Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
File: 1sSAuslyYH_atgVZOoS4NkxqsbA.mft (raw, json)
Hash identifier: +4CGT+LcvtqD/RgYhguqzFhBKqzht8rlt1szLCq+e0g=
Subject key identifier: 4C:5A:6F:B5:31:25:D5:61:DA:3A:1F:B7:18:1F:FB:C3:C4:71:00:03
Authority key identifier: D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
Certificate issuer: /CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Certificate serial: 01988DD95A3CD53306034903771E442D6942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 08:01:28 +0000
Manifest this update: Sat 09 Aug 2025 08:01:28 +0000
Manifest next update: Sun 10 Aug 2025 08:01:28 +0000
Files and hashes: 1: 1sSAuslyYH_atgVZOoS4NkxqsbA.crl (hash: 845vLnzfgWZvdtCFmu/87r68J14fvx3AcGSDtWHWW9o=)
2: qSALXGZS-mStlLpg8jjf75z_AxA.roa (hash: JTmyN1Wglwwaiz8Y4z1qxOyBmB8F9ra5LEBRhnN+ctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:5a:3c:d5:33:06:03:49:03:77:1e:44:2d:69:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Validity
Not Before: Aug 9 08:01:28 2025 GMT
Not After : Aug 10 08:01:28 2025 GMT
Subject: CN=4c5a6fb53125d561da3a1fb7181ffbc3c4710003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d1:25:20:4d:72:f9:72:85:ec:f4:31:12:ee:
eb:74:40:8c:d9:7d:24:d9:9c:a9:2e:a7:2c:72:15:
74:e1:36:6c:74:b8:04:a1:f5:c2:d4:74:6b:ce:6a:
8b:12:0f:5a:9f:fe:b9:61:bd:3e:e4:cd:bf:57:67:
b7:ae:dd:8f:0a:a9:2b:ac:c0:9f:ca:4d:75:ed:85:
32:1b:9e:37:e2:2f:9d:20:27:1e:e3:92:e2:4b:15:
71:f3:1b:1f:5d:c5:ae:b3:52:27:59:68:7b:cd:ee:
c8:2e:bd:5c:87:fb:45:fa:88:7c:41:f8:04:d2:87:
7a:13:fa:ad:1b:c7:11:ce:3f:16:70:91:20:60:a7:
2c:ac:28:44:96:4d:9e:b8:25:82:24:af:21:f3:5b:
c2:52:b7:c3:dd:55:39:8d:5d:7a:7f:d2:bd:64:f6:
72:9e:06:ea:1f:e4:4e:10:0b:66:c8:ab:b2:96:0f:
87:77:57:41:94:d0:46:b4:31:3b:f1:f0:73:d5:da:
b9:96:ce:30:fb:d9:75:b3:ee:b8:ed:85:3a:83:77:
ea:31:a2:37:61:82:12:c3:65:97:b8:50:70:92:50:
38:fa:3f:a1:60:1b:d0:4f:3c:b2:9f:7b:f6:af:93:
99:50:00:9c:8f:59:7e:84:17:30:3c:b3:a5:fb:e9:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5A:6F:B5:31:25:D5:61:DA:3A:1F:B7:18:1F:FB:C3:C4:71:00:03
X509v3 Authority Key Identifier:
keyid:D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c7:8c:5f:d2:2d:c9:0c:e4:a5:ec:61:1e:a1:f7:ed:48:65:
28:27:f0:09:70:00:a4:88:7b:24:7b:ca:a5:3e:2d:6a:24:56:
84:ce:e8:4c:17:a7:39:02:9b:be:56:1f:9b:2d:00:40:16:a1:
65:cf:a6:4a:54:09:12:3a:2f:f6:ac:73:4e:3b:a2:a9:f7:51:
4a:7f:04:e9:5d:81:83:3b:94:20:4e:5b:05:12:dc:12:cc:59:
7d:c8:b4:d5:b8:02:9a:09:cf:31:87:98:3a:40:d1:b0:83:4a:
54:80:96:3a:27:8d:4f:e2:98:a3:af:28:cd:e0:af:8e:ca:9c:
c9:68:8f:c5:89:c3:9f:cf:b3:9c:87:43:d7:5b:13:cd:b5:ac:
f6:68:b5:f5:a8:2e:ba:73:7f:00:70:7b:20:f3:98:60:6d:c3:
5f:e4:ef:28:94:83:fb:1e:26:18:1e:f0:ce:03:87:9b:ff:8a:
1d:05:a0:27:c3:b5:fc:bc:26:34:d5:76:f4:39:25:bf:68:ca:
a6:2d:41:34:c0:66:38:e9:33:a6:54:36:0b:e9:13:fc:3d:5c:
f0:dd:e4:16:75:40:1b:3c:82:2b:6a:b6:83:38:69:ff:9f:fc:
7a:5b:7d:84:38:ef:03:86:73:72:b8:24:c9:c6:35:dd:12:d2:
5b:f0:15:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiN2Vo81TMGA0kDdx5ELWlCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzQ4MGJhYzk3MjYwN2ZkYWI2MDU1OTNhODRiODM2NGM2
YWIxYjAwHhcNMjUwODA5MDgwMTI4WhcNMjUwODEwMDgwMTI4WjAzMTEwLwYDVQQD
Eyg0YzVhNmZiNTMxMjVkNTYxZGEzYTFmYjcxODFmZmJjM2M0NzEwMDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dElIE1y+XKF7PQxEu7rdECM2X0k
2ZypLqcschV04TZsdLgEofXC1HRrzmqLEg9an/65Yb0+5M2/V2e3rt2PCqkrrMCf
yk117YUyG5434i+dICce45LiSxVx8xsfXcWus1InWWh7ze7ILr1ch/tF+oh8QfgE
0od6E/qtG8cRzj8WcJEgYKcsrChElk2euCWCJK8h81vCUrfD3VU5jV16f9K9ZPZy
ngbqH+ROEAtmyKuylg+Hd1dBlNBGtDE78fBz1dq5ls4w+9l1s+647YU6g3fqMaI3
YYISw2WXuFBwklA4+j+hYBvQTzyyn3v2r5OZUACcj1l+hBcwPLOl++mepwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExab7UxJdVh2joftxgf+8PEcQADMB8GA1UdIwQY
MBaAFNbEgLrJcmB/2rYFWTqEuDZMarGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84OTE4ZmEtZjRhYi00YjE5LTk0NTMt
OTdjNzNiZTkzYmNkLzEvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy84OTE4ZmEtZjRhYi00YjE5LTk0NTMtOTdjNzNiZTkzYmNk
LzEvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXseMX9It
yQzkpexhHqH37UhlKCfwCXAApIh7JHvKpT4taiRWhM7oTBenOQKbvlYfmy0AQBah
Zc+mSlQJEjov9qxzTjuiqfdRSn8E6V2BgzuUIE5bBRLcEsxZfci01bgCmgnPMYeY
OkDRsINKVICWOieNT+KYo68ozeCvjsqcyWiPxYnDn8+znIdD11sTzbWs9mi19agu
unN/AHB7IPOYYG3DX+TvKJSD+x4mGB7wzgOHm/+KHQWgJ8O1/LwmNNV29Dklv2jK
pi1BNMBmOOkzplQ2C+kT/D1c8N3kFnVAGzyCK2q2gzhp/5/8elt9hDjvA4Zzcrgk
ycY13RLSW/AVtA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:14 2025 by rpki-client