Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: b4OoFAGgPJpoifZ96ZXfHL6m9toLgvPJVPFZ4mdOfR4=
Subject key identifier: 17:1F:6A:5F:25:D9:DA:21:58:34:E2:DB:43:64:EA:0B:00:8F:6E:75
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 01987CAE3A710BAB42B4D65882D5C61E0CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 0DB1
Signing time: Wed 06 Aug 2025 00:00:49 +0000
Manifest this update: Wed 06 Aug 2025 00:00:49 +0000
Manifest next update: Thu 07 Aug 2025 00:00:49 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: +vkhmL9Z84eO1LfCnvTc44vXwiGsNpV5XMpi1De38GM=)
2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:3a:71:0b:ab:42:b4:d6:58:82:d5:c6:1e:0c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Aug 6 00:00:49 2025 GMT
Not After : Aug 7 00:00:49 2025 GMT
Subject: CN=171f6a5f25d9da215834e2db4364ea0b008f6e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:19:38:a6:83:74:40:27:82:6e:ca:07:bd:
09:bb:0d:e5:a8:14:f8:1e:c1:31:91:09:59:97:6f:
16:32:52:05:7b:ac:ef:d8:11:e0:61:25:9e:43:0d:
52:4c:7d:97:0b:d3:f4:f1:b1:37:94:ce:af:b4:8e:
73:2e:89:51:80:13:2c:1f:62:2b:5d:58:a0:06:4f:
bd:df:54:08:f0:ec:57:3a:dd:e0:52:52:30:42:10:
70:48:fb:cd:64:b9:42:33:c5:df:55:d4:4f:ea:00:
a2:21:be:b4:ea:bb:95:1c:3f:4d:99:ee:47:18:f0:
f3:34:bb:20:7f:cf:6e:ce:e0:68:ea:3b:9c:7a:47:
af:44:4f:02:5d:2a:ef:cc:fb:e4:9b:3c:7d:b3:7e:
ca:a9:af:b8:88:1e:02:79:70:bb:7a:35:0b:21:1e:
ad:26:b3:b8:a8:1c:42:de:dc:da:3d:74:66:6c:1c:
8e:5d:a9:b7:6b:1c:b6:6f:16:56:2a:50:c4:89:89:
4a:69:3c:e9:26:3d:31:53:c8:57:a8:81:42:8f:e9:
25:b5:e5:5e:c7:10:63:6a:a3:53:0a:8e:f0:cc:bb:
37:47:55:25:41:fb:cf:76:80:e6:52:76:52:69:37:
43:9e:31:a4:2c:95:f8:a0:4c:8e:fd:e2:c4:11:ee:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1F:6A:5F:25:D9:DA:21:58:34:E2:DB:43:64:EA:0B:00:8F:6E:75
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ce:a1:ce:b1:0d:67:70:77:2c:37:e3:e7:cb:b8:2f:37:c8:
de:92:b3:af:26:6e:1a:13:f1:3b:85:b4:6b:bc:a5:49:29:4f:
df:3b:c3:59:40:4a:82:0a:c5:d2:eb:47:ee:1a:c2:54:e6:a4:
ad:f2:d1:d8:b6:ea:22:16:54:ef:50:9e:3a:62:95:03:ee:f8:
7a:04:b4:22:6c:f9:4c:f8:3d:b4:a8:33:57:c3:4f:b0:d9:f4:
fe:74:fc:99:da:4b:dd:62:5d:8d:06:77:0d:1c:d3:6e:e4:69:
ab:81:3e:f9:cc:06:24:70:59:f1:72:5d:f0:ac:8d:c7:a5:dd:
5c:8e:6d:1e:8e:c4:b7:ec:33:a7:cc:e7:39:1c:df:66:f5:00:
22:13:40:6a:fc:f9:f7:42:89:45:f8:9d:4b:91:3d:a9:ee:d3:
97:66:af:43:53:a8:5b:f6:f7:14:fd:d1:c6:02:d8:e7:ef:d8:
8c:4f:4d:66:ec:ea:8d:8e:a5:98:b5:5c:ec:e1:99:b0:15:01:
47:5f:25:e4:9f:92:65:a5:03:0b:9e:19:8b:46:bb:bb:bc:0f:
d1:40:cf:08:b2:de:28:a3:c6:cd:92:47:68:ad:d9:fe:b1:be:
86:1c:09:f3:07:b7:76:e6:d8:c2:95:a2:ac:08:07:0c:5a:62:
6b:c3:8e:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rjpxC6tCtNZYgtXGHgy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi
NjkyMzgwHhcNMjUwODA2MDAwMDQ5WhcNMjUwODA3MDAwMDQ5WjAzMTEwLwYDVQQD
EygxNzFmNmE1ZjI1ZDlkYTIxNTgzNGUyZGI0MzY0ZWEwYjAwOGY2ZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JkZOKaDdEAngm7KB70Juw3lqBT4
HsExkQlZl28WMlIFe6zv2BHgYSWeQw1STH2XC9P08bE3lM6vtI5zLolRgBMsH2Ir
XVigBk+931QI8OxXOt3gUlIwQhBwSPvNZLlCM8XfVdRP6gCiIb606ruVHD9Nme5H
GPDzNLsgf89uzuBo6jucekevRE8CXSrvzPvkmzx9s37Kqa+4iB4CeXC7ejULIR6t
JrO4qBxC3tzaPXRmbByOXam3axy2bxZWKlDEiYlKaTzpJj0xU8hXqIFCj+klteVe
xxBjaqNTCo7wzLs3R1UlQfvPdoDmUnZSaTdDnjGkLJX4oEyO/eLEEe7zlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcfal8l2dohWDTi20Nk6gsAj251MB8GA1UdIwQY
MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct
ZTBkOTE0YzFjYjUwLzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw
LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJM6hzrEN
Z3B3LDfj58u4LzfI3pKzryZuGhPxO4W0a7ylSSlP3zvDWUBKggrF0utH7hrCVOak
rfLR2LbqIhZU71CeOmKVA+74egS0Imz5TPg9tKgzV8NPsNn0/nT8mdpL3WJdjQZ3
DRzTbuRpq4E++cwGJHBZ8XJd8KyNx6XdXI5tHo7Et+wzp8znORzfZvUAIhNAavz5
90KJRfidS5E9qe7Tl2avQ1OoW/b3FP3RxgLY5+/YjE9NZuzqjY6lmLVc7OGZsBUB
R18l5J+SZaUDC54Zi0a7u7wP0UDPCLLeKKPGzZJHaK3Z/rG+hhwJ8we3dubYwpWi
rAgHDFpia8OOjQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:12 2025 by rpki-client