Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: JzyNj8GvwHtb8H19dl3/a75YxGN80UU2U4s4JVfoDuE=
Subject key identifier: A1:F0:F1:80:BE:88:D3:3B:2C:8B:28:C2:A6:F1:8E:6F:1F:D1:8E:D9
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 01987C408F4D98A938E618572CBE1462E699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 22:01:02 +0000
Manifest this update: Tue 05 Aug 2025 22:01:02 +0000
Manifest next update: Wed 06 Aug 2025 22:01:02 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: RNOGhBC7EU/68Jyo5spA7fTVqOSUZm+4N4bLlnjGic4=)
2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:8f:4d:98:a9:38:e6:18:57:2c:be:14:62:e6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Aug 5 22:01:02 2025 GMT
Not After : Aug 6 22:01:02 2025 GMT
Subject: CN=a1f0f180be88d33b2c8b28c2a6f18e6f1fd18ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:8f:0c:b3:9d:0e:aa:d0:3d:3d:12:e6:df:
62:35:93:0b:e0:d0:12:26:e9:50:c4:2d:cf:1a:62:
f2:63:65:7d:82:cd:22:bf:08:9d:77:35:12:7f:9b:
19:82:e0:55:cd:91:7d:3e:37:cd:ca:53:c7:0a:50:
32:54:05:05:97:23:70:dd:a9:20:da:c6:a6:aa:81:
d9:d6:69:af:61:ee:c5:7a:d4:55:18:93:9a:65:51:
6b:c3:ae:66:87:c4:a4:14:3b:35:87:a9:69:91:e1:
af:c5:fe:50:29:da:b1:c3:2e:85:87:de:33:0e:97:
b5:40:7b:42:68:5d:50:b5:a2:82:59:0f:50:00:61:
d8:5f:b1:30:90:86:c7:6a:f0:23:d8:eb:5a:78:3a:
3d:a6:ba:66:f8:cf:e4:f1:44:8d:79:27:f7:ea:cb:
e2:1d:91:84:38:7f:09:d1:50:99:77:16:61:d8:64:
ce:29:82:a5:c1:e1:82:81:b2:dc:ac:77:5d:24:8d:
ce:8c:a0:d1:bb:4e:8b:ad:2a:5f:32:f1:a0:07:d1:
a5:bf:a4:0c:c3:29:9d:2a:33:58:2c:8f:f6:07:9b:
ef:f5:51:fd:39:b8:f8:a1:6b:2f:d5:0f:ca:11:7c:
34:36:d2:d2:f9:06:e4:8a:3c:d0:75:68:53:ea:ef:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F0:F1:80:BE:88:D3:3B:2C:8B:28:C2:A6:F1:8E:6F:1F:D1:8E:D9
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:af:76:f3:3f:b4:3c:a6:47:27:be:37:38:3b:29:38:7c:3c:
b5:9b:0f:1f:e3:e7:ed:77:ed:b5:12:aa:d8:ef:f3:89:8e:df:
7f:83:2a:60:ce:44:11:cc:8a:ea:1d:29:b5:b3:8b:a7:00:dc:
72:47:55:71:b2:8b:9c:83:16:b6:52:e6:0f:d0:48:bb:ad:59:
b3:26:07:12:f7:85:aa:ad:0b:93:66:12:13:da:c0:27:dd:93:
42:08:83:45:2e:e4:ef:f6:83:ca:52:3c:d9:28:4f:9a:0e:5e:
e9:f3:ce:0a:b8:2c:0e:3c:ad:6f:44:a4:ea:b5:0c:94:9c:d1:
fb:64:9a:95:3a:0a:06:73:9a:22:0c:89:3a:f9:17:f0:33:5f:
11:52:ba:af:a9:08:7f:d4:c4:2f:a4:48:45:be:10:92:4e:62:
59:d9:e6:68:b5:c1:89:42:84:56:46:5c:b7:c1:26:10:d0:0d:
6c:45:ce:bf:66:6d:00:9a:21:a1:a0:d5:f4:80:64:0e:45:e0:
39:68:30:a4:68:04:e9:2d:0b:71:50:68:ea:af:2f:36:06:c4:
50:04:a6:dc:82:d3:9a:87:06:32:97:8c:df:c5:f0:c7:4d:df:
5d:b3:d2:80:1d:20:ba:2e:d6:1a:f0:c0:f6:dc:ae:4d:ea:e3:
0d:ec:4c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QI9NmKk45hhXLL4UYuaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjM1N2M1NDk0OWYyMGI0MDA4ODNlZDhjOThkMzczMWMz
Y2I0OTUwHhcNMjUwODA1MjIwMTAyWhcNMjUwODA2MjIwMTAyWjAzMTEwLwYDVQQD
EyhhMWYwZjE4MGJlODhkMzNiMmM4YjI4YzJhNmYxOGU2ZjFmZDE4ZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aePDLOdDqrQPT0S5t9iNZML4NAS
JulQxC3PGmLyY2V9gs0ivwiddzUSf5sZguBVzZF9PjfNylPHClAyVAUFlyNw3akg
2samqoHZ1mmvYe7FetRVGJOaZVFrw65mh8SkFDs1h6lpkeGvxf5QKdqxwy6Fh94z
Dpe1QHtCaF1QtaKCWQ9QAGHYX7EwkIbHavAj2OtaeDo9prpm+M/k8USNeSf36svi
HZGEOH8J0VCZdxZh2GTOKYKlweGCgbLcrHddJI3OjKDRu06LrSpfMvGgB9Glv6QM
wymdKjNYLI/2B5vv9VH9Obj4oWsv1Q/KEXw0NtLS+QbkijzQdWhT6u/l3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHw8YC+iNM7LIsowqbxjm8f0Y7ZMB8GA1UdIwQY
MBaAFNbzV8VJSfILQAiD7YyY03McPLSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTkt
MDVmMDllZjg2ZTdiLzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTktMDVmMDllZjg2ZTdi
LzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa928z+0
PKZHJ743ODspOHw8tZsPH+Pn7XfttRKq2O/ziY7ff4MqYM5EEcyK6h0ptbOLpwDc
ckdVcbKLnIMWtlLmD9BIu61ZsyYHEveFqq0Lk2YSE9rAJ92TQgiDRS7k7/aDylI8
2ShPmg5e6fPOCrgsDjytb0Sk6rUMlJzR+2SalToKBnOaIgyJOvkX8DNfEVK6r6kI
f9TEL6RIRb4Qkk5iWdnmaLXBiUKEVkZct8EmENANbEXOv2ZtAJohoaDV9IBkDkXg
OWgwpGgE6S0LcVBo6q8vNgbEUASm3ILTmocGMpeM38Xwx03fXbPSgB0gui7WGvDA
9tyuTerjDexMGg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:12 2025 by rpki-client