Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: UBntpCnZVb5/K2ejcn7Q6ZH3y72ESxDyalM9VZeN8RY=
Subject key identifier: A7:00:52:D7:F3:BA:D2:6F:A1:2A:9C:21:86:C0:87:A0:8F:99:CA:7C
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019849661B88D27ED0A85BDE30377360C599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 0F5A
Signing time: Sun 27 Jul 2025 01:01:25 +0000
Manifest this update: Sun 27 Jul 2025 01:01:25 +0000
Manifest next update: Mon 28 Jul 2025 01:01:25 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: bDj6oC5t8nAZa/NYvKLOCqVZy+69IiYErALgp8U+ROI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:1b:88:d2:7e:d0:a8:5b:de:30:37:73:60:c5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Jul 27 01:01:25 2025 GMT
Not After : Jul 28 01:01:25 2025 GMT
Subject: CN=a70052d7f3bad26fa12a9c2186c087a08f99ca7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:38:48:bb:e6:49:76:d0:3f:b7:0b:37:c5:
14:fa:b9:f7:bd:53:58:95:5e:9e:be:8f:ae:bb:3c:
eb:f1:b5:f4:8f:1b:2d:2f:50:e0:00:20:3c:9e:2f:
c3:c5:85:ef:f3:b8:d2:36:cb:3e:5b:6b:ed:63:ea:
a6:37:59:56:2f:d4:ac:a6:a7:fa:99:06:a6:0c:75:
3b:66:d7:5f:fa:04:30:5b:d7:60:3f:7b:47:78:38:
2c:bc:ee:a4:78:57:f8:b3:c4:54:4c:d0:98:1e:2f:
dc:b1:4f:7a:a7:8f:f0:6c:70:28:d1:04:73:31:ec:
b0:88:d7:0e:03:b7:4e:97:e9:ef:2d:b6:70:a2:89:
21:d3:d0:04:b6:f9:46:d4:f1:62:ad:94:46:64:84:
f7:e6:7a:d9:ff:94:8e:05:8e:a5:93:25:2e:92:de:
7e:ac:5c:7c:c2:1e:8d:5d:f2:06:62:7a:ed:25:7e:
68:a5:0c:6b:3a:e3:42:ca:7b:16:45:ad:d2:b2:75:
e2:33:7b:91:62:64:a3:40:cd:99:0d:bf:c6:84:6d:
db:28:ab:bc:54:4c:d6:a6:f1:e2:6f:7f:38:ed:cc:
95:8e:c2:f4:f9:56:f3:59:25:62:aa:26:c7:19:98:
94:93:aa:77:dd:15:b0:70:d1:34:26:1f:28:d7:da:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:52:D7:F3:BA:D2:6F:A1:2A:9C:21:86:C0:87:A0:8F:99:CA:7C
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:15:bf:01:8e:bc:5e:7e:3f:e4:ad:01:36:92:b4:1b:be:3f:
9b:0a:e6:a7:31:3e:65:8c:d2:b7:5d:35:7e:04:0b:43:a0:fe:
f4:39:f9:8a:25:b5:b8:c8:8c:5a:81:91:f2:67:e3:e1:92:25:
7a:10:04:a7:70:6f:63:cd:04:d9:f1:90:2d:b2:4c:04:dd:54:
50:3f:ae:70:79:45:34:e8:26:d5:51:cc:3c:3f:db:21:ae:6d:
f7:85:5e:f8:f6:cb:07:92:d0:2c:2c:76:12:18:35:d8:da:c3:
e4:2c:1a:b2:da:d2:15:f9:21:31:3f:ce:93:dd:f5:47:50:7c:
56:a6:88:9a:77:c2:68:20:0c:8e:4e:bb:3d:f3:98:ac:ca:8f:
bf:a4:86:4e:e9:56:4e:1e:53:6e:d6:34:72:61:c1:46:bb:be:
8f:34:ba:90:ab:50:73:70:e8:43:c0:7e:cb:c4:e1:f3:9a:22:
ac:32:c2:fe:a3:db:80:6a:79:c2:4c:3e:30:5c:13:5d:75:f1:
38:45:b0:d2:09:e8:9a:9c:a6:11:a5:c4:22:27:9b:40:cc:2d:
f8:5b:16:fb:7a:9d:d0:58:f9:78:90:6a:45:50:f5:e5:1c:b6:
58:4c:33:27:cb:0d:36:8f:24:81:c8:0d:a8:2f:04:2f:cb:19:
9e:bd:c4:e9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhJZhuI0n7QqFveMDdzYMWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTAyZDlhM2QwN2QxZmMwYzgzMmY5NjdmZGYzZWY4ODBk
YzNlMjMwHhcNMjUwNzI3MDEwMTI1WhcNMjUwNzI4MDEwMTI1WjAzMTEwLwYDVQQD
EyhhNzAwNTJkN2YzYmFkMjZmYTEyYTljMjE4NmMwODdhMDhmOTljYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QQ4SLvmSXbQP7cLN8UU+rn3vVNY
lV6evo+uuzzr8bX0jxstL1DgACA8ni/DxYXv87jSNss+W2vtY+qmN1lWL9Sspqf6
mQamDHU7Ztdf+gQwW9dgP3tHeDgsvO6keFf4s8RUTNCYHi/csU96p4/wbHAo0QRz
MeywiNcOA7dOl+nvLbZwookh09AEtvlG1PFirZRGZIT35nrZ/5SOBY6lkyUukt5+
rFx8wh6NXfIGYnrtJX5opQxrOuNCynsWRa3SsnXiM3uRYmSjQM2ZDb/GhG3bKKu8
VEzWpvHib3847cyVjsL0+VbzWSViqibHGZiUk6p33RWwcNE0Jh8o19r1BQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKcAUtfzutJvoSqcIYbAh6CPmcp8MB8GA1UdIwQY
MBaAFPpQLZo9B9H8DIMvln/fPviA3D4jMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sQXRtajBIMGZ3TWd5LVdmOTgtLUlEY1BpTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZDVmMmFiLTA5MjAtNDYyOC04NWUx
LWJhYzQ0MjMxNWZmNC8xLzEtbEF0bWowSDBmd01neS1XZjk4LS1JRGNQaU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjL2Q1ZjJhYi0wOTIwLTQ2MjgtODVlMS1iYWM0NDIzMTVm
ZjQvMS8xLWxBdG1qMEgwZndNZ3ktV2Y5OC0tSURjUGlNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRW/
AY68Xn4/5K0BNpK0G74/mwrmpzE+ZYzSt101fgQLQ6D+9Dn5iiW1uMiMWoGR8mfj
4ZIlehAEp3BvY80E2fGQLbJMBN1UUD+ucHlFNOgm1VHMPD/bIa5t94Ve+PbLB5LQ
LCx2Ehg12NrD5CwastrSFfkhMT/Ok931R1B8VqaImnfCaCAMjk67PfOYrMqPv6SG
TulWTh5TbtY0cmHBRru+jzS6kKtQc3DoQ8B+y8Th85oirDLC/qPbgGp5wkw+MFwT
XXXxOEWw0gnompymEaXEIiebQMwt+FsW+3qd0Fj5eJBqRVD15Ry2WEwzJ8sNNo8k
gcgNqC8EL8sZnr3E6Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:38 2025 by rpki-client