Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: 5Ztkv0rNC40r08tGfTtM2Rq7Zd/U+PZ00MI4209uO8Q=
Subject key identifier: 39:E5:F1:23:1A:42:FB:2A:8F:6A:B4:22:81:B2:5B:6F:C2:6E:78:C8
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 01985532CE56C30BB7B520E9124C0D114A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0DFC
Signing time: Tue 29 Jul 2025 08:00:49 +0000
Manifest this update: Tue 29 Jul 2025 08:00:49 +0000
Manifest next update: Wed 30 Jul 2025 08:00:49 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: bpQ62oyfmw1q5JCvhNgSlOGD4VthLz0DOKfhnNXYE/8=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:ce:56:c3:0b:b7:b5:20:e9:12:4c:0d:11:4a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Jul 29 08:00:49 2025 GMT
Not After : Jul 30 08:00:49 2025 GMT
Subject: CN=39e5f1231a42fb2a8f6ab42281b25b6fc26e78c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:6a:25:fc:ac:c6:2d:4e:f2:42:2a:28:d4:
38:72:14:0a:9a:37:aa:05:e3:f7:36:95:58:2a:40:
53:98:90:7a:d7:9a:75:30:62:44:38:45:eb:f5:40:
db:cc:29:f3:96:14:80:a8:f3:e0:03:0d:e6:a1:b5:
2a:6f:74:fd:85:00:3c:c8:05:5a:a3:c1:52:05:7b:
ca:e3:9e:f5:20:7e:7e:f4:52:02:a1:84:b4:b9:21:
d4:2a:ec:c0:d6:33:5a:bc:8a:c2:f2:9a:3d:0d:88:
0c:3e:a2:3c:83:7d:54:1a:83:39:31:ee:47:7e:0f:
c2:c5:9a:80:22:5f:e7:f6:e5:a1:0d:75:3b:84:aa:
af:8f:5f:33:e4:7d:d3:47:25:44:8b:c9:38:2f:e6:
cb:28:0e:7a:50:95:ea:1f:5f:bb:9a:51:06:fd:e8:
86:2b:cf:ff:89:93:09:f7:cf:31:46:e7:a9:d1:7a:
b4:6c:32:79:50:de:d7:17:23:38:ea:d9:6e:ae:af:
0a:27:6c:5d:3c:19:f9:1f:86:c4:f5:db:18:fc:6f:
11:ee:8b:24:ca:66:f4:29:09:5e:d8:cb:c6:a7:d9:
65:01:ca:0e:d6:39:a2:92:1f:b2:fc:6c:cf:db:e3:
55:2e:5d:6d:84:ee:85:9a:1f:75:52:4e:df:0d:f2:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E5:F1:23:1A:42:FB:2A:8F:6A:B4:22:81:B2:5B:6F:C2:6E:78:C8
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6c:fd:eb:f3:28:b7:1a:e0:60:bb:60:d4:55:38:74:93:54:
ca:5e:b3:66:49:d3:1b:1b:5f:11:48:5f:29:ea:27:66:f0:22:
73:8d:cf:f8:ea:70:bd:4e:6d:9d:91:63:5c:f2:5b:09:87:97:
d3:da:0d:e9:5f:ca:1a:bd:75:99:f7:c0:92:08:cb:e6:0f:9f:
bc:64:4c:c9:fd:f3:9a:ee:1f:ad:69:db:df:f4:b7:0d:af:7c:
45:c5:c9:1f:31:ec:08:54:71:ef:0e:21:84:6a:07:d9:46:35:
a3:8d:52:ee:3b:21:c0:b3:e3:e2:28:9e:25:7e:6a:1d:b3:d5:
13:bb:8b:38:6f:49:bd:a1:a6:8f:2f:12:d9:ec:5f:a8:e9:59:
97:84:81:7d:64:45:10:0e:20:42:3b:97:55:f4:05:c4:6a:80:
15:70:f7:6b:33:61:3f:cc:a9:34:94:bf:65:3b:f3:da:35:9f:
57:b0:63:c3:0b:6f:f3:80:0c:65:3c:8a:97:8b:4c:c6:ec:90:
77:67:8e:be:ea:84:3a:cc:cb:3a:df:52:61:53:d8:84:5a:49:
07:7a:ef:30:f7:bb:35:95:6c:5a:63:02:23:b7:1a:10:d0:8a:
49:48:d4:72:d7:52:32:0a:78:91:84:18:a9:81:f1:b3:6c:ac:
28:82:cb:71
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhVMs5Wwwu3tSDpEkwNEUp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDQwYTJhMTM4OWY1NGMyM2U3ODcxYjVhZTg3ZjY1M2Y2
NTkwMDgwHhcNMjUwNzI5MDgwMDQ5WhcNMjUwNzMwMDgwMDQ5WjAzMTEwLwYDVQQD
EygzOWU1ZjEyMzFhNDJmYjJhOGY2YWI0MjI4MWIyNWI2ZmMyNmU3OGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4pqJfysxi1O8kIqKNQ4chQKmjeq
BeP3NpVYKkBTmJB615p1MGJEOEXr9UDbzCnzlhSAqPPgAw3mobUqb3T9hQA8yAVa
o8FSBXvK4571IH5+9FICoYS0uSHUKuzA1jNavIrC8po9DYgMPqI8g31UGoM5Me5H
fg/CxZqAIl/n9uWhDXU7hKqvj18z5H3TRyVEi8k4L+bLKA56UJXqH1+7mlEG/eiG
K8//iZMJ988xRuep0Xq0bDJ5UN7XFyM46tlurq8KJ2xdPBn5H4bE9dsY/G8R7osk
ymb0KQle2MvGp9llAcoO1jmikh+y/GzP2+NVLl1thO6Fmh91Uk7fDfJ+vwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDnl8SMaQvsqj2q0IoGyW2/CbnjIMB8GA1UdIwQY
MBaAFPjUCioTifVMI+eHG1rof2U/ZZAIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OUUtLaE9KOVV3ajU0Y2JXdWhfWlQ5bGtBZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2JjNWYwLWUyMWItNDIzZS1iZTFj
LTJkNDYwZTA3MjZmYS8xLzEtTlFLS2hPSjlVd2o1NGNiV3VoX1pUOWxrQWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA0LzdiYzVmMC1lMjFiLTQyM2UtYmUxYy0yZDQ2MGUwNzI2
ZmEvMS8xLU5RS0toT0o5VXdqNTRjYld1aF9aVDlsa0FnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWz9
6/MotxrgYLtg1FU4dJNUyl6zZknTGxtfEUhfKeonZvAic43P+OpwvU5tnZFjXPJb
CYeX09oN6V/KGr11mffAkgjL5g+fvGRMyf3zmu4frWnb3/S3Da98RcXJHzHsCFRx
7w4hhGoH2UY1o41S7jshwLPj4iieJX5qHbPVE7uLOG9JvaGmjy8S2exfqOlZl4SB
fWRFEA4gQjuXVfQFxGqAFXD3azNhP8ypNJS/ZTvz2jWfV7Bjwwtv84AMZTyKl4tM
xuyQd2eOvuqEOszLOt9SYVPYhFpJB3rvMPe7NZVsWmMCI7caENCKSUjUctdSMgp4
kYQYqYHxs2ysKILLcQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 09:27:42 2025 by rpki-client