Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: DdMHlCCv+HxuM1yPC/CO7do7FVk6RxTjmOMsKkXYxoc=
Subject key identifier: 2A:A4:8C:EA:77:A7:1A:02:83:6A:75:14:F3:7D:B6:69:97:59:DD:95
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 0199240CDDEA9DACAD30EF5F1498A46FEF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 015F
Signing time: Sun 07 Sep 2025 12:00:46 +0000
Manifest this update: Sun 07 Sep 2025 12:00:46 +0000
Manifest next update: Mon 08 Sep 2025 12:00:46 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: aI/+aT/S8Yonzgfmb73SFx4RVZF2CK2otbpX6yDys78=)
2: 2w_iKrPjyXvCCJbs0F7ZOxiGDMg.roa (hash: nKdejJ8/KPh01N5ujViM/1f8ednF50B5j98TO8WaB8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:dd:ea:9d:ac:ad:30:ef:5f:14:98:a4:6f:ef:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Sep 7 12:00:46 2025 GMT
Not After : Sep 8 12:00:46 2025 GMT
Subject: CN=2aa48cea77a71a02836a7514f37db6699759dd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:f6:3e:31:b2:ba:b6:c2:9f:4b:66:9e:d6:
f1:e5:8f:1f:5c:b8:f4:e3:55:ad:ba:df:f3:71:f1:
d8:f2:c5:4b:8a:0a:64:12:d0:a7:4d:c7:db:d5:05:
93:38:21:83:45:c8:4d:7e:e1:c0:08:a3:da:e8:43:
ee:cd:53:b2:fc:26:7f:76:91:00:01:10:3b:42:96:
0d:d0:d0:16:8a:5f:94:3d:49:c8:1e:b1:16:08:7c:
8a:18:43:6d:dd:e4:fe:60:b8:57:33:f4:5a:fa:18:
8c:07:9b:b2:00:1b:cf:65:5e:81:08:45:2a:29:11:
94:ee:5c:87:cb:8e:07:0a:43:9c:88:69:65:20:65:
01:02:6f:76:4a:06:77:89:7d:34:09:4f:b3:44:91:
b4:6b:90:cf:de:c3:c9:1a:f8:1a:62:b5:04:43:4b:
d8:80:ed:26:f0:6b:8e:d2:e7:e5:25:ce:5c:42:6f:
30:09:94:70:33:a9:13:cb:c3:20:c1:cc:d7:f5:09:
3a:05:63:7b:cd:54:da:c6:59:a6:2a:f2:b9:9a:f3:
15:8e:8a:6d:06:68:21:61:00:64:96:b7:b3:af:c7:
e9:4e:98:b8:da:9c:f1:eb:41:70:dc:9b:71:b2:a6:
be:4b:9b:13:94:08:8f:34:8e:19:61:4e:ac:a5:22:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A4:8C:EA:77:A7:1A:02:83:6A:75:14:F3:7D:B6:69:97:59:DD:95
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:92:9f:f7:2b:55:87:49:47:4b:9d:59:f0:2e:de:e3:2c:d1:
23:73:55:ab:9d:01:22:74:59:8e:b8:77:d3:89:11:64:9f:1f:
99:30:70:79:5f:77:41:52:d9:4c:83:22:3a:7d:58:ed:47:c9:
39:83:5b:a7:59:d0:29:57:d0:dc:a2:61:99:82:24:fc:e8:22:
ec:7f:cc:33:96:30:0c:7a:6f:b1:89:69:ac:d9:b9:eb:d1:e8:
bb:7b:b6:d3:68:2d:2a:ae:f6:16:19:71:46:51:be:2e:b2:dd:
a3:5a:44:f3:97:85:71:63:51:9a:39:27:4a:08:8f:73:41:ac:
cd:a4:88:c5:61:70:db:1e:cf:5b:f6:f0:63:68:98:12:83:87:
c7:5d:ce:fe:b5:94:71:01:9d:14:04:01:70:68:92:2e:b8:3a:
7a:08:cb:4a:71:f2:10:fc:cd:79:6f:b9:bc:2d:c2:60:06:8b:
12:7e:15:fd:2f:40:df:c0:c4:a4:99:2f:16:45:41:97:57:ce:
13:e1:81:22:54:fa:6d:b1:00:74:ea:df:06:40:91:99:f3:59:
5e:4d:45:b2:94:73:52:92:d7:d6:12:0f:ce:62:7b:98:9b:cd:
71:3a:ec:2f:ac:b3:17:93:0d:05:c8:9a:32:66:21:fd:57:6e:
50:20:f3:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDN3qnaytMO9fFJikb+8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjhhOTI2MzQ5N2M4ZDU0ZTA1NDk2NDYwZDQzOWNkNmUw
NjkyNjAwHhcNMjUwOTA3MTIwMDQ2WhcNMjUwOTA4MTIwMDQ2WjAzMTEwLwYDVQQD
EygyYWE0OGNlYTc3YTcxYTAyODM2YTc1MTRmMzdkYjY2OTk3NTlkZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmML2PjGyurbCn0tmntbx5Y8fXLj0
41Wtut/zcfHY8sVLigpkEtCnTcfb1QWTOCGDRchNfuHACKPa6EPuzVOy/CZ/dpEA
ARA7QpYN0NAWil+UPUnIHrEWCHyKGENt3eT+YLhXM/Ra+hiMB5uyABvPZV6BCEUq
KRGU7lyHy44HCkOciGllIGUBAm92SgZ3iX00CU+zRJG0a5DP3sPJGvgaYrUEQ0vY
gO0m8GuO0uflJc5cQm8wCZRwM6kTy8MgwczX9Qk6BWN7zVTaxlmmKvK5mvMVjopt
BmghYQBklrezr8fpTpi42pzx60Fw3Jtxsqa+S5sTlAiPNI4ZYU6spSJZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqkjOp3pxoCg2p1FPN9tmmXWd2VMB8GA1UdIwQY
MBaAFNb4qSY0l8jVTgVJZGDUOc1uBpJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYt
NmY4M2I3MDhiMzIwLzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYtNmY4M2I3MDhiMzIw
LzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZKf9ytV
h0lHS51Z8C7e4yzRI3NVq50BInRZjrh304kRZJ8fmTBweV93QVLZTIMiOn1Y7UfJ
OYNbp1nQKVfQ3KJhmYIk/Ogi7H/MM5YwDHpvsYlprNm569Hou3u202gtKq72Fhlx
RlG+LrLdo1pE85eFcWNRmjknSgiPc0GszaSIxWFw2x7PW/bwY2iYEoOHx13O/rWU
cQGdFAQBcGiSLrg6egjLSnHyEPzNeW+5vC3CYAaLEn4V/S9A38DEpJkvFkVBl1fO
E+GBIlT6bbEAdOrfBkCRmfNZXk1FspRzUpLX1hIPzmJ7mJvNcTrsL6yzF5MNBcia
MmYh/VduUCDzTA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:12:19 2025 by rpki-client