Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: QZoijmN2krkB3kkachg5cnRcw+kzNQts6m0v4VKY8Z0=
Subject key identifier: 58:F5:9C:11:F7:A1:B2:E7:CD:D1:E4:BE:5B:5A:B4:F8:7E:70:43:C3
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 019848C06B4A5D4B8B620E118C47B2CB9917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 13CF
Signing time: Sat 26 Jul 2025 22:00:26 +0000
Manifest this update: Sat 26 Jul 2025 22:00:26 +0000
Manifest next update: Sun 27 Jul 2025 22:00:26 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: KHH5yI8bhlMgq/GROXBBikTEwHu+Vs93YC0jYMOzjj0=)
2: AF4umlxpodxfUYcflJsK8xOOPvc.roa (hash: h6ZT1Xj2HoW6T1BM9+3KLrI7XGShfMvSe65xEZ1pN+8=)
3: eKdaY9u7yd9VS291GQM22qgfzCo.roa (hash: LpBEMBev2akTDLzB/P1Zql8JVSF96+zbvpBVIyg+mMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:6b:4a:5d:4b:8b:62:0e:11:8c:47:b2:cb:99:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Jul 26 22:00:26 2025 GMT
Not After : Jul 27 22:00:26 2025 GMT
Subject: CN=58f59c11f7a1b2e7cdd1e4be5b5ab4f87e7043c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:1a:62:04:a0:17:19:79:57:c7:fd:e7:77:
42:39:1d:a8:af:f2:a2:be:b4:77:82:b4:24:6d:6c:
3c:2e:9b:07:ef:c3:b2:75:18:e9:c0:b9:0f:a6:79:
8f:ac:b4:04:6d:2e:6b:01:d0:df:89:32:9c:b7:9c:
62:7e:ed:bd:fb:db:e5:3f:a0:86:96:20:c5:ec:8c:
9c:c4:90:79:27:05:0e:d3:8a:91:3b:45:eb:05:9c:
36:ca:7f:ed:53:04:7a:cf:f7:1d:a2:eb:02:58:35:
2e:f5:39:39:9b:de:9c:65:38:43:d9:d8:dc:96:18:
d3:8a:7d:bc:c8:3a:d7:f1:c5:1a:8c:10:dc:a3:99:
b5:c0:3f:be:c4:ba:f1:c9:14:83:95:9d:8c:bc:0d:
7b:10:bd:19:70:fd:e4:d9:ce:c9:e2:7b:2a:ae:0d:
10:77:7d:f3:29:81:ba:66:17:26:3f:2e:b3:63:e3:
80:91:87:38:77:bd:29:6a:5a:a3:42:8e:a8:ec:59:
cc:9f:16:8d:ab:6b:4c:eb:2c:78:93:fd:56:93:27:
d7:85:c9:68:2f:0d:4a:ca:b8:e9:24:4e:07:b8:1a:
a1:29:23:bb:2c:f3:05:9c:c7:a4:04:c9:03:e4:c3:
3b:e7:e9:5c:47:1a:71:d3:4d:78:84:c0:50:cd:33:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F5:9C:11:F7:A1:B2:E7:CD:D1:E4:BE:5B:5A:B4:F8:7E:70:43:C3
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:92:d4:7c:6f:8a:11:75:df:01:2e:10:73:f3:e7:ef:b0:06:
f5:e7:93:99:b8:ec:e9:dd:3d:bf:ea:04:b6:a2:35:3f:4c:ad:
45:8b:ac:0f:61:03:14:b9:e4:3c:f3:d0:e7:c6:df:20:1d:36:
ec:9c:40:9c:78:c0:b9:63:24:40:73:7f:e9:bd:c7:fe:99:da:
0e:b8:04:16:65:c8:80:19:7d:89:de:49:ad:0d:24:a5:9e:f2:
17:cb:b6:fb:9d:38:c2:b8:1d:81:9a:12:b6:fd:03:e3:ba:78:
83:b8:da:84:3b:e8:a2:85:b1:da:06:47:0e:65:1a:37:8f:b6:
2c:2e:70:ce:99:3b:34:cd:6d:ef:bd:45:75:18:e6:8d:4a:4f:
f3:09:c3:1c:cb:ed:85:f8:74:ea:e3:c3:68:0c:96:fb:fd:d0:
a5:25:65:46:35:d7:ef:a6:b1:e8:d9:7c:3d:37:da:3c:80:b0:
bc:88:03:7a:d4:2a:53:60:e2:ec:3a:d5:c5:ca:bf:c0:6d:ad:
60:eb:66:a5:d0:54:20:a5:6b:cb:69:df:ad:39:82:e2:e4:17:
80:56:8b:60:5b:d4:01:38:50:23:ec:b5:bb:7e:b0:b4:86:7d:
a4:0a:b2:1c:4e:16:fe:a8:75:b3:b2:1f:f1:89:de:e1:60:7f:
16:42:c6:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwGtKXUuLYg4RjEeyy5kXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1N2M3ZGIwNGU3OGMyMjFmM2RmMmEyYWYwODJiNTE4ZDk2
MmE4ZjAwHhcNMjUwNzI2MjIwMDI2WhcNMjUwNzI3MjIwMDI2WjAzMTEwLwYDVQQD
Eyg1OGY1OWMxMWY3YTFiMmU3Y2RkMWU0YmU1YjVhYjRmODdlNzA0M2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohoaYgSgFxl5V8f953dCOR2or/Ki
vrR3grQkbWw8LpsH78OydRjpwLkPpnmPrLQEbS5rAdDfiTKct5xifu29+9vlP6CG
liDF7IycxJB5JwUO04qRO0XrBZw2yn/tUwR6z/cdousCWDUu9Tk5m96cZThD2djc
lhjTin28yDrX8cUajBDco5m1wD++xLrxyRSDlZ2MvA17EL0ZcP3k2c7J4nsqrg0Q
d33zKYG6ZhcmPy6zY+OAkYc4d70palqjQo6o7FnMnxaNq2tM6yx4k/1WkyfXhclo
Lw1KyrjpJE4HuBqhKSO7LPMFnMekBMkD5MM75+lcRxpx0014hMBQzTNSIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFj1nBH3obLnzdHkvltatPh+cEPDMB8GA1UdIwQY
MBaAFNV8fbBOeMIh898qKvCCtRjZYqjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgt
ZmU5NWE5YWYzYWRjLzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgtZmU5NWE5YWYzYWRj
LzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZLUfG+K
EXXfAS4Qc/Pn77AG9eeTmbjs6d09v+oEtqI1P0ytRYusD2EDFLnkPPPQ58bfIB02
7JxAnHjAuWMkQHN/6b3H/pnaDrgEFmXIgBl9id5JrQ0kpZ7yF8u2+504wrgdgZoS
tv0D47p4g7jahDvoooWx2gZHDmUaN4+2LC5wzpk7NM1t771FdRjmjUpP8wnDHMvt
hfh06uPDaAyW+/3QpSVlRjXX76ax6Nl8PTfaPICwvIgDetQqU2Di7DrVxcq/wG2t
YOtmpdBUIKVry2nfrTmC4uQXgFaLYFvUAThQI+y1u36wtIZ9pAqyHE4W/qh1s7If
8Yne4WB/FkLGnA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:49 2025 by rpki-client