Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File: 1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier: mXX+WA4jNrDcw0x3EVXOW1xPXFKk+2+Ci8W3XtJviYs=
Subject key identifier: 1A:64:9A:DC:BA:42:7F:0A:3E:60:15:E0:4C:EF:4F:8D:E3:F0:51:69
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer: /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial: 0198914791762A7A802FE6F58C185E2F6AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number: 05FA
Signing time: Sun 10 Aug 2025 00:00:43 +0000
Manifest this update: Sun 10 Aug 2025 00:00:43 +0000
Manifest next update: Mon 11 Aug 2025 00:00:43 +0000
Files and hashes: 1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: L0MKPZr2SPl05o9GjSmpLxyxsS2mv+RrfSJ9pHsJwR0=)
2: cPWanhkOF5JFf7ndWQEsgDaOym4.roa (hash: hNMT1d2ZHlvJJQiGYjNYvL4LotmJH6VgqTxIxCqCmaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:91:76:2a:7a:80:2f:e6:f5:8c:18:5e:2f:6a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Validity
Not Before: Aug 10 00:00:43 2025 GMT
Not After : Aug 11 00:00:43 2025 GMT
Subject: CN=1a649adcba427f0a3e6015e04cef4f8de3f05169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:ed:f2:35:38:fc:10:b0:8b:de:aa:a3:8d:
08:66:ee:59:b4:64:ed:54:e1:eb:84:a8:46:93:5d:
d1:86:c2:2f:bf:a7:59:18:a6:20:64:27:86:8c:d5:
c6:84:f0:ea:95:79:9a:9e:15:8d:45:db:73:e0:66:
29:d5:1c:b5:bd:b9:95:5f:61:a8:e7:f8:08:80:8e:
a3:57:6d:6b:1d:02:5d:8d:0a:de:0f:eb:18:74:c0:
22:87:28:01:df:5f:5c:09:4c:bf:cd:5f:1f:17:60:
0b:54:2e:4a:a1:a1:56:08:02:ef:7b:08:bd:4b:59:
df:e9:1c:d6:60:1e:c7:ed:6b:29:a8:4f:a3:48:8a:
41:a8:cb:b8:74:07:be:a2:7c:88:2b:ef:bf:50:c2:
57:89:54:1e:e5:5f:0c:5c:cd:9f:33:5f:ae:d9:e8:
2f:9e:0c:cd:d6:79:05:1d:7b:f3:40:09:d5:c8:a1:
81:c4:92:d2:a7:b2:72:84:85:48:8e:bd:61:97:90:
ff:78:d6:e5:b2:01:ea:8b:ff:7e:2c:46:78:19:4d:
23:4f:db:b9:55:07:40:1e:e9:bd:c0:bf:ac:02:fa:
f7:1c:91:d9:74:8d:e6:00:69:e5:32:b0:55:04:c3:
4e:e7:1d:ff:e1:80:4c:49:9d:a3:3e:86:a4:09:ed:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:9A:DC:BA:42:7F:0A:3E:60:15:E0:4C:EF:4F:8D:E3:F0:51:69
X509v3 Authority Key Identifier:
keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:16:43:ca:38:5d:ee:84:87:c0:f7:43:19:2e:9d:69:23:a7:
b0:a6:29:72:a3:c7:16:a7:77:cd:cb:fd:c8:74:59:d2:ce:cf:
00:34:b0:a2:7c:a4:c7:6e:30:83:26:a1:cd:81:e0:c6:ae:a8:
31:cd:8a:cd:b5:91:91:d8:94:82:1b:ad:ea:f4:e1:fd:df:24:
9f:64:c3:08:a2:1a:6b:e6:64:29:0e:95:b0:f9:11:74:a5:83:
8a:1a:96:67:7a:ac:92:3d:2b:c7:33:99:a9:ea:1d:56:90:59:
0c:39:03:c8:b3:e7:58:f5:d0:54:7d:42:47:b3:c9:37:21:7e:
d6:9d:e5:9e:80:d7:fa:d9:bf:16:a2:63:dd:ab:6b:76:56:4c:
57:ec:31:56:03:98:9d:17:0e:7c:bf:37:ef:2c:83:ba:94:5b:
45:8b:93:01:a1:95:ec:8c:72:16:2f:12:00:25:52:13:c0:95:
7d:b7:67:58:58:77:6f:f3:a9:08:70:d7:d2:d7:a2:06:28:22:
70:04:a4:a7:74:e7:1f:a3:28:5c:c2:36:81:b3:10:23:15:13:
57:63:36:92:f0:00:12:bd:97:fd:a4:42:a4:31:0d:7b:0f:23:
c5:c2:9a:32:f5:c6:08:7c:ab:85:a2:e9:f7:0f:d1:6a:83:39:
b1:fd:d1:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRR5F2KnqAL+b1jBheL2qkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YTcxYjRlODY5NDQxN2ViYmJjZjYyNjhiOWM4Zjk2MzE3
MGIxZjEwHhcNMjUwODEwMDAwMDQzWhcNMjUwODExMDAwMDQzWjAzMTEwLwYDVQQD
EygxYTY0OWFkY2JhNDI3ZjBhM2U2MDE1ZTA0Y2VmNGY4ZGUzZjA1MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0Ht8jU4/BCwi96qo40IZu5ZtGTt
VOHrhKhGk13RhsIvv6dZGKYgZCeGjNXGhPDqlXmanhWNRdtz4GYp1Ry1vbmVX2Go
5/gIgI6jV21rHQJdjQreD+sYdMAihygB319cCUy/zV8fF2ALVC5KoaFWCALvewi9
S1nf6RzWYB7H7WspqE+jSIpBqMu4dAe+onyIK++/UMJXiVQe5V8MXM2fM1+u2egv
ngzN1nkFHXvzQAnVyKGBxJLSp7JyhIVIjr1hl5D/eNblsgHqi/9+LEZ4GU0jT9u5
VQdAHum9wL+sAvr3HJHZdI3mAGnlMrBVBMNO5x3/4YBMSZ2jPoakCe143QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpkmty6Qn8KPmAV4EzvT43j8FFpMB8GA1UdIwQY
MBaAFNanG06GlEF+u7z2Joucj5YxcLHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQt
MjkzMTEwNGM1ZjdhLzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQtMjkzMTEwNGM1Zjdh
LzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRZDyjhd
7oSHwPdDGS6daSOnsKYpcqPHFqd3zcv9yHRZ0s7PADSwonykx24wgyahzYHgxq6o
Mc2KzbWRkdiUghut6vTh/d8kn2TDCKIaa+ZkKQ6VsPkRdKWDihqWZ3qskj0rxzOZ
qeodVpBZDDkDyLPnWPXQVH1CR7PJNyF+1p3lnoDX+tm/FqJj3atrdlZMV+wxVgOY
nRcOfL837yyDupRbRYuTAaGV7IxyFi8SACVSE8CVfbdnWFh3b/OpCHDX0teiBigi
cASkp3TnH6MoXMI2gbMQIxUTV2M2kvAAEr2X/aRCpDENew8jxcKaMvXGCHyrhaLp
9w/RaoM5sf3RqQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:48 2025 by rpki-client