:2d:
1c:88:67:9e:de:9f:f1:4d:52:03:0e:9c:63:a5:d1:
d3:ff:97:14:aa:e1:3a:e7:57:aa:98:05:f4:78:48:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:97:64:86:5C:4F:D8:20:83:A6:2C:2D:22:B0:77:9D:E1:F8:77:3E
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ec:cd:ed:79:d4:05:07:d6:33:4b:27:99:a1:94:d4:cb:2f:
a2:2a:a5:d3:95:d5:9e:e7:62:ca:fb:1a:7f:23:7e:49:dd:34:
23:38:79:64:02:b8:20:8f:91:f9:f2:b0:55:4b:74:2b:cb:b2:
6f:42:73:8c:87:5e:2e:80:89:e4:27:27:ef:61:fe:d3:e9:e9:
62:0d:5c:46:4e:da:5e:26:06:4d:a0:28:7d:78:42:a1:e4:c8:
be:fe:fb:7e:ec:69:0d:62:b6:bd:59:d8:fd:55:54:21:63:77:
39:67:1f:25:a6:35:7a:84:37:da:75:4f:fb:05:4b:06:7d:27:
f3:fc:cf:49:a2:d8:c0:0d:f6:02:1e:8f:43:06:41:41:c2:21:
52:a4:0d:54:92:53:b5:07:0e:53:d8:f1:0f:f0:76:1c:65:38:
84:ce:e9:06:92:02:d1:93:98:b0:4e:43:aa:49:d0:43:f8:4d:
f6:b1:30:98:a9:fb:72:bb:b0:ba:d4:e8:81:e2:6c:8e:6c:b3:
8e:d4:87:68:a1:1d:3d:ea:65:6f:2f:ab:76:cc:dc:da:a8:11:
02:59:e6:a6:a3:19:83:c1:ce:93:da:df:ab:5e:40:0a:47:ec:
5e:fa:f6:52:43:8b:4d:bc:59:63:55:a6:eb:74:8e:50:c5:60:
17:6f:d8:43
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiUEjrGU8+SitJdNT/VLO6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTMxZDJlZWViNjdhOTM3ZTJlODdkNzZhZDlmOWQxN2Nk
YTk3ZjAwHhcNMjUwODEwMTMwMTE5WhcNMjUwODExMTMwMTE5WjAzMTEwLwYDVQQD
EyhlOTk3NjQ4NjVjNGZkODIwODNhNjJjMmQyMmIwNzc5ZGUxZjg3NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uU9N9hx8+chwKZZy7u3cOn1uYaz
/iW0XSscnuxLJvSdg74pVzqZ+WtVIA725yq+nYZxo8CDzdN5k6iqY1QSlM33XRRO
squ1KbTsxWXhHLj3c/SKpHnyoNmTrMQawCPsXPcQR//rNrcO/8rsKCtADmS3wvBD
BMslqKYZMBNocnsRxgL7Vgad2zr6G5HvHVUK0+Pt9z3ulac42HCdHxbudXus4yZW
KktVj3NliGb9Ybb3G6PcojBgkmhelMqDa2ryaO1yif8vGbFboSju2D8Pe9+FTY/v
suSgsthdHuy0BC0ciGee3p/xTVIDDpxjpdHT/5cUquE651eqmAX0eEgy3wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOmXZIZcT9ggg6YsLSKwd53h+Hc+MB8GA1UdIwQY
MBaAFPijHS7utnqTfi6H12rZ+dF82pfwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LTWRMdTYyZXBOLUxvZlhhdG41MFh6YWxfQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2
LTU5NWYyMTAwMTY2Yi8xLzEtS01kTHU2MmVwTi1Mb2ZYYXRuNTBYemFsX0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiLzg4NjY0Ni1mZmFhLTQwMGUtOGRmNi01OTVmMjEwMDE2
NmIvMS8xLUtNZEx1NjJlcE4tTG9mWGF0bjUwWHphbF9BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOzN
7XnUBQfWM0snmaGU1Msvoiql05XVnudiyvsafyN+Sd00Izh5ZAK4II+R+fKwVUt0
K8uyb0JzjIdeLoCJ5Ccn72H+0+npYg1cRk7aXiYGTaAofXhCoeTIvv77fuxpDWK2
vVnY/VVUIWN3OWcfJaY1eoQ32nVP+wVLBn0n8/zPSaLYwA32Ah6PQwZBQcIhUqQN
VJJTtQcOU9jxD/B2HGU4hM7pBpIC0ZOYsE5DqknQQ/hN9rEwmKn7cruwutTogeJs
jmyzjtSHaKEdPeplby+rdszc2qgRAlnmpqMZg8HOk9rfq15ACkfsXvr2UkOLTbxZ
Y1Wm63SOUMVgF2/YQw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:29:43 2025 by rpki-client