Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json)
Hash identifier: /psuO0Ih2oEEvRiFyj6CEiIuohHhFowVzLwR+hEA3Mc=
Subject key identifier: 64:53:88:37:77:86:A1:DC:F9:E1:14:0B:27:8B:2E:9A:DB:19:6D:FB
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial: 01984A0A52FAAF76DA93E4E5F067AD0A6E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
Manifest number: 0F17
Signing time: Sun 27 Jul 2025 04:00:47 +0000
Manifest this update: Sun 27 Jul 2025 04:00:47 +0000
Manifest next update: Mon 28 Jul 2025 04:00:47 +0000
Files and hashes: 1: qojwO3L9jg1p6UhN03evhyipuOQ.roa (hash: dfUoGagRhqiwPd1LKf2UOdIpsG5QndFaYf8UR5Y9xlA=)
2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: myOrApRXoJ/Ym+3aqkufSLtRnLsWfk0OVD77Yv+FwPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:52:fa:af:76:da:93:e4:e5:f0:67:ad:0a:6e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Validity
Not Before: Jul 27 04:00:47 2025 GMT
Not After : Jul 28 04:00:47 2025 GMT
Subject: CN=645388377786a1dcf9e1140b278b2e9adb196dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:ab:56:dd:f7:aa:1f:0e:c2:0d:d8:ef:93:
d9:a2:0e:24:db:de:3a:66:a5:b6:57:50:30:9d:e4:
8c:ac:04:f5:c0:aa:a8:1f:66:00:ff:a7:c8:11:fc:
85:5e:5f:de:2a:1b:72:4a:69:c6:d1:dc:5a:bd:41:
08:29:a3:17:76:e8:06:25:b6:21:0e:5c:93:d6:31:
3c:11:b7:ae:d4:51:97:68:15:de:b2:fe:61:24:46:
6b:be:11:8f:fa:64:55:e1:a0:38:de:2b:e1:73:46:
11:3b:59:55:3a:6c:0d:af:1a:0d:67:5e:bd:1f:b7:
ef:4e:2e:5a:38:57:e5:48:70:4f:b2:12:25:ae:a1:
6e:54:0e:9f:39:3c:09:5a:37:0e:30:cc:dc:c1:61:
ce:f7:f3:0b:43:fa:be:04:1f:72:ab:a8:1d:4a:e8:
9a:32:a8:71:fd:a2:cc:ba:bf:f3:15:3d:3a:c8:5b:
2e:65:6d:e8:11:44:36:9d:d0:80:93:47:93:8e:e3:
f3:c6:23:64:59:7a:a5:04:5f:21:bc:55:92:19:a4:
2e:72:49:99:37:90:ce:f0:fd:1d:a7:57:5f:11:f7:
69:9d:8c:18:eb:25:c5:6e:32:67:bc:ad:2a:b3:f8:
59:88:de:6e:44:f0:a2:dd:5b:11:73:bb:56:d2:a5:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:53:88:37:77:86:A1:DC:F9:E1:14:0B:27:8B:2E:9A:DB:19:6D:FB
X509v3 Authority Key Identifier:
keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:97:f9:dd:db:9f:3d:17:1c:6d:24:2c:e0:15:ef:5c:2a:a5:
3b:eb:41:2a:cd:16:ad:bf:a0:90:58:2e:94:02:b0:29:da:2d:
47:ee:de:10:15:e8:10:6a:c6:3e:39:d5:fc:17:aa:6b:4c:bb:
bb:f8:f3:8a:aa:72:45:a0:07:48:7d:77:44:1f:a9:dc:c6:b8:
90:d8:14:11:96:99:38:84:31:0f:ff:72:38:96:7c:52:3b:6c:
f3:a1:5d:a7:1e:22:70:7a:ec:ce:52:a4:3f:e7:ff:5e:4b:17:
04:3c:ee:a6:a4:4b:1f:5e:22:65:51:ea:74:8b:34:70:4c:35:
f0:81:23:62:a8:0e:25:3c:3b:ae:d9:68:f1:dd:52:15:48:e2:
ea:81:15:56:b1:b9:2e:6a:8a:36:4f:41:6f:67:1c:97:30:12:
ed:46:56:c7:d2:0f:3d:6d:29:40:ab:de:4c:e6:0f:95:b6:1c:
42:64:ae:1c:84:37:7b:e6:05:00:99:4d:63:2d:c2:b3:74:bd:
ba:f0:1b:0a:17:d6:63:82:1b:df:46:c6:84:9c:5f:8c:4d:13:
aa:44:b8:0f:dc:80:ba:cc:25:96:6c:58:2b:53:0f:40:44:0b:
b4:e2:b5:2d:37:e1:4c:87:7a:13:75:1e:78:2c:57:a2:11:5a:
b2:1e:2e:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKClL6r3bak+Tl8GetCm5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNTI4YzEyNmFlZDBkN2Y1YTA2OTUwZWIyYzIwMzM0ODY4
NTZhMTUwHhcNMjUwNzI3MDQwMDQ3WhcNMjUwNzI4MDQwMDQ3WjAzMTEwLwYDVQQD
Eyg2NDUzODgzNzc3ODZhMWRjZjllMTE0MGIyNzhiMmU5YWRiMTk2ZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEarVt33qh8Owg3Y75PZog4k2946
ZqW2V1AwneSMrAT1wKqoH2YA/6fIEfyFXl/eKhtySmnG0dxavUEIKaMXdugGJbYh
DlyT1jE8Ebeu1FGXaBXesv5hJEZrvhGP+mRV4aA43ivhc0YRO1lVOmwNrxoNZ169
H7fvTi5aOFflSHBPshIlrqFuVA6fOTwJWjcOMMzcwWHO9/MLQ/q+BB9yq6gdSuia
Mqhx/aLMur/zFT06yFsuZW3oEUQ2ndCAk0eTjuPzxiNkWXqlBF8hvFWSGaQuckmZ
N5DO8P0dp1dfEfdpnYwY6yXFbjJnvK0qs/hZiN5uRPCi3VsRc7tW0qUabwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRTiDd3hqHc+eEUCyeLLprbGW37MB8GA1UdIwQY
MBaAFLtSjBJq7Q1/WgaVDrLCAzSGhWoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2It
MjE1OWVmZWU2YTA3LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2ItMjE1OWVmZWU2YTA3
LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJf53duf
PRccbSQs4BXvXCqlO+tBKs0Wrb+gkFgulAKwKdotR+7eEBXoEGrGPjnV/Beqa0y7
u/jziqpyRaAHSH13RB+p3Ma4kNgUEZaZOIQxD/9yOJZ8Ujts86Fdpx4icHrszlKk
P+f/XksXBDzupqRLH14iZVHqdIs0cEw18IEjYqgOJTw7rtlo8d1SFUji6oEVVrG5
LmqKNk9Bb2cclzAS7UZWx9IPPW0pQKveTOYPlbYcQmSuHIQ3e+YFAJlNYy3Cs3S9
uvAbChfWY4Ib30bGhJxfjE0TqkS4D9yAuswllmxYK1MPQEQLtOK1LTfhTId6E3Ue
eCxXohFash4uUw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:02:51 2025 by rpki-client