Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier: 32UDhtbh/cMtgHpMzWOH5gNRq/M0clRzv+ie/y/RJtU=
Subject key identifier: 06:00:3D:11:39:C8:B7:B4:DA:E0:AA:EC:1A:AD:5C:F5:68:76:9C:31
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial: 019896A59B117FDC43BD22E82FD19CEE7C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number: 1242
Signing time: Mon 11 Aug 2025 01:01:32 +0000
Manifest this update: Mon 11 Aug 2025 01:01:32 +0000
Manifest next update: Tue 12 Aug 2025 01:01:32 +0000
Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: fq/pxba/6mKIsisc3UdhxfU76iNXFS4uaeVD0cbJ04s=)
2: 2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa (hash: GJ30AXhunHYfQ1Yyx4o1wHy0UcxPP3zTYg1IKwU8P4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:9b:11:7f:dc:43:bd:22:e8:2f:d1:9c:ee:7c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Validity
Not Before: Aug 11 01:01:32 2025 GMT
Not After : Aug 12 01:01:32 2025 GMT
Subject: CN=06003d1139c8b7b4dae0aaec1aad5cf568769c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:25:7b:a7:5a:51:3b:ad:a5:0a:ee:20:86:bc:
76:bc:47:76:95:ce:88:72:7c:2a:23:13:dc:b3:66:
04:f0:ba:b1:68:d2:4a:c4:49:01:ca:d2:7d:76:b9:
19:ad:16:35:fa:1d:b1:85:b7:0d:cb:c1:ba:1f:ff:
e9:10:ae:02:31:dd:5c:c6:62:2b:1d:6c:bd:29:59:
45:e9:8c:8b:8c:94:c9:ef:51:6a:4d:78:32:aa:1c:
b9:f2:64:8a:47:a2:8c:99:6c:42:95:02:a2:95:3a:
c6:52:4a:83:6a:fe:ed:31:cf:3e:fc:a5:75:79:d9:
4f:6c:ca:60:55:46:ce:bc:3a:99:2f:13:ed:46:86:
24:5a:9d:74:74:d0:c0:35:0b:49:3b:f1:3e:4c:c2:
24:ea:b5:6b:0b:cb:97:5f:f8:46:43:0f:70:39:83:
37:f8:e9:3a:e4:cf:ba:8c:14:96:78:fc:66:6a:18:
d3:6c:77:3f:59:80:b8:c7:47:3d:25:73:b5:5b:8b:
c7:33:8c:1d:21:1b:f9:21:e8:e5:19:48:e7:21:ed:
c3:85:59:28:51:ec:59:36:09:ef:23:b8:56:fa:e6:
c4:e2:4f:46:d9:19:4d:eb:61:7d:87:b2:72:b4:31:
31:9b:46:fb:bd:52:31:c8:ba:89:ad:6e:05:ad:e1:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:3D:11:39:C8:B7:B4:DA:E0:AA:EC:1A:AD:5C:F5:68:76:9C:31
X509v3 Authority Key Identifier:
keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5f:06:da:ec:9a:54:b1:64:69:28:56:a8:3b:7f:e5:f9:11:
e8:83:3a:67:e1:5c:20:3a:78:f6:43:df:2e:a4:de:0a:bb:ce:
94:83:d6:69:d8:78:db:7f:68:5a:79:33:02:d8:65:5b:a8:26:
9b:29:1a:8e:38:10:5c:01:bc:c5:e1:c8:8d:5d:b4:fd:2c:6d:
aa:d3:8f:ec:51:70:5a:a8:4b:b3:51:aa:fd:06:72:81:f5:44:
68:ea:b3:f1:5c:79:9e:1e:b3:14:d4:d4:bf:90:03:70:67:c2:
be:fa:a8:80:83:c6:78:d7:40:a6:c9:a2:51:a4:b5:16:d4:11:
4b:38:a2:ef:7c:f9:b9:30:4e:64:55:18:df:eb:a4:a9:b0:bb:
9e:a9:90:81:cb:27:f3:97:dd:a8:6b:cd:01:9e:c4:fe:b7:f2:
c5:70:7c:61:62:d4:ab:81:6f:70:e2:04:da:e3:53:8c:0a:75:
4e:cb:77:0e:83:53:37:6b:e8:59:03:c2:2c:75:69:fd:81:6e:
a4:23:e7:42:dd:d2:2b:52:24:82:ff:20:7b:24:ea:d6:9c:2d:
fc:e8:00:0f:a2:77:06:29:77:ac:a2:72:2d:98:c7:f7:01:5c:
38:4a:41:d2:ce:1a:e0:cd:ae:de:a9:c0:1c:73:e9:a4:e4:3a:
95:63:04:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpZsRf9xDvSLoL9Gc7nyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MDYxZWU4N2Y1YjU1ZjE5MDNhMmIzNzA0ZWJhMDk0NGFi
MGM1YWMwHhcNMjUwODExMDEwMTMyWhcNMjUwODEyMDEwMTMyWjAzMTEwLwYDVQQD
EygwNjAwM2QxMTM5YzhiN2I0ZGFlMGFhZWMxYWFkNWNmNTY4NzY5YzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yV7p1pRO62lCu4ghrx2vEd2lc6I
cnwqIxPcs2YE8LqxaNJKxEkBytJ9drkZrRY1+h2xhbcNy8G6H//pEK4CMd1cxmIr
HWy9KVlF6YyLjJTJ71FqTXgyqhy58mSKR6KMmWxClQKilTrGUkqDav7tMc8+/KV1
edlPbMpgVUbOvDqZLxPtRoYkWp10dNDANQtJO/E+TMIk6rVrC8uXX/hGQw9wOYM3
+Ok65M+6jBSWePxmahjTbHc/WYC4x0c9JXO1W4vHM4wdIRv5IejlGUjnIe3DhVko
UexZNgnvI7hW+ubE4k9G2RlN62F9h7JytDExm0b7vVIxyLqJrW4FreEJ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYAPRE5yLe02uCq7BqtXPVodpwxMB8GA1UdIwQY
MBaAFNcGHuh/W1XxkDorNwTroJRKsMWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2It
Mjg4M2Y4OGE4NmVjLzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2ItMjg4M2Y4OGE4NmVj
LzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp18G2uya
VLFkaShWqDt/5fkR6IM6Z+FcIDp49kPfLqTeCrvOlIPWadh4239oWnkzAthlW6gm
mykajjgQXAG8xeHIjV20/SxtqtOP7FFwWqhLs1Gq/QZygfVEaOqz8Vx5nh6zFNTU
v5ADcGfCvvqogIPGeNdApsmiUaS1FtQRSzii73z5uTBOZFUY3+ukqbC7nqmQgcsn
85fdqGvNAZ7E/rfyxXB8YWLUq4FvcOIE2uNTjAp1Tst3DoNTN2voWQPCLHVp/YFu
pCPnQt3SK1Ikgv8geyTq1pwt/OgAD6J3Bil3rKJyLZjH9wFcOEpB0s4a4M2u3qnA
HHPppOQ6lWME+A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:26 2025 by rpki-client