Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: N/Jq3bwYkLEv59KFfmS7rvTAL573tACpvXOkKSv0jLg=
Subject key identifier: 4A:D0:3D:F8:7D:9F:3F:62:7D:A0:7C:18:B8:A2:BE:45:2C:F8:81:F6
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 0198462CEEF0D92055C925934905F5FA5C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 10:00:06 +0000
Manifest this update: Sat 26 Jul 2025 10:00:06 +0000
Manifest next update: Sun 27 Jul 2025 10:00:06 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: jo5b3v0LU9lw7AFcHDRPB4kYDnttVEw+Jckg5sqH6MQ=)
2: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (hash: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2c:ee:f0:d9:20:55:c9:25:93:49:05:f5:fa:5c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Jul 26 10:00:06 2025 GMT
Not After : Jul 27 10:00:06 2025 GMT
Subject: CN=4ad03df87d9f3f627da07c18b8a2be452cf881f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:d1:3c:7e:8a:2d:6c:eb:ae:64:08:b3:c6:
34:d7:81:84:f9:58:99:6d:20:e7:86:9c:ce:83:f5:
9b:be:c2:0a:3c:4a:34:9f:a0:c2:c2:3a:b6:c5:e8:
3c:58:b1:aa:c3:c8:39:be:3d:56:d2:19:ae:d8:e6:
8f:51:39:d7:92:dc:d7:3d:57:a4:41:9c:c8:70:cb:
22:79:fa:4f:c6:8d:ce:84:17:8a:70:06:43:60:35:
f4:10:71:2f:47:b7:93:e0:83:96:a1:c0:23:b8:25:
84:fc:41:b5:41:98:62:70:32:c6:88:12:bb:99:53:
b3:fc:b8:bf:4c:66:59:bb:7b:ba:61:72:52:e5:e0:
8d:fc:c7:98:5b:ce:e6:76:77:14:d1:23:2f:84:58:
e6:c7:ad:c3:fe:91:d5:e6:90:9d:dc:ef:49:f6:5c:
19:f1:bb:d5:23:de:b6:c2:d0:79:a9:d7:13:71:8b:
0f:79:d0:4b:bb:70:ee:42:a8:a9:a2:2a:90:fc:12:
09:6d:e3:98:b4:b3:7d:bd:a4:62:69:aa:ed:1d:f1:
e1:15:43:ca:65:e4:6c:64:6b:6e:f6:df:e3:24:90:
d6:3e:65:51:84:d7:cc:84:6d:a1:5c:72:10:e1:5a:
45:1c:47:51:b6:94:71:9a:86:01:c9:b0:c0:25:f5:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D0:3D:F8:7D:9F:3F:62:7D:A0:7C:18:B8:A2:BE:45:2C:F8:81:F6
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:67:0d:05:29:05:00:00:8b:93:55:92:e2:23:c6:56:c4:f5:
dc:3d:e7:e7:0c:45:5f:dc:7b:08:a0:ca:7b:4b:b9:02:dd:20:
14:38:c9:ab:6b:1b:f6:07:9e:7b:a1:b8:f6:00:1b:32:6e:ea:
a8:17:59:26:01:82:e6:63:fc:80:7e:1d:26:c3:de:7e:e8:d1:
5f:26:c7:5b:fa:f8:45:57:d5:8c:2d:90:d1:82:4c:bd:ff:9a:
f5:d1:d6:cc:1c:19:49:67:a8:e7:f6:a1:f8:2c:9f:3f:f8:45:
b5:a9:2d:04:5d:00:72:5c:1f:64:f5:4b:fd:2c:1e:99:69:22:
34:6d:e9:66:ae:dd:26:05:17:7e:06:35:fc:d1:ae:ba:51:8f:
58:c9:7b:20:f8:27:53:95:52:9a:73:ec:81:f1:5b:dc:33:c6:
65:31:25:9d:d2:dc:23:e7:19:46:f8:19:6f:f8:57:76:52:f6:
c6:35:e1:a8:91:87:27:71:e3:e9:0b:bf:73:1b:7b:b3:47:09:
e3:72:1f:25:75:fa:2b:a0:a5:a1:20:72:fe:04:ff:8a:4d:41:
0d:ad:24:dc:be:c7:1c:85:f2:f1:8d:01:7e:7c:5e:5f:39:7b:
57:55:0c:7b:a4:44:81:16:40:83:aa:61:f8:36:57:6e:ed:0c:
cb:de:f2:f7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhGLO7w2SBVySWTSQX1+lwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDZhNGYxMTQzYWJlM2FkZmM0YjY4MzVmYTEzNGUzZGYy
Y2FjMzQwHhcNMjUwNzI2MTAwMDA2WhcNMjUwNzI3MTAwMDA2WjAzMTEwLwYDVQQD
Eyg0YWQwM2RmODdkOWYzZjYyN2RhMDdjMThiOGEyYmU0NTJjZjg4MWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3LRPH6KLWzrrmQIs8Y014GE+ViZ
bSDnhpzOg/WbvsIKPEo0n6DCwjq2xeg8WLGqw8g5vj1W0hmu2OaPUTnXktzXPVek
QZzIcMsiefpPxo3OhBeKcAZDYDX0EHEvR7eT4IOWocAjuCWE/EG1QZhicDLGiBK7
mVOz/Li/TGZZu3u6YXJS5eCN/MeYW87mdncU0SMvhFjmx63D/pHV5pCd3O9J9lwZ
8bvVI962wtB5qdcTcYsPedBLu3DuQqipoiqQ/BIJbeOYtLN9vaRiaartHfHhFUPK
ZeRsZGtu9t/jJJDWPmVRhNfMhG2hXHIQ4VpFHEdRtpRxmoYBybDAJfWsEwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFErQPfh9nz9ifaB8GLiivkUs+IH2MB8GA1UdIwQY
MBaAFPpGpPEUOr4638S2g1+hNOPfLKw0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rYWs4UlE2dmpyZnhMYURYNkUwNDk4c3JEUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZjNhNzlkLTM4Y2YtNDkwNS1hYjVm
LTViY2E0NWVmZGU4Yy8xLzEta2FrOFJRNnZqcmZ4TGFEWDZFMDQ5OHNyRFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RjL2YzYTc5ZC0zOGNmLTQ5MDUtYWI1Zi01YmNhNDVlZmRl
OGMvMS8xLWthazhSUTZ2anJmeExhRFg2RTA0OThzckRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGcN
BSkFAACLk1WS4iPGVsT13D3n5wxFX9x7CKDKe0u5At0gFDjJq2sb9geee6G49gAb
Mm7qqBdZJgGC5mP8gH4dJsPefujRXybHW/r4RVfVjC2Q0YJMvf+a9dHWzBwZSWeo
5/ah+CyfP/hFtaktBF0AclwfZPVL/SwemWkiNG3pZq7dJgUXfgY1/NGuulGPWMl7
IPgnU5VSmnPsgfFb3DPGZTElndLcI+cZRvgZb/hXdlL2xjXhqJGHJ3Hj6Qu/cxt7
s0cJ43IfJXX6K6CloSBy/gT/ik1BDa0k3L7HHIXy8Y0BfnxeXzl7V1UMe6REgRZA
g6ph+DZXbu0My97y9w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:56:16 2025 by rpki-client