
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: wI4UeDt/h4RMX6/p/Qg/37H6pUvcTONjmj4IkB2u16g=
Subject key identifier: 61:07:B1:EB:52:FD:64:36:79:19:84:3E:6D:EE:12:EC:36:19:7B:E9
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 0198906BDFB44522B44D3ABB6F069506624E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 0D4E
Signing time: Sat 09 Aug 2025 20:00:45 +0000
Manifest this update: Sat 09 Aug 2025 20:00:45 +0000
Manifest next update: Sun 10 Aug 2025 20:00:45 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: aoCBggp+IBh3qZeT4ADgPKsoz2laDqPb/+0yE5/uweM=)
2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:df:b4:45:22:b4:4d:3a:bb:6f:06:95:06:62:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Aug 9 20:00:45 2025 GMT
Not After : Aug 10 20:00:45 2025 GMT
Subject: CN=6107b1eb52fd64367919843e6dee12ec36197be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:d1:0c:6f:1c:6d:cb:a9:8b:c4:ba:9b:26:
4f:b9:2b:de:24:8d:a3:95:a3:be:59:f7:46:09:49:
61:38:f9:29:cd:3c:aa:ef:1b:96:d7:44:4f:af:fb:
5a:c3:97:e7:6c:1f:5d:97:33:59:59:85:19:5b:e3:
0f:f7:f3:69:96:db:5b:4e:49:0c:2f:b3:7f:1d:3d:
94:49:ab:96:71:76:5a:d6:20:13:19:a2:59:d7:8b:
07:bc:f4:a6:bf:ae:f0:9d:fc:9b:cb:6b:56:27:48:
33:d5:25:3c:0c:bb:ec:40:b1:32:8a:9d:dd:c0:9e:
a4:11:ae:be:bf:2b:94:ac:a1:07:2a:fa:26:56:e6:
13:4c:6e:34:6b:24:ea:8c:4c:93:ec:1c:bf:65:7f:
3b:3f:97:c1:f9:19:07:0a:b1:c9:cd:74:c6:92:52:
7b:74:6e:85:3f:63:4f:76:4f:e7:d2:b1:ed:9f:ee:
b0:95:2a:7d:af:5d:b4:3c:09:d8:9e:dd:44:e6:ca:
69:95:1d:72:f2:61:04:80:8b:73:62:bf:4e:6e:41:
38:93:cd:46:80:ec:6d:f0:63:af:d0:f7:74:69:c3:
38:a9:d7:7b:a8:2b:8e:2a:d5:89:5c:ff:c8:8a:bd:
da:a7:1d:39:a7:48:ec:0d:2e:ad:9e:44:3f:f6:9a:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:07:B1:EB:52:FD:64:36:79:19:84:3E:6D:EE:12:EC:36:19:7B:E9
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ac:65:f8:38:06:b5:7e:08:5a:42:9f:24:88:98:c0:8a:0a:
19:59:04:4d:d9:a0:c7:97:57:6c:ec:ec:44:0e:c2:d6:b1:fb:
2a:bd:4d:08:14:c1:d3:95:e7:d9:1c:d8:43:0e:4b:07:a7:96:
1c:a3:2b:e5:99:ba:5e:fd:4d:55:c2:27:38:c1:48:7b:f9:29:
61:81:00:45:94:88:23:c2:49:23:1e:3b:c2:d0:c7:e9:b6:d5:
0a:dc:3e:df:54:2c:1b:bd:65:dd:8d:e9:64:c8:4a:44:24:af:
ba:5a:d5:69:fc:eb:ae:a9:55:7e:69:0b:6e:f3:4a:af:7b:f6:
da:5c:75:10:eb:0f:7c:19:09:bc:8b:2b:53:52:75:62:37:c0:
da:5c:e2:0c:7d:73:a2:80:2c:b9:f9:20:c2:c8:56:b0:44:0a:
b9:5d:1b:22:9f:8c:7b:54:e9:5e:5f:a0:65:07:54:82:24:ff:
da:a1:25:da:bb:17:68:68:26:c2:10:71:b4:90:9d:1b:fb:ae:
31:67:03:90:56:8a:07:7e:ba:39:a3:4e:a7:50:b3:a5:e4:a5:
41:f3:fb:64:aa:f4:73:b7:ad:9e:34:2b:1a:09:04:ce:e4:4c:
25:d8:1a:7a:a7:61:0a:67:5c:79:26:20:d6:30:ed:94:68:56:
4c:60:98:23
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiQa9+0RSK0TTq7bwaVBmJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZDc0NjliZTBkOWM0YmE4ODlkM2UyMDI2YWQ4YWRjNDJj
M2NmNTMwHhcNMjUwODA5MjAwMDQ1WhcNMjUwODEwMjAwMDQ1WjAzMTEwLwYDVQQD
Eyg2MTA3YjFlYjUyZmQ2NDM2NzkxOTg0M2U2ZGVlMTJlYzM2MTk3YmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl87RDG8cbcupi8S6myZPuSveJI2j
laO+WfdGCUlhOPkpzTyq7xuW10RPr/taw5fnbB9dlzNZWYUZW+MP9/NplttbTkkM
L7N/HT2USauWcXZa1iATGaJZ14sHvPSmv67wnfyby2tWJ0gz1SU8DLvsQLEyip3d
wJ6kEa6+vyuUrKEHKvomVuYTTG40ayTqjEyT7By/ZX87P5fB+RkHCrHJzXTGklJ7
dG6FP2NPdk/n0rHtn+6wlSp9r120PAnYnt1E5spplR1y8mEEgItzYr9ObkE4k81G
gOxt8GOv0Pd0acM4qdd7qCuOKtWJXP/Iir3apx05p0jsDS6tnkQ/9poMMQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGEHsetS/WQ2eRmEPm3uEuw2GXvpMB8GA1UdIwQY
MBaAFPnXRpvg2cS6iJ0+ICatitxCw89TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kZEdtLURaeExxSW5UNGdKcTJLM0VMRHoxTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvOTk1ZTRmLWNkNDItNGRjOS1hZTI0
LTBlYzEyY2ZjZTQyMS8xLzEtZGRHbS1EWnhMcUluVDRnSnEySzNFTER6MU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg1Lzk5NWU0Zi1jZDQyLTRkYzktYWUyNC0wZWMxMmNmY2U0
MjEvMS8xLWRkR20tRFp4THFJblQ0Z0pxMkszRUxEejFNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaxl
+DgGtX4IWkKfJIiYwIoKGVkETdmgx5dXbOzsRA7C1rH7Kr1NCBTB05Xn2RzYQw5L
B6eWHKMr5Zm6Xv1NVcInOMFIe/kpYYEARZSII8JJIx47wtDH6bbVCtw+31QsG71l
3Y3pZMhKRCSvulrVafzrrqlVfmkLbvNKr3v22lx1EOsPfBkJvIsrU1J1YjfA2lzi
DH1zooAsufkgwshWsEQKuV0bIp+Me1TpXl+gZQdUgiT/2qEl2rsXaGgmwhBxtJCd
G/uuMWcDkFaKB366OaNOp1CzpeSlQfP7ZKr0c7etnjQrGgkEzuRMJdgaeqdhCmdc
eSYg1jDtlGhWTGCYIw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:09:01 2025 by rpki-client