Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: XSYBgsgzkv8QEHESNlf/i34EhyBAU4nJJpta1sB3X08=
Subject key identifier: EB:9E:08:3B:5D:62:6D:6A:BA:1C:A7:D4:EB:C7:35:72:70:35:15:C1
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 0198752C244164EE129866D0A0C94EA7AA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 08E2
Signing time: Mon 04 Aug 2025 13:01:23 +0000
Manifest this update: Mon 04 Aug 2025 13:01:23 +0000
Manifest next update: Tue 05 Aug 2025 13:01:23 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: s/V0Da3vHYmYjqZKcbzwNllBh/PaIzft1StEEL6eLL8=)
2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=)
3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=)
4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:24:41:64:ee:12:98:66:d0:a0:c9:4e:a7:aa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Aug 4 13:01:23 2025 GMT
Not After : Aug 5 13:01:23 2025 GMT
Subject: CN=eb9e083b5d626d6aba1ca7d4ebc73572703515c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f1:70:a0:ed:54:cf:8b:9e:35:3f:97:09:dc:
bf:c7:4a:7e:fb:9b:e0:8e:dd:62:2a:3c:2c:32:be:
72:b5:24:2f:67:e7:78:7d:1e:46:e3:ef:a0:fa:5f:
70:7c:99:61:32:81:a1:49:01:8d:aa:ce:c8:ae:a4:
e8:3d:d6:5c:ef:fe:81:24:68:66:7a:b1:b1:29:f6:
39:37:b8:9c:09:dd:65:02:4c:1f:eb:3d:e1:14:99:
3e:7f:5d:88:3d:02:6b:4d:24:e7:7c:c8:21:76:b3:
d9:2a:ba:54:fe:84:a8:0c:0a:31:f5:57:2e:6b:3a:
0d:4e:0d:b7:05:35:a5:29:b5:53:54:47:fc:91:15:
94:ea:6e:2d:17:69:32:f8:4a:9b:f7:53:98:f0:2b:
6a:5a:0f:33:cb:18:a1:cb:c1:06:ad:9a:0a:df:da:
0f:8a:c5:d7:19:b3:96:df:a3:88:93:04:78:3f:15:
2d:19:c1:9a:8e:6b:4e:20:a6:41:ec:fe:08:60:ba:
8c:f1:87:7e:0c:e3:27:dc:56:32:4e:d3:54:47:a8:
6f:ac:89:71:27:1b:25:51:cf:59:46:50:18:f5:19:
a1:58:ee:9c:2f:98:74:c8:3a:64:57:26:ac:a6:d9:
fb:de:37:81:bc:cc:94:d3:e5:d7:e0:12:ab:23:e9:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9E:08:3B:5D:62:6D:6A:BA:1C:A7:D4:EB:C7:35:72:70:35:15:C1
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:75:48:56:91:f6:b4:b9:36:10:02:56:a4:67:db:71:89:05:
16:9a:9f:67:f8:b0:b5:77:eb:46:c9:b3:59:5b:95:22:d5:77:
bf:1c:4d:6f:78:47:c7:c0:49:81:82:b5:a7:bc:98:ba:cc:87:
58:7d:95:c6:05:9c:18:52:8e:a4:5a:0e:61:6f:ad:bd:33:db:
ad:fc:83:02:b6:c4:63:0e:74:44:79:df:54:5a:00:4a:78:30:
3f:c0:09:ca:fd:eb:4f:0b:57:91:cb:46:29:11:fd:28:88:ce:
42:73:9b:59:37:5c:9e:c5:d4:1b:c1:90:a2:bf:33:d4:40:3c:
cd:d1:94:9d:ff:b8:f7:86:34:3e:7b:d9:66:5c:a8:0e:30:3b:
a6:a6:7e:e0:c1:9e:e6:1c:7a:e0:93:e8:e3:60:8e:51:54:1d:
9a:df:e7:4b:0c:5f:12:2e:dc:88:1c:9a:24:d5:c9:d7:3d:39:
6c:8f:b5:4d:f8:d3:95:8a:be:fe:de:0c:3a:a9:8f:e6:b2:cd:
6a:c2:51:84:f2:06:26:54:bf:5b:95:70:f5:32:17:22:63:1b:
23:6b:b7:4c:32:57:5d:57:e5:ba:4f:2a:1f:85:e4:c1:ad:30:
b5:74:31:51:07:a8:a0:d5:db:a3:05:b5:56:46:8a:12:4e:1c:
92:4f:e5:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1LCRBZO4SmGbQoMlOp6ofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll
YmU4ODUwHhcNMjUwODA0MTMwMTIzWhcNMjUwODA1MTMwMTIzWjAzMTEwLwYDVQQD
EyhlYjllMDgzYjVkNjI2ZDZhYmExY2E3ZDRlYmM3MzU3MjcwMzUxNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vFwoO1Uz4ueNT+XCdy/x0p++5vg
jt1iKjwsMr5ytSQvZ+d4fR5G4++g+l9wfJlhMoGhSQGNqs7IrqToPdZc7/6BJGhm
erGxKfY5N7icCd1lAkwf6z3hFJk+f12IPQJrTSTnfMghdrPZKrpU/oSoDAox9Vcu
azoNTg23BTWlKbVTVEf8kRWU6m4tF2ky+Eqb91OY8CtqWg8zyxihy8EGrZoK39oP
isXXGbOW36OIkwR4PxUtGcGajmtOIKZB7P4IYLqM8Yd+DOMn3FYyTtNUR6hvrIlx
JxslUc9ZRlAY9RmhWO6cL5h0yDpkVyasptn73jeBvMyU0+XX4BKrI+n6RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOueCDtdYm1quhyn1OvHNXJwNRXBMB8GA1UdIwQY
MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It
MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0
LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3VIVpH2
tLk2EAJWpGfbcYkFFpqfZ/iwtXfrRsmzWVuVItV3vxxNb3hHx8BJgYK1p7yYusyH
WH2VxgWcGFKOpFoOYW+tvTPbrfyDArbEYw50RHnfVFoASngwP8AJyv3rTwtXkctG
KRH9KIjOQnObWTdcnsXUG8GQor8z1EA8zdGUnf+494Y0PnvZZlyoDjA7pqZ+4MGe
5hx64JPo42COUVQdmt/nSwxfEi7ciByaJNXJ1z05bI+1TfjTlYq+/t4MOqmP5rLN
asJRhPIGJlS/W5Vw9TIXImMbI2u3TDJXXVfluk8qH4Xkwa0wtXQxUQeooNXbowW1
VkaKEk4ckk/lhg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:15:17 2025 by rpki-client