Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier: I+Rr50sFXa3XEcBj9V39bMsuqmlkjInH0TuWDYg9wAU=
Subject key identifier: EC:EB:0E:71:C5:F9:2D:9F:95:75:8A:C6:35:CC:49:CC:1A:E3:D4:91
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 01987374663FF49A86F751473A87F246C18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number: 0B5E
Signing time: Mon 04 Aug 2025 05:01:04 +0000
Manifest this update: Mon 04 Aug 2025 05:01:04 +0000
Manifest next update: Tue 05 Aug 2025 05:01:04 +0000
Files and hashes: 1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: oyRPLmdx1UTZDA90Q+G1t5CusZC6jTa5SWUOzGA2I/0=)
2: It-Yns2Nwvw18OgbQ81pWbtQZ7M.roa (hash: 7H+X0erT0owXhcTltBjLEsiIIl6BxhT41pVVMePz04w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:66:3f:f4:9a:86:f7:51:47:3a:87:f2:46:c1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Aug 4 05:01:04 2025 GMT
Not After : Aug 5 05:01:04 2025 GMT
Subject: CN=eceb0e71c5f92d9f95758ac635cc49cc1ae3d491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:d7:32:3a:cd:48:21:19:7c:6f:9a:22:a5:
c7:b4:38:e8:d4:02:05:8a:38:d2:d6:66:75:8f:26:
af:21:ce:d7:e9:3d:e5:55:e4:cc:d3:21:4d:3a:d6:
ac:cd:33:55:08:4e:24:88:a8:98:63:e6:eb:1b:68:
3b:e8:15:86:4b:e0:a6:25:36:52:4d:2a:e2:df:9e:
81:27:d1:90:cc:e3:74:cf:28:92:da:a3:7e:fb:59:
10:11:4a:d1:55:09:0e:50:02:25:4c:9b:2e:30:b7:
34:53:69:ee:7f:7a:f5:ed:a4:01:84:16:ee:5b:d3:
4d:06:10:d2:20:6c:5e:5c:94:c4:c6:46:b0:8d:37:
d2:f4:6d:bf:f1:19:ff:04:fe:5f:26:a7:83:3e:c8:
fd:eb:0a:09:94:4d:be:07:23:04:18:85:da:8e:56:
d2:56:b5:c3:1a:ff:7e:9c:68:6a:bf:dc:bf:b2:f2:
72:71:ee:dd:53:96:74:6c:74:91:f1:56:d5:45:1b:
1e:ab:05:8c:cb:a5:00:af:40:9a:11:96:e7:9a:e5:
10:85:97:db:e6:3c:29:77:9d:2c:6a:59:36:09:4a:
73:1f:70:e1:b4:71:4b:e3:23:97:53:85:3c:cb:3d:
35:73:96:82:1d:d8:12:e0:a2:d4:cd:e7:29:cd:bb:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:0E:71:C5:F9:2D:9F:95:75:8A:C6:35:CC:49:CC:1A:E3:D4:91
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fb:bd:d2:46:ec:b6:68:05:4e:7f:2b:d2:45:db:56:f8:de:
f5:76:12:08:a9:f6:13:4b:1e:ec:d3:09:4a:c6:97:83:14:dd:
69:b4:d8:a3:b4:81:a3:18:86:4e:96:a9:f0:28:97:bf:77:6d:
6f:2b:ab:b6:32:89:7b:f5:d2:0b:77:e7:fc:04:13:f0:af:3b:
81:8b:73:ae:7a:99:2b:52:71:7b:bf:a5:35:fe:4b:af:70:b4:
a7:92:44:42:e9:47:70:00:60:46:b7:dd:4e:de:d9:b5:78:3a:
ae:80:e7:68:e8:ef:55:fb:c8:db:8d:b7:24:2c:12:e8:f9:35:
bb:fa:3e:b4:4f:db:12:2a:fa:9e:3e:f9:df:fd:2f:7b:f2:b3:
eb:13:22:84:db:fe:fb:5e:cc:9c:88:6a:63:39:70:89:d7:6d:
bc:7d:1f:c8:61:df:12:39:4d:10:b1:62:12:4c:a6:f7:e1:9b:
da:b7:f2:07:e7:11:54:f7:8f:d5:a7:d8:74:82:39:30:07:f4:
48:b8:2f:e8:03:61:81:95:62:c6:0c:1a:b4:cf:e3:c8:af:c1:
60:d5:aa:e4:ee:ff:05:22:89:a0:72:ac:70:fd:02:94:42:70:
60:7e:0f:97:b4:56:65:41:57:07:61:0f:95:06:64:6a:cf:1f:
fb:16:2d:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdGY/9JqG91FHOofyRsGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzBkNjk0ZDU5ZDdkMzZiYTQyMWEzMDUwZjRlYzdkZDM3
ODFlZmQwHhcNMjUwODA0MDUwMTA0WhcNMjUwODA1MDUwMTA0WjAzMTEwLwYDVQQD
EyhlY2ViMGU3MWM1ZjkyZDlmOTU3NThhYzYzNWNjNDljYzFhZTNkNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBLXMjrNSCEZfG+aIqXHtDjo1AIF
ijjS1mZ1jyavIc7X6T3lVeTM0yFNOtaszTNVCE4kiKiYY+brG2g76BWGS+CmJTZS
TSri356BJ9GQzON0zyiS2qN++1kQEUrRVQkOUAIlTJsuMLc0U2nuf3r17aQBhBbu
W9NNBhDSIGxeXJTExkawjTfS9G2/8Rn/BP5fJqeDPsj96woJlE2+ByMEGIXajlbS
VrXDGv9+nGhqv9y/svJyce7dU5Z0bHSR8VbVRRseqwWMy6UAr0CaEZbnmuUQhZfb
5jwpd50salk2CUpzH3DhtHFL4yOXU4U8yz01c5aCHdgS4KLUzecpzbvDlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzrDnHF+S2flXWKxjXMScwa49SRMB8GA1UdIwQY
MBaAFNTA1pTVnX02ukIaMFD07H3TeB79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MWNjY2UtYWNkOC00ZmI4LWIxNDgt
YTc5NTEwZTYxM2U4LzEvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MWNjY2UtYWNkOC00ZmI4LWIxNDgtYTc5NTEwZTYxM2U4
LzEvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPu90kbs
tmgFTn8r0kXbVvje9XYSCKn2E0se7NMJSsaXgxTdabTYo7SBoxiGTpap8CiXv3dt
byurtjKJe/XSC3fn/AQT8K87gYtzrnqZK1Jxe7+lNf5Lr3C0p5JEQulHcABgRrfd
Tt7ZtXg6roDnaOjvVfvI2423JCwS6Pk1u/o+tE/bEir6nj753/0ve/Kz6xMihNv+
+17MnIhqYzlwiddtvH0fyGHfEjlNELFiEkym9+Gb2rfyB+cRVPeP1afYdII5MAf0
SLgv6ANhgZVixgwatM/jyK/BYNWq5O7/BSKJoHKscP0ClEJwYH4Pl7RWZUFXB2EP
lQZkas8f+xYtvA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:49 2025 by rpki-client