Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier: ja0jjVOwu5j6iIzIGzbOK3KXdyHxavNDanHC/9nwj/g=
Subject key identifier: FC:D1:74:53:6B:1A:55:60:71:42:1E:CF:49:2C:46:88:A7:60:B8:E8
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 0198EA560FA77526C1F90C8595728C237766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number: 1654
Signing time: Wed 27 Aug 2025 07:02:45 +0000
Manifest this update: Wed 27 Aug 2025 07:02:45 +0000
Manifest next update: Thu 28 Aug 2025 07:02:45 +0000
Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: E6y6kOs+JRqW4pLPJpZDSG5LGx2RTRb7l0n3UODdjNc=)
2: J2pjS99ea6SMp7lb4ewsQffNh8c.roa (hash: 704wqH0ujui7TKq+2h1aj9AcNsB+Fn+EgZ7FOUmvebI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Aug 2025 07:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:56:0f:a7:75:26:c1:f9:0c:85:95:72:8c:23:77:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: Aug 27 07:02:45 2025 GMT
Not After : Aug 28 07:02:45 2025 GMT
Subject: CN=fcd174536b1a556071421ecf492c4688a760b8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:df:d8:5c:39:d0:e5:d8:78:33:f8:1b:ec:
4c:cc:32:34:46:8c:ff:e4:51:40:c0:6f:50:52:39:
10:ca:a6:49:8d:5d:68:0b:43:96:e5:9d:79:5a:30:
9d:6e:41:c3:c7:9e:2a:65:f7:1d:bd:c4:f2:82:cf:
bd:fd:60:cf:31:04:0b:42:ef:ac:86:c8:a0:30:40:
b2:88:5a:2a:ea:41:ac:85:2b:18:76:20:98:27:95:
c4:c0:b9:f6:3f:17:6d:9d:9b:37:54:87:7e:82:8f:
59:59:13:69:30:eb:65:82:8c:9d:1b:8d:39:a3:58:
ae:e0:c8:2e:f7:b0:8d:81:54:27:3f:58:7c:30:ba:
37:47:84:16:e0:e2:e5:a2:25:d2:e6:ba:d7:d5:bb:
c8:d8:bc:85:1e:11:53:46:4c:09:06:d9:b4:86:5e:
0a:e2:9e:a3:0e:3e:92:f9:96:ca:1a:70:77:df:fb:
d6:b5:1e:de:d2:5b:30:19:1a:f2:92:7e:c3:94:5f:
ec:69:b0:4f:80:c8:b0:08:b0:95:9e:73:61:52:de:
bc:46:2f:67:d1:77:9f:f0:ee:b0:cd:b8:92:47:8e:
61:72:77:9e:c4:21:fb:c9:e3:02:4f:d8:05:41:8c:
7f:cc:67:51:bc:19:cf:05:4d:3f:59:f1:6c:af:e9:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D1:74:53:6B:1A:55:60:71:42:1E:CF:49:2C:46:88:A7:60:B8:E8
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2c:85:86:bf:31:af:a0:50:35:d6:fb:34:6e:4e:b9:49:74:
70:f2:dd:b1:bd:af:22:b8:cf:db:01:b2:94:85:d8:f9:27:83:
1e:a5:cb:8d:7d:51:ec:6c:bc:65:46:75:2b:80:c7:1a:6b:f6:
7e:1e:cd:d6:13:e3:13:51:02:69:0a:80:db:70:d3:f0:39:ae:
33:f6:10:10:23:ae:e0:13:88:8d:e5:eb:4b:4f:0b:e2:04:2e:
d5:3e:73:4d:10:ad:53:5b:0d:14:a1:17:51:07:fa:74:c5:ca:
09:8c:7b:61:4a:c6:88:59:5b:58:16:ab:2b:9a:b7:de:96:ec:
f5:18:45:6a:5e:fe:98:c2:fa:14:55:69:ad:dd:43:1e:c9:37:
45:cc:9c:be:40:47:50:42:35:fc:8c:b4:3d:30:62:ee:14:58:
20:91:43:c3:f8:a4:55:43:60:ed:e6:f8:a2:d2:40:f4:f0:3e:
7f:fa:9f:da:21:a0:2f:b1:49:be:51:fd:94:9a:b0:24:d6:ef:
ed:35:7c:a1:82:01:f9:22:dc:ca:28:15:91:9c:03:ad:f3:f1:
00:09:1d:3b:20:87:8d:4b:8f:fb:9c:75:90:2d:21:88:51:56:
2b:14:21:18:53:69:5e:8f:5e:6c:5d:9f:f2:1b:40:b7:6b:87:
dc:5b:b9:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjqVg+ndSbB+QyFlXKMI3dmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzBhMjk5NDFlZmJjN2E3OTI3ZjAyOTQ4MWUyYzcyNWEx
YTY3MTEwHhcNMjUwODI3MDcwMjQ1WhcNMjUwODI4MDcwMjQ1WjAzMTEwLwYDVQQD
EyhmY2QxNzQ1MzZiMWE1NTYwNzE0MjFlY2Y0OTJjNDY4OGE3NjBiOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Pjf2Fw50OXYeDP4G+xMzDI0Roz/
5FFAwG9QUjkQyqZJjV1oC0OW5Z15WjCdbkHDx54qZfcdvcTygs+9/WDPMQQLQu+s
hsigMECyiFoq6kGshSsYdiCYJ5XEwLn2PxdtnZs3VId+go9ZWRNpMOtlgoydG405
o1iu4Mgu97CNgVQnP1h8MLo3R4QW4OLloiXS5rrX1bvI2LyFHhFTRkwJBtm0hl4K
4p6jDj6S+ZbKGnB33/vWtR7e0lswGRrykn7DlF/sabBPgMiwCLCVnnNhUt68Ri9n
0Xef8O6wzbiSR45hcneexCH7yeMCT9gFQYx/zGdRvBnPBU0/WfFsr+mFuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzRdFNrGlVgcUIez0ksRoinYLjoMB8GA1UdIwQY
MBaAFNcwoplB77x6eSfwKUgeLHJaGmcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2Et
M2MwZmExOGM1OGNiLzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2EtM2MwZmExOGM1OGNi
LzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSyFhr8x
r6BQNdb7NG5OuUl0cPLdsb2vIrjP2wGylIXY+SeDHqXLjX1R7Gy8ZUZ1K4DHGmv2
fh7N1hPjE1ECaQqA23DT8DmuM/YQECOu4BOIjeXrS08L4gQu1T5zTRCtU1sNFKEX
UQf6dMXKCYx7YUrGiFlbWBarK5q33pbs9RhFal7+mML6FFVprd1DHsk3RcycvkBH
UEI1/Iy0PTBi7hRYIJFDw/ikVUNg7eb4otJA9PA+f/qf2iGgL7FJvlH9lJqwJNbv
7TV8oYIB+SLcyigVkZwDrfPxAAkdOyCHjUuP+5x1kC0hiFFWKxQhGFNpXo9ebF2f
8htAt2uH3Fu5xQ==
-----END CERTIFICATE-----
Generated at Wed Aug 27 11:10:07 2025 by rpki-client