Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: D0YtflyNiz5+gwzmL2Yl8TIpRaUhdUIngPDojUXfGXs=
Subject key identifier: 30:B2:39:C5:7D:D5:D2:2E:C4:36:61:8C:5C:93:DA:1F:23:D8:64:AE
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 019849D38A3101CE3671C64322EE341E9CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 03:00:56 +0000
Manifest this update: Sun 27 Jul 2025 03:00:56 +0000
Manifest next update: Mon 28 Jul 2025 03:00:56 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: UG6G6Dx+PKmRYItmem/5HlnAYpFEvZxNZzU3CKFK0T0=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8a:31:01:ce:36:71:c6:43:22:ee:34:1e:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Jul 27 03:00:56 2025 GMT
Not After : Jul 28 03:00:56 2025 GMT
Subject: CN=30b239c57dd5d22ec436618c5c93da1f23d864ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:0d:d6:94:18:f9:3a:d5:16:41:50:9e:73:
ed:89:b7:eb:14:40:0a:21:96:64:86:85:bc:06:10:
ac:bd:ab:ec:08:bb:90:02:2e:be:b2:67:b4:22:6f:
99:7a:13:4e:cd:46:b5:fa:30:5d:43:a8:a1:35:d8:
10:95:f9:f6:06:91:ec:d3:6f:1a:6b:03:1d:9b:36:
29:f8:b8:4c:c8:aa:2d:0b:0c:07:15:f5:6d:4d:f5:
bf:3f:9d:52:86:bb:80:26:a0:d1:34:6d:9f:47:7c:
bd:64:3b:8d:c4:e6:cc:e2:20:b0:53:57:e6:5c:a7:
b8:5c:09:b8:0d:2a:05:4f:85:de:00:4e:7d:da:3e:
bf:9e:3a:27:08:2a:17:5e:9d:36:20:14:77:b7:4f:
91:9a:2e:76:c4:f1:25:be:3a:9c:5e:9e:ba:ba:74:
15:c2:b6:40:6d:38:e8:2b:6f:a4:16:26:de:89:8b:
5c:32:b4:91:ac:c1:bd:72:16:f5:f2:4e:de:df:73:
6f:fb:91:9d:42:3d:ee:b3:28:ea:bf:1e:0e:b2:d0:
35:0a:17:92:84:06:9b:8e:70:2c:da:cd:7c:bf:21:
0f:69:19:5f:84:c5:13:01:43:e0:74:54:d5:2c:dd:
14:76:fc:15:a3:0b:4a:55:6a:34:8f:0f:a8:38:69:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:39:C5:7D:D5:D2:2E:C4:36:61:8C:5C:93:DA:1F:23:D8:64:AE
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f7:5f:f7:cc:64:57:f2:1e:a7:9b:6a:64:48:db:d7:54:9d:
a4:a6:27:a6:f8:e0:6b:75:c7:9f:98:ff:c0:8a:ae:45:c3:8d:
44:f5:54:aa:8a:8f:29:10:fe:20:e3:7a:72:cf:3e:9e:6f:e3:
75:63:c0:ba:d1:7d:b6:95:82:1d:52:c6:6d:11:89:09:7b:f3:
bb:d9:f5:0b:0c:1f:30:5f:60:21:d6:d2:dc:97:d0:b2:b1:db:
c2:43:b2:ca:c0:fb:9b:5c:0d:92:4a:81:05:07:47:42:e0:d7:
47:f6:89:ae:fa:34:8a:4c:8b:53:0a:e2:64:45:8b:a5:da:05:
98:e9:76:f4:04:54:74:c3:90:1f:b6:31:e0:ce:e5:c3:9d:d4:
a0:18:a0:b1:3d:3d:8c:f4:06:42:23:8d:6e:8c:5d:2d:85:a7:
fc:50:be:b6:78:d9:58:1b:db:5c:a7:8e:d0:7a:08:31:eb:d2:
6c:8c:31:12:ea:b5:8e:71:b2:64:88:64:08:fb:a4:aa:52:00:
3e:5b:7a:84:f8:88:7c:24:ad:31:ab:a1:e5:7d:86:b9:af:b7:
86:32:e4:99:9f:2f:66:b4:47:89:ab:84:2b:dd:85:b5:fd:af:
99:8e:a9:2b:a4:dd:39:d9:f1:45:94:21:03:c0:de:ac:58:5c:
2d:37:59:c3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhJ04oxAc42ccZDIu40HpzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjY0NDc2ZWYzOTQ1YjM0NGZmZWUzOGRhNTZjYWNjYzVk
MDM5YjAwHhcNMjUwNzI3MDMwMDU2WhcNMjUwNzI4MDMwMDU2WjAzMTEwLwYDVQQD
EygzMGIyMzljNTdkZDVkMjJlYzQzNjYxOGM1YzkzZGExZjIzZDg2NGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14IN1pQY+TrVFkFQnnPtibfrFEAK
IZZkhoW8BhCsvavsCLuQAi6+sme0Im+ZehNOzUa1+jBdQ6ihNdgQlfn2BpHs028a
awMdmzYp+LhMyKotCwwHFfVtTfW/P51ShruAJqDRNG2fR3y9ZDuNxObM4iCwU1fm
XKe4XAm4DSoFT4XeAE592j6/njonCCoXXp02IBR3t0+Rmi52xPElvjqcXp66unQV
wrZAbTjoK2+kFibeiYtcMrSRrMG9chb18k7e33Nv+5GdQj3usyjqvx4OstA1CheS
hAabjnAs2s18vyEPaRlfhMUTAUPgdFTVLN0UdvwVowtKVWo0jw+oOGkTrQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDCyOcV91dIuxDZhjFyT2h8j2GSuMB8GA1UdIwQY
MBaAFPr2RHbvOUWzRP/uONpWyszF0DmwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12WkVkdTg1UmJORV8tNDQybGJLek1YUU9iQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNjdlMzZjLWNkNTUtNGI1OS1hYTEy
LTc0NDJmMGUyYmQxNy8xLzEtdlpFZHU4NVJiTkVfLTQ0MmxiS3pNWFFPYkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk4LzY3ZTM2Yy1jZDU1LTRiNTktYWExMi03NDQyZjBlMmJk
MTcvMS8xLXZaRWR1ODVSYk5FXy00NDJsYkt6TVhRT2JBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavdf
98xkV/Iep5tqZEjb11SdpKYnpvjga3XHn5j/wIquRcONRPVUqoqPKRD+ION6cs8+
nm/jdWPAutF9tpWCHVLGbRGJCXvzu9n1CwwfMF9gIdbS3JfQsrHbwkOyysD7m1wN
kkqBBQdHQuDXR/aJrvo0ikyLUwriZEWLpdoFmOl29ARUdMOQH7Yx4M7lw53UoBig
sT09jPQGQiONboxdLYWn/FC+tnjZWBvbXKeO0HoIMevSbIwxEuq1jnGyZIhkCPuk
qlIAPlt6hPiIfCStMauh5X2Gua+3hjLkmZ8vZrRHiauEK92Ftf2vmY6pK6TdOdnx
RZQhA8DerFhcLTdZww==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:21 2025 by rpki-client