
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File: 1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier: SrfEf3mQ4y07qIfLOmKQT8Dgbsz0T29DHVQDhQ5/nBs=
Subject key identifier: 0B:1E:3B:AF:5F:89:74:32:D0:01:F9:85:12:A6:02:CB:0A:80:45:A4
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial: 01984A40DE55918CEA6D98E1349F1D8942B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number: 0EF0
Signing time: Sun 27 Jul 2025 05:00:21 +0000
Manifest this update: Sun 27 Jul 2025 05:00:21 +0000
Manifest next update: Mon 28 Jul 2025 05:00:21 +0000
Files and hashes: 1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: bsV7IZc+dDVxkuRGU+8mPvWRyq/8Ov3vRnS8rURvNcY=)
2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:de:55:91:8c:ea:6d:98:e1:34:9f:1d:89:42:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Validity
Not Before: Jul 27 05:00:21 2025 GMT
Not After : Jul 28 05:00:21 2025 GMT
Subject: CN=0b1e3baf5f897432d001f98512a602cb0a8045a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:36:e4:1e:8e:06:45:c4:ce:d3:03:4a:2a:
e1:9e:b6:2a:d4:0e:99:e5:79:46:73:2c:45:1f:bd:
f0:39:b3:42:61:43:1f:60:4b:0f:29:e2:50:cd:59:
68:21:b6:56:20:42:9d:b7:a2:46:06:cd:38:2e:a3:
de:33:0c:23:10:7a:db:d6:d2:e1:a7:36:78:08:f0:
8f:bd:81:21:98:ad:3c:a7:a6:18:ab:6b:87:bb:f1:
ee:89:c3:02:1b:fc:f2:90:ec:12:50:ac:81:5e:2b:
03:dc:74:9d:c8:c1:8f:a7:34:72:fd:b4:76:8c:76:
d0:8a:54:52:14:4f:4c:b9:09:95:80:86:25:62:60:
4f:23:51:7a:f3:d9:69:39:f5:d6:c7:64:c1:8a:2d:
fa:da:0d:f6:3b:fa:b6:ce:8c:19:06:f5:83:a4:2f:
9f:03:e6:ac:31:d5:d3:b8:ad:22:4b:63:88:38:cc:
94:df:38:68:fe:06:f4:74:36:5b:07:d2:83:31:d6:
fa:4b:9c:9c:ff:34:bc:fd:38:c1:c7:15:c7:40:d8:
1b:56:6e:12:24:f1:9e:23:43:ca:02:24:f7:17:ed:
de:67:28:b5:b6:b1:ee:ae:fe:ba:90:db:a8:7b:1e:
44:c9:4a:a5:81:46:cc:50:74:5a:c1:cc:d6:a3:b2:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1E:3B:AF:5F:89:74:32:D0:01:F9:85:12:A6:02:CB:0A:80:45:A4
X509v3 Authority Key Identifier:
keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c2:bc:8b:80:3b:96:fd:00:d4:73:70:e3:c2:da:74:a5:ac:
b3:1c:9f:87:02:cd:c7:2c:cc:de:9d:96:0d:8c:c2:ad:75:b3:
34:97:16:23:1f:c0:b5:6b:f4:2d:dc:a4:2c:91:a0:20:64:36:
30:41:af:e1:31:9e:6d:32:e0:39:08:83:26:d8:4d:55:92:a4:
39:d8:fe:c3:2e:43:91:e6:e4:7f:39:40:0d:9e:0c:f2:de:22:
36:63:71:50:62:28:2f:42:1f:ee:1b:bd:bd:8c:3b:de:b9:98:
f6:72:fb:d7:15:a6:2d:d1:62:c2:18:90:33:bc:8b:a9:35:c6:
4b:b9:17:76:e5:2a:4a:60:3b:bd:f4:56:bf:f6:04:41:d0:7b:
c0:f1:5a:6b:6d:82:41:71:a7:1d:a8:6c:0c:6d:38:a5:08:37:
c8:d5:f3:9e:df:9a:94:f5:cf:3e:4c:82:85:eb:3c:22:2f:4a:
39:e2:f4:7a:8e:eb:ba:33:9d:1c:59:12:3e:b0:a2:11:3b:93:
e1:b5:1f:d9:a6:ab:97:73:45:3e:cf:4e:33:ae:54:ca:32:44:
22:8c:06:7c:8d:cf:79:de:4d:09:a8:f8:d8:af:2b:3b:a8:69:
bd:dd:23:bb:77:ba:8a:3a:64:76:29:7c:4e:d2:2d:8d:68:f3:
10:d8:04:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQN5VkYzqbZjhNJ8diUK0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5
NzM2MGEwHhcNMjUwNzI3MDUwMDIxWhcNMjUwNzI4MDUwMDIxWjAzMTEwLwYDVQQD
EygwYjFlM2JhZjVmODk3NDMyZDAwMWY5ODUxMmE2MDJjYjBhODA0NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZY25B6OBkXEztMDSirhnrYq1A6Z
5XlGcyxFH73wObNCYUMfYEsPKeJQzVloIbZWIEKdt6JGBs04LqPeMwwjEHrb1tLh
pzZ4CPCPvYEhmK08p6YYq2uHu/HuicMCG/zykOwSUKyBXisD3HSdyMGPpzRy/bR2
jHbQilRSFE9MuQmVgIYlYmBPI1F689lpOfXWx2TBii362g32O/q2zowZBvWDpC+f
A+asMdXTuK0iS2OIOMyU3zho/gb0dDZbB9KDMdb6S5yc/zS8/TjBxxXHQNgbVm4S
JPGeI0PKAiT3F+3eZyi1trHurv66kNuoex5EyUqlgUbMUHRawczWo7LrZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAseO69fiXQy0AH5hRKmAssKgEWkMB8GA1UdIwQY
MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt
ZGVjMjFlZWZhMzhiLzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi
LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcK8i4A7
lv0A1HNw48LadKWssxyfhwLNxyzM3p2WDYzCrXWzNJcWIx/AtWv0LdykLJGgIGQ2
MEGv4TGebTLgOQiDJthNVZKkOdj+wy5DkebkfzlADZ4M8t4iNmNxUGIoL0If7hu9
vYw73rmY9nL71xWmLdFiwhiQM7yLqTXGS7kXduUqSmA7vfRWv/YEQdB7wPFaa22C
QXGnHahsDG04pQg3yNXznt+alPXPPkyChes8Ii9KOeL0eo7rujOdHFkSPrCiETuT
4bUf2aarl3NFPs9OM65UyjJEIowGfI3Ped5NCaj42K8rO6hpvd0ju3e6ijpkdil8
TtItjWjzENgEJw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:02:44 2025 by rpki-client