
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: 258jqsx7B7OWejsodO819pF8EhFw3BfuQZ9yNmtxFiw=
Subject key identifier: 57:77:34:50:9E:A7:80:55:40:8B:2F:C1:7F:E9:6A:82:0C:32:47:8B
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0198843143D013354760C83AF75FFD0A8C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 135A
Signing time: Thu 07 Aug 2025 11:01:17 +0000
Manifest this update: Thu 07 Aug 2025 11:01:17 +0000
Manifest next update: Fri 08 Aug 2025 11:01:17 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: E3wp4Cyu38yR73HnLm+1WwhVbE86WBuW5agkqnDkkqY=)
2: skjABuaYQdSyDecgxOrBPzscPeU.roa (hash: kzk4xU92DAB+Vcg2V/rYHygGxD8dQRxlWxtwdylCcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:43:d0:13:35:47:60:c8:3a:f7:5f:fd:0a:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Aug 7 11:01:17 2025 GMT
Not After : Aug 8 11:01:17 2025 GMT
Subject: CN=577734509ea78055408b2fc17fe96a820c32478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:5a:42:f3:b0:94:c5:80:d4:29:7d:c9:0e:
d5:60:30:d3:ef:be:ef:07:cc:5d:63:16:63:c7:09:
2c:0d:7e:5e:b8:e4:67:48:bf:df:b6:f0:66:d0:47:
2f:8a:bd:f8:d8:39:5a:a2:0a:d9:9a:1d:4a:0c:12:
57:fd:2a:47:c9:ae:c6:7f:41:cb:fc:a3:2d:67:d1:
14:31:9b:e3:1b:53:b2:a2:ac:83:fa:06:68:27:d0:
36:15:e5:4f:ce:06:a0:42:4b:b0:4c:33:ca:e5:4a:
b5:f1:60:a6:48:43:3c:b8:2d:1d:5b:38:f3:24:51:
7a:3e:e8:27:f8:a6:87:f4:27:12:8e:8b:88:7e:cd:
6c:a3:f6:55:e8:27:10:20:52:a3:3d:52:ee:0d:84:
4f:7b:57:08:35:b2:57:4c:a7:f5:9f:79:c7:e1:36:
34:99:43:9e:3e:03:30:7c:a1:60:65:8d:ed:34:b0:
54:7e:c8:14:b2:7a:1e:5f:50:e8:e6:cc:9e:b2:0a:
8e:93:a9:28:2b:ea:40:32:be:9f:95:bb:d1:f4:f8:
3e:e0:86:70:89:10:b6:77:cb:a2:53:ef:9b:b3:10:
a1:b5:d2:aa:24:af:d7:49:20:11:f7:de:7c:22:84:
4d:f8:2c:54:18:be:75:24:d0:3b:a6:8c:a8:ce:4d:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:77:34:50:9E:A7:80:55:40:8B:2F:C1:7F:E9:6A:82:0C:32:47:8B
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:09:03:2a:63:96:e3:44:ef:cc:97:2c:cb:1a:ac:74:e6:aa:
53:67:dc:e0:e6:ce:c9:da:26:49:3b:a1:e0:70:cd:1a:50:69:
ea:8c:f0:bc:e0:50:1e:77:0c:7f:5a:6b:5a:aa:a1:aa:54:de:
b9:c1:b4:5f:65:53:a7:5a:7f:82:e8:2a:e3:1b:6d:24:b1:24:
3f:01:b0:2e:5b:d9:f3:5d:a0:03:ea:ea:76:9b:7f:61:68:24:
e9:a2:18:85:b2:4d:08:07:d8:df:c2:aa:9c:e7:4f:f5:92:83:
17:cf:76:3c:d5:4d:f0:f9:f3:f0:d0:b3:81:84:39:e5:cf:fe:
73:19:f2:49:cf:8e:b5:f2:2a:f5:7e:90:50:12:5e:2c:20:4d:
07:be:61:25:10:c2:f8:b6:ec:d6:0d:69:b8:a6:dd:3e:f0:87:
7c:87:ae:58:1f:5f:85:09:87:2f:3a:ea:02:4c:3b:b1:ba:74:
c1:48:58:95:bd:28:03:8b:d9:0d:4b:ad:e1:3d:2c:19:4a:c1:
19:d9:76:e1:87:ff:b9:68:7e:7c:e4:4f:36:67:e9:ee:41:7e:
71:0a:f7:78:9d:40:bb:8c:be:17:76:18:40:19:90:62:19:a8:
17:ff:ef:27:df:18:ff:11:e3:4a:e6:45:32:2b:ab:98:e3:a5:
40:f5:aa:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEMUPQEzVHYMg691/9CowYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx
ZjgzZGYwHhcNMjUwODA3MTEwMTE3WhcNMjUwODA4MTEwMTE3WjAzMTEwLwYDVQQD
Eyg1Nzc3MzQ1MDllYTc4MDU1NDA4YjJmYzE3ZmU5NmE4MjBjMzI0NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNxaQvOwlMWA1Cl9yQ7VYDDT777v
B8xdYxZjxwksDX5euORnSL/ftvBm0Ecvir342DlaogrZmh1KDBJX/SpHya7Gf0HL
/KMtZ9EUMZvjG1OyoqyD+gZoJ9A2FeVPzgagQkuwTDPK5Uq18WCmSEM8uC0dWzjz
JFF6Pugn+KaH9CcSjouIfs1so/ZV6CcQIFKjPVLuDYRPe1cINbJXTKf1n3nH4TY0
mUOePgMwfKFgZY3tNLBUfsgUsnoeX1Do5syesgqOk6koK+pAMr6flbvR9Pg+4IZw
iRC2d8uiU++bsxChtdKqJK/XSSAR9958IoRN+CxUGL51JNA7poyozk1x5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFd3NFCep4BVQIsvwX/paoIMMkeLMB8GA1UdIwQY
MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt
NTg1N2YxYzE3NjI0LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0
LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAkDKmOW
40TvzJcsyxqsdOaqU2fc4ObOydomSTuh4HDNGlBp6ozwvOBQHncMf1prWqqhqlTe
ucG0X2VTp1p/gugq4xttJLEkPwGwLlvZ812gA+rqdpt/YWgk6aIYhbJNCAfY38Kq
nOdP9ZKDF892PNVN8Pnz8NCzgYQ55c/+cxnySc+OtfIq9X6QUBJeLCBNB75hJRDC
+Lbs1g1puKbdPvCHfIeuWB9fhQmHLzrqAkw7sbp0wUhYlb0oA4vZDUut4T0sGUrB
Gdl24Yf/uWh+fORPNmfp7kF+cQr3eJ1Au4y+F3YYQBmQYhmoF//vJ98Y/xHjSuZF
MiurmOOlQPWqcg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:28:09 2025 by rpki-client