Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier: A+VMn8zzSRJjYWwXcT5Aw7i06FPMtauRsFAUemZhT2A=
Subject key identifier: 86:DA:E4:A7:1E:20:E0:61:74:AE:FA:9A:04:F6:E8:BD:2C:C8:7A:56
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019846D1ED48DC8110A92DF2384646D69465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number: 162B
Signing time: Sat 26 Jul 2025 13:00:19 +0000
Manifest this update: Sat 26 Jul 2025 13:00:19 +0000
Manifest next update: Sun 27 Jul 2025 13:00:19 +0000
Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: Et7B2NNrRS7ACrAnkLl8xTAfvpw+CDR39hoKwbK5+cY=)
2: 6bP2Hbq7B8FfgSpm-g0RjnRG09M.roa (hash: dhy3foa2kdGd9tWYMEzVZ1K79M1Cxv3oKtbrCE9/V7s=)
3: 9rPnc621PCZSzvwMRaLBWF8yQec.roa (hash: aB0fVKMxCD/z6BkZVG11TiYmDJy+6wMvki78RDMmYco=)
4: DdbBxkSpqv27jL5VCitevUUKtGo.roa (hash: W2qQ5Ka9ZbfjONO7pHLlOm1UmxsrTkoa9epsQmZhKZM=)
5: bE8Ho3jzn5ez3wNgEgsfXEX5CVE.roa (hash: eJjvEgOEH8QmE+x4otf72HZmDOo9rzbz4V41257+u/g=)
6: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=)
7: nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa (hash: WzE9rCGNMfQ+mIxm9E1YIp9r6V0lkGRucRNG6aY0mCs=)
8: rIf0kB8Rc3IRATRBayI1xPvP3QA.roa (hash: Rx69uj0bTYsl5V2DHt7vMOyICCeb975OsfQSSz+LlmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:ed:48:dc:81:10:a9:2d:f2:38:46:46:d6:94:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jul 26 13:00:19 2025 GMT
Not After : Jul 27 13:00:19 2025 GMT
Subject: CN=86dae4a71e20e06174aefa9a04f6e8bd2cc87a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:d1:1b:f2:7f:5e:b7:3d:8e:82:27:d5:fb:
ae:06:f4:3a:8f:57:eb:6c:ae:09:b6:5e:e0:40:e6:
39:86:cd:d5:be:53:2a:dd:26:ea:77:a4:b4:69:92:
d3:f2:44:1d:5f:55:0c:c7:60:ef:56:98:62:df:4b:
bc:85:0b:e3:a7:f3:45:bb:ae:c4:88:44:1f:19:99:
84:b1:eb:e8:d8:63:a1:6e:b6:40:a7:39:f0:3b:e3:
a9:60:c9:69:19:8c:aa:b3:fb:bd:16:3e:53:65:bf:
9d:06:c1:f6:2a:4b:ba:37:86:7a:ff:23:80:5f:47:
7a:ae:2e:59:f0:6a:3d:f3:6b:af:09:e6:0f:83:31:
8a:9f:3f:3f:b4:be:b3:13:44:e1:2e:f6:e6:c0:81:
9e:59:30:9e:34:10:2c:bf:80:00:24:08:ac:18:66:
4d:ad:7b:64:bb:02:1e:1a:4d:16:c4:1a:41:9d:df:
01:13:56:53:0d:da:47:be:e1:f2:7b:6b:8d:9b:61:
e2:3a:5c:2b:56:c8:9e:a8:79:ee:fe:68:9e:ae:f8:
b4:0b:92:c1:35:1f:09:b2:86:b6:0b:04:dc:d2:a9:
46:61:97:5c:c2:cf:9b:10:6e:bd:f4:66:4f:ff:5d:
c0:70:f9:ca:cd:3b:29:89:1c:76:30:2a:97:c4:85:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DA:E4:A7:1E:20:E0:61:74:AE:FA:9A:04:F6:E8:BD:2C:C8:7A:56
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:22:ad:eb:b9:22:21:cd:11:09:3a:9f:2c:92:f8:ab:fa:8f:
34:c5:e6:9f:99:26:d6:c3:e9:97:2d:7e:26:e0:fd:3c:46:03:
d3:b8:6a:f7:e1:61:8f:db:fb:98:01:e7:85:05:64:09:00:61:
08:f2:5c:0b:4b:b7:d8:f2:17:d1:45:be:07:e3:ad:4f:c5:13:
61:2f:81:38:4f:50:1c:e9:92:ad:77:b8:60:99:9d:48:10:43:
2e:6e:7c:12:51:ab:34:7f:f4:10:c1:a9:51:ed:27:23:c7:c5:
7d:9f:63:45:0f:aa:fa:8e:10:5b:78:0b:07:61:65:11:51:09:
f1:e4:8f:4d:d0:66:d2:d5:e9:47:d0:24:b8:80:ec:a9:c4:29:
a5:46:6e:c2:27:96:f2:b2:ae:dd:24:db:26:b7:b4:fd:83:d5:
5b:64:c4:55:39:b9:52:b0:ee:ab:a7:1e:8a:e8:48:fd:3e:3c:
57:2e:5b:9c:c0:ac:21:d1:e1:b0:be:69:1d:d0:b8:08:af:37:
14:f3:c5:a9:7d:92:18:bb:6b:92:5a:e4:15:62:dc:78:87:a2:
3e:20:91:dc:cc:26:e3:e0:44:82:f4:8d:c3:63:21:43:2d:8a:
f1:98:4a:46:ef:46:74:ba:ae:9a:10:ac:a0:8d:73:79:f3:36:
0a:f8:71:38
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhG0e1I3IEQqS3yOEZG1pRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjUwNzI2MTMwMDE5WhcNMjUwNzI3MTMwMDE5WjAzMTEwLwYDVQQD
Eyg4NmRhZTRhNzFlMjBlMDYxNzRhZWZhOWEwNGY2ZThiZDJjYzg3YTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRrRG/J/Xrc9joIn1fuuBvQ6j1fr
bK4Jtl7gQOY5hs3VvlMq3Sbqd6S0aZLT8kQdX1UMx2DvVphi30u8hQvjp/NFu67E
iEQfGZmEsevo2GOhbrZApznwO+OpYMlpGYyqs/u9Fj5TZb+dBsH2Kku6N4Z6/yOA
X0d6ri5Z8Go982uvCeYPgzGKnz8/tL6zE0ThLvbmwIGeWTCeNBAsv4AAJAisGGZN
rXtkuwIeGk0WxBpBnd8BE1ZTDdpHvuHye2uNm2HiOlwrVsieqHnu/miervi0C5LB
NR8Jsoa2CwTc0qlGYZdcws+bEG699GZP/13AcPnKzTspiRx2MCqXxIWWAwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIba5KceIOBhdK76mgT26L0syHpWMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzL2FhNjYyOS1kMTQ5LTQxOTctYTMxNS1kMjEwNzFlZjcz
NWIvMS8xLWowTHdSc3Aya1N0VnpCTVA0Vm9od29CbkNRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSKt
67kiIc0RCTqfLJL4q/qPNMXmn5km1sPply1+JuD9PEYD07hq9+Fhj9v7mAHnhQVk
CQBhCPJcC0u32PIX0UW+B+OtT8UTYS+BOE9QHOmSrXe4YJmdSBBDLm58ElGrNH/0
EMGpUe0nI8fFfZ9jRQ+q+o4QW3gLB2FlEVEJ8eSPTdBm0tXpR9AkuIDsqcQppUZu
wieW8rKu3STbJre0/YPVW2TEVTm5UrDuq6ceiuhI/T48Vy5bnMCsIdHhsL5pHdC4
CK83FPPFqX2SGLtrklrkFWLceIeiPiCR3Mwm4+BEgvSNw2MhQy2K8ZhKRu9GdLqu
mhCsoI1zefM2CvhxOA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:50:32 2025 by rpki-client