Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: A2BBviEgCAjXkdiyVriYdcl4HiSV3P+S+fwGNezro9c=
Subject key identifier: EA:CB:32:84:15:89:A9:7A:44:3B:01:26:D9:00:A5:A9:EF:23:46:DA
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 01984A40F4F6317FDFE9AB9DA9CC85BFB1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 158E
Signing time: Sun 27 Jul 2025 05:00:27 +0000
Manifest this update: Sun 27 Jul 2025 05:00:27 +0000
Manifest next update: Mon 28 Jul 2025 05:00:27 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: UEYUD6noTDIGI9fAt6/zDpvIA50a9RgC6wBlYTtCRzk=)
2: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (hash: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=)
3: sZiCl9lv80fsle91xuU3_BKnt_s.roa (hash: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f4:f6:31:7f:df:e9:ab:9d:a9:cc:85:bf:b1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Jul 27 05:00:27 2025 GMT
Not After : Jul 28 05:00:27 2025 GMT
Subject: CN=eacb32841589a97a443b0126d900a5a9ef2346da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:85:bb:c5:aa:77:c6:ae:b2:ba:c9:12:ac:
24:19:87:76:f2:fd:06:f8:d4:f0:44:7f:63:49:02:
62:90:fb:fa:25:b0:81:72:e6:d9:eb:d8:32:4f:81:
df:1b:cd:c3:a4:9d:92:f6:6d:b7:fb:3e:c3:a1:70:
71:6e:f4:9c:fa:e1:1b:f8:e9:dd:4f:54:c8:1d:97:
2a:de:0b:02:37:4d:f9:d8:da:8d:bf:ca:86:54:85:
b7:9e:5e:26:83:4c:e3:78:3a:8f:f3:aa:f5:94:66:
32:c0:10:67:6b:9a:06:93:5d:cf:71:bf:e1:95:6b:
1c:34:be:31:87:1a:47:17:f7:6e:10:8e:7e:20:3b:
3c:2a:e6:c1:b9:77:20:24:c7:a7:7e:9e:06:de:03:
ea:b4:b8:dc:ae:2e:6b:4d:f6:57:44:c9:dc:e1:4e:
92:cb:2c:4f:1b:77:97:06:2c:23:8e:98:35:43:ed:
a6:39:ff:61:8b:8b:58:9d:19:52:fb:26:22:16:bb:
aa:62:66:c4:98:9b:b6:33:18:cb:b6:1b:fd:90:02:
f4:f4:16:72:a7:5b:ac:47:c0:7c:52:2a:48:4c:ba:
11:e8:3b:40:40:f3:5d:9c:a3:07:88:58:5a:53:26:
cf:d8:a9:08:61:2d:de:22:66:3c:6f:64:f7:f2:95:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CB:32:84:15:89:A9:7A:44:3B:01:26:D9:00:A5:A9:EF:23:46:DA
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7b:d0:21:de:e6:29:9f:21:f2:6f:02:9e:ad:50:55:c5:d1:
f2:8d:95:1e:9f:c2:59:46:0c:e8:42:fc:34:76:d5:fc:3f:51:
db:00:be:b5:44:e9:08:43:7b:82:7f:de:d9:4b:6a:45:45:dc:
7a:04:fc:8d:7a:ab:5f:6d:e1:f8:91:ff:ae:fa:53:b4:81:3d:
e3:bc:e9:20:26:72:f2:3f:54:68:d8:da:dd:31:05:da:be:ff:
45:5f:a7:25:8c:fa:47:99:2d:a8:d9:a1:68:7c:ef:69:25:48:
a8:b0:3c:4b:da:94:bd:d7:09:f8:a8:52:27:3c:af:57:22:4e:
47:eb:24:65:38:ff:47:0f:45:42:25:d6:25:ff:63:c0:0c:89:
a0:37:da:e6:db:27:64:50:7a:a0:9b:8d:70:53:da:90:3e:c5:
0e:56:d2:02:33:3c:83:e3:5a:a0:8c:1f:1d:e4:66:d5:95:4e:
47:08:eb:5c:59:5c:e2:28:fe:73:cd:8f:b4:0b:bd:c5:bb:e1:
aa:c5:d2:bf:e8:fe:a3:bb:d0:11:e0:a0:ab:ad:ba:17:05:9b:
d6:c4:9f:b9:4c:f8:89:9c:09:c2:54:eb:58:1d:fa:73:5f:22:
96:a9:de:5e:5e:0a:d7:18:89:6a:64:20:9c:6d:3c:9c:8a:e3:
9d:46:3e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQPT2MX/f6audqcyFv7HaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWQ0M2Y0MDljYjM1Y2ViNWU3N2I1NmQwYmJjOWE0Y2My
ZDI2OTMwHhcNMjUwNzI3MDUwMDI3WhcNMjUwNzI4MDUwMDI3WjAzMTEwLwYDVQQD
EyhlYWNiMzI4NDE1ODlhOTdhNDQzYjAxMjZkOTAwYTVhOWVmMjM0NmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GSFu8Wqd8ausrrJEqwkGYd28v0G
+NTwRH9jSQJikPv6JbCBcubZ69gyT4HfG83DpJ2S9m23+z7DoXBxbvSc+uEb+Ond
T1TIHZcq3gsCN0352NqNv8qGVIW3nl4mg0zjeDqP86r1lGYywBBna5oGk13Pcb/h
lWscNL4xhxpHF/duEI5+IDs8KubBuXcgJMenfp4G3gPqtLjcri5rTfZXRMnc4U6S
yyxPG3eXBiwjjpg1Q+2mOf9hi4tYnRlS+yYiFruqYmbEmJu2MxjLthv9kAL09BZy
p1usR8B8UipITLoR6DtAQPNdnKMHiFhaUybP2KkIYS3eImY8b2T38pXNtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrLMoQVial6RDsBJtkApanvI0baMB8GA1UdIwQY
MBaAFAvtQ/QJyzXOted7VtC7yaTMLSaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy0xRDlBbkxOYzYxNTN0VzBMdkpwTXd0SnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jNzQzY2ItODEzNy00NTVhLWE1NzMt
ZDgwOGIxYWZhODgxLzEvQy0xRDlBbkxOYzYxNTN0VzBMdkpwTXd0SnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jNzQzY2ItODEzNy00NTVhLWE1NzMtZDgwOGIxYWZhODgx
LzEvQy0xRDlBbkxOYzYxNTN0VzBMdkpwTXd0SnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnvQId7m
KZ8h8m8Cnq1QVcXR8o2VHp/CWUYM6EL8NHbV/D9R2wC+tUTpCEN7gn/e2UtqRUXc
egT8jXqrX23h+JH/rvpTtIE947zpICZy8j9UaNja3TEF2r7/RV+nJYz6R5ktqNmh
aHzvaSVIqLA8S9qUvdcJ+KhSJzyvVyJOR+skZTj/Rw9FQiXWJf9jwAyJoDfa5tsn
ZFB6oJuNcFPakD7FDlbSAjM8g+NaoIwfHeRm1ZVORwjrXFlc4ij+c82PtAu9xbvh
qsXSv+j+o7vQEeCgq626FwWb1sSfuUz4iZwJwlTrWB36c18ilqneXl4K1xiJamQg
nG08nIrjnUY+dA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:06:50 2025 by rpki-client