Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: MEcBvM9lTLyg7o1BwwA7mTRK+CHK1aVJLFthurVHlNQ=
Subject key identifier: E2:DD:90:B8:79:8A:6A:AB:B8:75:D8:DE:7D:DA:3B:A5:5D:B0:F1:44
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 0198849E99706F7697139A0ACB861A50FB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 1624
Signing time: Thu 07 Aug 2025 13:00:43 +0000
Manifest this update: Thu 07 Aug 2025 13:00:43 +0000
Manifest next update: Fri 08 Aug 2025 13:00:43 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: nrn8rNZoaZMK/phuFJU9SWAwWcGDbMemm0ppI+qQg0Y=)
2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=)
3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:9e:99:70:6f:76:97:13:9a:0a:cb:86:1a:50:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Aug 7 13:00:43 2025 GMT
Not After : Aug 8 13:00:43 2025 GMT
Subject: CN=e2dd90b8798a6aabb875d8de7dda3ba55db0f144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:bf:0c:3e:62:44:ec:44:8a:94:00:07:7e:
cc:eb:ba:39:2b:56:f3:1c:0d:18:31:02:9e:8e:a4:
1a:2f:a6:8f:4e:5b:6d:b3:d2:f8:0d:45:6a:0f:a5:
96:3b:ae:d6:00:73:b9:d8:b4:7b:26:18:c0:fb:c1:
ec:e4:fc:04:72:b6:7a:02:44:1f:f5:fa:6c:87:ee:
be:02:a0:da:8a:9e:53:41:b9:7e:d5:a9:89:46:08:
ec:9f:ea:ac:cb:34:15:c3:4c:06:e7:2d:77:50:5b:
b3:2f:c2:3f:41:d7:ab:85:98:0d:38:53:42:1e:47:
00:7f:0e:ff:46:34:fa:d5:0e:1b:c4:d1:a6:e0:f3:
a4:17:91:72:f0:0f:b2:d0:73:dd:c4:2a:25:ad:1b:
64:2b:9a:fe:b5:8c:dd:04:b6:58:88:8f:d5:ec:f3:
ee:3e:9d:60:f5:57:cd:50:41:dd:57:ff:1b:50:8e:
21:98:6d:3f:20:68:b6:92:ee:ba:c8:c1:9a:c1:a1:
38:ed:78:94:68:3a:07:70:2e:e1:15:d1:9f:29:82:
fe:87:32:2d:86:65:62:76:10:cb:96:ff:4d:0e:34:
52:19:ec:cd:7b:ac:a5:e2:63:40:6c:1a:a5:6a:f5:
fc:e1:de:d7:3b:f7:3c:e2:e0:80:e6:b4:0f:7c:5d:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DD:90:B8:79:8A:6A:AB:B8:75:D8:DE:7D:DA:3B:A5:5D:B0:F1:44
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5d:0f:34:c1:ab:1c:a2:84:eb:66:ec:c0:bc:ef:04:14:85:
a8:cc:b3:78:0d:57:c1:c1:c1:46:aa:ea:88:97:9c:1d:b1:33:
f1:3e:af:af:2b:5b:97:43:7f:30:73:1d:41:02:7d:d8:f4:64:
cb:66:1e:78:7a:74:2c:b9:ed:31:38:01:e9:2d:a2:7b:a5:2b:
59:56:4e:af:b1:ad:48:a3:bd:4a:14:a0:1f:be:50:ca:e9:1e:
86:f3:86:f2:96:bb:05:fc:c7:51:74:e8:29:53:11:f0:80:41:
15:cb:22:47:dc:80:5c:26:20:20:cb:aa:4f:06:3f:23:0a:67:
e2:14:52:ec:fd:9b:01:7e:e6:0c:05:f9:f7:1a:88:47:bf:ea:
e4:86:34:3c:52:03:09:ef:89:b2:d6:10:4e:c9:d4:2a:fa:d4:
46:69:12:a1:00:bb:65:d9:de:d7:f8:1d:d5:e0:46:9e:0e:e3:
0a:e2:2d:58:a1:ff:14:1b:c8:53:3f:62:77:01:85:9c:78:8e:
a2:f5:16:38:89:d7:01:ac:ff:2e:31:99:49:2b:a5:0a:8a:57:
d0:dd:c9:a2:15:3a:b8:08:90:22:de:d2:0b:19:c8:86:a3:c5:
2a:db:a1:89:30:0b:a2:a5:4c:21:96:bd:e2:fb:9f:2f:00:11:
08:3a:0a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEnplwb3aXE5oKy4YaUPuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi
MDY4NGQwHhcNMjUwODA3MTMwMDQzWhcNMjUwODA4MTMwMDQzWjAzMTEwLwYDVQQD
EyhlMmRkOTBiODc5OGE2YWFiYjg3NWQ4ZGU3ZGRhM2JhNTVkYjBmMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTS/DD5iROxEipQAB37M67o5K1bz
HA0YMQKejqQaL6aPTltts9L4DUVqD6WWO67WAHO52LR7JhjA+8Hs5PwEcrZ6AkQf
9fpsh+6+AqDaip5TQbl+1amJRgjsn+qsyzQVw0wG5y13UFuzL8I/QderhZgNOFNC
HkcAfw7/RjT61Q4bxNGm4POkF5Fy8A+y0HPdxColrRtkK5r+tYzdBLZYiI/V7PPu
Pp1g9VfNUEHdV/8bUI4hmG0/IGi2ku66yMGawaE47XiUaDoHcC7hFdGfKYL+hzIt
hmVidhDLlv9NDjRSGezNe6yl4mNAbBqlavX84d7XO/c84uCA5rQPfF1Z/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLdkLh5imqruHXY3n3aO6VdsPFEMB8GA1UdIwQY
MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt
NzMyMDJmMGUxZDAzLzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz
LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI10PNMGr
HKKE62bswLzvBBSFqMyzeA1XwcHBRqrqiJecHbEz8T6vrytbl0N/MHMdQQJ92PRk
y2YeeHp0LLntMTgB6S2ie6UrWVZOr7GtSKO9ShSgH75QyukehvOG8pa7BfzHUXTo
KVMR8IBBFcsiR9yAXCYgIMuqTwY/Iwpn4hRS7P2bAX7mDAX59xqIR7/q5IY0PFID
Ce+JstYQTsnUKvrURmkSoQC7Zdne1/gd1eBGng7jCuItWKH/FBvIUz9idwGFnHiO
ovUWOInXAaz/LjGZSSulCopX0N3JohU6uAiQIt7SCxnIhqPFKtuhiTALoqVMIZa9
4vufLwARCDoKZQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:45:04 2025 by rpki-client