Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier: olSzXDL6uRY8ib1vpaGBcmMwEY/6bDyrVMpPUQcyFBE=
Subject key identifier: 45:CA:20:94:6B:E9:EA:F4:1B:4F:43:63:07:C8:F2:7D:A7:CE:12:8B
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 019881673AD6E905E212A6C681C94C1DB58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number: 0A4A
Signing time: Wed 06 Aug 2025 22:01:22 +0000
Manifest this update: Wed 06 Aug 2025 22:01:22 +0000
Manifest next update: Thu 07 Aug 2025 22:01:22 +0000
Files and hashes: 1: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: tQVpIHP9muzLH8RVBfH0FMC9YDxVwk0UqOj3V0O5YxQ=)
2: XjL_VzQpHSFAWpxr8LGCRwpbqdA.roa (hash: Brx7GKcJBpG7UwHG4ArWnTWvC9k75AexdudLOh9h/Pw=)
3: _iMkYM2SlDhb8BiWpSMXooueyD8.roa (hash: S5QL6kGITU62oZ1okwVbSjZ25wXtKrDyDz3OlnPy3eo=)
4: r8lD_AoxI_vqECkRvj5MGM36UnA.roa (hash: 3Vhj0OvbLDXudkl6wnwYXZg0rj1sNr06FqG4dJbW2C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:3a:d6:e9:05:e2:12:a6:c6:81:c9:4c:1d:b5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Aug 6 22:01:22 2025 GMT
Not After : Aug 7 22:01:22 2025 GMT
Subject: CN=45ca20946be9eaf41b4f436307c8f27da7ce128b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:44:27:31:4e:f8:ee:bd:b8:e9:7b:a2:b5:
96:8f:4e:bb:35:1f:39:dc:54:6d:5a:e5:44:a0:38:
5c:79:2c:cc:be:d0:73:5d:75:d6:00:b5:72:d7:39:
1e:d6:47:6b:0d:55:54:9a:13:f4:50:3d:81:39:92:
f8:3b:89:ad:8e:6e:ea:1a:92:36:d6:d0:20:50:c1:
5f:a5:db:93:62:59:56:c6:28:5b:0b:44:e4:9f:66:
be:97:08:e7:1c:87:f8:c3:08:4d:7c:3b:ed:45:37:
77:fe:b8:e0:73:8b:e5:b0:16:0d:a3:9f:7f:ca:4f:
19:4c:bd:d4:d2:2b:d2:7b:92:b5:11:45:20:9c:72:
1b:85:63:47:63:11:72:1e:34:19:68:85:2c:ab:b8:
98:a5:a8:ae:92:76:5c:cf:1f:99:c5:4b:e4:35:0d:
63:ee:d7:b8:0f:81:43:67:56:02:da:b5:9a:5b:c2:
8c:09:06:54:a9:c7:f3:df:a3:37:a9:88:b6:3a:2d:
ff:64:1a:cd:39:ea:a0:49:0c:93:d9:ca:75:4f:eb:
c9:28:64:e4:1b:bd:70:ef:fc:3e:7f:9a:3e:a5:0d:
61:49:72:e4:2d:92:7b:f1:69:02:5a:cb:44:d8:86:
bd:b8:f5:7a:62:5a:2f:88:2c:6c:78:29:21:a2:bf:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CA:20:94:6B:E9:EA:F4:1B:4F:43:63:07:C8:F2:7D:A7:CE:12:8B
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fd:84:51:36:93:27:aa:1b:d0:fe:c2:63:8f:ce:db:0d:c7:
27:63:d5:7d:03:a3:3c:c2:63:4c:35:b3:1a:0d:9f:29:22:aa:
45:d9:a2:94:71:ad:14:6e:70:a6:33:74:5c:d9:3a:68:c6:8f:
f2:e7:ff:08:b8:3b:a1:8a:01:ab:17:a6:b6:73:10:2c:30:d2:
1e:b1:e4:f0:0d:bd:e2:ac:57:62:43:32:d9:9c:e9:af:48:45:
11:d8:0b:d7:11:3c:af:23:f3:18:e4:26:0e:c9:e7:20:f8:d2:
f9:5f:78:39:c7:50:03:f9:df:45:27:07:c6:bc:89:bc:aa:96:
05:ff:d2:bb:58:4f:4a:92:f2:87:01:f2:06:8c:f0:b4:57:1e:
74:b5:fe:6d:26:bd:1a:4f:0d:01:cf:b8:bc:cd:dc:2f:7d:71:
65:06:22:e1:7d:6d:51:c8:59:b8:c8:2b:34:83:44:0d:7c:b2:
10:db:1c:51:fd:85:6a:10:82:60:c1:41:b4:d3:03:a4:d1:c5:
28:ff:a8:ff:4d:06:e3:a3:12:a3:15:2f:61:95:89:72:31:2e:
79:96:4f:fe:6d:40:c4:6b:ca:db:b4:84:34:96:83:1f:67:d7:
0b:cb:8e:f1:0b:ba:7d:fc:b2:77:0c:5d:55:cd:52:78:de:e5:
22:cb:e9:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZzrW6QXiEqbGgclMHbWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZWU0MGY0NTg5ZDZhMTFiMjRmN2JiY2MyOWFiOWY5YWU2
ODk3MTkwHhcNMjUwODA2MjIwMTIyWhcNMjUwODA3MjIwMTIyWjAzMTEwLwYDVQQD
Eyg0NWNhMjA5NDZiZTllYWY0MWI0ZjQzNjMwN2M4ZjI3ZGE3Y2UxMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwJEJzFO+O69uOl7orWWj067NR85
3FRtWuVEoDhceSzMvtBzXXXWALVy1zke1kdrDVVUmhP0UD2BOZL4O4mtjm7qGpI2
1tAgUMFfpduTYllWxihbC0Tkn2a+lwjnHIf4wwhNfDvtRTd3/rjgc4vlsBYNo59/
yk8ZTL3U0ivSe5K1EUUgnHIbhWNHYxFyHjQZaIUsq7iYpaiuknZczx+ZxUvkNQ1j
7te4D4FDZ1YC2rWaW8KMCQZUqcfz36M3qYi2Oi3/ZBrNOeqgSQyT2cp1T+vJKGTk
G71w7/w+f5o+pQ1hSXLkLZJ78WkCWstE2Ia9uPV6YloviCxseCkhor/fQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXKIJRr6er0G09DYwfI8n2nzhKLMB8GA1UdIwQY
MBaAFNXuQPRYnWoRsk97vMKaufmuaJcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84YzEzMDYtNzgwNS00MTdkLWJlNjMt
OWVhMmE2ZmI2YTgxLzEvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84YzEzMDYtNzgwNS00MTdkLWJlNjMtOWVhMmE2ZmI2YTgx
LzEvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZv2EUTaT
J6ob0P7CY4/O2w3HJ2PVfQOjPMJjTDWzGg2fKSKqRdmilHGtFG5wpjN0XNk6aMaP
8uf/CLg7oYoBqxemtnMQLDDSHrHk8A294qxXYkMy2Zzpr0hFEdgL1xE8ryPzGOQm
DsnnIPjS+V94OcdQA/nfRScHxryJvKqWBf/Su1hPSpLyhwHyBozwtFcedLX+bSa9
Gk8NAc+4vM3cL31xZQYi4X1tUchZuMgrNINEDXyyENscUf2FahCCYMFBtNMDpNHF
KP+o/00G46MSoxUvYZWJcjEueZZP/m1AxGvK27SENJaDH2fXC8uO8Qu6ffyydwxd
Vc1SeN7lIsvpzA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:59 2025 by rpki-client