Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
File: 1nYY00F5w-pSMwJkoZZBh7I83SQ.mft (raw, json)
Hash identifier: MoLxUcfkW5JMfu7VjMbYQ/dRYEDsKRjkHkZAmJvDlhU=
Subject key identifier: CB:01:68:07:31:3E:3F:2D:36:91:74:7B:99:EA:29:C4:1C:E4:A3:AF
Authority key identifier: D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
Certificate issuer: /CN=d67618d34179c3ea52330264a1964187b23cdd24
Certificate serial: 01988B7C73374983305B754AF66F99111CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
Manifest number: 1137
Signing time: Fri 08 Aug 2025 21:00:45 +0000
Manifest this update: Fri 08 Aug 2025 21:00:45 +0000
Manifest next update: Sat 09 Aug 2025 21:00:45 +0000
Files and hashes: 1: 1lITG_UqnfavYQ_xoQlV3wFv38U.roa (hash: EEjmi7deVkOh9RZ1Yb2ahklKAUhFdcMk/pd79vay4U0=)
2: 1nYY00F5w-pSMwJkoZZBh7I83SQ.crl (hash: ZMmoaNrgwUX7S/MP6vhHvsTw6z/pYAd7GSX6X6hhHsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:73:37:49:83:30:5b:75:4a:f6:6f:99:11:1c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67618d34179c3ea52330264a1964187b23cdd24
Validity
Not Before: Aug 8 21:00:45 2025 GMT
Not After : Aug 9 21:00:45 2025 GMT
Subject: CN=cb016807313e3f2d3691747b99ea29c41ce4a3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:1e:49:25:b8:b7:43:3e:b4:50:85:7b:fb:
ba:29:9a:6b:0c:1c:a5:0b:a5:42:e6:b6:09:25:09:
38:54:0c:e9:95:31:17:95:21:21:d2:23:2a:92:20:
31:5f:5e:fb:26:63:24:bc:f8:e4:d7:fe:9f:b4:23:
c0:43:39:f9:2c:50:29:ff:7e:e9:44:39:67:5a:ad:
cb:3d:94:58:0c:83:4b:90:f9:4d:47:63:9b:26:03:
33:cd:ea:ab:ae:fc:b5:5b:41:fa:72:95:23:cf:6f:
5d:4d:55:61:fe:a5:f2:27:b0:01:0d:c5:8e:a8:34:
fe:26:17:46:f2:ae:b5:9f:2c:f6:c1:cf:ec:07:cd:
af:f3:99:15:f8:f5:05:0e:09:04:b8:0f:0e:05:a3:
26:b1:50:c5:89:a3:c8:56:b8:32:3b:c7:fd:f6:cd:
8e:1f:7a:f6:12:87:6e:ff:0f:c3:4b:ca:82:29:19:
df:70:75:73:4d:c5:32:f6:9c:a2:29:f0:8a:32:a6:
0b:21:24:55:af:6f:72:92:46:b8:ea:41:e7:33:36:
9d:15:a3:36:a6:ea:f8:17:07:85:85:f3:dd:80:e8:
ef:cf:48:48:6d:bb:a5:16:6a:57:55:1d:fd:3f:9a:
1a:e3:60:18:86:77:7e:63:04:04:3f:80:22:3f:db:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:68:07:31:3E:3F:2D:36:91:74:7B:99:EA:29:C4:1C:E4:A3:AF
X509v3 Authority Key Identifier:
keyid:D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:57:46:8e:cf:9c:c7:ae:1d:e6:0a:5d:60:67:27:bf:dc:c5:
24:f7:70:42:63:3e:e7:6d:9d:13:cf:22:ab:b7:87:de:71:df:
1e:79:51:6f:fb:c0:74:f4:0b:c0:31:8b:81:b7:ac:fe:4d:f0:
75:24:fd:06:a1:e3:85:d4:16:95:2b:05:a8:96:61:35:4c:5f:
d9:34:d5:70:46:57:43:36:d6:11:cf:6d:ff:cc:eb:62:01:fb:
3d:8e:ae:72:4c:8e:4f:21:b3:7f:25:45:4d:ec:8f:b7:ca:90:
14:86:af:5b:7b:2f:7f:63:58:20:c4:bc:a8:5e:29:4b:04:46:
f6:b2:ce:27:99:3b:91:84:2e:f7:51:f8:aa:01:f5:ca:5d:1f:
31:76:ce:4e:85:fb:e9:bb:d1:bf:5e:0c:c9:bc:76:6e:df:8e:
de:2b:7c:51:24:1b:7b:45:41:81:ee:3e:1c:20:02:65:4d:ae:
18:47:c4:1c:57:ad:73:5b:45:71:da:1b:e1:4c:e3:55:24:9c:
7e:e3:29:16:28:09:81:fd:c5:38:2d:3d:c3:b1:d0:eb:c5:89:
fc:30:12:90:10:6b:c8:7b:97:b8:2a:ed:84:08:c9:11:2d:4e:
02:09:7d:ce:4c:5f:12:e5:00:95:1b:14:3b:9b:9f:be:e9:21:
e2:f6:e5:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfHM3SYMwW3VK9m+ZERzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzYxOGQzNDE3OWMzZWE1MjMzMDI2NGExOTY0MTg3YjIz
Y2RkMjQwHhcNMjUwODA4MjEwMDQ1WhcNMjUwODA5MjEwMDQ1WjAzMTEwLwYDVQQD
EyhjYjAxNjgwNzMxM2UzZjJkMzY5MTc0N2I5OWVhMjljNDFjZTRhM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ4eSSW4t0M+tFCFe/u6KZprDByl
C6VC5rYJJQk4VAzplTEXlSEh0iMqkiAxX177JmMkvPjk1/6ftCPAQzn5LFAp/37p
RDlnWq3LPZRYDINLkPlNR2ObJgMzzeqrrvy1W0H6cpUjz29dTVVh/qXyJ7ABDcWO
qDT+JhdG8q61nyz2wc/sB82v85kV+PUFDgkEuA8OBaMmsVDFiaPIVrgyO8f99s2O
H3r2Eodu/w/DS8qCKRnfcHVzTcUy9pyiKfCKMqYLISRVr29ykka46kHnMzadFaM2
pur4FweFhfPdgOjvz0hIbbulFmpXVR39P5oa42AYhnd+YwQEP4AiP9vUvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsBaAcxPj8tNpF0e5nqKcQc5KOvMB8GA1UdIwQY
MBaAFNZ2GNNBecPqUjMCZKGWQYeyPN0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5ZWTAwRjV3LXBTTXdKa29aWkJoN0k4M1NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80N2Y1MTMtNzZkYi00YTYxLWIxYmUt
NzRkYzgzODZkYzZhLzEvMW5ZWTAwRjV3LXBTTXdKa29aWkJoN0k4M1NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My80N2Y1MTMtNzZkYi00YTYxLWIxYmUtNzRkYzgzODZkYzZh
LzEvMW5ZWTAwRjV3LXBTTXdKa29aWkJoN0k4M1NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFdGjs+c
x64d5gpdYGcnv9zFJPdwQmM+522dE88iq7eH3nHfHnlRb/vAdPQLwDGLgbes/k3w
dST9BqHjhdQWlSsFqJZhNUxf2TTVcEZXQzbWEc9t/8zrYgH7PY6uckyOTyGzfyVF
TeyPt8qQFIavW3svf2NYIMS8qF4pSwRG9rLOJ5k7kYQu91H4qgH1yl0fMXbOToX7
6bvRv14Mybx2bt+O3it8USQbe0VBge4+HCACZU2uGEfEHFetc1tFcdob4UzjVSSc
fuMpFigJgf3FOC09w7HQ68WJ/DASkBBryHuXuCrthAjJES1OAgl9zkxfEuUAlRsU
O5ufvukh4vblZA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:36 2025 by rpki-client