Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: Ayw05nrMCqACjoahSpPYNJgGXyW06bBeP8DWcFFi8LA=
Subject key identifier: DC:03:87:77:8E:02:AF:D8:43:26:09:C9:3A:78:90:7C:22:07:CC:04
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 0198529F559E1427A5C0801F8782750490AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1584
Signing time: Mon 28 Jul 2025 20:00:30 +0000
Manifest this update: Mon 28 Jul 2025 20:00:30 +0000
Manifest next update: Tue 29 Jul 2025 20:00:30 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: c/pdswVVUNhhF/PvFevuM5DvTTnpXUV30LznQCA2qn4=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:55:9e:14:27:a5:c0:80:1f:87:82:75:04:90:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jul 28 20:00:30 2025 GMT
Not After : Jul 29 20:00:30 2025 GMT
Subject: CN=dc0387778e02afd8432609c93a78907c2207cc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9c:c4:cb:8a:e7:98:ff:9c:98:27:de:db:2b:
d9:30:44:9e:84:b3:17:5d:1a:ab:72:21:78:82:1b:
25:23:32:16:d6:df:6d:7e:9f:3d:e2:74:10:03:b6:
cc:3e:f0:37:1c:f9:0a:90:26:ce:2c:41:80:e7:9b:
b3:bd:1b:2e:dc:4a:c2:cd:65:43:40:32:9e:5c:f6:
87:63:22:60:25:3b:8c:20:7b:69:b5:ef:64:1e:1b:
12:41:44:3c:82:de:ca:50:85:8f:a4:66:c5:5b:d8:
a9:b5:c1:74:e1:c3:8c:81:23:b5:c4:03:cf:d0:8e:
7b:84:1c:dd:0a:f7:2c:9e:f7:26:ec:2f:b2:02:62:
c3:84:ea:72:9a:6e:e2:39:6d:4c:eb:e8:98:b9:c0:
5e:a3:05:ae:63:89:9c:e0:94:2b:30:50:7e:82:88:
c8:d8:ff:1c:01:75:3d:d8:ca:5c:f0:a1:00:3c:2c:
a7:c6:c4:5f:29:17:08:3d:fe:16:20:75:3a:2e:9e:
21:f9:6a:0a:14:3e:ec:5f:a7:10:12:8d:22:04:3c:
dc:b9:1d:f4:f6:0d:c5:7c:1d:0c:99:b7:45:75:bd:
e6:fc:42:4c:59:21:14:af:eb:30:7c:00:e4:63:6e:
ac:e0:32:d4:d6:8c:8a:79:43:ce:73:2d:f4:7e:ff:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:87:77:8E:02:AF:D8:43:26:09:C9:3A:78:90:7C:22:07:CC:04
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:46:be:1c:3d:5e:72:75:ef:3d:aa:49:80:74:8c:e0:e9:63:
54:a4:f4:fd:a5:e9:81:d5:ef:62:82:ba:24:0b:0c:fb:51:80:
d1:35:5c:23:d0:41:73:3c:3c:ae:eb:b5:2e:4e:34:5b:03:55:
81:5f:be:3a:8e:a4:a9:57:47:05:c8:c2:da:33:64:fa:bc:ac:
ff:5a:db:a8:3d:57:22:23:44:08:b1:d8:0c:1a:53:3f:ef:29:
af:41:11:b0:db:ee:53:d4:ba:5e:01:94:ba:6b:8d:74:ec:c0:
0c:e8:5b:e2:f4:50:81:6e:72:37:c9:f0:f0:6e:70:52:0f:ae:
67:13:75:67:3f:1c:14:41:7c:22:b0:4f:6d:78:17:af:47:4c:
80:ee:b7:43:a1:f0:07:d1:3f:56:0c:9f:d1:95:e6:51:b5:fe:
ae:e5:c6:1c:30:76:5c:2f:12:1b:69:72:34:cf:11:ed:ab:bb:
64:c5:0e:d2:6b:47:31:df:b2:aa:0c:8a:06:6d:76:03:0a:aa:
c1:bc:5c:eb:7d:e5:44:dc:80:65:5b:f3:5a:4b:d5:23:1e:06:
9d:5f:09:5e:c8:2e:07:14:77:1c:5e:8c:0a:cc:69:3d:05:8b:
80:68:51:57:b7:73:26:97:ef:01:f4:47:79:fa:4f:ab:41:c5:
71:11:ea:55
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhSn1WeFCelwIAfh4J1BJCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjQ5OTE1YTQ3OGVhODZkZmYwMDAyYzViZWQ5ODI5ODI1
Zjk4MTMwHhcNMjUwNzI4MjAwMDMwWhcNMjUwNzI5MjAwMDMwWjAzMTEwLwYDVQQD
EyhkYzAzODc3NzhlMDJhZmQ4NDMyNjA5YzkzYTc4OTA3YzIyMDdjYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85zEy4rnmP+cmCfe2yvZMESehLMX
XRqrciF4ghslIzIW1t9tfp894nQQA7bMPvA3HPkKkCbOLEGA55uzvRsu3ErCzWVD
QDKeXPaHYyJgJTuMIHtpte9kHhsSQUQ8gt7KUIWPpGbFW9iptcF04cOMgSO1xAPP
0I57hBzdCvcsnvcm7C+yAmLDhOpymm7iOW1M6+iYucBeowWuY4mc4JQrMFB+gojI
2P8cAXU92Mpc8KEAPCynxsRfKRcIPf4WIHU6Lp4h+WoKFD7sX6cQEo0iBDzcuR30
9g3FfB0MmbdFdb3m/EJMWSEUr+swfADkY26s4DLU1oyKeUPOcy30fv9oMwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNwDh3eOAq/YQyYJyTp4kHwiB8wEMB8GA1UdIwQY
MBaAFPpkmRWkeOqG3/AALFvtmCmCX5gTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tU1pGYVI0Nm9iZjhBQXNXLTJZS1lKZm1CTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYmM0ZjIxLWE5NzctNDdlMi1iY2Iz
LTdlYWQ2MjY0ZTY1NS8xLzEtbVNaRmFSNDZvYmY4QUFzVy0yWUtZSmZtQk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFiL2JjNGYyMS1hOTc3LTQ3ZTItYmNiMy03ZWFkNjI2NGU2
NTUvMS8xLW1TWkZhUjQ2b2JmOEFBc1ctMllLWUpmbUJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUka+
HD1ecnXvPapJgHSM4OljVKT0/aXpgdXvYoK6JAsM+1GA0TVcI9BBczw8ruu1Lk40
WwNVgV++Oo6kqVdHBcjC2jNk+rys/1rbqD1XIiNECLHYDBpTP+8pr0ERsNvuU9S6
XgGUumuNdOzADOhb4vRQgW5yN8nw8G5wUg+uZxN1Zz8cFEF8IrBPbXgXr0dMgO63
Q6HwB9E/Vgyf0ZXmUbX+ruXGHDB2XC8SG2lyNM8R7au7ZMUO0mtHMd+yqgyKBm12
Awqqwbxc633lRNyAZVvzWkvVIx4GnV8JXsguBxR3HF6MCsxpPQWLgGhRV7dzJpfv
AfRHefpPq0HFcRHqVQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:18:27 2025 by rpki-client