Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: re3G8lk54+e7vF7Im0jaTsrxs3mhKWGoig3p/3xQoZU=
Subject key identifier: A2:EA:A5:9F:F6:70:27:D5:20:10:0F:CC:BB:46:9B:1D:FA:4B:A3:39
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 0198820C27FB9F46375BB9FC7353415EBD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0A6B
Signing time: Thu 07 Aug 2025 01:01:31 +0000
Manifest this update: Thu 07 Aug 2025 01:01:31 +0000
Manifest next update: Fri 08 Aug 2025 01:01:31 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: 0pL/BDr77yIs8D3qlPxi6sn6CckqgFo08Y8b1qZq9B8=)
2: LPmwSEr2cec7eKNG65DFfjhgZlg.roa (hash: 2uSr4hxNi+F1N3JsqPYCLDQN2e8AEP4YyYoo3iXqMBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:27:fb:9f:46:37:5b:b9:fc:73:53:41:5e:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Aug 7 01:01:31 2025 GMT
Not After : Aug 8 01:01:31 2025 GMT
Subject: CN=a2eaa59ff67027d520100fccbb469b1dfa4ba339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dd:b6:87:92:07:1b:4d:cd:dc:db:28:38:ed:
fa:d8:95:3b:e5:99:85:89:5b:ae:68:e9:e7:55:5a:
3b:66:52:c7:5a:bc:fc:b6:e2:c2:6e:28:5e:da:4a:
09:75:88:56:c9:45:e5:f5:b0:56:d8:89:c8:44:38:
76:a5:9f:9c:bc:43:4b:52:0c:8e:ab:9d:b8:35:c8:
71:93:c6:46:6a:1c:51:0b:97:72:9c:b0:8c:fb:7c:
70:d2:ee:2b:a8:8d:7a:64:6b:eb:01:de:55:98:78:
97:8f:e9:86:6c:54:f3:ca:91:dc:06:52:bd:41:2a:
1e:cb:b0:ae:13:4f:d3:76:cf:65:52:63:4c:b3:6d:
37:a1:6f:a5:05:be:8c:15:be:1b:10:5d:48:04:5d:
fe:89:07:2e:24:46:f6:fc:b7:a3:56:29:5c:a1:e1:
80:78:22:50:bf:82:83:8d:46:b7:fc:99:30:6b:7a:
68:16:81:8b:47:98:a4:02:ab:b7:8e:7d:fa:00:fd:
29:83:b0:4e:60:82:63:f3:7c:9c:d5:20:43:85:c9:
c6:e1:26:24:c7:d1:17:3f:85:56:8c:47:84:4c:8d:
97:7b:53:95:98:f8:b5:04:63:05:a4:91:81:e8:9e:
4e:86:58:b9:74:6c:28:ae:d1:05:b4:60:93:7f:d7:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EA:A5:9F:F6:70:27:D5:20:10:0F:CC:BB:46:9B:1D:FA:4B:A3:39
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2e:3a:e2:ed:e8:0a:be:55:7e:ad:41:4e:98:3e:b9:67:29:
2b:c2:82:d6:e2:af:1a:22:f3:ea:b4:ac:26:63:37:07:0d:4d:
d3:e6:89:07:ab:a4:83:e7:e3:04:e6:b3:19:04:6c:90:1e:bc:
c3:49:6b:5d:4b:5b:17:9c:f0:34:e8:e0:c6:6f:28:0e:e4:e7:
9d:af:15:99:18:69:74:d2:ad:51:69:93:11:34:50:39:50:76:
ab:a1:51:94:de:8d:10:3b:ef:0d:f0:b5:df:7e:78:2a:34:24:
a4:e4:d4:f8:90:7d:62:92:79:9b:d7:24:be:06:ce:0d:1c:13:
df:a1:f2:4c:fc:a2:49:c9:b3:5f:8f:a8:2a:44:ec:3d:a2:f1:
e4:b5:24:86:2a:ed:63:64:cb:c7:0b:7b:65:9b:d3:b9:28:62:
e8:e5:6e:90:76:61:58:39:6e:a9:8a:d1:e9:22:e8:c8:8b:38:
4d:02:a5:5f:23:8d:bf:0a:66:4c:da:fb:4a:ae:f1:f7:22:5a:
8f:63:fe:48:e8:52:3e:92:e8:a9:ca:fc:43:a5:79:e7:e0:da:
fe:71:67:bf:52:7f:9a:2e:89:5a:97:33:80:42:ee:3d:f0:8d:
0d:af:04:6e:f6:52:17:d3:6e:1d:a8:c5:37:80:57:de:bb:a9:
be:8a:8d:e0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiCDCf7n0Y3W7n8c1NBXr2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNTYwMjgwMmE4NzkzYTI0ZmRhNGQwZWRjYzMwYTE5NmMw
Zjc3ZTAwHhcNMjUwODA3MDEwMTMxWhcNMjUwODA4MDEwMTMxWjAzMTEwLwYDVQQD
EyhhMmVhYTU5ZmY2NzAyN2Q1MjAxMDBmY2NiYjQ2OWIxZGZhNGJhMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t22h5IHG03N3NsoOO362JU75ZmF
iVuuaOnnVVo7ZlLHWrz8tuLCbihe2koJdYhWyUXl9bBW2InIRDh2pZ+cvENLUgyO
q524Nchxk8ZGahxRC5dynLCM+3xw0u4rqI16ZGvrAd5VmHiXj+mGbFTzypHcBlK9
QSoey7CuE0/Tds9lUmNMs203oW+lBb6MFb4bEF1IBF3+iQcuJEb2/LejVilcoeGA
eCJQv4KDjUa3/Jkwa3poFoGLR5ikAqu3jn36AP0pg7BOYIJj83yc1SBDhcnG4SYk
x9EXP4VWjEeETI2Xe1OVmPi1BGMFpJGB6J5Ohli5dGwortEFtGCTf9eF5QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKLqpZ/2cCfVIBAPzLtGmx36S6M5MB8GA1UdIwQY
MBaAFPtWAoAqh5OiT9pNDtzDChlsD3fgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0xWUNnQ3FIazZKUDJrME8zTU1LR1d3UGQtQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvODM4N2E3LTA2OGMtNDgzMi1hYTI2
LWRiNWIxZjg5YTUwZC8xLzEtMVlDZ0NxSGs2SlAyazBPM01NS0dXd1BkLUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I4LzgzODdhNy0wNjhjLTQ4MzItYWEyNi1kYjViMWY4OWE1
MGQvMS8xLTFZQ2dDcUhrNkpQMmswTzNNTUtHV3dQZC1BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAy46
4u3oCr5Vfq1BTpg+uWcpK8KC1uKvGiLz6rSsJmM3Bw1N0+aJB6ukg+fjBOazGQRs
kB68w0lrXUtbF5zwNOjgxm8oDuTnna8VmRhpdNKtUWmTETRQOVB2q6FRlN6NEDvv
DfC13354KjQkpOTU+JB9YpJ5m9ckvgbODRwT36HyTPyiScmzX4+oKkTsPaLx5LUk
hirtY2TLxwt7ZZvTuShi6OVukHZhWDluqYrR6SLoyIs4TQKlXyONvwpmTNr7Sq7x
9yJaj2P+SOhSPpLoqcr8Q6V55+Da/nFnv1J/mi6JWpczgELuPfCNDa8EbvZSF9Nu
HajFN4BX3rupvoqN4A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:56 2025 by rpki-client