Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: gP0e7FXOhkwJPOMgDS64WVNGCYfCZe3flAeg4mAyVvc=
Subject key identifier: D3:F2:20:1F:11:E5:6B:A2:7B:B2:56:A0:C1:55:CD:06:A0:10:A9:A8
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 01987D8A85B6E39B8CF5BA79A49FBF093773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 1624
Signing time: Wed 06 Aug 2025 04:01:26 +0000
Manifest this update: Wed 06 Aug 2025 04:01:26 +0000
Manifest next update: Thu 07 Aug 2025 04:01:26 +0000
Files and hashes: 1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: CSF1HEZqoQCqS8dYG9Yaj98Z6DktyOtNVkm0KblaWEQ=)
4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:85:b6:e3:9b:8c:f5:ba:79:a4:9f:bf:09:37:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Aug 6 04:01:26 2025 GMT
Not After : Aug 7 04:01:26 2025 GMT
Subject: CN=d3f2201f11e56ba27bb256a0c155cd06a010a9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:d6:bc:5a:65:c1:d1:41:7b:49:fe:83:29:
c5:49:c6:86:0e:68:a7:35:27:c1:a3:23:00:85:ed:
62:ac:09:ba:97:ce:3d:36:c5:53:0c:cc:dd:f6:e2:
b6:e6:e9:c9:33:76:8c:2a:8b:dc:a9:6b:d7:91:4b:
14:1d:65:20:4e:ed:e3:9a:5c:b9:93:96:b0:10:d3:
3b:c5:70:71:87:9c:3a:5a:2d:c1:62:b0:bb:cf:8c:
11:7f:79:78:f7:9a:4a:67:d1:5c:af:b8:88:40:91:
7c:78:ed:62:bb:86:4b:d5:b7:94:cf:a6:9b:de:ad:
64:a4:37:2e:58:d5:6e:25:75:81:aa:f8:2d:0b:03:
3f:c3:35:8e:0d:96:67:08:70:85:7a:87:94:b2:31:
29:02:6d:34:29:8c:ec:e1:71:a8:88:5d:3c:cc:dc:
a6:23:b6:e4:a9:c6:37:9a:9b:9d:d1:ea:ed:66:66:
d7:1d:45:b8:2a:04:4e:9a:c6:fa:ef:1c:a7:43:6a:
36:c6:4f:71:49:cc:9b:ea:5a:a7:17:f2:da:c8:e4:
3c:b8:7b:43:9e:43:2b:51:5b:7f:49:fc:14:6e:20:
33:1f:37:82:a8:77:f9:2b:34:b5:61:2a:b8:76:9b:
2b:aa:75:87:e1:a4:88:bc:72:8c:c7:47:3a:02:32:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:20:1F:11:E5:6B:A2:7B:B2:56:A0:C1:55:CD:06:A0:10:A9:A8
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1a:b2:7c:86:34:4c:b8:f7:5a:f4:2c:f5:62:b0:68:23:01:
ff:0f:69:fc:02:99:a2:f7:2a:fd:a7:6b:dd:1f:12:e8:21:22:
e8:e0:0b:e0:85:13:f0:c7:2f:4f:60:6c:60:cf:cf:bb:3a:7e:
84:c4:32:19:22:b2:18:8e:00:9b:75:18:bf:9a:31:23:32:13:
d8:0c:08:31:de:7b:35:a4:af:44:ad:74:e8:56:e6:86:72:0f:
dd:65:fd:d4:db:f3:34:0c:f7:b5:27:d8:de:91:5a:de:e5:58:
f2:6d:7e:72:fa:26:0e:34:6d:34:48:2a:54:f8:57:02:23:e3:
84:ec:2b:2b:9e:ff:e2:94:a9:92:18:9c:cf:a6:bc:68:9d:9e:
52:06:66:59:63:29:a8:03:ca:67:07:d1:a0:a4:f2:ef:58:e8:
67:47:ef:8e:02:c4:fb:6e:ca:5c:53:72:23:0c:60:88:63:1d:
98:a0:56:07:5b:a9:6a:ff:61:a1:79:86:6c:b0:1c:1f:c5:44:
d9:9c:e6:c8:89:de:c9:f9:e3:f6:a0:44:93:6f:0f:c2:d4:44:
15:65:0c:e6:1a:57:e7:98:72:e9:7a:55:7a:fe:39:48:8e:d4:
d0:70:d3:14:08:c3:3a:7e:2c:2a:2f:59:ea:a7:d5:2e:41:0d:
c0:5e:20:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9ioW245uM9bp5pJ+/CTdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MWQ0YjkyZGQxNTAzNjRjNjViN2QyMTI5OTAyODY3OGIw
YTUyOTYwHhcNMjUwODA2MDQwMTI2WhcNMjUwODA3MDQwMTI2WjAzMTEwLwYDVQQD
EyhkM2YyMjAxZjExZTU2YmEyN2JiMjU2YTBjMTU1Y2QwNmEwMTBhOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLzWvFplwdFBe0n+gynFScaGDmin
NSfBoyMAhe1irAm6l849NsVTDMzd9uK25unJM3aMKovcqWvXkUsUHWUgTu3jmly5
k5awENM7xXBxh5w6Wi3BYrC7z4wRf3l495pKZ9Fcr7iIQJF8eO1iu4ZL1beUz6ab
3q1kpDcuWNVuJXWBqvgtCwM/wzWODZZnCHCFeoeUsjEpAm00KYzs4XGoiF08zNym
I7bkqcY3mpud0ertZmbXHUW4KgROmsb67xynQ2o2xk9xScyb6lqnF/LayOQ8uHtD
nkMrUVt/SfwUbiAzHzeCqHf5KzS1YSq4dpsrqnWH4aSIvHKMx0c6AjK0cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPyIB8R5Wuie7JWoMFVzQagEKmoMB8GA1UdIwQY
MBaAFEQdS5LdFQNkxlt9ISmQKGeLClKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMt
N2Y1ZjRkNjA0NzMxLzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMtN2Y1ZjRkNjA0NzMx
LzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxqyfIY0
TLj3WvQs9WKwaCMB/w9p/AKZovcq/adr3R8S6CEi6OAL4IUT8McvT2BsYM/Puzp+
hMQyGSKyGI4Am3UYv5oxIzIT2AwIMd57NaSvRK106FbmhnIP3WX91NvzNAz3tSfY
3pFa3uVY8m1+cvomDjRtNEgqVPhXAiPjhOwrK57/4pSpkhicz6a8aJ2eUgZmWWMp
qAPKZwfRoKTy71joZ0fvjgLE+27KXFNyIwxgiGMdmKBWB1upav9hoXmGbLAcH8VE
2ZzmyIneyfnj9qBEk28PwtREFWUM5hpX55hy6XpVev45SI7U0HDTFAjDOn4sKi9Z
6qfVLkENwF4gHQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:26 2025 by rpki-client