Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: kg+qtiHKCp0SslafKBS4y5MqwZZCe5RvIo6iJVHG0a4=
Subject key identifier: 42:AB:1C:99:8B:6E:4A:E6:E5:33:21:55:B7:94:F5:3D:B1:CC:1D:6A
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 01988A699FCF5D71F1C48285ED4E8A5E23EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0A7B
Signing time: Fri 08 Aug 2025 16:00:34 +0000
Manifest this update: Fri 08 Aug 2025 16:00:34 +0000
Manifest next update: Sat 09 Aug 2025 16:00:34 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: wk30RfEl8n7pABuoBS+Vw5gvE9q/b9hH83obFGyZgRE=)
2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:9f:cf:5d:71:f1:c4:82:85:ed:4e:8a:5e:23:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Aug 8 16:00:34 2025 GMT
Not After : Aug 9 16:00:34 2025 GMT
Subject: CN=42ab1c998b6e4ae6e5332155b794f53db1cc1d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:4a:4e:e5:fb:1f:79:77:57:09:9a:b0:ad:
6a:29:f5:7e:5a:b7:aa:42:59:01:26:78:b0:16:54:
c3:c5:f9:5b:d8:70:90:4f:ec:d1:bc:dd:ac:23:ff:
55:e5:cc:49:4c:86:91:b9:b3:a5:f7:0a:1e:f9:34:
f9:33:6a:15:42:b2:a7:78:e9:92:a7:46:e1:03:ff:
ec:68:19:74:04:f5:72:92:cc:e9:e6:5c:10:ee:dd:
66:86:a1:4c:a6:d7:05:66:2a:08:81:d2:63:69:dd:
59:34:4e:6e:bc:cd:f4:eb:45:0f:f0:16:34:95:24:
72:7b:a5:dd:ad:2b:b8:b5:ad:db:dd:c8:2e:7d:ff:
ff:66:9d:f2:32:71:93:4e:f8:c3:19:5c:69:9d:5f:
2b:ab:59:c5:a3:0b:1d:a7:b4:be:fa:9c:94:63:ac:
94:62:1a:dc:07:59:35:fb:28:3e:ff:68:36:fe:77:
27:cc:c7:27:e8:52:0b:a3:02:9f:34:d0:91:f4:e9:
85:a3:b2:ab:9f:b9:49:0a:98:23:7e:34:95:75:90:
6b:4e:06:f1:3a:0e:54:8e:d7:5c:89:d4:33:bc:6a:
48:46:08:b6:2f:a6:8a:54:42:52:fd:12:cd:74:97:
d9:ca:ed:b6:2d:37:61:af:37:fb:82:52:07:c0:fb:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AB:1C:99:8B:6E:4A:E6:E5:33:21:55:B7:94:F5:3D:B1:CC:1D:6A
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4a:b2:0e:14:b7:bd:e6:14:f7:d9:dd:0f:49:c0:e5:16:4f:
c7:14:b5:6b:ef:55:63:dc:98:b3:de:ee:42:3b:4c:8f:af:78:
15:50:38:e4:69:d0:a4:18:2b:62:31:0f:1e:dd:88:e6:16:92:
44:29:a9:72:53:3d:68:06:0a:00:91:ac:0b:5e:f2:8d:70:c9:
03:9d:9b:e7:fd:cc:d0:05:b1:9d:73:26:b0:e1:e6:08:87:3c:
27:8b:06:b4:77:5f:d0:8a:39:40:8c:b7:35:ed:32:16:96:37:
b3:51:d1:28:12:37:2c:6f:41:f3:15:58:18:64:45:f4:cc:40:
16:2b:cd:be:fb:3e:11:98:53:8e:bd:3c:de:2e:8f:85:5a:e8:
97:46:b3:1b:d2:69:ba:f8:5f:c4:4d:3b:84:82:fe:cb:85:bb:
df:73:20:16:cb:ce:73:c8:eb:53:f9:9d:05:bc:c9:02:69:d7:
db:a5:83:c6:a2:69:f0:96:f0:2f:ff:f2:99:23:4a:f7:05:8c:
3a:da:11:9c:c5:c6:10:22:9c:f0:33:b1:2d:d3:ee:4e:03:2e:
04:9e:6d:cc:af:9c:43:11:fe:49:58:cf:75:9e:81:39:0f:71:
28:74:21:5a:a5:3a:25:50:80:85:ab:a8:be:7c:82:c8:86:27:
73:ed:fa:24
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiKaZ/PXXHxxIKF7U6KXiPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0
ZmQ1MDgwHhcNMjUwODA4MTYwMDM0WhcNMjUwODA5MTYwMDM0WjAzMTEwLwYDVQQD
Eyg0MmFiMWM5OThiNmU0YWU2ZTUzMzIxNTViNzk0ZjUzZGIxY2MxZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ5KTuX7H3l3VwmasK1qKfV+Wreq
QlkBJniwFlTDxflb2HCQT+zRvN2sI/9V5cxJTIaRubOl9woe+TT5M2oVQrKneOmS
p0bhA//saBl0BPVykszp5lwQ7t1mhqFMptcFZioIgdJjad1ZNE5uvM3060UP8BY0
lSRye6XdrSu4ta3b3cguff//Zp3yMnGTTvjDGVxpnV8rq1nFowsdp7S++pyUY6yU
YhrcB1k1+yg+/2g2/ncnzMcn6FILowKfNNCR9OmFo7Krn7lJCpgjfjSVdZBrTgbx
Og5UjtdcidQzvGpIRgi2L6aKVEJS/RLNdJfZyu22LTdhrzf7glIHwPuqpQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEKrHJmLbkrm5TMhVbeU9T2xzB1qMB8GA1UdIwQY
MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh
LTg4NzM5ZTMzNTA1My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EwLzcyM2IxNS1mYWFjLTQxZmYtYTFhYS04ODczOWUzMzUw
NTMvMS8xLTlNcGFLcXFrWnhTZVJfN0JfazBOcmRQMVFnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEqy
DhS3veYU99ndD0nA5RZPxxS1a+9VY9yYs97uQjtMj694FVA45GnQpBgrYjEPHt2I
5haSRCmpclM9aAYKAJGsC17yjXDJA52b5/3M0AWxnXMmsOHmCIc8J4sGtHdf0Io5
QIy3Ne0yFpY3s1HRKBI3LG9B8xVYGGRF9MxAFivNvvs+EZhTjr083i6PhVrol0az
G9JpuvhfxE07hIL+y4W733MgFsvOc8jrU/mdBbzJAmnX26WDxqJp8JbwL//ymSNK
9wWMOtoRnMXGECKc8DOxLdPuTgMuBJ5tzK+cQxH+SVjPdZ6BOQ9xKHQhWqU6JVCA
hauovnyCyIYnc+36JA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:40 2025 by rpki-client