Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File: 1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier: O7eT643JMsmQkWOU3VK2MQz20M5VNFItIzPzo1RO4o4=
Subject key identifier: 60:7C:A3:50:DF:68:18:07:66:02:04:9A:22:91:3B:37:A1:74:57:1A
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial: 01984A0A5C2F8FDDA25369805EF1C618E612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 04:00:49 +0000
Manifest this update: Sun 27 Jul 2025 04:00:49 +0000
Manifest next update: Mon 28 Jul 2025 04:00:49 +0000
Files and hashes: 1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: DhGq8a8bYruJ8NySXcQUTYB3MPvSYnwFamdWuGv3bbU=)
2: HUiYQLYoRn-P8-AKIUmGnSk_fUQ.roa (hash: ozdi5qHnRcow/nH1EVH0214AE7vAhAxmdAJcuT+IzE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5c:2f:8f:dd:a2:53:69:80:5e:f1:c6:18:e6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
Validity
Not Before: Jul 27 04:00:49 2025 GMT
Not After : Jul 28 04:00:49 2025 GMT
Subject: CN=607ca350df6818076602049a22913b37a174571a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:26:ac:45:3d:4c:1a:a2:38:df:04:19:1c:
46:cf:21:ac:f4:45:7a:8c:bd:81:58:57:82:3d:01:
07:c7:31:12:59:ce:6a:f1:07:d0:bb:07:0f:90:89:
4f:c0:9a:b2:05:52:62:a3:3f:ab:46:fa:c1:c3:99:
79:ca:06:48:bb:b9:df:c1:66:fe:e0:a0:2f:00:0f:
3c:7d:02:cf:69:84:6b:c4:56:96:c3:bb:a7:ad:5b:
8e:49:91:dc:67:21:f6:19:eb:92:b7:53:6b:18:33:
d5:00:18:32:48:0d:07:f6:88:7f:dc:62:bc:71:e0:
90:c5:dc:6b:43:7b:89:1f:b5:78:dc:a6:0c:df:b8:
45:78:49:62:ca:4e:20:05:26:f6:c8:92:5e:b6:2c:
df:34:37:fe:b3:1d:8a:09:1d:31:92:6b:db:88:e9:
68:92:a0:c0:b5:bc:55:c8:80:37:2b:45:5a:a3:0f:
56:e3:31:b1:b9:a1:6f:5e:1b:5b:41:bf:5a:a4:bd:
2e:5c:05:90:c4:88:73:bc:fa:b2:45:cf:61:57:fa:
91:45:67:38:fa:8a:b4:57:83:1b:3d:80:38:dd:46:
ba:7f:67:ac:b4:15:67:e3:dc:a8:77:69:0c:02:3b:
11:72:75:72:cd:1d:34:82:5f:fd:52:b9:8c:1c:c2:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:A3:50:DF:68:18:07:66:02:04:9A:22:91:3B:37:A1:74:57:1A
X509v3 Authority Key Identifier:
keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:66:3a:96:a5:6d:c7:9a:8b:15:b3:e6:9d:d6:92:cd:c7:ba:
57:4d:91:91:65:27:48:20:fd:42:c4:e9:0c:dc:d5:ae:9f:27:
44:50:45:02:87:34:8b:4a:85:cf:83:c9:80:8a:4d:1b:45:c5:
fb:e6:08:ac:01:e0:bd:22:3f:4a:75:92:59:8c:05:8a:e7:ab:
a1:07:83:10:f4:77:6b:09:9b:cc:70:c5:71:8a:9a:21:99:f5:
51:f4:6e:b6:5f:d4:f6:94:a2:d4:15:e1:ce:b9:1c:8b:c2:33:
c1:7d:bd:37:06:6b:a3:aa:a6:e3:5d:64:20:15:00:aa:0b:16:
c3:c1:49:b4:66:f6:40:15:50:3a:47:ee:76:30:3c:5b:84:84:
47:40:f8:70:f2:98:9f:5e:2d:92:bf:95:de:2a:f7:48:60:11:
f2:13:0c:7f:d7:e7:8a:79:85:11:42:bd:d2:ec:2f:e3:2d:8a:
0f:d4:70:57:26:bc:c3:89:ce:13:a5:a6:b4:d3:35:b3:02:1b:
15:6f:3e:0d:10:16:f5:67:b1:3a:ff:0e:f1:f9:6a:9e:03:8c:
3c:de:4a:6d:41:59:ea:69:36:28:7d:3a:76:26:d5:68:91:56:
ef:3c:0b:06:5c:27:60:e8:5c:d9:3b:78:d6:a7:d9:54:98:1a:
b2:37:a1:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKClwvj92iU2mAXvHGGOYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDgyOTQ0NDNhZWQxNmQwNmI4NmFmMTRmNWE1ZjBhNTA4
Mzc3NGEwHhcNMjUwNzI3MDQwMDQ5WhcNMjUwNzI4MDQwMDQ5WjAzMTEwLwYDVQQD
Eyg2MDdjYTM1MGRmNjgxODA3NjYwMjA0OWEyMjkxM2IzN2ExNzQ1NzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSwmrEU9TBqiON8EGRxGzyGs9EV6
jL2BWFeCPQEHxzESWc5q8QfQuwcPkIlPwJqyBVJioz+rRvrBw5l5ygZIu7nfwWb+
4KAvAA88fQLPaYRrxFaWw7unrVuOSZHcZyH2GeuSt1NrGDPVABgySA0H9oh/3GK8
ceCQxdxrQ3uJH7V43KYM37hFeEliyk4gBSb2yJJetizfNDf+sx2KCR0xkmvbiOlo
kqDAtbxVyIA3K0Vaow9W4zGxuaFvXhtbQb9apL0uXAWQxIhzvPqyRc9hV/qRRWc4
+oq0V4MbPYA43Ua6f2estBVn49yod2kMAjsRcnVyzR00gl/9UrmMHMJmlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB8o1DfaBgHZgIEmiKROzehdFcaMB8GA1UdIwQY
MBaAFNZIKURDrtFtBrhq8U9aXwpQg3dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNTg3ZTktMzNhOS00YTg2LThjZDkt
ZTU3Y2M4MWY1MjMzLzEvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNTg3ZTktMzNhOS00YTg2LThjZDktZTU3Y2M4MWY1MjMz
LzEvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGY6lqVt
x5qLFbPmndaSzce6V02RkWUnSCD9QsTpDNzVrp8nRFBFAoc0i0qFz4PJgIpNG0XF
++YIrAHgvSI/SnWSWYwFiueroQeDEPR3awmbzHDFcYqaIZn1UfRutl/U9pSi1BXh
zrkci8IzwX29NwZro6qm411kIBUAqgsWw8FJtGb2QBVQOkfudjA8W4SER0D4cPKY
n14tkr+V3ir3SGAR8hMMf9fninmFEUK90uwv4y2KD9RwVya8w4nOE6WmtNM1swIb
FW8+DRAW9WexOv8O8flqngOMPN5KbUFZ6mk2KH06dibVaJFW7zwLBlwnYOhc2Tt4
1qfZVJgasjehHw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:16 2025 by rpki-client