Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
File: 1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft (raw, json)
Hash identifier: S+mjPpFro0dgQ5XVYw8Kk9iVi6o/ZfrV263i3HaDaz4=
Subject key identifier: BA:DE:03:BE:25:03:98:11:3E:69:1C:AA:D8:B5:ED:CB:2C:89:1D:2E
Authority key identifier: D4:8F:0C:2B:2A:D1:9F:8C:06:B4:E1:24:91:D6:12:98:64:47:1C:A8
Certificate issuer: /CN=d48f0c2b2ad19f8c06b4e12491d6129864471ca8
Certificate serial: 0199228CB6B7C741BB56BFD2CD5A85A3C32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
Manifest number: 1D
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: 1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl (hash: 0daF1kAdS6770ZWHkdC4IgJxDnXPPOVPgzg1kJkOKdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b6:b7:c7:41:bb:56:bf:d2:cd:5a:85:a3:c3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48f0c2b2ad19f8c06b4e12491d6129864471ca8
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=bade03be250398113e691caad8b5edcb2c891d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:20:e9:a2:fa:78:37:af:48:35:7c:74:29:
12:8f:93:5d:11:9b:b2:bb:0d:cc:9d:12:0d:27:bb:
2e:f9:80:ae:9b:a1:26:44:ef:72:73:66:a9:8c:9d:
81:f5:e8:1c:f6:ee:9e:d8:d2:cd:63:65:37:0f:6b:
89:a1:56:71:d1:67:3c:fd:df:84:fb:57:4e:64:c0:
07:bc:3c:05:bd:f6:0a:95:18:d0:d0:10:41:2d:e1:
ce:ab:c6:a4:54:9c:8e:bb:33:54:fe:45:2b:db:41:
c3:7f:b9:d4:49:27:1e:ac:85:c2:09:c3:4d:9a:3d:
6c:0f:ce:4e:4c:8e:59:de:f3:bf:2e:93:81:48:c4:
c0:73:0f:34:42:f0:0f:40:5f:10:ce:9e:ec:95:b1:
44:99:b9:2f:b5:60:00:ce:18:09:8a:8d:b4:cd:e2:
79:f2:60:03:83:f1:c2:fc:60:d2:33:0c:e8:18:d9:
19:95:65:8e:45:61:fc:84:8e:e3:91:07:a5:a5:27:
42:c8:c4:48:1b:ca:b6:89:47:ff:3f:05:39:fa:74:
34:33:cd:31:ea:56:8a:ee:c9:d6:c9:db:5f:e6:15:
53:70:00:34:10:d4:4e:cb:2e:de:58:3a:29:66:b9:
fe:5d:6e:f1:8a:4f:15:f9:52:0f:70:d9:fe:ff:e3:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DE:03:BE:25:03:98:11:3E:69:1C:AA:D8:B5:ED:CB:2C:89:1D:2E
X509v3 Authority Key Identifier:
keyid:D4:8F:0C:2B:2A:D1:9F:8C:06:B4:E1:24:91:D6:12:98:64:47:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:11:f2:f0:4c:75:c8:c6:d1:83:c0:40:71:00:a0:00:f5:b1:
2e:7e:68:84:3a:08:e3:a7:a9:d7:71:cb:4c:b8:81:33:43:2c:
ce:5b:07:41:1e:6a:9f:24:53:33:8e:ff:d2:4c:a2:0a:c4:87:
4b:97:8f:46:54:d6:fe:72:c5:ff:25:c1:c6:91:99:3f:f1:6f:
2a:a2:cc:4b:b0:3c:8c:02:4b:f3:58:dc:5c:9c:4a:df:1c:9c:
ef:32:79:57:c2:0c:b3:33:2a:5d:9a:ba:d4:39:ca:bb:02:2d:
86:8d:bc:4b:8f:bc:d5:9a:d5:1c:a1:ad:6b:e6:c3:dc:49:6d:
a3:fe:4d:52:1a:20:a9:b9:0d:64:e0:ad:09:f2:cd:15:8e:8f:
7d:ee:53:46:14:61:a0:ea:98:bb:5b:d8:c1:4a:40:a9:04:db:
84:76:69:91:e1:b7:4f:70:e8:42:4d:84:4a:16:78:27:d6:0f:
fc:1f:65:2a:7c:7d:7e:ba:f5:27:f3:e5:15:a3:cc:04:78:3c:
37:97:40:dd:dc:22:b5:11:c9:95:b0:5c:65:c0:a6:c7:8c:12:
90:95:1b:a9:b5:8c:bc:c2:34:ee:8c:8e:f7:44:f2:17:6d:ba:
f4:c8:55:5f:55:b2:6c:ff:7d:0f:de:e0:74:bc:cf:39:88:7c:
d3:f2:a8:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijLa3x0G7Vr/SzVqFo8MvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGYwYzJiMmFkMTlmOGMwNmI0ZTEyNDkxZDYxMjk4NjQ0
NzFjYTgwHhcNMjUwOTA3MDUwMTExWhcNMjUwOTA4MDUwMTExWjAzMTEwLwYDVQQD
EyhiYWRlMDNiZTI1MDM5ODExM2U2OTFjYWFkOGI1ZWRjYjJjODkxZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN4g6aL6eDevSDV8dCkSj5NdEZuy
uw3MnRINJ7su+YCum6EmRO9yc2apjJ2B9egc9u6e2NLNY2U3D2uJoVZx0Wc8/d+E
+1dOZMAHvDwFvfYKlRjQ0BBBLeHOq8akVJyOuzNU/kUr20HDf7nUSScerIXCCcNN
mj1sD85OTI5Z3vO/LpOBSMTAcw80QvAPQF8Qzp7slbFEmbkvtWAAzhgJio20zeJ5
8mADg/HC/GDSMwzoGNkZlWWORWH8hI7jkQelpSdCyMRIG8q2iUf/PwU5+nQ0M80x
6laK7snWydtf5hVTcAA0ENROyy7eWDopZrn+XW7xik8V+VIPcNn+/+NOZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLreA74lA5gRPmkcqti17cssiR0uMB8GA1UdIwQY
MBaAFNSPDCsq0Z+MBrThJJHWEphkRxyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zMDVlZGEtZjhiYS00NjkxLTg5NjAt
OTM2MTk2NzRhNDJlLzEvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zMDVlZGEtZjhiYS00NjkxLTg5NjAtOTM2MTk2NzRhNDJl
LzEvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABHy8Ex1
yMbRg8BAcQCgAPWxLn5ohDoI46ep13HLTLiBM0MszlsHQR5qnyRTM47/0kyiCsSH
S5ePRlTW/nLF/yXBxpGZP/FvKqLMS7A8jAJL81jcXJxK3xyc7zJ5V8IMszMqXZq6
1DnKuwItho28S4+81ZrVHKGta+bD3Elto/5NUhogqbkNZOCtCfLNFY6Pfe5TRhRh
oOqYu1vYwUpAqQTbhHZpkeG3T3DoQk2EShZ4J9YP/B9lKnx9frr1J/PlFaPMBHg8
N5dA3dwitRHJlbBcZcCmx4wSkJUbqbWMvMI07oyO90TyF2269MhVX1WybP99D97g
dLzPOYh80/Ko3g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:28:05 2025 by rpki-client