Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: +hySui1PXFQBrHwRkwcBwdsamo01brddPhbP3sj7q+Y=
Subject key identifier: 1A:2E:A9:90:B5:4B:05:09:B0:B1:D9:B1:4B:B4:A7:6A:63:C4:48:F9
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 019872CFED1D6472D2895D66FE6554232B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 0554
Signing time: Mon 04 Aug 2025 02:01:25 +0000
Manifest this update: Mon 04 Aug 2025 02:01:25 +0000
Manifest next update: Tue 05 Aug 2025 02:01:25 +0000
Files and hashes: 1: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: Mt3TIzCf3FCtw3anerjuRQPd6YGOOs715fNb+R/mWtA=)
2: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (hash: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:ed:1d:64:72:d2:89:5d:66:fe:65:54:23:2b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Aug 4 02:01:25 2025 GMT
Not After : Aug 5 02:01:25 2025 GMT
Subject: CN=1a2ea990b54b0509b0b1d9b14bb4a76a63c448f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:6c:f6:46:2c:96:f2:7e:84:75:ec:af:b7:
a8:bf:5e:71:d8:43:03:bb:1f:06:47:de:94:8e:8f:
18:fb:a1:9b:76:e9:f5:97:4c:24:64:6b:b3:06:70:
19:3f:58:70:76:5f:2e:af:19:54:5a:8f:a1:79:84:
18:93:d4:9c:0c:c1:1a:06:de:61:16:a2:33:73:53:
77:22:e1:69:71:4f:2a:b1:76:43:db:ec:c9:ea:e3:
6a:65:89:ca:26:24:76:d7:39:89:37:66:cb:d6:c2:
13:79:84:b1:70:e2:38:62:d5:82:ee:1b:9c:bb:c2:
8d:5f:20:e5:2b:3b:6a:b8:43:c3:a3:d6:88:58:95:
3c:ff:ae:07:ec:42:02:7d:ca:73:72:b8:37:28:8d:
ce:c3:06:1a:c0:7d:45:b8:c6:eb:67:ef:5e:16:2e:
a2:dd:ba:54:f6:98:07:36:50:c5:c6:ba:fa:c0:5f:
99:04:60:28:f4:b4:df:8e:ce:24:f2:e6:b7:f0:d1:
f8:86:70:a2:81:76:84:37:4f:ff:10:e6:ef:22:e6:
44:5a:6f:d8:b0:76:d1:10:4e:36:5e:f5:3a:70:94:
75:f1:ae:b8:fe:c9:40:73:52:10:cc:25:bb:f3:d1:
f0:da:33:1d:fc:35:b6:6b:84:8c:47:9d:a1:da:dd:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2E:A9:90:B5:4B:05:09:B0:B1:D9:B1:4B:B4:A7:6A:63:C4:48:F9
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:aa:7e:6e:f2:46:58:86:b9:7c:81:7b:c7:0e:0d:ce:dc:c0:
39:7b:39:6f:ef:70:b9:3c:f2:01:c7:f0:d0:aa:88:e7:d5:db:
6b:8e:3d:70:75:af:7e:e4:17:28:a0:95:96:b7:62:c0:c5:50:
73:d6:17:1c:72:11:1a:64:eb:b2:a4:67:cb:55:44:ba:c3:76:
eb:e9:8e:7b:86:6c:1d:6b:79:f9:ec:3f:e0:a6:ec:11:17:b0:
cc:8e:52:d8:61:47:34:2f:1c:44:8a:92:c1:9e:f3:ec:ce:90:
87:b4:08:4a:69:00:d1:c1:49:ac:7f:f3:73:f2:68:9b:e5:b5:
a4:e2:c2:37:d0:7a:5d:ae:f3:e8:4a:c7:03:a0:a7:05:21:a8:
54:0d:0e:3d:95:0c:a8:63:2f:f8:ef:4f:f2:5a:81:50:8c:c9:
66:57:28:99:3d:7a:6c:0d:0a:ec:12:60:7d:66:96:52:08:18:
34:5e:36:33:95:96:40:58:2a:cd:00:7a:21:e3:20:62:bb:13:
12:0a:09:6d:70:4a:61:a3:23:e9:54:a5:0c:c7:95:90:87:00:
ed:40:f2:f8:ef:25:21:7b:b4:2c:80:21:e0:25:04:f9:e4:99:
f5:b1:78:3a:b2:05:a0:1b:33:cd:0c:96:a1:82:ee:d6:d6:15:
d2:fc:85:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz+0dZHLSiV1m/mVUIyssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWNjZWFhOTc0YjI5MDVhY2IyNjJhZjQ1MmMwMjI4MDMx
NmFhYmIwHhcNMjUwODA0MDIwMTI1WhcNMjUwODA1MDIwMTI1WjAzMTEwLwYDVQQD
EygxYTJlYTk5MGI1NGIwNTA5YjBiMWQ5YjE0YmI0YTc2YTYzYzQ0OGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02Bs9kYslvJ+hHXsr7eov15x2EMD
ux8GR96Ujo8Y+6Gbdun1l0wkZGuzBnAZP1hwdl8urxlUWo+heYQYk9ScDMEaBt5h
FqIzc1N3IuFpcU8qsXZD2+zJ6uNqZYnKJiR21zmJN2bL1sITeYSxcOI4YtWC7huc
u8KNXyDlKztquEPDo9aIWJU8/64H7EICfcpzcrg3KI3OwwYawH1FuMbrZ+9eFi6i
3bpU9pgHNlDFxrr6wF+ZBGAo9LTfjs4k8ua38NH4hnCigXaEN0//EObvIuZEWm/Y
sHbREE42XvU6cJR18a64/slAc1IQzCW789Hw2jMd/DW2a4SMR52h2t1F9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBouqZC1SwUJsLHZsUu0p2pjxEj5MB8GA1UdIwQY
MBaAFGtczqqXSykFrLJir0UsAigDFqq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zOWYxZTAtMzYyNy00OTJmLWFlOTMt
OGIwN2FjZDA3Yzk0LzEvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zOWYxZTAtMzYyNy00OTJmLWFlOTMtOGIwN2FjZDA3Yzk0
LzEvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqp+bvJG
WIa5fIF7xw4NztzAOXs5b+9wuTzyAcfw0KqI59Xba449cHWvfuQXKKCVlrdiwMVQ
c9YXHHIRGmTrsqRny1VEusN26+mOe4ZsHWt5+ew/4KbsERewzI5S2GFHNC8cRIqS
wZ7z7M6Qh7QISmkA0cFJrH/zc/Jom+W1pOLCN9B6Xa7z6ErHA6CnBSGoVA0OPZUM
qGMv+O9P8lqBUIzJZlcomT16bA0K7BJgfWaWUggYNF42M5WWQFgqzQB6IeMgYrsT
EgoJbXBKYaMj6VSlDMeVkIcA7UDy+O8lIXu0LIAh4CUE+eSZ9bF4OrIFoBszzQyW
oYLu1tYV0vyFrw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:51 2025 by rpki-client