Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier: /PrTWZPjrPNxkqbCcKa3l2wJFVtJd5tQ/uD9v2muU2k=
Subject key identifier: 3A:52:60:46:C8:30:84:D3:50:3C:2A:1C:BE:C5:60:52:B8:CA:04:71
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 01984589BB855EBBABF1ECC20E113E7715D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 07:01:50 +0000
Manifest this update: Sat 26 Jul 2025 07:01:50 +0000
Manifest next update: Sun 27 Jul 2025 07:01:50 +0000
Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: 98Ci1t0ovvtZKO4bl9zvJ/dQEDeqpUj3EH9Esvy9Tlc=)
2: 9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa (hash: 7XUr33w/Uy5ddx5EoTNZGUbNED5TJtOlZQk+2e6Mxi8=)
3: wfH5z_Bg4z7tHe6fq0H-30TIL34.roa (hash: VmP56mLP1KsPx5GBmYqlZvdPkuhp1r337TX7Q50d+Qg=)
4: yj2XO7X6nmMUvJxwQor2eoTB-gs.roa (hash: SDht8xJ05XM4bxvOhysfN3ceB8zgniuYHVUq4tgjt6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:bb:85:5e:bb:ab:f1:ec:c2:0e:11:3e:77:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Jul 26 07:01:50 2025 GMT
Not After : Jul 27 07:01:50 2025 GMT
Subject: CN=3a526046c83084d3503c2a1cbec56052b8ca0471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:b4:4f:1e:88:70:e0:bb:42:5a:e3:c5:52:
36:0d:16:59:1d:98:11:c5:1a:ae:40:ea:35:95:fb:
61:d6:cc:15:7e:a0:e5:66:5c:37:c8:b2:ab:20:ff:
71:88:51:ab:fe:1f:a4:f6:82:fb:67:27:b4:76:b8:
58:be:ff:a7:83:0a:09:96:53:37:55:20:1d:9a:b7:
4a:6b:23:da:65:ff:80:ba:bf:f4:e9:c6:ef:2a:96:
89:80:23:66:23:54:76:ad:61:8e:e7:b9:00:66:49:
0c:05:39:af:41:2e:92:05:0c:95:c2:f4:f5:32:54:
7f:df:90:5a:82:42:06:84:30:2d:01:d7:7e:69:e6:
8d:19:c5:c7:ad:1a:3c:48:36:23:69:64:e6:6e:e3:
2d:10:43:1d:b5:23:d0:d6:fe:7f:00:a8:bf:30:8b:
05:0f:05:90:d4:94:64:5f:31:72:65:c8:f1:c0:d6:
f2:0a:00:7e:e0:11:90:c5:fb:3c:71:46:8c:d5:ca:
0f:82:58:7d:c4:2b:1e:ab:5f:be:e4:9b:df:28:27:
bd:7a:42:4c:bb:93:0e:74:bb:96:62:da:89:59:f2:
96:b1:4b:0b:59:3b:df:7d:d1:a1:ee:21:46:26:b6:
cf:29:56:90:99:3c:60:82:08:b2:c3:3f:5f:11:0a:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:52:60:46:C8:30:84:D3:50:3C:2A:1C:BE:C5:60:52:B8:CA:04:71
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0b:07:0b:4b:76:be:03:46:b5:85:41:da:87:2d:d9:64:e0:
16:27:1c:56:1c:7e:d3:ad:60:02:3e:8f:42:6a:c7:9d:80:64:
74:b6:85:fc:e7:cf:ac:c2:62:c9:7e:b7:2d:7d:25:6d:91:b6:
8c:49:ad:05:55:8c:49:f7:42:b9:a5:69:0a:e9:46:49:cc:25:
b3:ba:4f:89:df:89:68:64:4e:e1:43:da:c7:4c:5a:3d:d3:8f:
7e:d3:be:b6:02:be:2c:46:12:02:a6:6e:61:03:95:ea:a9:9f:
a1:89:94:24:21:56:48:55:6e:9d:39:00:84:90:2e:aa:23:36:
2d:c7:03:1a:7c:42:98:e3:ca:79:07:53:f7:7a:ca:f9:b5:6d:
44:09:2c:89:2f:83:7e:1e:3b:70:f1:10:fd:33:d4:4e:91:74:
b4:a6:14:c9:cf:ed:57:eb:7d:18:ec:a4:00:e9:d0:5f:2d:b8:
e6:f4:8c:e5:4b:f9:6e:c5:33:48:72:51:95:04:42:04:67:66:
76:15:15:d9:27:a5:c7:a1:c2:ac:cf:5e:d5:11:1e:26:cc:2d:
c3:f9:c1:68:12:f4:36:04:5b:28:5b:0d:c7:03:06:34:e0:90:
bf:23:5e:72:4e:f0:dc:c3:3d:b1:0e:38:69:11:05:47:ec:3b:
c6:44:ea:b0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhFibuFXrur8ezCDhE+dxXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYzA4OWE5Y2Q2YTAzNzViYWU0OTljYzA2YTRjYWEzMDcx
YjVkNGMwHhcNMjUwNzI2MDcwMTUwWhcNMjUwNzI3MDcwMTUwWjAzMTEwLwYDVQQD
EygzYTUyNjA0NmM4MzA4NGQzNTAzYzJhMWNiZWM1NjA1MmI4Y2EwNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nK0Tx6IcOC7QlrjxVI2DRZZHZgR
xRquQOo1lfth1swVfqDlZlw3yLKrIP9xiFGr/h+k9oL7Zye0drhYvv+ngwoJllM3
VSAdmrdKayPaZf+Aur/06cbvKpaJgCNmI1R2rWGO57kAZkkMBTmvQS6SBQyVwvT1
MlR/35BagkIGhDAtAdd+aeaNGcXHrRo8SDYjaWTmbuMtEEMdtSPQ1v5/AKi/MIsF
DwWQ1JRkXzFyZcjxwNbyCgB+4BGQxfs8cUaM1coPglh9xCseq1++5JvfKCe9ekJM
u5MOdLuWYtqJWfKWsUsLWTvffdGh7iFGJrbPKVaQmTxgggiywz9fEQqFuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDpSYEbIMITTUDwqHL7FYFK4ygRxMB8GA1UdIwQY
MBaAFPrAianNagN1uuSZzAakyqMHG11MMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zQ0pxYzFxQTNXNjVKbk1CcVRLb3djYlhVdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvMmZhYzlmLTYxOGMtNDJmNi05NDgz
LTc3N2Y4NjE2NjIyMS8xLzEtc0NKcWMxcUEzVzY1Sm5NQnFUS293Y2JYVXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzhiLzJmYWM5Zi02MThjLTQyZjYtOTQ4My03NzdmODYxNjYy
MjEvMS8xLXNDSnFjMXFBM1c2NUpuTUJxVEtvd2NiWFV3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQsH
C0t2vgNGtYVB2oct2WTgFiccVhx+061gAj6PQmrHnYBkdLaF/OfPrMJiyX63LX0l
bZG2jEmtBVWMSfdCuaVpCulGScwls7pPid+JaGRO4UPax0xaPdOPftO+tgK+LEYS
AqZuYQOV6qmfoYmUJCFWSFVunTkAhJAuqiM2LccDGnxCmOPKeQdT93rK+bVtRAks
iS+Dfh47cPEQ/TPUTpF0tKYUyc/tV+t9GOykAOnQXy245vSM5Uv5bsUzSHJRlQRC
BGdmdhUV2Selx6HCrM9e1REeJswtw/nBaBL0NgRbKFsNxwMGNOCQvyNeck7w3MM9
sQ44aREFR+w7xkTqsA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:52:32 2025 by rpki-client