Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json)
Hash identifier: QTyKkc50dlW7+/ZH4xLBnnGlyVURxIyaddLy/E0EbVg=
Subject key identifier: 72:9C:CC:30:02:9E:9F:F5:01:89:29:D1:1C:3A:E8:76:9A:17:C5:8C
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial: 0198496581F4186DAC41CE5A9464E5C199EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
Manifest number: 03C1
Signing time: Sun 27 Jul 2025 01:00:45 +0000
Manifest this update: Sun 27 Jul 2025 01:00:45 +0000
Manifest next update: Mon 28 Jul 2025 01:00:45 +0000
Files and hashes: 1: DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa (hash: HmRJXl6KdbWQ5yFSi3ORZiwzeQcQdEBbSpqG5+7FJoc=)
2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: lfdVnGxi97F7R6xnuolErLJB2ppIhnj2IQqNPtP1+Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:81:f4:18:6d:ac:41:ce:5a:94:64:e5:c1:99:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Validity
Not Before: Jul 27 01:00:45 2025 GMT
Not After : Jul 28 01:00:45 2025 GMT
Subject: CN=729ccc30029e9ff5018929d11c3ae8769a17c58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:10:08:e2:34:46:0a:c6:ab:fc:f3:cb:a9:
ab:88:d0:75:8e:c4:64:12:d7:2b:d7:45:cc:b3:f4:
b3:06:2c:b5:d2:18:98:bb:8d:d9:1c:31:ff:03:aa:
b2:9b:f1:f6:1e:d9:44:2f:0f:0d:cf:bb:38:8e:cc:
e6:8c:0d:24:d6:bf:b4:a4:08:c5:e1:13:2c:a2:77:
88:3c:90:45:71:96:d2:fa:f0:61:1d:8e:2c:ad:fe:
15:62:b9:92:9c:ab:ff:79:43:bb:f0:12:63:97:32:
6b:e1:48:32:28:af:ed:69:b5:3d:86:41:27:4d:83:
62:f4:77:76:16:69:5d:1f:8e:a4:ec:e4:98:d6:9b:
71:90:d3:5c:02:43:f2:03:bc:1c:c9:ba:2b:1a:12:
5f:03:ad:d4:c2:62:41:1e:26:65:14:a7:f8:db:83:
bc:85:81:28:b2:ca:05:dc:5f:0f:84:21:62:55:b0:
94:9d:8e:d2:80:04:42:29:cf:af:01:ac:df:46:60:
1a:45:f0:2a:49:07:2b:fa:1a:6e:e1:f3:66:d1:96:
61:29:e8:29:d8:7e:d5:ce:b6:d2:eb:7d:2b:ca:01:
a2:9b:94:0c:f4:71:59:a9:b6:91:85:88:c7:7a:c8:
ed:8d:04:ea:87:db:21:b0:33:7e:81:0a:27:e5:d7:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9C:CC:30:02:9E:9F:F5:01:89:29:D1:1C:3A:E8:76:9A:17:C5:8C
X509v3 Authority Key Identifier:
keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:15:2e:85:0c:62:7a:3d:ea:0f:c6:2c:9a:6c:be:9e:96:23:
7f:52:41:92:a0:89:21:1a:9a:60:5b:6a:71:cd:ac:34:78:af:
74:c7:01:8e:a0:a8:2e:cd:07:3f:94:53:0f:18:e5:a6:37:31:
6b:59:b1:15:23:d4:ad:ef:a3:a8:4d:80:a7:46:62:e8:0e:69:
ee:c3:d6:96:76:57:2d:9d:1c:7c:d5:18:99:7c:a7:8a:83:6d:
57:9c:dc:2b:ac:b2:cd:42:ca:b5:4b:b6:b0:e8:4d:c2:d3:98:
4e:fa:d2:dd:a7:e6:2b:1b:3b:8b:fe:bb:73:9e:0c:46:c3:1e:
63:ed:bf:df:e1:09:dc:c4:d8:05:db:0b:12:be:aa:e8:a5:13:
de:57:ce:c1:1b:3d:16:92:9f:99:82:89:8f:3f:e2:cb:d3:48:
78:81:18:26:bc:5c:7f:96:fd:60:bd:6d:ec:7d:33:ad:11:12:
af:d5:b1:cc:7a:46:e2:27:97:90:0b:50:25:33:31:b6:09:e4:
7e:ef:f7:56:05:3b:df:fe:ac:fd:0a:cc:29:b7:90:2c:35:68:
19:03:42:b4:91:03:4b:6a:6d:a9:9e:44:ea:fc:c9:52:02:b8:
f8:71:6c:79:6c:d2:1e:57:ae:65:63:69:dc:dd:cd:76:ff:b1:
09:86:a5:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZYH0GG2sQc5alGTlwZnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNTdjNWRmZjcwZWJmZTY3YTQwMGQ1NWYyNTlkYjJjMzcx
OTIxOTYwHhcNMjUwNzI3MDEwMDQ1WhcNMjUwNzI4MDEwMDQ1WjAzMTEwLwYDVQQD
Eyg3MjljY2MzMDAyOWU5ZmY1MDE4OTI5ZDExYzNhZTg3NjlhMTdjNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnMQCOI0RgrGq/zzy6mriNB1jsRk
Etcr10XMs/SzBiy10hiYu43ZHDH/A6qym/H2HtlELw8Nz7s4jszmjA0k1r+0pAjF
4RMsoneIPJBFcZbS+vBhHY4srf4VYrmSnKv/eUO78BJjlzJr4UgyKK/tabU9hkEn
TYNi9Hd2FmldH46k7OSY1ptxkNNcAkPyA7wcyborGhJfA63UwmJBHiZlFKf424O8
hYEossoF3F8PhCFiVbCUnY7SgARCKc+vAazfRmAaRfAqSQcr+hpu4fNm0ZZhKegp
2H7VzrbS630rygGim5QM9HFZqbaRhYjHesjtjQTqh9shsDN+gQon5dcgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKczDACnp/1AYkp0Rw66HaaF8WMMB8GA1UdIwQY
MBaAFGtXxd/3Dr/mekANVfJZ2yw3GSGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMt
YzQ2ZDdiYWMwMmZjLzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMtYzQ2ZDdiYWMwMmZj
LzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1xUuhQxi
ej3qD8Ysmmy+npYjf1JBkqCJIRqaYFtqcc2sNHivdMcBjqCoLs0HP5RTDxjlpjcx
a1mxFSPUre+jqE2Ap0Zi6A5p7sPWlnZXLZ0cfNUYmXynioNtV5zcK6yyzULKtUu2
sOhNwtOYTvrS3afmKxs7i/67c54MRsMeY+2/3+EJ3MTYBdsLEr6q6KUT3lfOwRs9
FpKfmYKJjz/iy9NIeIEYJrxcf5b9YL1t7H0zrRESr9WxzHpG4ieXkAtQJTMxtgnk
fu/3VgU73/6s/QrMKbeQLDVoGQNCtJEDS2ptqZ5E6vzJUgK4+HFseWzSHleuZWNp
3N3Ndv+xCYaldA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:05 2025 by rpki-client