Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier: P3p1tSOruqX31HyQ/PGpfdsIdIt2dpYIxNzHWtoOQhM=
Subject key identifier: 92:D4:EF:DB:2D:0D:A6:4D:5C:C2:4D:C4:B7:77:C3:3C:0E:6F:D2:24
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial: 01988AA0DD3A3FA418E09E78719CF7A0E0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number: 0D5D
Signing time: Fri 08 Aug 2025 17:00:54 +0000
Manifest this update: Fri 08 Aug 2025 17:00:54 +0000
Manifest next update: Sat 09 Aug 2025 17:00:54 +0000
Files and hashes: 1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: XJOHyICLcIDDIWDDC2HfKtoHtYdVT9rnB1Ld3I4eC0U=)
2: 8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa (hash: c2krYBPX6FJP/S5DK6Bqlhz1YaUFixNmTfTx7RgZ1eo=)
3: AKY3-lmq_F-hZTNjYE8VF5Dbfhg.roa (hash: SNTyErzebd/AsxAYfH3hc+mIWE58J4HLCDSVxz7/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:dd:3a:3f:a4:18:e0:9e:78:71:9c:f7:a0:e0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Validity
Not Before: Aug 8 17:00:54 2025 GMT
Not After : Aug 9 17:00:54 2025 GMT
Subject: CN=92d4efdb2d0da64d5cc24dc4b777c33c0e6fd224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:23:d3:c0:b8:89:03:6c:8a:5b:4f:b5:65:
80:22:63:de:11:b3:8e:96:1f:c9:c6:34:a5:50:e3:
d0:42:58:8a:5f:8b:2d:04:90:37:26:54:36:d6:38:
e5:22:73:e8:ae:27:28:bc:16:22:ad:6b:06:10:6a:
d4:46:81:85:42:37:42:2e:ae:db:1a:07:cd:13:18:
e1:c7:d7:eb:a2:39:ec:24:cc:d1:38:ff:bc:0e:9e:
bf:f3:9f:22:f8:b5:b1:61:b9:aa:9a:63:d9:8f:68:
2e:7d:78:71:1b:06:2a:07:00:65:c7:dd:79:35:9a:
30:73:65:73:f6:87:16:9d:e8:a9:b7:7d:7b:d6:61:
07:2b:34:68:e7:f4:ea:74:6b:84:b5:e8:93:de:46:
33:fe:02:a2:e2:f2:14:72:9e:dd:c2:17:aa:b8:c1:
2a:20:7a:66:0b:f5:43:2b:2b:19:4a:bd:0e:86:79:
40:0d:0c:02:76:42:e7:f2:70:19:58:21:46:d0:a0:
7b:56:36:56:f7:e3:a7:d3:80:99:21:14:5e:ae:9f:
ca:1d:48:4b:1f:97:3c:66:26:b9:0e:2c:6c:a9:74:
c2:54:cf:76:5b:37:0d:8a:57:be:d0:9e:f8:3d:53:
e7:2b:c8:79:09:a1:f2:25:57:d6:a5:cf:a4:10:47:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D4:EF:DB:2D:0D:A6:4D:5C:C2:4D:C4:B7:77:C3:3C:0E:6F:D2:24
X509v3 Authority Key Identifier:
keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:30:8b:d7:1f:05:43:75:50:d7:c2:d4:0d:e9:16:68:f5:7a:
22:bd:d6:e0:6c:52:03:91:7d:4a:79:3d:cd:52:b8:bc:7c:07:
7b:ed:59:97:bc:d7:23:3b:ac:13:aa:e0:e0:31:ed:c2:95:13:
a9:e8:4c:15:79:14:b1:28:d4:04:39:69:2e:39:da:ed:2f:8d:
e9:d8:4b:b3:24:18:c2:8a:f1:22:9a:bb:b0:20:a0:0b:3d:27:
ff:e8:f5:29:8e:84:91:c0:77:b9:0d:02:0a:81:3d:15:1b:3a:
c8:6b:39:0e:ca:99:5e:a7:b1:c2:c2:fd:dc:b3:34:3c:b5:6f:
14:a0:8c:c9:f1:60:ac:02:1d:20:bb:38:51:3a:8a:28:5c:58:
5f:0a:a6:78:c5:51:b3:2b:8a:71:1b:51:0f:e7:46:4e:08:56:
28:c7:63:81:b6:62:0e:49:21:ce:4a:55:34:07:c6:9a:da:de:
3c:64:c3:4d:b1:60:ed:6a:0a:b5:6e:1c:b3:a8:23:05:61:fd:
75:d8:71:06:f6:d0:14:3a:33:f2:93:85:41:e2:2d:15:26:53:
7b:51:27:5c:fc:92:0f:e6:41:b4:2a:b3:17:1c:e2:fc:f7:69:
69:6d:e1:08:68:46:8c:68:fb:49:c6:8e:79:89:80:b0:a6:4f:
4d:ca:cb:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoN06P6QY4J54cZz3oODTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmI0NTJhMGFlMzNkZmE1MmFhYWFjYmE3OTRkZjFhZjZi
YzQzMzQwHhcNMjUwODA4MTcwMDU0WhcNMjUwODA5MTcwMDU0WjAzMTEwLwYDVQQD
Eyg5MmQ0ZWZkYjJkMGRhNjRkNWNjMjRkYzRiNzc3YzMzYzBlNmZkMjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfQj08C4iQNsiltPtWWAImPeEbOO
lh/JxjSlUOPQQliKX4stBJA3JlQ21jjlInPoricovBYirWsGEGrURoGFQjdCLq7b
GgfNExjhx9frojnsJMzROP+8Dp6/858i+LWxYbmqmmPZj2gufXhxGwYqBwBlx915
NZowc2Vz9ocWneipt3171mEHKzRo5/TqdGuEteiT3kYz/gKi4vIUcp7dwhequMEq
IHpmC/VDKysZSr0OhnlADQwCdkLn8nAZWCFG0KB7VjZW9+On04CZIRRerp/KHUhL
H5c8Zia5DixsqXTCVM92WzcNile+0J74PVPnK8h5CaHyJVfWpc+kEEfWIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLU79stDaZNXMJNxLd3wzwOb9IkMB8GA1UdIwQY
MBaAFNb7RSoK4z36Uqqqy6eU3xr2vEM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ0RktncmpQZnBTcXFyTHA1VGZHdmE4UXpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYmRkN2UtYTcyOS00OWFkLTg1YWEt
Zjc1OTYyZDMwZTM2LzEvMXZ0RktncmpQZnBTcXFyTHA1VGZHdmE4UXpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zYmRkN2UtYTcyOS00OWFkLTg1YWEtZjc1OTYyZDMwZTM2
LzEvMXZ0RktncmpQZnBTcXFyTHA1VGZHdmE4UXpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDCL1x8F
Q3VQ18LUDekWaPV6Ir3W4GxSA5F9Snk9zVK4vHwHe+1Zl7zXIzusE6rg4DHtwpUT
qehMFXkUsSjUBDlpLjna7S+N6dhLsyQYworxIpq7sCCgCz0n/+j1KY6EkcB3uQ0C
CoE9FRs6yGs5DsqZXqexwsL93LM0PLVvFKCMyfFgrAIdILs4UTqKKFxYXwqmeMVR
syuKcRtRD+dGTghWKMdjgbZiDkkhzkpVNAfGmtrePGTDTbFg7WoKtW4cs6gjBWH9
ddhxBvbQFDoz8pOFQeItFSZTe1EnXPySD+ZBtCqzFxzi/PdpaW3hCGhGjGj7ScaO
eYmAsKZPTcrLtg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:35 2025 by rpki-client