
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: Zz5LscpWDCea00AtkOr1S0MYkmU+HVFhkStZah3OW0I=
Subject key identifier: C2:41:E7:42:F4:CC:F8:1D:5E:F2:6B:A8:B0:4A:84:F8:01:07:20:ED
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 019834289EEE6B787B6F6398EBECCA043091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0B16
Signing time: Tue 22 Jul 2025 22:02:13 +0000
Manifest this update: Tue 22 Jul 2025 22:02:13 +0000
Manifest next update: Wed 23 Jul 2025 22:02:13 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: mPRE3k84E0utKHL1R5tkFixXYfXR0qme+2uGbVnbmg8=)
2: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:28:9e:ee:6b:78:7b:6f:63:98:eb:ec:ca:04:30:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Jul 22 22:02:13 2025 GMT
Not After : Jul 23 22:02:13 2025 GMT
Subject: CN=c241e742f4ccf81d5ef26ba8b04a84f8010720ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:f4:c8:e1:6c:de:64:ed:08:6c:ca:13:fe:
ec:5a:80:aa:3b:2f:3a:62:07:4f:cc:03:3d:25:fe:
86:c6:71:13:13:cd:5d:f4:18:6f:8c:b5:1f:3b:6f:
d6:df:af:b6:24:0b:e5:30:04:07:f4:2d:1d:14:35:
f7:42:1a:ba:87:89:a1:45:29:11:a4:d8:f8:27:60:
7b:0a:66:b1:55:43:f5:ea:07:d2:ab:9a:4d:b3:a2:
3f:bb:7a:d7:46:ad:64:83:3a:94:03:d8:62:14:9b:
5b:b6:73:2e:90:55:fd:15:d1:dc:f5:40:21:12:9e:
2b:22:1a:2a:d2:d1:00:83:ee:64:b5:ec:7a:d6:e8:
23:1e:5a:35:da:c7:fc:39:27:dd:fe:9b:3f:20:37:
28:5f:ef:2a:fe:95:8a:26:bf:bc:51:41:af:f1:52:
1f:71:a7:fe:f7:bb:19:af:8b:4a:15:63:82:b0:a0:
89:69:02:f4:85:e2:4b:2e:05:bd:d0:51:b6:5e:85:
d1:e3:6d:f7:b1:e5:74:c7:91:ac:7f:eb:24:7d:c6:
88:b7:09:dc:ae:39:80:9f:c1:13:b4:ec:df:39:29:
6e:aa:df:3d:e6:5d:df:5a:cb:74:43:11:e0:1f:f1:
73:c2:04:87:3f:72:e8:ee:6a:1f:31:2c:53:b8:0f:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:41:E7:42:F4:CC:F8:1D:5E:F2:6B:A8:B0:4A:84:F8:01:07:20:ED
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b5:7e:98:aa:a8:d1:d8:ca:8c:25:f8:b3:ad:09:f6:52:23:
72:df:fe:2a:fb:b8:e8:e7:86:b5:7d:3c:e6:83:27:57:9c:b5:
43:cd:2c:d0:03:d5:7a:37:a8:b0:4b:73:61:9e:93:ee:3d:27:
64:9e:4e:3c:fc:93:62:cb:9c:41:7a:eb:56:b8:7a:c8:09:3f:
e4:44:c8:35:18:8d:42:42:e5:50:73:d1:e7:b8:5c:14:1c:39:
cf:46:56:18:14:ad:f5:58:49:67:72:e3:e4:69:9d:1c:3e:45:
d0:c9:38:b0:c7:ce:b8:b2:59:6d:52:b4:56:81:51:a4:80:cc:
00:4a:b4:04:fc:2b:72:3e:51:6f:fa:89:04:08:65:ed:53:43:
8e:c6:a6:d7:df:3a:39:e6:fe:fa:9f:18:07:1b:39:93:3e:30:
84:15:6b:ae:7f:ec:3f:58:31:f3:52:1a:21:9b:18:6e:77:ac:
35:6f:fd:fe:36:03:77:27:52:e0:08:5b:6d:1c:5c:a2:c1:4f:
e1:b6:0a:78:48:e9:3e:0f:bc:76:84:47:e3:0f:0b:90:bb:b7:
44:f8:dd:72:21:b6:47:20:73:9c:92:ac:a3:05:ea:66:5f:21:
b0:69:0d:ce:b5:8c:29:0e:f8:9d:0c:ad:04:11:8b:52:b8:af:
76:5c:e4:96
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZg0KJ7ua3h7b2OY6+zKBDCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWU5ODgxYmYxMTIwOThhMmJmZDQ5YTBiY2ZmZGNjY2U3
YmMyMDgwHhcNMjUwNzIyMjIwMjEzWhcNMjUwNzIzMjIwMjEzWjAzMTEwLwYDVQQD
EyhjMjQxZTc0MmY0Y2NmODFkNWVmMjZiYThiMDRhODRmODAxMDcyMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSH0yOFs3mTtCGzKE/7sWoCqOy86
YgdPzAM9Jf6GxnETE81d9BhvjLUfO2/W36+2JAvlMAQH9C0dFDX3Qhq6h4mhRSkR
pNj4J2B7CmaxVUP16gfSq5pNs6I/u3rXRq1kgzqUA9hiFJtbtnMukFX9FdHc9UAh
Ep4rIhoq0tEAg+5ktex61ugjHlo12sf8OSfd/ps/IDcoX+8q/pWKJr+8UUGv8VIf
caf+97sZr4tKFWOCsKCJaQL0heJLLgW90FG2XoXR4233seV0x5Gsf+skfcaItwnc
rjmAn8ETtOzfOSluqt895l3fWst0QxHgH/FzwgSHP3Lo7mofMSxTuA8ulQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMJB50L0zPgdXvJrqLBKhPgBByDtMB8GA1UdIwQY
MBaAFPiumIG/ESCYor/UmgvP/czOe8IIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LNllnYjhSSUppaXY5U2FDOF85ek01N3dnZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFm
LTI1YTE1YTUyNGY4Ny8xLzEtSzZZZ2I4UklKaWl2OVNhQzhfOXpNNTd3Z2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE0LzVkOWY1Ny0wZjEwLTRlMTQtYjRhZi0yNWExNWE1MjRm
ODcvMS8xLUs2WWdiOFJJSmlpdjlTYUM4Xzl6TTU3d2dnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrV+
mKqo0djKjCX4s60J9lIjct/+Kvu46OeGtX085oMnV5y1Q80s0APVejeosEtzYZ6T
7j0nZJ5OPPyTYsucQXrrVrh6yAk/5ETINRiNQkLlUHPR57hcFBw5z0ZWGBSt9VhJ
Z3Lj5GmdHD5F0Mk4sMfOuLJZbVK0VoFRpIDMAEq0BPwrcj5Rb/qJBAhl7VNDjsam
1986Oeb++p8YBxs5kz4whBVrrn/sP1gx81IaIZsYbnesNW/9/jYDdydS4AhbbRxc
osFP4bYKeEjpPg+8doRH4w8LkLu3RPjdciG2RyBznJKsowXqZl8hsGkNzrWMKQ74
nQytBBGLUrivdlzklg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:07:59 2025 by rpki-client