Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: 3EOWbG6meJXErpGit7CJ73FHcTekQYYQDAWNHD0bdqg=
Subject key identifier: 03:0E:FA:AD:78:06:06:85:1A:40:C5:F6:B7:91:37:DC:36:A3:26:51
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 0198A6BC9B5183162257727D38EDCE6504FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 10C9
Signing time: Thu 14 Aug 2025 04:00:35 +0000
Manifest this update: Thu 14 Aug 2025 04:00:35 +0000
Manifest next update: Fri 15 Aug 2025 04:00:35 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: EtZMcI3/+EJO1Imv3i6BqmiHreCZWb1RtJAh1zpgKK0=)
2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a6:bc:9b:51:83:16:22:57:72:7d:38:ed:ce:65:04:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Aug 14 04:00:35 2025 GMT
Not After : Aug 15 04:00:35 2025 GMT
Subject: CN=030efaad780606851a40c5f6b79137dc36a32651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:fd:e5:cf:6c:ed:97:ca:e9:b6:06:f8:09:
c9:d4:aa:e7:cc:3e:19:f3:92:d1:cb:b9:ec:10:70:
f8:d6:d1:cf:ef:7a:c2:45:fb:5b:95:f8:4a:b9:cb:
b3:14:c7:b8:8f:5b:aa:f8:e7:14:64:13:17:6f:d2:
e4:db:b0:13:39:cf:23:7d:9b:67:6d:58:86:22:ab:
5c:86:2d:0b:f7:17:54:f4:b5:0c:14:b7:13:3c:58:
2a:f0:5f:f0:79:03:09:81:67:06:de:5e:51:9d:56:
19:15:59:2a:fb:c4:0a:95:d0:6c:32:ce:4b:45:9a:
b6:c1:b9:52:6c:54:c7:7e:60:57:ac:cd:8b:b9:ca:
3f:f2:a6:8c:6d:a7:4d:27:ce:0c:72:02:ac:1e:61:
19:7f:01:39:04:09:5a:d1:15:ae:6a:00:0b:f3:0a:
e4:71:9a:04:c4:ac:03:73:53:3d:dd:49:24:c6:32:
1d:d4:95:22:5a:73:4d:6f:41:da:a9:a0:4c:e3:91:
a3:bc:14:06:87:b8:ab:1a:a4:ca:83:53:ca:61:79:
aa:cf:e3:2c:1a:b4:04:76:98:a4:ae:c7:f2:aa:dc:
5a:57:14:d4:e3:c0:b7:e7:3d:e1:0f:87:90:47:ae:
7a:70:5a:06:64:c9:2d:27:ec:25:08:ab:cb:4b:b6:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0E:FA:AD:78:06:06:85:1A:40:C5:F6:B7:91:37:DC:36:A3:26:51
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0b:64:07:6c:1f:24:ba:18:5b:61:e2:fe:71:e9:68:8a:dd:
cc:8f:ab:81:b2:10:8e:99:7d:01:dc:4e:5d:08:b2:67:f1:06:
b9:54:1b:04:93:c8:d8:11:ca:36:e5:9a:b8:cd:c5:c6:d0:0e:
36:0a:d7:d4:cb:a5:1c:e0:12:d0:9f:1d:2c:87:c1:21:7d:4f:
3d:35:de:98:63:df:c4:84:a6:58:f0:40:dc:f3:1a:a6:b6:44:
73:ff:0e:d8:4e:7c:d7:b9:2b:31:51:31:91:43:5d:4c:c9:3a:
61:5e:e5:f8:bc:11:83:9c:96:52:8d:e2:25:7d:9a:03:2f:a6:
e3:18:f3:6f:0a:4a:85:e8:3c:66:d6:20:4d:47:cb:05:51:42:
1c:98:f8:b7:11:e3:63:d3:47:20:2e:c2:b7:fd:69:e9:7a:1c:
44:3b:9d:ca:21:bb:38:ba:97:8d:e8:27:31:d4:94:d6:75:0b:
6e:f0:34:6a:82:f8:78:83:d7:a4:7b:da:af:36:da:fc:d6:41:
d4:78:a3:12:a3:92:a9:79:ec:3e:48:33:7f:d4:be:1b:44:16:
4a:5e:1d:c8:a2:7f:c6:53:81:7a:a5:6b:d6:53:84:e6:5c:b3:
49:38:4a:aa:08:2e:4d:42:43:12:ad:6c:62:ca:d2:1b:0e:8e:
a5:d5:d9:d3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZimvJtRgxYiV3J9OO3OZQT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiM2Q5MGE0ODllMmQ0OWM1NjRlMDhhM2EyZjM0NDVmYjJj
OGQ0MDQwHhcNMjUwODE0MDQwMDM1WhcNMjUwODE1MDQwMDM1WjAzMTEwLwYDVQQD
EygwMzBlZmFhZDc4MDYwNjg1MWE0MGM1ZjZiNzkxMzdkYzM2YTMyNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVj95c9s7ZfK6bYG+AnJ1KrnzD4Z
85LRy7nsEHD41tHP73rCRftblfhKucuzFMe4j1uq+OcUZBMXb9Lk27ATOc8jfZtn
bViGIqtchi0L9xdU9LUMFLcTPFgq8F/weQMJgWcG3l5RnVYZFVkq+8QKldBsMs5L
RZq2wblSbFTHfmBXrM2Luco/8qaMbadNJ84McgKsHmEZfwE5BAla0RWuagAL8wrk
cZoExKwDc1M93UkkxjId1JUiWnNNb0HaqaBM45GjvBQGh7irGqTKg1PKYXmqz+Ms
GrQEdpikrsfyqtxaVxTU48C35z3hD4eQR656cFoGZMktJ+wlCKvLS7aObwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAMO+q14BgaFGkDF9reRN9w2oyZRMB8GA1UdIwQY
MBaAFPs9kKSJ4tScVk4Io6LzRF+yyNQEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16MlFwSW5pMUp4V1RnaWpvdk5FWDdMSTFBUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzBhNTVkLTk5NTktNDhlOC05YTgx
LTlhYjBmZjg3MGQyMy8xLzEtejJRcEluaTFKeFdUZ2lqb3ZORVg3TEkxQVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlLzMwYTU1ZC05OTU5LTQ4ZTgtOWE4MS05YWIwZmY4NzBk
MjMvMS8xLXoyUXBJbmkxSnhXVGdpam92TkVYN0xJMUFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgtk
B2wfJLoYW2Hi/nHpaIrdzI+rgbIQjpl9AdxOXQiyZ/EGuVQbBJPI2BHKNuWauM3F
xtAONgrX1MulHOAS0J8dLIfBIX1PPTXemGPfxISmWPBA3PMaprZEc/8O2E5817kr
MVExkUNdTMk6YV7l+LwRg5yWUo3iJX2aAy+m4xjzbwpKheg8ZtYgTUfLBVFCHJj4
txHjY9NHIC7Ct/1p6XocRDudyiG7OLqXjegnMdSU1nULbvA0aoL4eIPXpHvarzba
/NZB1HijEqOSqXnsPkgzf9S+G0QWSl4dyKJ/xlOBeqVr1lOE5lyzSThKqgguTUJD
Eq1sYsrSGw6OpdXZ0w==
-----END CERTIFICATE-----
Generated at Thu Aug 14 08:54:58 2025 by rpki-client