Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier: mSem62411GEuMla1tk26bl36WT+l4ineJDezj6tvLR8=
Subject key identifier: B8:A2:97:60:92:2E:C1:3A:72:73:DD:D0:CE:E0:F6:28:2D:15:FD:F9
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial: 0198380499711D2E74026338FB8BF7E6D113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number: 01F8
Signing time: Wed 23 Jul 2025 16:01:22 +0000
Manifest this update: Wed 23 Jul 2025 16:01:22 +0000
Manifest next update: Thu 24 Jul 2025 16:01:22 +0000
Files and hashes: 1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: OJ5M8O3Ixjo1rcLbsArs/41ri/CcNW2HrxliGEhuzDU=)
2: 1HxfapABCT9f2Gi5FEEd5TTonAI.roa (hash: r74LeOGcVT48Sbc9JuiH8jNwqtPW9xH2+O8jIbbYSCU=)
3: T2c08RYIJ-aF9KcWXtGkde8-Pdk.roa (hash: ugT57+pZzDU4gTFn9+sLNI0YDzkT+2i3eEwIihTAs/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:99:71:1d:2e:74:02:63:38:fb:8b:f7:e6:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
Validity
Not Before: Jul 23 16:01:22 2025 GMT
Not After : Jul 24 16:01:22 2025 GMT
Subject: CN=b8a29760922ec13a7273ddd0cee0f6282d15fdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:1e:ed:2a:db:de:0a:60:cf:bf:00:45:00:
48:18:44:6c:44:70:5f:de:9b:58:aa:b9:46:c4:0a:
f9:59:0d:8b:c0:03:1e:cc:ba:4c:cf:19:20:69:8c:
5a:b4:63:2f:eb:61:a2:03:71:c0:10:8f:34:3a:48:
55:57:c0:c1:f7:98:78:46:99:9e:79:0a:5f:06:59:
8e:26:9d:c9:bf:7c:c3:14:33:81:e6:c6:0b:9c:ea:
34:77:ae:54:cb:b6:ec:9e:16:1a:30:21:23:3d:0f:
7e:a8:ce:fc:da:91:4f:9e:73:6c:2d:7a:a2:fc:66:
6d:08:46:ba:d6:8f:90:35:fa:da:8b:70:03:b2:41:
a3:be:d4:2a:b8:77:e0:1b:53:dc:50:14:7a:53:1c:
0b:9b:a3:4d:3b:45:d0:c8:39:8e:d8:a0:d6:c8:8f:
38:c8:81:36:87:fa:61:f0:19:87:98:8f:fa:fa:b3:
6d:eb:84:55:cb:65:44:ee:d5:d1:be:a9:9c:64:05:
03:d9:55:4e:1d:1a:63:3e:2d:6c:1a:5e:91:c8:0f:
26:0f:51:d9:e4:14:3b:cc:79:ff:dd:e9:bc:ce:c7:
60:b7:45:90:84:a4:eb:08:54:e3:db:27:93:0b:e7:
ad:29:8c:d7:71:1f:a9:8f:85:38:2c:a1:f3:40:97:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:97:60:92:2E:C1:3A:72:73:DD:D0:CE:E0:F6:28:2D:15:FD:F9
X509v3 Authority Key Identifier:
keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:21:90:76:6c:67:c8:d4:ed:54:1f:31:68:5f:6b:2d:74:29:
57:53:f8:aa:47:63:a2:10:ff:63:1d:da:eb:7c:3f:12:f5:49:
05:d6:e8:39:94:5f:81:b2:13:57:65:b2:31:e5:fc:4e:8b:78:
ef:ab:21:ff:29:6d:18:7b:4e:21:d2:97:42:26:1a:be:16:f0:
4d:df:d9:d7:b0:de:db:67:e1:95:ee:d6:e5:d3:63:e9:2c:8b:
25:e9:ce:8e:11:39:0a:81:cd:62:dd:7b:f3:27:e6:8a:18:a2:
36:ed:1b:b6:bf:af:91:4e:26:b2:2b:39:66:2f:9b:60:51:f3:
44:ac:42:ca:99:a8:71:78:3d:c7:a7:f6:86:8c:d8:a8:25:63:
db:42:3d:97:ff:1b:3b:92:52:9d:75:1e:bd:4a:5a:90:c6:a4:
43:78:f8:ac:3d:71:ed:d4:89:24:84:81:28:57:aa:0d:f1:ef:
28:6c:cf:22:ea:4c:ed:ac:35:af:8d:65:50:d5:b8:22:6c:9e:
f9:25:dd:4e:20:88:2e:d5:c1:7b:98:54:13:bd:cf:cb:61:25:
11:f4:7e:eb:52:bb:3f:98:12:83:0c:6b:e7:0b:a1:13:1a:de:
f2:90:11:29:e5:02:48:5f:ae:3a:d9:f5:1b:88:3c:24:d7:85:
06:89:84:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4BJlxHS50AmM4+4v35tETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDc0NzE0MTQyZjgzOTcwMTQ4ZmFiMGVjM2UyMTE3YzM5
M2M0OTEwHhcNMjUwNzIzMTYwMTIyWhcNMjUwNzI0MTYwMTIyWjAzMTEwLwYDVQQD
EyhiOGEyOTc2MDkyMmVjMTNhNzI3M2RkZDBjZWUwZjYyODJkMTVmZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZoe7Srb3gpgz78ARQBIGERsRHBf
3ptYqrlGxAr5WQ2LwAMezLpMzxkgaYxatGMv62GiA3HAEI80OkhVV8DB95h4Rpme
eQpfBlmOJp3Jv3zDFDOB5sYLnOo0d65Uy7bsnhYaMCEjPQ9+qM782pFPnnNsLXqi
/GZtCEa61o+QNfrai3ADskGjvtQquHfgG1PcUBR6UxwLm6NNO0XQyDmO2KDWyI84
yIE2h/ph8BmHmI/6+rNt64RVy2VE7tXRvqmcZAUD2VVOHRpjPi1sGl6RyA8mD1HZ
5BQ7zHn/3em8zsdgt0WQhKTrCFTj2yeTC+etKYzXcR+pj4U4LKHzQJc3EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiil2CSLsE6cnPd0M7g9igtFf35MB8GA1UdIwQY
MBaAFNQHRxQUL4OXAUj6sOw+IRfDk8SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTkt
ZDc5Y2UyZGVlYTcwLzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTktZDc5Y2UyZGVlYTcw
LzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSGQdmxn
yNTtVB8xaF9rLXQpV1P4qkdjohD/Yx3a63w/EvVJBdboOZRfgbITV2WyMeX8Tot4
76sh/yltGHtOIdKXQiYavhbwTd/Z17De22fhle7W5dNj6SyLJenOjhE5CoHNYt17
8yfmihiiNu0btr+vkU4msis5Zi+bYFHzRKxCypmocXg9x6f2hozYqCVj20I9l/8b
O5JSnXUevUpakMakQ3j4rD1x7dSJJISBKFeqDfHvKGzPIupM7aw1r41lUNW4Imye
+SXdTiCILtXBe5hUE73Py2ElEfR+61K7P5gSgwxr5wuhExre8pARKeUCSF+uOtn1
G4g8JNeFBomE0Q==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:19:26 2025 by rpki-client