Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: rB4c/Ja7fRdcoFyK/NeHkoHh1CP0SGA+ipIoLwnxAuc=
Subject key identifier: 44:1B:F0:12:A5:01:14:6A:53:A8:E7:7C:05:30:30:83:D7:41:36:A9
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 01984889A6626C143ED08A4BF91552F6071D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 05E1
Signing time: Sat 26 Jul 2025 21:00:37 +0000
Manifest this update: Sat 26 Jul 2025 21:00:37 +0000
Manifest next update: Sun 27 Jul 2025 21:00:37 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: qKUDO2DYgciB3BxKfRCOh7D1csUyayi45C+jIdFwUd8=)
2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=)
3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:a6:62:6c:14:3e:d0:8a:4b:f9:15:52:f6:07:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Jul 26 21:00:37 2025 GMT
Not After : Jul 27 21:00:37 2025 GMT
Subject: CN=441bf012a501146a53a8e77c05303083d74136a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:43:04:0d:e1:68:0d:64:a5:6d:36:d3:e5:
44:da:cf:c8:41:48:85:58:9d:14:1b:5b:54:f3:4c:
09:6f:4e:1e:ca:21:1c:37:cf:e7:58:9e:77:a4:89:
a5:92:ef:17:68:9b:94:06:bb:1d:d1:5d:ba:db:53:
a2:49:24:46:ca:d6:88:14:d6:58:71:6e:b3:22:74:
b8:14:d4:c3:2c:f7:61:a5:3a:de:66:d0:91:f0:93:
c9:df:a3:64:16:bc:e8:cb:05:45:26:a5:3a:c9:56:
ee:7a:ff:98:e5:68:fd:d0:31:b2:0f:d4:87:7c:03:
69:ec:58:5a:0d:2e:23:be:63:e1:9b:e3:a6:d0:52:
41:41:81:f6:fe:78:be:6f:9d:45:ae:d4:ad:23:ba:
0a:83:40:2a:85:4a:6a:00:9a:7d:c6:6d:ff:98:37:
73:87:22:e9:7b:4e:ab:70:d4:a1:20:62:f2:09:10:
f7:52:89:7e:11:b6:a0:d5:e0:04:b5:2d:54:3c:61:
57:1b:6b:ca:66:8d:39:0d:c0:c2:7b:42:45:f3:de:
16:56:1a:87:b9:bb:a4:a9:c5:77:43:46:63:29:af:
1a:7c:67:dc:a3:4b:0e:05:87:ee:57:cb:fb:cd:94:
93:8a:19:c1:44:d7:cb:53:83:1c:b8:44:5b:42:01:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1B:F0:12:A5:01:14:6A:53:A8:E7:7C:05:30:30:83:D7:41:36:A9
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6a:13:df:dd:ea:a1:be:12:69:7f:72:fa:17:c0:71:4e:67:
8c:b1:9c:b2:b0:81:6e:4e:86:74:27:0b:13:63:db:07:82:3f:
0d:74:70:2f:bf:16:06:d5:4f:c2:f8:9a:49:75:55:67:d7:86:
fb:19:7d:42:1e:0b:fa:76:da:40:1c:67:c2:76:57:ed:72:ce:
27:61:5a:04:39:85:5f:6f:c1:d8:3a:c9:b7:ce:cb:2d:43:a8:
f9:33:d7:c3:c0:93:a7:55:93:d7:7d:b4:94:9a:e7:24:3b:8f:
50:64:00:1c:b5:6b:8f:21:de:c2:b3:f0:2d:e0:81:e1:77:a1:
ca:21:c8:27:e5:73:e3:0f:7c:cd:17:0b:94:d0:b1:a2:d5:29:
eb:05:11:37:23:11:97:ab:ce:b0:ac:e7:48:8a:6c:2b:f4:e1:
a8:49:d0:5f:a2:39:bf:5b:0f:a0:f3:58:36:cb:7e:72:1c:50:
a1:53:e6:39:3c:96:11:0c:6f:68:04:7a:3e:f0:10:d6:43:5c:
f3:d0:ed:b1:91:dd:5f:e8:67:be:f2:54:ea:de:fc:c9:9d:f9:
11:f9:bd:8e:2b:72:a6:83:37:32:2e:54:cd:d9:60:82:a9:55:
5c:1e:62:d8:d4:ad:15:13:dc:95:d8:0f:74:6b:39:5f:ef:a2:
47:b3:38:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiaZibBQ+0IpL+RVS9gcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDY1Y2EzNGE5NjhiMGQ4NTYxYWI4Nzc2ZGJiMDJkZGI3
Yzc4MzMwHhcNMjUwNzI2MjEwMDM3WhcNMjUwNzI3MjEwMDM3WjAzMTEwLwYDVQQD
Eyg0NDFiZjAxMmE1MDExNDZhNTNhOGU3N2MwNTMwMzA4M2Q3NDEzNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1FDBA3haA1kpW020+VE2s/IQUiF
WJ0UG1tU80wJb04eyiEcN8/nWJ53pImlku8XaJuUBrsd0V2621OiSSRGytaIFNZY
cW6zInS4FNTDLPdhpTreZtCR8JPJ36NkFrzoywVFJqU6yVbuev+Y5Wj90DGyD9SH
fANp7FhaDS4jvmPhm+Om0FJBQYH2/ni+b51FrtStI7oKg0AqhUpqAJp9xm3/mDdz
hyLpe06rcNShIGLyCRD3Uol+Ebag1eAEtS1UPGFXG2vKZo05DcDCe0JF894WVhqH
ubukqcV3Q0ZjKa8afGfco0sOBYfuV8v7zZSTihnBRNfLU4McuERbQgGdYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQb8BKlARRqU6jnfAUwMIPXQTapMB8GA1UdIwQY
MBaAFNTWXKNKlosNhWGrh3bbsC3bfHgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGIt
MzJlZmY5NWIzOWRjLzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGItMzJlZmY5NWIzOWRj
LzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmoT393q
ob4SaX9y+hfAcU5njLGcsrCBbk6GdCcLE2PbB4I/DXRwL78WBtVPwviaSXVVZ9eG
+xl9Qh4L+nbaQBxnwnZX7XLOJ2FaBDmFX2/B2DrJt87LLUOo+TPXw8CTp1WT1320
lJrnJDuPUGQAHLVrjyHewrPwLeCB4XehyiHIJ+Vz4w98zRcLlNCxotUp6wURNyMR
l6vOsKznSIpsK/ThqEnQX6I5v1sPoPNYNst+chxQoVPmOTyWEQxvaAR6PvAQ1kNc
89DtsZHdX+hnvvJU6t78yZ35Efm9jitypoM3Mi5UzdlggqlVXB5i2NStFRPcldgP
dGs5X++iR7M4Rg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:22:10 2025 by rpki-client