Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: OEdCtOD7BbiXC7VzIKvBXCMtffgtPwWUZmIQKd6P6Ew=
Subject key identifier: 7F:DA:84:BC:10:C0:69:13:9F:A7:77:29:E3:B6:23:9E:72:7E:59:2F
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 01989749C99DD37B62FA8D2AA2217B44B9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 04:00:51 +0000
Manifest this update: Mon 11 Aug 2025 04:00:51 +0000
Manifest next update: Tue 12 Aug 2025 04:00:51 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: XHPNAaUo1nva0Um6/6AcNkPRxgsFBe5iFUCk2nWrZIE=)
2: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (hash: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:c9:9d:d3:7b:62:fa:8d:2a:a2:21:7b:44:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Aug 11 04:00:51 2025 GMT
Not After : Aug 12 04:00:51 2025 GMT
Subject: CN=7fda84bc10c069139fa77729e3b6239e727e592f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:6e:5f:94:e1:11:13:09:ca:5e:c5:e9:ea:
7b:63:8a:8e:cd:1c:d1:6e:c0:e6:11:ff:32:6f:08:
1f:16:b2:ea:72:6e:69:71:e0:65:28:a7:10:da:7e:
7b:4d:03:c5:cf:1f:9f:aa:bd:fe:33:3e:f5:02:7a:
47:0d:e4:80:d5:3c:e7:10:2a:ce:36:98:fa:93:7a:
2a:ca:f0:98:9a:e7:7b:d1:e0:2b:8b:38:f9:de:8b:
a6:d3:67:b3:97:23:a2:d6:94:2d:cd:cb:66:42:e0:
30:40:f8:dc:fb:69:6a:16:b6:72:76:5b:c3:37:a0:
bc:66:38:3d:d1:bd:71:36:63:4a:3c:b0:82:49:55:
cc:8b:81:73:b6:c8:e0:24:45:36:95:7a:40:bd:62:
24:bb:e6:55:18:63:37:22:85:02:93:83:20:55:e2:
4d:e6:c5:41:7c:3b:f3:51:4f:1d:fc:c8:4f:99:f1:
ab:c0:fd:71:02:49:20:0f:e0:a1:16:16:46:8f:60:
bd:ec:60:1c:2b:28:da:51:28:6d:43:79:42:b6:89:
e4:c6:1b:ba:df:39:ec:90:59:25:e8:a8:98:f0:ba:
f1:92:1c:cc:42:db:ad:54:43:b9:b1:f4:73:43:1a:
1e:3c:c2:45:21:2b:fc:0f:f3:74:9e:ce:7f:0c:33:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DA:84:BC:10:C0:69:13:9F:A7:77:29:E3:B6:23:9E:72:7E:59:2F
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d5:ed:e1:b6:ba:96:7d:0b:75:09:ba:66:60:e3:ee:8c:d8:
d8:e2:b4:8a:2f:a9:56:db:59:f9:30:9b:99:57:14:e0:60:4d:
33:42:89:c3:77:51:c7:ed:e5:84:3e:16:54:89:40:0f:42:f3:
9c:81:00:b3:c6:94:77:83:5c:64:4c:79:92:d0:e5:6c:07:6b:
3b:bd:2a:e8:3c:e1:02:9f:49:7f:36:fe:95:f9:54:14:eb:6a:
11:c6:45:8a:40:e2:24:02:b4:88:74:5a:c7:74:75:c2:4e:9a:
76:35:05:b1:1b:63:10:35:d1:77:bf:5f:93:be:d4:ae:89:a7:
91:ba:f7:64:50:c5:fb:47:f1:f8:eb:5b:38:d2:71:e2:c4:39:
cd:7a:28:2f:8e:d4:2b:29:9f:91:f8:50:cc:b6:d5:9f:bd:17:
b3:ac:2d:74:cc:25:a9:53:03:9f:a4:4e:59:89:45:26:8a:10:
2e:cb:39:11:a4:25:84:a5:e2:79:cd:7e:b1:13:01:d7:c3:ff:
3d:41:dc:02:ee:8b:8c:a6:0f:21:43:50:6d:ae:2f:67:cf:92:
e3:fa:14:7e:d8:3e:c4:85:88:97:fa:58:57:05:c4:f1:50:76:
c4:f0:22:d2:3f:67:9d:5c:e8:70:6b:04:42:e0:59:ca:02:09:
43:93:61:48
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiXScmd03ti+o0qoiF7RLn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDZhNGYxMTQzYWJlM2FkZmM0YjY4MzVmYTEzNGUzZGYy
Y2FjMzQwHhcNMjUwODExMDQwMDUxWhcNMjUwODEyMDQwMDUxWjAzMTEwLwYDVQQD
Eyg3ZmRhODRiYzEwYzA2OTEzOWZhNzc3MjllM2I2MjM5ZTcyN2U1OTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFBuX5ThERMJyl7F6ep7Y4qOzRzR
bsDmEf8ybwgfFrLqcm5pceBlKKcQ2n57TQPFzx+fqr3+Mz71AnpHDeSA1TznECrO
Npj6k3oqyvCYmud70eArizj53oum02ezlyOi1pQtzctmQuAwQPjc+2lqFrZydlvD
N6C8Zjg90b1xNmNKPLCCSVXMi4FztsjgJEU2lXpAvWIku+ZVGGM3IoUCk4MgVeJN
5sVBfDvzUU8d/MhPmfGrwP1xAkkgD+ChFhZGj2C97GAcKyjaUShtQ3lCtonkxhu6
3znskFkl6KiY8LrxkhzMQtutVEO5sfRzQxoePMJFISv8D/N0ns5/DDNHzwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH/ahLwQwGkTn6d3KeO2I55yflkvMB8GA1UdIwQY
MBaAFPpGpPEUOr4638S2g1+hNOPfLKw0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rYWs4UlE2dmpyZnhMYURYNkUwNDk4c3JEUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZjNhNzlkLTM4Y2YtNDkwNS1hYjVm
LTViY2E0NWVmZGU4Yy8xLzEta2FrOFJRNnZqcmZ4TGFEWDZFMDQ5OHNyRFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RjL2YzYTc5ZC0zOGNmLTQ5MDUtYWI1Zi01YmNhNDVlZmRl
OGMvMS8xLWthazhSUTZ2anJmeExhRFg2RTA0OThzckRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNXt
4ba6ln0LdQm6ZmDj7ozY2OK0ii+pVttZ+TCbmVcU4GBNM0KJw3dRx+3lhD4WVIlA
D0LznIEAs8aUd4NcZEx5ktDlbAdrO70q6DzhAp9Jfzb+lflUFOtqEcZFikDiJAK0
iHRax3R1wk6adjUFsRtjEDXRd79fk77Uromnkbr3ZFDF+0fx+OtbONJx4sQ5zXoo
L47UKymfkfhQzLbVn70Xs6wtdMwlqVMDn6ROWYlFJooQLss5EaQlhKXiec1+sRMB
18P/PUHcAu6LjKYPIUNQba4vZ8+S4/oUftg+xIWIl/pYVwXE8VB2xPAi0j9nnVzo
cGsEQuBZygIJQ5NhSA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:12 2025 by rpki-client