Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: j6Ndz2b/9RWQeJFYZiuPmSPVfmUZmQtpkx1yHLseGbc=
Subject key identifier: E3:83:73:08:B7:D3:8A:0C:55:76:BF:EF:DD:E9:6B:17:27:8D:D4:71
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 019893A46D359F8BB2C825A5B7B127F0D80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 11:01:23 +0000
Manifest this update: Sun 10 Aug 2025 11:01:23 +0000
Manifest next update: Mon 11 Aug 2025 11:01:23 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: VgBCSvAh/uWQG8Fflvhtf7lQp9jn9YVr/rI65RVVcFE=)
2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:6d:35:9f:8b:b2:c8:25:a5:b7:b1:27:f0:d8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Aug 10 11:01:23 2025 GMT
Not After : Aug 11 11:01:23 2025 GMT
Subject: CN=e3837308b7d38a0c5576bfefdde96b17278dd471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:17:39:0d:a0:7c:cf:ac:20:37:c2:6a:f7:
19:7b:f5:2e:ec:95:a2:8c:f8:f8:6a:1a:a5:04:fa:
6e:36:2a:33:0c:e6:e5:d7:86:9b:aa:a1:d7:1f:60:
60:04:34:1f:d0:34:44:28:7d:00:8f:9d:53:77:73:
9b:c8:2f:65:11:8b:9f:22:57:c9:44:86:ef:fc:8c:
c4:5c:ef:12:1d:4a:c0:9a:89:5e:f3:c4:1d:a4:00:
07:b9:2b:83:9e:05:71:21:b4:64:8e:68:ba:30:5b:
4a:9a:d5:d1:da:a6:d2:35:4c:32:7d:cc:51:e8:24:
b2:0c:ca:76:aa:ce:95:1c:38:42:52:4b:02:9e:36:
48:a7:a8:7a:6b:0f:ba:0a:79:23:36:e6:59:47:a0:
70:30:4a:23:b7:29:5b:9e:9a:7e:a2:93:af:51:56:
56:ac:d8:26:59:6d:a3:76:93:31:ad:18:45:a7:1d:
b3:e3:7f:44:78:de:c4:63:31:96:c0:56:7f:3d:31:
7c:af:50:93:18:a1:e3:b9:19:76:9a:3a:6b:7c:e9:
d4:d9:90:27:99:4e:2f:99:c0:b1:76:61:c8:12:70:
a0:5f:af:7b:f5:76:72:bc:db:82:53:b0:b6:90:92:
a9:95:be:b6:b3:53:b5:03:aa:51:99:17:05:6b:1e:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:83:73:08:B7:D3:8A:0C:55:76:BF:EF:DD:E9:6B:17:27:8D:D4:71
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:e4:74:94:6b:17:62:a2:ee:1d:78:e8:2c:de:26:c3:21:
cd:73:38:ec:55:7b:a5:8f:8d:04:76:2b:11:05:6d:23:87:47:
52:a2:48:14:b0:4f:a8:ef:95:8c:4c:ef:81:0c:6f:0b:ef:54:
98:9b:85:5d:c2:70:a4:9a:90:b7:d4:58:64:c0:7e:c6:18:b5:
d8:ff:24:07:66:31:4e:a7:f5:43:b2:87:b0:8c:ad:f6:77:f4:
29:a9:0f:0d:35:c7:d0:9c:97:35:64:91:a4:09:b2:95:81:9e:
da:60:fb:dd:64:a4:1a:72:aa:9e:67:65:28:e2:ed:17:85:7a:
ec:29:ba:8b:12:66:8e:78:16:0d:b9:5c:ae:24:39:88:bd:df:
57:d1:7a:59:34:a2:10:83:8d:24:db:5a:13:8e:dc:e8:27:51:
65:b9:c4:6a:d6:76:d7:4b:c5:fa:e7:01:d9:89:27:85:32:0f:
46:56:a7:e1:07:57:37:8b:3c:73:11:98:10:91:7d:43:3a:14:
64:c1:ff:96:de:58:e4:80:cf:d8:a5:66:7f:1a:be:0d:f7:07:
03:67:48:f2:40:a2:e2:23:db:39:20:9c:c8:8a:01:48:c6:94:
96:87:09:c3:eb:6d:d3:5a:c3:14:ea:08:aa:79:7a:55:5d:4b:
1d:8a:ce:90
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiTpG01n4uyyCWlt7En8NgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5
MDMwNDEwHhcNMjUwODEwMTEwMTIzWhcNMjUwODExMTEwMTIzWjAzMTEwLwYDVQQD
EyhlMzgzNzMwOGI3ZDM4YTBjNTU3NmJmZWZkZGU5NmIxNzI3OGRkNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHYXOQ2gfM+sIDfCavcZe/Uu7JWi
jPj4ahqlBPpuNiozDObl14abqqHXH2BgBDQf0DREKH0Aj51Td3ObyC9lEYufIlfJ
RIbv/IzEXO8SHUrAmole88QdpAAHuSuDngVxIbRkjmi6MFtKmtXR2qbSNUwyfcxR
6CSyDMp2qs6VHDhCUksCnjZIp6h6aw+6CnkjNuZZR6BwMEojtylbnpp+opOvUVZW
rNgmWW2jdpMxrRhFpx2z439EeN7EYzGWwFZ/PTF8r1CTGKHjuRl2mjprfOnU2ZAn
mU4vmcCxdmHIEnCgX6979XZyvNuCU7C2kJKplb62s1O1A6pRmRcFax5MWQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOODcwi304oMVXa/793paxcnjdRxMB8GA1UdIwQY
MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3
LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi
NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCXk
dJRrF2Ki7h146CzeJsMhzXM47FV7pY+NBHYrEQVtI4dHUqJIFLBPqO+VjEzvgQxv
C+9UmJuFXcJwpJqQt9RYZMB+xhi12P8kB2YxTqf1Q7KHsIyt9nf0KakPDTXH0JyX
NWSRpAmylYGe2mD73WSkGnKqnmdlKOLtF4V67Cm6ixJmjngWDblcriQ5iL3fV9F6
WTSiEIONJNtaE47c6CdRZbnEatZ210vF+ucB2YknhTIPRlan4QdXN4s8cxGYEJF9
QzoUZMH/lt5Y5IDP2KVmfxq+DfcHA2dI8kCi4iPbOSCcyIoBSMaUlocJw+tt01rD
FOoIqnl6VV1LHYrOkA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:00:41 2025 by rpki-client