Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: S5fVf/U1qgHKAn+Xwl4iTPtfjEG1ragmJ+rQTzsQJPM=
Subject key identifier: 82:5C:2E:08:FE:C2:36:37:7E:54:4D:86:FD:43:13:F8:FE:E4:D9:20
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 019849660595081ADB2A84E2083771BCCE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:19 +0000
Manifest this update: Sun 27 Jul 2025 01:01:19 +0000
Manifest next update: Mon 28 Jul 2025 01:01:19 +0000
Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: 0ElakB20ivDjXRCFrF7vnSlk7MesCQnMFTxSSnEim84=)
2: sA1HdIpnNshvOPJPgaGNIhZrUb8.roa (hash: 7Bi1HUyjDkybQXNM/TN4TmwGL8in9oSgJiNHpva8HX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:05:95:08:1a:db:2a:84:e2:08:37:71:bc:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Jul 27 01:01:19 2025 GMT
Not After : Jul 28 01:01:19 2025 GMT
Subject: CN=825c2e08fec236377e544d86fd4313f8fee4d920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d7:18:0f:ef:b1:44:02:3f:a1:39:65:e0:42:
9b:8a:fc:31:13:8c:5f:9e:63:a3:78:eb:58:07:09:
d1:34:6a:df:0e:5c:95:13:bb:be:70:5d:0b:e8:25:
4c:33:30:79:91:c8:88:6e:0c:17:b5:cd:4e:a7:a1:
95:00:1a:b4:da:3f:7c:52:4d:f7:12:4c:52:e1:53:
47:ad:35:62:bb:bc:08:4a:91:4f:90:06:4d:99:b9:
66:53:ea:31:44:b6:bf:38:0a:00:76:3b:c1:c8:06:
e1:7f:ae:fa:a5:0b:32:20:93:5d:d0:57:92:df:95:
8f:b7:cc:95:2b:2f:8b:7d:9b:f9:ae:7f:a2:b2:8d:
f8:aa:7f:b9:a4:99:ca:62:5c:67:40:89:0b:f4:88:
12:b2:ca:2e:d4:5a:94:cf:e4:ea:f5:bd:36:37:22:
78:19:fa:a7:21:eb:7a:e1:9d:43:7d:af:35:2b:3f:
07:cb:ef:b9:1d:1b:af:f6:18:1b:f9:29:89:48:82:
a3:af:e5:b6:35:25:ee:f2:18:c6:98:82:af:d3:b4:
42:16:b1:9f:9e:13:e8:48:5a:76:cd:d8:cb:23:0f:
e8:f5:a3:e1:36:c5:dc:7f:9d:a5:e5:42:72:e8:ae:
97:0e:6f:fe:8c:85:98:40:94:d2:16:f1:84:3e:fb:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5C:2E:08:FE:C2:36:37:7E:54:4D:86:FD:43:13:F8:FE:E4:D9:20
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:f5:81:86:7f:47:4a:53:4c:5b:78:5c:53:53:e5:05:88:
44:42:58:70:94:e7:b6:f1:cf:09:95:4a:dd:cb:7a:d4:21:55:
8e:10:85:02:eb:80:f5:3d:16:1d:af:9b:cd:9c:17:7d:a5:21:
b7:2c:4d:3c:c5:99:f8:cc:7d:7e:61:b0:0a:41:f5:50:a6:cf:
b3:48:7f:44:2f:ba:80:9a:5f:0b:ef:4d:1b:8f:6d:2f:59:99:
4c:f7:2a:6f:48:a4:7e:14:35:bd:25:4e:63:b9:76:d8:75:21:
c3:82:af:24:d4:40:c0:b4:51:b1:f9:62:76:84:09:f5:01:10:
8b:0f:2b:79:2f:61:d9:72:ae:f5:03:14:38:12:47:a0:94:e6:
2d:ae:93:94:3d:03:e9:b7:23:8b:e1:12:e1:d7:38:09:f5:2e:
ac:af:ac:24:a6:68:12:49:ee:5c:08:5d:7b:2e:b5:8c:9e:45:
a0:84:5c:3b:18:f0:4f:ed:da:a1:5a:8e:b3:eb:62:c7:0d:f1:
03:ab:c1:be:c1:83:d9:16:6a:7e:b8:08:aa:aa:bf:20:58:f2:
3b:8a:ca:7e:cd:aa:24:b1:c9:fc:b6:eb:f9:f9:42:16:e7:1a:
7d:d7:b2:16:4e:f8:ba:96:c0:58:d8:78:ff:8b:b1:0d:1b:e9:
4b:89:2e:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZgWVCBrbKoTiCDdxvM4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MDQ2MTA4YjU0MjYxNDQyNDIyYzBmYmM4MGIzZmE5ODZl
YmU5M2EwHhcNMjUwNzI3MDEwMTE5WhcNMjUwNzI4MDEwMTE5WjAzMTEwLwYDVQQD
Eyg4MjVjMmUwOGZlYzIzNjM3N2U1NDRkODZmZDQzMTNmOGZlZTRkOTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69cYD++xRAI/oTll4EKbivwxE4xf
nmOjeOtYBwnRNGrfDlyVE7u+cF0L6CVMMzB5kciIbgwXtc1Op6GVABq02j98Uk33
EkxS4VNHrTViu7wISpFPkAZNmblmU+oxRLa/OAoAdjvByAbhf676pQsyIJNd0FeS
35WPt8yVKy+LfZv5rn+iso34qn+5pJnKYlxnQIkL9IgSssou1FqUz+Tq9b02NyJ4
GfqnIet64Z1Dfa81Kz8Hy++5HRuv9hgb+SmJSIKjr+W2NSXu8hjGmIKv07RCFrGf
nhPoSFp2zdjLIw/o9aPhNsXcf52l5UJy6K6XDm/+jIWYQJTSFvGEPvsv3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJcLgj+wjY3flRNhv1DE/j+5NkgMB8GA1UdIwQY
MBaAFJQEYQi1QmFEJCLA+8gLP6mG6+k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zMmNlN2QtZmI0Ni00MTljLWFmMWQt
OTM5NDkyNGMzYzc2LzEvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8zMmNlN2QtZmI0Ni00MTljLWFmMWQtOTM5NDkyNGMzYzc2
LzEvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyz1gYZ/
R0pTTFt4XFNT5QWIREJYcJTntvHPCZVK3ct61CFVjhCFAuuA9T0WHa+bzZwXfaUh
tyxNPMWZ+Mx9fmGwCkH1UKbPs0h/RC+6gJpfC+9NG49tL1mZTPcqb0ikfhQ1vSVO
Y7l22HUhw4KvJNRAwLRRsflidoQJ9QEQiw8reS9h2XKu9QMUOBJHoJTmLa6TlD0D
6bcji+ES4dc4CfUurK+sJKZoEknuXAhdey61jJ5FoIRcOxjwT+3aoVqOs+tixw3x
A6vBvsGD2RZqfrgIqqq/IFjyO4rKfs2qJLHJ/Lbr+flCFucafdeyFk74upbAWNh4
/4uxDRvpS4kukQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:28:17 2025 by rpki-client