Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File: 1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier: ygbeX55kOBwz5Sit/nJMznBmwRaxoTXGlrDvs46zHpU=
Subject key identifier: 33:CE:06:7F:04:F4:A1:BC:7B:DC:52:10:77:A6:3B:78:15:96:8D:C1
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial: 01987C40E330314C082C21FE4D1180833FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 22:01:23 +0000
Manifest this update: Tue 05 Aug 2025 22:01:23 +0000
Manifest next update: Wed 06 Aug 2025 22:01:23 +0000
Files and hashes: 1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: KDNJJBHrzGan0mTUEqyac5GnQ6b20eSGXFX8njoGXE0=)
2: HUiYQLYoRn-P8-AKIUmGnSk_fUQ.roa (hash: ozdi5qHnRcow/nH1EVH0214AE7vAhAxmdAJcuT+IzE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:e3:30:31:4c:08:2c:21:fe:4d:11:80:83:3f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
Validity
Not Before: Aug 5 22:01:23 2025 GMT
Not After : Aug 6 22:01:23 2025 GMT
Subject: CN=33ce067f04f4a1bc7bdc521077a63b7815968dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:e1:9a:48:c5:00:48:32:27:d3:61:07:f6:
74:4f:21:a3:cc:9f:01:04:35:bf:04:36:0e:07:91:
58:c0:3b:41:f4:58:67:52:51:7e:43:16:ff:aa:b8:
67:c4:0a:5a:a4:12:99:ca:61:56:29:23:ff:a8:e5:
d3:6d:f0:29:37:38:42:19:e1:c7:27:4d:4b:93:5c:
79:5e:7b:76:f8:df:3c:a7:69:20:85:62:02:35:7d:
5a:30:28:60:bc:41:d3:b3:b3:79:d1:b8:e5:ac:82:
c8:08:35:d1:a5:07:be:53:c2:ad:29:ba:16:68:ad:
71:d1:02:5e:69:cd:2c:c5:a3:25:e6:f8:8e:9c:14:
62:d8:45:b0:de:a3:fe:f6:a0:cc:b3:09:ab:0e:97:
2e:81:f5:a2:64:01:38:cf:28:25:2a:30:71:d7:f4:
93:23:d4:c9:60:09:5d:32:28:1c:b7:1e:72:3d:37:
65:d2:e3:9b:2e:33:09:01:7e:dc:85:a2:5f:69:96:
53:fb:25:70:c9:9b:ae:5e:a2:42:7e:60:d6:b2:a2:
ca:34:5e:48:c3:ea:a1:f5:72:a5:43:b5:e7:df:d3:
9d:0d:f0:82:97:4b:d9:0c:89:63:c7:95:a5:72:a4:
8b:ea:5c:e6:1b:f8:28:0c:b6:e1:a3:a9:23:1e:de:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CE:06:7F:04:F4:A1:BC:7B:DC:52:10:77:A6:3B:78:15:96:8D:C1
X509v3 Authority Key Identifier:
keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8b:5c:61:b8:e2:7c:b4:14:49:bd:c8:ad:97:8a:c3:58:1c:
1c:4d:60:c4:cc:5d:8a:1b:75:08:b7:03:da:a6:c4:82:64:d1:
f3:52:98:73:50:be:a4:67:8a:97:e3:1a:59:9b:e4:ce:09:e7:
db:61:b6:bc:ed:db:75:14:14:5b:aa:63:f0:ac:29:77:c9:4c:
c7:8b:7a:36:76:8b:b1:7e:8c:86:ad:4e:91:cd:55:61:3b:0d:
56:b3:71:0c:87:80:c7:7c:6b:14:19:95:3a:56:11:29:1f:e8:
ee:8a:98:9b:48:71:c1:bb:2c:c5:68:67:d9:49:dd:4c:41:3b:
36:ee:ce:c5:0a:70:63:fd:13:14:bb:0f:e6:4e:46:e2:da:bc:
6a:e8:93:ec:99:d1:2b:a5:5e:4b:69:54:16:c5:f2:b5:c3:27:
c4:c3:2d:7a:4d:58:6d:6c:2e:eb:e1:f3:8b:f8:ff:13:56:c3:
cc:2f:68:96:e8:86:f9:aa:7a:f5:51:30:61:fd:ed:8e:6e:8b:
0d:dc:e1:c5:f0:6b:59:f7:02:a9:cf:4d:03:96:67:18:17:91:
d7:19:91:2c:83:56:bc:e9:fe:d1:fc:fd:3a:c1:f7:8e:a5:d6:
e4:3d:08:e0:c8:70:38:23:56:4f:fd:11:57:b1:46:0b:c9:a3:
8c:25:0c:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QOMwMUwILCH+TRGAgz/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDgyOTQ0NDNhZWQxNmQwNmI4NmFmMTRmNWE1ZjBhNTA4
Mzc3NGEwHhcNMjUwODA1MjIwMTIzWhcNMjUwODA2MjIwMTIzWjAzMTEwLwYDVQQD
EygzM2NlMDY3ZjA0ZjRhMWJjN2JkYzUyMTA3N2E2M2I3ODE1OTY4ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs3hmkjFAEgyJ9NhB/Z0TyGjzJ8B
BDW/BDYOB5FYwDtB9FhnUlF+Qxb/qrhnxApapBKZymFWKSP/qOXTbfApNzhCGeHH
J01Lk1x5Xnt2+N88p2kghWICNX1aMChgvEHTs7N50bjlrILICDXRpQe+U8KtKboW
aK1x0QJeac0sxaMl5viOnBRi2EWw3qP+9qDMswmrDpcugfWiZAE4zyglKjBx1/ST
I9TJYAldMigctx5yPTdl0uObLjMJAX7chaJfaZZT+yVwyZuuXqJCfmDWsqLKNF5I
w+qh9XKlQ7Xn39OdDfCCl0vZDIljx5WlcqSL6lzmG/goDLbho6kjHt6NywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPOBn8E9KG8e9xSEHemO3gVlo3BMB8GA1UdIwQY
MBaAFNZIKURDrtFtBrhq8U9aXwpQg3dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNTg3ZTktMzNhOS00YTg2LThjZDkt
ZTU3Y2M4MWY1MjMzLzEvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNTg3ZTktMzNhOS00YTg2LThjZDktZTU3Y2M4MWY1MjMz
LzEvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4tcYbji
fLQUSb3IrZeKw1gcHE1gxMxdiht1CLcD2qbEgmTR81KYc1C+pGeKl+MaWZvkzgnn
22G2vO3bdRQUW6pj8Kwpd8lMx4t6NnaLsX6Mhq1Okc1VYTsNVrNxDIeAx3xrFBmV
OlYRKR/o7oqYm0hxwbssxWhn2UndTEE7Nu7OxQpwY/0TFLsP5k5G4tq8auiT7JnR
K6VeS2lUFsXytcMnxMMtek1YbWwu6+Hzi/j/E1bDzC9oluiG+ap69VEwYf3tjm6L
DdzhxfBrWfcCqc9NA5ZnGBeR1xmRLINWvOn+0fz9OsH3jqXW5D0I4MhwOCNWT/0R
V7FGC8mjjCUMuA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:33:55 2025 by rpki-client