Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier: vQs17Ory+jgOXEbpLDW/aOnn5tYKkKbbx908wZP5PNw=
Subject key identifier: F8:55:91:EA:28:B4:DD:50:61:D3:AA:E3:A9:B7:62:7F:F1:22:BC:D3
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 019827B53DAD18C32EC6CF131E10644399A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number: 15F5
Signing time: Sun 20 Jul 2025 12:00:45 +0000
Manifest this update: Sun 20 Jul 2025 12:00:45 +0000
Manifest next update: Mon 21 Jul 2025 12:00:45 +0000
Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=)
2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: Lt0KECK82dRsb0HUfHj4RbgLd8Cp9gYD6izy9atyycQ=)
3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=)
4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=)
5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=)
6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=)
7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=)
8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=)
9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:3d:ad:18:c3:2e:c6:cf:13:1e:10:64:43:99:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Jul 20 12:00:45 2025 GMT
Not After : Jul 21 12:00:45 2025 GMT
Subject: CN=f85591ea28b4dd5061d3aae3a9b7627ff122bcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:79:f6:14:fd:f2:f8:b1:1b:93:44:95:e1:
e6:b7:32:6e:69:70:e9:25:fe:a5:25:20:b3:b4:4d:
72:ac:e3:50:33:f9:72:b1:98:cb:4f:e8:c8:86:3d:
36:96:4c:cb:b0:1e:91:1d:85:31:73:d5:3f:38:dd:
d1:a1:8a:c4:c1:17:4f:07:ad:13:87:ed:ab:01:a3:
b6:e6:03:20:39:12:97:fb:da:f4:cf:d9:06:22:1a:
34:7d:cb:f3:e0:8f:5f:a9:f1:3c:c9:e6:05:26:07:
97:4d:05:de:ad:84:7b:f4:98:72:41:93:c8:b0:04:
83:fd:a1:45:3d:99:a6:55:87:32:22:77:c8:54:49:
4f:28:04:22:06:d1:d8:74:9d:ca:90:34:33:2d:29:
4d:cd:cb:93:68:3a:ee:c8:f4:c0:53:5d:66:fd:43:
95:df:29:5e:e4:b4:dc:4e:2b:e5:1c:14:8b:48:2f:
6a:74:f0:00:f4:55:6e:b9:1b:27:a1:43:30:ac:b6:
04:10:c8:7f:13:1d:c2:06:96:11:31:1c:ea:c5:a2:
ca:8f:10:00:5d:4f:2f:b2:cc:2e:60:15:4e:cb:e0:
ca:9e:87:69:7e:a8:a7:35:66:c1:31:d2:34:77:2c:
9d:cf:63:f1:02:f3:c7:ae:d9:2a:8c:db:1c:30:d4:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:55:91:EA:28:B4:DD:50:61:D3:AA:E3:A9:B7:62:7F:F1:22:BC:D3
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7a:e6:95:8a:97:49:52:5f:7c:ce:04:a9:e9:0d:f4:85:7a:
28:5e:41:98:fe:f1:50:32:d6:fb:dd:08:4c:ff:bc:25:83:f3:
0f:26:b4:0f:75:48:44:7c:17:d0:8d:52:5a:79:ec:09:b7:9a:
27:f8:c8:ae:c9:61:87:05:d6:29:4b:81:da:86:b1:ba:63:b1:
56:99:5b:91:1f:e9:dd:ba:e7:5a:39:78:53:d1:9b:84:6c:d2:
91:b5:d7:f5:9d:8c:c1:48:9d:78:14:50:c8:01:d3:3e:df:7a:
fc:ff:3c:41:98:36:37:47:33:6f:7d:38:27:50:d8:67:79:47:
3d:ba:b2:cc:94:6a:a8:38:d4:e0:2a:07:07:4b:35:dc:34:b2:
e7:a0:97:e1:54:a4:1b:20:d8:04:27:c5:21:07:a5:17:1f:af:
a6:cd:29:b7:37:57:37:7a:95:46:bc:9c:65:07:11:a8:4a:fe:
8f:8a:5b:51:b4:b6:b1:93:18:1a:cb:1c:a2:bc:ba:b6:ab:5f:
92:4d:4a:ea:1c:7b:15:93:38:4a:5a:67:29:b1:9d:c4:a4:49:
ae:c3:3c:8f:26:47:1a:f6:78:c6:3d:49:ef:a4:61:c2:ec:bb:
5d:04:ff:d5:ef:a5:8e:2a:09:2c:5e:2c:6c:b9:ba:c0:ab:3c:
d4:b6:3c:f0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZgntT2tGMMuxs8THhBkQ5miMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl
YzEwNWUwHhcNMjUwNzIwMTIwMDQ1WhcNMjUwNzIxMTIwMDQ1WjAzMTEwLwYDVQQD
EyhmODU1OTFlYTI4YjRkZDUwNjFkM2FhZTNhOWI3NjI3ZmYxMjJiY2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxx59hT98vixG5NEleHmtzJuaXDp
Jf6lJSCztE1yrONQM/lysZjLT+jIhj02lkzLsB6RHYUxc9U/ON3RoYrEwRdPB60T
h+2rAaO25gMgORKX+9r0z9kGIho0fcvz4I9fqfE8yeYFJgeXTQXerYR79JhyQZPI
sASD/aFFPZmmVYcyInfIVElPKAQiBtHYdJ3KkDQzLSlNzcuTaDruyPTAU11m/UOV
3yle5LTcTivlHBSLSC9qdPAA9FVuuRsnoUMwrLYEEMh/Ex3CBpYRMRzqxaLKjxAA
XU8vsswuYBVOy+DKnodpfqinNWbBMdI0dyydz2PxAvPHrtkqjNscMNTglwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPhVkeootN1QYdOq46m3Yn/xIrzTMB8GA1UdIwQY
MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1
LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm
ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3rm
lYqXSVJffM4EqekN9IV6KF5BmP7xUDLW+90ITP+8JYPzDya0D3VIRHwX0I1SWnns
CbeaJ/jIrslhhwXWKUuB2oaxumOxVplbkR/p3brnWjl4U9GbhGzSkbXX9Z2MwUid
eBRQyAHTPt96/P88QZg2N0czb304J1DYZ3lHPbqyzJRqqDjU4CoHB0s13DSy56CX
4VSkGyDYBCfFIQelFx+vps0ptzdXN3qVRrycZQcRqEr+j4pbUbS2sZMYGsscory6
tqtfkk1K6hx7FZM4SlpnKbGdxKRJrsM8jyZHGvZ4xj1J76Rhwuy7XQT/1e+ljioJ
LF4sbLm6wKs81LY88A==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:50:10 2025 by rpki-client