Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: hVGYQRGmtLKSsbVq45koctHB0Hgsoc948On3G7m9+BY=
Subject key identifier: 4C:44:AF:F8:70:E7:5D:2C:21:AE:7B:FF:01:D1:C7:07:13:66:A5:36
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 019883571288CDECE99D2AB2A6CEA763401F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0D54
Signing time: Thu 07 Aug 2025 07:02:58 +0000
Manifest this update: Thu 07 Aug 2025 07:02:58 +0000
Manifest next update: Fri 08 Aug 2025 07:02:58 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: 8ztbsBjaCa3ZhpLidoWXx3nxugEjZbhSUUIFmYF/mKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:12:88:cd:ec:e9:9d:2a:b2:a6:ce:a7:63:40:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Aug 7 07:02:58 2025 GMT
Not After : Aug 8 07:02:58 2025 GMT
Subject: CN=4c44aff870e75d2c21ae7bff01d1c7071366a536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:49:28:f2:42:da:f5:61:f4:58:81:ad:2c:
94:59:79:78:e3:ac:b1:8f:cf:e3:e9:05:92:3d:a4:
12:2f:7f:f1:2b:da:b8:4c:6e:fb:4c:6c:53:96:05:
7e:06:13:72:10:86:50:53:6e:aa:ce:1c:30:07:10:
0b:b9:d3:17:a7:ad:47:d6:0b:8f:84:67:8e:6f:33:
89:08:35:ab:51:dd:fa:01:a2:39:ee:78:6b:5e:db:
2e:82:71:f2:c5:44:11:d9:9c:99:c1:95:9e:5a:bc:
a0:38:d2:6d:ea:35:0c:b7:b1:fc:c8:6b:3b:72:24:
08:df:b5:a7:a4:98:00:a3:dd:ea:34:51:4a:86:fd:
65:a1:66:6c:94:86:3e:9a:c2:7a:71:aa:3f:77:b3:
1e:c4:aa:46:92:96:37:b2:99:4f:bb:3a:2a:6a:f9:
3e:ed:cc:a1:ad:fd:c3:a6:98:7b:18:f8:85:e5:ac:
75:0b:69:be:52:17:d2:7e:c5:31:4a:9e:f8:16:e5:
a1:05:19:dc:d4:3a:d2:0c:43:00:fd:9b:97:05:ce:
0a:28:b6:5d:be:c8:7f:9f:fb:09:2f:f3:ae:00:3a:
cb:1f:99:72:d9:bb:08:ca:84:4b:7e:ba:25:49:97:
d1:27:2e:63:a6:79:26:df:09:fd:09:8c:c9:44:cf:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:44:AF:F8:70:E7:5D:2C:21:AE:7B:FF:01:D1:C7:07:13:66:A5:36
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b7:e7:70:54:c7:74:b3:fe:0f:e9:d4:8e:d3:75:d5:a9:bc:
bc:53:52:30:ce:52:9a:1d:ec:a1:63:d3:b5:b7:a8:c6:e1:8a:
5c:10:f7:c2:63:de:9f:98:05:b7:bb:31:7c:42:4e:d3:d9:ae:
19:6a:36:7f:33:77:a4:2b:78:dd:aa:15:87:e3:10:c0:a7:97:
39:0f:9c:ce:f0:97:06:ee:01:e3:ea:3a:64:96:2c:a5:c6:77:
25:96:f9:5d:89:df:37:bf:6d:67:3d:7f:1c:ac:2a:61:8a:a5:
ca:9b:5d:b2:08:87:4d:06:72:28:a9:a4:51:ae:85:fc:59:34:
95:dd:00:99:27:bc:bb:bf:f7:b2:97:b5:28:6c:f9:4e:c8:33:
91:a5:6f:70:1d:09:23:ae:d8:e3:cc:b0:5d:49:cd:a3:0a:27:
27:ca:5b:ed:04:68:b0:19:84:0a:8d:e0:22:29:ad:40:5a:ee:
e5:f9:cd:69:67:69:d6:86:53:5d:c4:a0:a9:21:a2:7e:0d:1c:
b9:11:1f:6f:02:2f:2a:6c:d7:f6:41:28:25:66:b0:e7:06:4d:
ab:ef:41:03:6a:85:f6:a6:3a:c7:f0:f9:9e:b8:d9:a7:b2:9f:
bc:c2:cb:7e:f3:dc:12:a6:9d:53:f1:99:c3:88:f0:e1:4f:41:
8d:4c:96:35
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiDVxKIzezpnSqyps6nY0AfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWE4M2ZiYjNlMWI5YjYzODMxYTY4MWY2YjcyMmEyNjUw
MTZjOWMwHhcNMjUwODA3MDcwMjU4WhcNMjUwODA4MDcwMjU4WjAzMTEwLwYDVQQD
Eyg0YzQ0YWZmODcwZTc1ZDJjMjFhZTdiZmYwMWQxYzcwNzEzNjZhNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL1JKPJC2vVh9FiBrSyUWXl446yx
j8/j6QWSPaQSL3/xK9q4TG77TGxTlgV+BhNyEIZQU26qzhwwBxALudMXp61H1guP
hGeObzOJCDWrUd36AaI57nhrXtsugnHyxUQR2ZyZwZWeWrygONJt6jUMt7H8yGs7
ciQI37WnpJgAo93qNFFKhv1loWZslIY+msJ6cao/d7MexKpGkpY3splPuzoqavk+
7cyhrf3Dpph7GPiF5ax1C2m+UhfSfsUxSp74FuWhBRnc1DrSDEMA/ZuXBc4KKLZd
vsh/n/sJL/OuADrLH5ly2bsIyoRLfrolSZfRJy5jpnkm3wn9CYzJRM+VCQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFExEr/hw510sIa57/wHRxwcTZqU2MB8GA1UdIwQY
MBaAFPoag/uz4bm2ODGmgfa3IqJlAWycMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ocUQtN1BodWJZNE1hYUI5cmNpb21VQmJKdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNTkyZDQzLTQwZDItNGRlYi05NmI0
LWQwMTI2YTVlMzczMy8xLzEtaHFELTdQaHViWTRNYWFCOXJjaW9tVUJiSncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RlLzU5MmQ0My00MGQyLTRkZWItOTZiNC1kMDEyNmE1ZTM3
MzMvMS8xLWhxRC03UGh1Ylk0TWFhQjlyY2lvbVVCYkp3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbfn
cFTHdLP+D+nUjtN11am8vFNSMM5Smh3soWPTtbeoxuGKXBD3wmPen5gFt7sxfEJO
09muGWo2fzN3pCt43aoVh+MQwKeXOQ+czvCXBu4B4+o6ZJYspcZ3JZb5XYnfN79t
Zz1/HKwqYYqlyptdsgiHTQZyKKmkUa6F/Fk0ld0AmSe8u7/3spe1KGz5TsgzkaVv
cB0JI67Y48ywXUnNowonJ8pb7QRosBmECo3gIimtQFru5fnNaWdp1oZTXcSgqSGi
fg0cuREfbwIvKmzX9kEoJWaw5wZNq+9BA2qF9qY6x/D5nrjZp7KfvMLLfvPcEqad
U/GZw4jw4U9BjUyWNQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 13:00:56 2025 by rpki-client