Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: TRnkBhE1A37QnDhSg8zi5ZjWnzOrxb5jnBFhYG+iYtI=
Subject key identifier: E8:58:AF:7D:DC:DC:62:9A:73:54:62:3F:58:81:C9:81:43:32:A5:17
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 019848C0D096082F2A1ECBBF6C115EFE108D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 22:00:52 +0000
Manifest this update: Sat 26 Jul 2025 22:00:52 +0000
Manifest next update: Sun 27 Jul 2025 22:00:52 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: GTdYRn17QqiMaz+Dtt2FAGvaZlo9W1udX86VPHg4uj8=)
2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:d0:96:08:2f:2a:1e:cb:bf:6c:11:5e:fe:10:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Jul 26 22:00:52 2025 GMT
Not After : Jul 27 22:00:52 2025 GMT
Subject: CN=e858af7ddcdc629a7354623f5881c9814332a517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:38:58:53:75:1b:85:52:93:da:c4:5b:59:6c:
a7:81:fb:69:63:f9:e7:73:37:06:bd:5a:1f:58:c5:
88:6b:33:b4:16:7c:29:99:c5:4b:57:6a:cd:b2:02:
0d:78:ce:44:4a:ea:21:24:c9:46:f3:4b:25:38:5e:
75:1c:d8:c9:2b:c4:5d:a7:30:5b:eb:de:1d:1e:7b:
11:2b:04:16:ea:83:f6:57:b2:82:c9:9b:e3:a6:e3:
2f:88:35:ab:03:01:a0:6c:a5:d5:49:4e:d1:56:e4:
42:6b:ca:ba:dd:94:c7:dd:17:ea:d9:4e:7c:14:ce:
4a:28:76:ca:14:31:36:d5:22:8c:73:0b:bd:c3:75:
d1:71:68:bf:f7:d1:be:1b:76:f1:dd:fb:13:33:ac:
3f:ec:d2:51:6e:74:c9:f2:e6:fa:76:52:e4:94:1b:
ac:8c:5a:1a:f5:55:34:8e:a7:c0:cd:b0:ec:47:45:
51:39:a4:e0:86:06:30:b8:68:80:e9:2a:94:3c:00:
5c:c8:de:f7:8c:53:71:c0:f0:7b:40:cb:a7:39:ef:
71:7e:b1:a5:ca:0b:76:a2:50:5f:31:9c:83:55:98:
df:8b:e6:4e:b1:4f:dc:71:49:05:ca:d1:17:c7:73:
22:db:3c:eb:a4:17:60:06:19:d9:18:d7:f9:16:2a:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:58:AF:7D:DC:DC:62:9A:73:54:62:3F:58:81:C9:81:43:32:A5:17
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:da:47:d7:02:d0:1f:d2:71:88:3c:90:1d:01:fd:0b:ef:de:
a0:9a:ab:a6:82:e4:76:d9:10:57:84:26:fa:d6:e7:e2:05:36:
9c:c9:26:bd:61:2d:31:a1:f4:af:b1:e7:ac:5c:e4:eb:f8:27:
b5:1c:8c:12:14:c4:61:90:ee:a5:b8:8a:62:49:c6:49:27:22:
d1:8c:ec:28:3c:d1:83:f0:61:4f:da:e0:ec:48:27:8a:9b:cd:
44:d4:98:9d:93:3b:dc:30:b7:2a:9f:dc:bd:00:c4:2a:e1:ce:
b1:66:39:2c:9f:8c:cc:2d:62:20:41:b0:e5:89:5f:70:bb:b4:
55:64:30:7d:02:81:ea:ba:38:8c:eb:31:5c:d0:0a:33:e1:1b:
2e:b7:53:1b:5d:b2:5a:13:e8:10:c5:c5:e8:d5:d7:89:ca:9f:
5b:a5:b6:61:1d:1f:ef:9c:97:7d:9d:b3:ef:ce:ce:bb:d1:80:
ec:68:6e:6e:37:59:69:b2:8a:f6:e2:df:7e:96:62:a3:44:0e:
84:f8:23:23:d3:02:19:44:7b:ba:ea:cc:d6:ee:76:32:db:11:
19:f9:a7:9f:a0:21:52:16:bd:8d:3a:7c:1c:08:21:4b:e3:ab:
63:53:88:bc:58:e1:3c:26:49:66:73:5a:19:78:75:bd:f1:de:
86:04:22:57
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhIwNCWCC8qHsu/bBFe/hCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5N2Y2OWVkMjZjMmU0Njg3ZGJhYjJlNmM2Y2NhODhkMTdj
NGMzMzIwHhcNMjUwNzI2MjIwMDUyWhcNMjUwNzI3MjIwMDUyWjAzMTEwLwYDVQQD
EyhlODU4YWY3ZGRjZGM2MjlhNzM1NDYyM2Y1ODgxYzk4MTQzMzJhNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ThYU3UbhVKT2sRbWWyngftpY/nn
czcGvVofWMWIazO0FnwpmcVLV2rNsgINeM5ESuohJMlG80slOF51HNjJK8RdpzBb
694dHnsRKwQW6oP2V7KCyZvjpuMviDWrAwGgbKXVSU7RVuRCa8q63ZTH3Rfq2U58
FM5KKHbKFDE21SKMcwu9w3XRcWi/99G+G3bx3fsTM6w/7NJRbnTJ8ub6dlLklBus
jFoa9VU0jqfAzbDsR0VROaTghgYwuGiA6SqUPABcyN73jFNxwPB7QMunOe9xfrGl
ygt2olBfMZyDVZjfi+ZOsU/ccUkFytEXx3Mi2zzrpBdgBhnZGNf5FirzHwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOhYr33c3GKac1RiP1iByYFDMqUXMB8GA1UdIwQY
MBaAFPl/ae0mwuRofbqy5sbMqI0XxMMyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YOXA3U2JDNUdoOXVyTG14c3lvalJmRXd6SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMzI0NDFlLTVlOWItNGEzMi04Y2M0
LTFlYjc1YmI2ODIzMy8xLzEtWDlwN1NiQzVHaDl1ckxteHN5b2pSZkV3ekkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY2LzMyNDQxZS01ZTliLTRhMzItOGNjNC0xZWI3NWJiNjgy
MzMvMS8xLVg5cDdTYkM1R2g5dXJMbXhzeW9qUmZFd3pJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdpH
1wLQH9JxiDyQHQH9C+/eoJqrpoLkdtkQV4Qm+tbn4gU2nMkmvWEtMaH0r7HnrFzk
6/gntRyMEhTEYZDupbiKYknGSSci0YzsKDzRg/BhT9rg7EgnipvNRNSYnZM73DC3
Kp/cvQDEKuHOsWY5LJ+MzC1iIEGw5YlfcLu0VWQwfQKB6ro4jOsxXNAKM+EbLrdT
G12yWhPoEMXF6NXXicqfW6W2YR0f75yXfZ2z787Ou9GA7GhubjdZabKK9uLffpZi
o0QOhPgjI9MCGUR7uurM1u52MtsRGfmnn6AhUha9jTp8HAghS+OrY1OIvFjhPCZJ
ZnNaGXh1vfHehgQiVw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:21:57 2025 by rpki-client