Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: CBcSZsr2gPxx/+jzn6czZfoxtmPn+H3dCMp/vYl5GQA=
Subject key identifier: EE:27:DE:0E:D6:C0:88:FB:FD:2A:67:7C:E0:9A:00:96:A1:F9:76:52
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019874509CC3E12869014DA80EE3836A0304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 13F2
Signing time: Mon 04 Aug 2025 09:01:36 +0000
Manifest this update: Mon 04 Aug 2025 09:01:36 +0000
Manifest next update: Tue 05 Aug 2025 09:01:36 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: K7CQqEXjflVdNcRpXFSYDydQqnJdlFBfH6MP17EEjB8=)
2: gHlRquCMx6iwfFhK1AbziJf-SOA.roa (hash: vGvXkm75uZ6w5eWBxSl4fiUVkztcBJ6xWRWL2h8kjfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:9c:c3:e1:28:69:01:4d:a8:0e:e3:83:6a:03:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Aug 4 09:01:36 2025 GMT
Not After : Aug 5 09:01:36 2025 GMT
Subject: CN=ee27de0ed6c088fbfd2a677ce09a0096a1f97652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:ca:88:bb:2a:70:51:cc:9e:fa:e6:b6:fe:
e9:07:50:8b:57:69:34:32:52:45:40:39:71:0f:1f:
1a:52:9b:40:11:6c:e7:d9:79:5d:58:1d:5d:69:54:
28:c4:4a:2d:3a:da:73:3e:af:86:9a:10:9f:bf:95:
9f:8b:af:e2:21:9d:19:b4:31:df:cc:a5:14:c4:0f:
24:f4:e9:0b:d4:83:b1:ac:a1:23:1a:f9:ad:a3:75:
2c:7a:48:c0:6f:fd:1a:a0:4f:69:b4:68:32:b7:14:
32:6f:c0:6a:77:04:7f:21:bf:99:0e:fb:28:12:31:
f3:e9:ef:31:27:18:cc:e9:bb:15:df:50:f8:52:9d:
7b:8e:c4:18:e0:64:ec:1a:0c:b7:b8:48:d0:38:81:
6f:5a:f3:d7:bd:6f:4b:1b:82:e9:c2:29:ba:4c:86:
35:3b:9f:1a:f6:39:5d:c9:c4:a9:ec:ce:f7:6c:08:
1c:11:b9:8c:f5:5e:a4:ab:33:0d:ee:60:33:fb:19:
c9:d3:a9:15:6a:21:fa:28:19:a4:d3:11:b5:4f:24:
a0:f0:53:ac:94:c9:0b:e4:0e:ea:39:e9:e0:22:2e:
db:7e:cb:52:da:ee:82:e8:56:fa:06:3c:dc:d0:ff:
6e:ad:98:df:93:93:ad:b1:a2:29:46:e8:98:2d:3e:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:27:DE:0E:D6:C0:88:FB:FD:2A:67:7C:E0:9A:00:96:A1:F9:76:52
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:db:60:fa:57:6f:12:f9:85:24:5d:64:d8:73:e6:70:08:8d:
cc:16:cc:46:99:0e:d5:0f:9a:87:18:ca:01:71:39:d0:42:c7:
71:39:be:c6:d8:77:c3:49:01:73:0a:ea:52:78:09:e5:ac:2b:
3f:76:da:b7:e2:2f:70:70:16:ac:2e:3d:d8:27:78:9a:9e:24:
19:ec:25:af:0e:87:c1:7c:4f:3a:dd:65:05:7f:80:86:63:42:
8b:5c:49:5b:05:a5:e1:00:27:8f:eb:76:35:df:94:9d:30:8b:
eb:54:cf:3e:8c:a0:22:51:81:64:39:2d:d1:34:f6:d0:c7:bc:
b7:19:0e:0d:50:bf:77:52:ca:95:69:9f:63:41:ae:55:a5:56:
38:65:94:d3:09:23:07:2e:43:db:68:eb:85:5f:c8:8a:5f:f0:
f2:b5:e6:c5:8a:a4:02:80:59:b9:0d:61:23:2d:5e:50:19:4e:
7c:38:17:af:42:50:45:d3:0a:d3:4d:56:5b:96:cf:e0:a4:0f:
22:ad:3f:f9:6d:65:c8:a5:c4:d6:a4:d1:81:93:53:f9:b6:49:
bc:40:4b:d5:bf:9c:66:3d:6b:77:c5:09:17:0d:58:cd:ca:20:
5d:df:06:2a:b5:81:25:5d:46:39:51:d2:1e:b6:f1:32:29:08:
87:73:fd:4e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZh0UJzD4ShpAU2oDuODagMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTdiNWEyYjkwNzA5MTNkMzQ5MzI4MTVmZWI0N2UzNjMx
ZmRmNWYwHhcNMjUwODA0MDkwMTM2WhcNMjUwODA1MDkwMTM2WjAzMTEwLwYDVQQD
EyhlZTI3ZGUwZWQ2YzA4OGZiZmQyYTY3N2NlMDlhMDA5NmExZjk3NjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4PKiLsqcFHMnvrmtv7pB1CLV2k0
MlJFQDlxDx8aUptAEWzn2XldWB1daVQoxEotOtpzPq+GmhCfv5Wfi6/iIZ0ZtDHf
zKUUxA8k9OkL1IOxrKEjGvmto3UsekjAb/0aoE9ptGgytxQyb8BqdwR/Ib+ZDvso
EjHz6e8xJxjM6bsV31D4Up17jsQY4GTsGgy3uEjQOIFvWvPXvW9LG4Lpwim6TIY1
O58a9jldycSp7M73bAgcEbmM9V6kqzMN7mAz+xnJ06kVaiH6KBmk0xG1TySg8FOs
lMkL5A7qOengIi7bfstS2u6C6Fb6Bjzc0P9urZjfk5OtsaIpRuiYLT5O3QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO4n3g7WwIj7/SpnfOCaAJah+XZSMB8GA1UdIwQY
MBaAFPqntaK5BwkT00kygV/rR+NjH99fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xZTFvcmtIQ1JQVFNUS0JYLXRINDJNZjMxOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNTFhZDU0LWRkMzAtNGYzNS05MDZj
LTgxMWRjYjdjNDRmYy8xLzEtcWUxb3JrSENSUFRTVEtCWC10SDQyTWYzMTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzUxYWQ1NC1kZDMwLTRmMzUtOTA2Yy04MTFkY2I3YzQ0
ZmMvMS8xLXFlMW9ya0hDUlBUU1RLQlgtdEg0Mk1mMzE4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAttg
+ldvEvmFJF1k2HPmcAiNzBbMRpkO1Q+ahxjKAXE50ELHcTm+xth3w0kBcwrqUngJ
5awrP3bat+IvcHAWrC492Cd4mp4kGewlrw6HwXxPOt1lBX+AhmNCi1xJWwWl4QAn
j+t2Nd+UnTCL61TPPoygIlGBZDkt0TT20Me8txkODVC/d1LKlWmfY0GuVaVWOGWU
0wkjBy5D22jrhV/Iil/w8rXmxYqkAoBZuQ1hIy1eUBlOfDgXr0JQRdMK001WW5bP
4KQPIq0/+W1lyKXE1qTRgZNT+bZJvEBL1b+cZj1rd8UJFw1YzcogXd8GKrWBJV1G
OVHSHrbxMikIh3P9Tg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:20 2025 by rpki-client