Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: YhHkFs4WiVLU4pFDEaqLIBuGkWHwHW3+ZA4W+FgIVr4=
Subject key identifier: 6E:A5:40:98:DB:D3:D6:64:03:56:57:56:50:50:46:06:4E:26:ED:B1
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 01988053EDC169D44E2D94FEDB42938898F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 15DC
Signing time: Wed 06 Aug 2025 17:00:40 +0000
Manifest this update: Wed 06 Aug 2025 17:00:40 +0000
Manifest next update: Thu 07 Aug 2025 17:00:40 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: MkPxPiBlqmJAJuPorsUpIsDUHwigSDBSDiJ89DkAca0=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:53:ed:c1:69:d4:4e:2d:94:fe:db:42:93:88:98:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Aug 6 17:00:40 2025 GMT
Not After : Aug 7 17:00:40 2025 GMT
Subject: CN=6ea54098dbd3d66403565756505046064e26edb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:a8:21:65:81:46:2d:91:7f:9b:84:71:f6:
b7:f4:0d:49:b9:be:44:4e:eb:14:d3:db:16:dc:ac:
4c:e2:7e:7a:9c:ea:35:a1:e4:49:7f:9d:95:21:17:
c8:57:71:26:61:3e:6b:30:03:53:ec:2f:d9:be:2f:
85:0b:6c:88:57:4d:1a:34:8a:76:af:52:62:07:b8:
e7:50:bb:69:69:57:b4:84:94:8d:d3:21:a1:53:5f:
0b:5e:67:3c:41:17:33:6a:e2:94:32:8b:ca:3b:56:
e6:6f:3e:5c:84:f8:bb:09:63:05:38:c1:11:d4:ee:
ff:10:b5:b8:fa:d9:76:8d:c4:4b:aa:cf:57:d3:ce:
30:21:8d:e5:de:a4:68:ad:e2:96:b8:a8:04:2d:f2:
1b:d8:df:db:48:b4:f3:a6:b9:ee:48:73:c5:f0:ff:
ff:36:30:d9:43:76:f0:8d:33:d3:3b:3d:15:4d:a3:
fc:2f:c1:97:c2:8c:34:57:1b:a4:3a:8b:1e:a3:d2:
68:92:db:da:9e:7a:2c:14:df:78:74:82:a2:d3:10:
2d:30:cb:d3:38:d1:e7:89:65:93:66:b2:1a:e2:05:
84:14:cc:24:2a:63:d8:88:0a:4d:82:28:d0:b3:d3:
04:c4:48:5f:5f:44:52:41:30:0c:41:39:06:3b:33:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A5:40:98:DB:D3:D6:64:03:56:57:56:50:50:46:06:4E:26:ED:B1
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ad:af:7b:da:d6:fc:0a:e8:1c:3e:e6:06:a4:2a:38:c4:26:
c3:97:25:99:2b:41:a5:ef:cb:01:4b:82:3d:0b:3c:9b:7b:e3:
4e:cb:08:85:a9:a4:ee:b9:6a:32:cb:8c:72:69:53:b6:7a:4a:
bd:cf:14:3e:4a:1a:8a:a0:61:20:32:de:10:83:e3:ba:07:c9:
02:4c:35:97:b9:03:6c:f9:cb:ad:65:eb:28:2f:b3:16:d8:dc:
7d:f8:cd:3c:fd:43:99:64:a2:ad:bb:56:53:64:cd:ee:b9:a2:
0c:b8:0f:d8:18:6e:43:ed:a0:ed:ab:66:22:70:4d:9e:fe:1a:
b7:15:3c:31:71:15:3f:7b:62:2e:2d:fc:c5:a6:29:e7:e5:26:
2f:26:9d:92:1b:da:f9:c7:36:d2:c8:50:e7:18:53:8f:37:06:
f5:d6:d4:e9:4e:70:2c:fa:db:9c:58:fd:70:b3:73:79:52:6e:
4c:9c:d9:da:ee:c4:07:cf:12:bb:d8:13:3d:a0:39:c3:09:fc:
48:fe:30:c9:5a:1d:e3:84:54:77:47:ee:78:af:57:b4:49:4b:
21:2d:d3:76:73:f2:98:eb:0a:90:9b:f3:88:b4:b0:d9:af:8c:
b9:67:4f:8a:55:23:96:55:e5:82:a7:3d:7c:02:cf:11:54:ab:
a2:9f:1c:26
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiAU+3BadROLZT+20KTiJjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzQyZDc3N2QwODI0MTZhMmQ4NDdkNDAwM2EzMzFiNTBl
MjQyM2UwHhcNMjUwODA2MTcwMDQwWhcNMjUwODA3MTcwMDQwWjAzMTEwLwYDVQQD
Eyg2ZWE1NDA5OGRiZDNkNjY0MDM1NjU3NTY1MDUwNDYwNjRlMjZlZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXmoIWWBRi2Rf5uEcfa39A1Jub5E
TusU09sW3KxM4n56nOo1oeRJf52VIRfIV3EmYT5rMANT7C/Zvi+FC2yIV00aNIp2
r1JiB7jnULtpaVe0hJSN0yGhU18LXmc8QRczauKUMovKO1bmbz5chPi7CWMFOMER
1O7/ELW4+tl2jcRLqs9X084wIY3l3qRoreKWuKgELfIb2N/bSLTzprnuSHPF8P//
NjDZQ3bwjTPTOz0VTaP8L8GXwow0VxukOoseo9JoktvannosFN94dIKi0xAtMMvT
ONHniWWTZrIa4gWEFMwkKmPYiApNgijQs9MExEhfX0RSQTAMQTkGOzMbdQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG6lQJjb09ZkA1ZXVlBQRgZOJu2xMB8GA1UdIwQY
MBaAFPl0LXd9CCQWothH1AA6MxtQ4kI+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YUXRkMzBJSkJhaTJFZlVBRG96RzFEaVFqNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDgyNzA4LWMxZDQtNDBmYy05MzIx
LTY2OThiOTMyMzNkNi8xLzEtWFF0ZDMwSUpCYWkyRWZVQURvekcxRGlRajQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q0LzQ4MjcwOC1jMWQ0LTQwZmMtOTMyMS02Njk4YjkzMjMz
ZDYvMS8xLVhRdGQzMElKQmFpMkVmVUFEb3pHMURpUWo0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVK2v
e9rW/AroHD7mBqQqOMQmw5clmStBpe/LAUuCPQs8m3vjTssIhamk7rlqMsuMcmlT
tnpKvc8UPkoaiqBhIDLeEIPjugfJAkw1l7kDbPnLrWXrKC+zFtjcffjNPP1DmWSi
rbtWU2TN7rmiDLgP2BhuQ+2g7atmInBNnv4atxU8MXEVP3tiLi38xaYp5+UmLyad
khva+cc20shQ5xhTjzcG9dbU6U5wLPrbnFj9cLNzeVJuTJzZ2u7EB88Su9gTPaA5
wwn8SP4wyVod44RUd0fueK9XtElLIS3TdnPymOsKkJvziLSw2a+MuWdPilUjllXl
gqc9fALPEVSrop8cJg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:25 2025 by rpki-client