Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: DlR78Ktlhk/9px3iO+xDjD7gXDzclxxuzUeubikmuRQ=
Subject key identifier: 07:B1:E4:CB:FB:08:52:0B:4C:7D:63:5D:9D:11:82:93:77:A6:E6:18
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 019873AAD06917CF28ED3EC4BD3AB136B5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 21
Signing time: Mon 04 Aug 2025 06:00:30 +0000
Manifest this update: Mon 04 Aug 2025 06:00:30 +0000
Manifest next update: Tue 05 Aug 2025 06:00:30 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: nY/Pre6as3oe1cwfh1OnLvJiXvAMRhBPaBONWW/3Xi0=)
2: i9PMkFjZgddcdQkvP1yxnZzZAzQ.roa (hash: AH1/HP90I2Jx2/ajhEGYd7uNt41g8Pva2Gq/dNXs1dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:aa:d0:69:17:cf:28:ed:3e:c4:bd:3a:b1:36:b5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Aug 4 06:00:30 2025 GMT
Not After : Aug 5 06:00:30 2025 GMT
Subject: CN=07b1e4cbfb08520b4c7d635d9d11829377a6e618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:1f:25:76:45:a8:0c:f4:25:2d:39:6d:c4:
5d:6b:f3:86:15:65:fb:55:22:50:5e:8f:33:71:fa:
97:67:38:59:56:ce:12:d5:0d:3b:9b:af:cc:00:40:
8b:de:bf:f4:15:60:82:bc:19:ee:57:de:1a:49:84:
04:77:73:85:00:0f:0a:25:e2:dc:88:c6:fe:df:7a:
9b:65:47:28:44:c8:1e:df:4a:e2:47:a3:6a:2d:80:
48:04:93:a1:0c:6c:9b:92:a2:5f:c5:4f:c5:37:a4:
70:48:e3:e2:44:40:58:c2:67:98:fa:cb:fa:fe:6d:
a5:97:21:ce:26:a8:bd:c9:7a:5f:e3:f5:87:99:24:
19:9b:24:ae:dd:76:c1:b6:2c:ec:f8:98:d8:9d:3b:
01:14:bb:f4:ed:76:88:4b:8c:10:a1:fc:a7:c4:4d:
b8:dd:9c:57:d6:f8:4a:16:e4:89:89:e2:e7:d7:f6:
c3:45:4a:03:f0:ed:65:6a:fd:97:1a:15:ae:96:61:
e2:28:f8:c0:1d:d6:f2:d0:9d:fb:69:8b:c0:5c:85:
bf:e6:e0:5c:7d:37:ae:e2:76:75:87:da:06:2e:f9:
89:9a:6b:c6:0f:fa:dc:75:f0:c3:bc:7a:38:93:dc:
6e:0b:74:a1:d5:15:c4:a4:89:07:78:25:ee:bb:14:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:E4:CB:FB:08:52:0B:4C:7D:63:5D:9D:11:82:93:77:A6:E6:18
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:44:2c:a7:53:e0:af:ef:86:a8:eb:8a:a9:a5:4b:00:80:20:
5b:c5:14:bb:b1:14:ce:62:a6:16:c5:fb:03:01:14:7c:ea:70:
03:f7:08:7c:6e:c0:e8:e5:d6:79:07:34:1b:22:08:08:50:11:
75:e0:e4:5b:b6:0c:3e:4e:c8:f9:88:8f:d8:ef:83:e7:2e:13:
33:1d:9f:0e:7d:d9:7c:5c:72:67:7b:3c:56:9f:b4:73:b4:8e:
e5:66:f7:77:8a:bc:05:18:ee:93:d2:95:60:a6:a0:71:fd:91:
00:c0:23:44:a4:f4:b8:3e:1e:8f:73:ed:c4:42:f3:1d:73:d4:
75:d2:a1:20:b4:76:09:49:f1:17:9a:4e:81:f9:07:ec:57:3d:
5c:65:f2:b2:1e:30:4f:03:2f:d2:84:85:a1:0a:97:14:04:18:
ab:de:0b:06:2a:93:87:88:92:a1:d8:ab:a8:3e:76:97:32:e1:
88:c5:ab:e2:9c:a5:fb:e7:d7:1f:8c:a5:e3:5f:29:1d:dd:04:
d2:ef:37:8f:dd:f4:5f:38:83:e8:82:87:2c:cb:ee:cb:7c:41:
b4:00:1b:85:d0:9a:4e:d0:ec:4c:36:f7:0c:8c:b1:b6:c3:30:
87:a9:86:64:c0:ab:8d:b8:da:f7:ba:6b:a6:5d:64:ed:af:b1:
0b:e8:89:e4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhzqtBpF88o7T7EvTqxNrXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTRlODE1M2NkM2Y5MWMzMzM5N2Y5YjdkZjkxYmYxNzNj
NGQxNmIwHhcNMjUwODA0MDYwMDMwWhcNMjUwODA1MDYwMDMwWjAzMTEwLwYDVQQD
EygwN2IxZTRjYmZiMDg1MjBiNGM3ZDYzNWQ5ZDExODI5Mzc3YTZlNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyMfJXZFqAz0JS05bcRda/OGFWX7
VSJQXo8zcfqXZzhZVs4S1Q07m6/MAECL3r/0FWCCvBnuV94aSYQEd3OFAA8KJeLc
iMb+33qbZUcoRMge30riR6NqLYBIBJOhDGybkqJfxU/FN6RwSOPiREBYwmeY+sv6
/m2llyHOJqi9yXpf4/WHmSQZmySu3XbBtizs+JjYnTsBFLv07XaIS4wQofynxE24
3ZxX1vhKFuSJieLn1/bDRUoD8O1lav2XGhWulmHiKPjAHdby0J37aYvAXIW/5uBc
fTeu4nZ1h9oGLvmJmmvGD/rcdfDDvHo4k9xuC3Sh1RXEpIkHeCXuuxRBaQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAex5Mv7CFILTH1jXZ0RgpN3puYYMB8GA1UdIwQY
MBaAFPoU6BU80/kcMzl/m335G/FzxNFrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oVG9GVHpULVJ3ek9YLWJmZmtiOFhQRTBXcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMjQwNzgwLTgxMTAtNDVkNy1iZDcz
LWZkZmQyZDcyYjU0MS8xLzEtaFRvRlR6VC1Sd3pPWC1iZmZrYjhYUEUwV3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M3LzI0MDc4MC04MTEwLTQ1ZDctYmQ3My1mZGZkMmQ3MmI1
NDEvMS8xLWhUb0ZUelQtUnd6T1gtYmZma2I4WFBFMFdzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEQs
p1Pgr++GqOuKqaVLAIAgW8UUu7EUzmKmFsX7AwEUfOpwA/cIfG7A6OXWeQc0GyII
CFARdeDkW7YMPk7I+YiP2O+D5y4TMx2fDn3ZfFxyZ3s8Vp+0c7SO5Wb3d4q8BRju
k9KVYKagcf2RAMAjRKT0uD4ej3PtxELzHXPUddKhILR2CUnxF5pOgfkH7Fc9XGXy
sh4wTwMv0oSFoQqXFAQYq94LBiqTh4iSodirqD52lzLhiMWr4pyl++fXH4yl418p
Hd0E0u83j930XziD6IKHLMvuy3xBtAAbhdCaTtDsTDb3DIyxtsMwh6mGZMCrjbja
97prpl1k7a+xC+iJ5A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:31 2025 by rpki-client