
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: CR/K0lV7B1M7vs+eLM0Rre+AuS9zqADdiiVO4m0KS/Y=
Subject key identifier: E9:BD:22:5C:4E:61:B5:A7:23:0E:EF:3A:2D:1D:AA:5E:C1:16:26:D5
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 01991809D1FC948C25BACEF9E14F995354D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 1668
Signing time: Fri 05 Sep 2025 04:02:00 +0000
Manifest this update: Fri 05 Sep 2025 04:02:00 +0000
Manifest next update: Sat 06 Sep 2025 04:02:00 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: ssOjtxGygr73x+LNZnLHqdkqvFKB1XEiYbhPsqSxgMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:d1:fc:94:8c:25:ba:ce:f9:e1:4f:99:53:54:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Sep 5 04:02:00 2025 GMT
Not After : Sep 6 04:02:00 2025 GMT
Subject: CN=e9bd225c4e61b5a7230eef3a2d1daa5ec11626d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3a:8d:b9:77:ad:3f:2f:df:4c:4c:f7:85:ab:
7e:12:41:77:f2:ee:20:f0:52:0e:e0:cb:0c:5c:05:
06:54:28:b8:79:14:11:90:0f:6a:91:97:de:d3:de:
72:99:8d:49:d1:ba:13:c2:59:b4:b9:56:7d:03:27:
9b:63:46:c1:be:01:3c:c0:3c:25:a0:77:17:7a:69:
b9:cc:68:18:b3:2d:98:ca:02:30:cb:c8:fe:ba:6f:
7c:f9:e1:df:1b:91:d2:30:cf:d8:44:ef:a7:09:0d:
d3:ec:bf:ac:65:b4:e6:a4:f1:d0:61:e7:91:3a:4b:
e0:63:77:56:f0:13:ce:18:f9:61:ce:02:40:9b:c4:
95:60:71:5d:fc:82:cb:a4:b9:a2:f6:1e:d2:d4:cc:
99:f4:3f:0b:cc:c1:ea:a6:06:48:31:ae:2a:db:b1:
e2:22:83:b6:3c:c9:f9:9d:77:e8:b6:1f:44:45:35:
36:ee:92:33:64:2d:84:e0:51:62:33:b9:00:99:2d:
4e:3d:fc:5d:1a:c6:a1:9a:e1:c1:60:e0:b5:eb:1c:
ac:67:fc:40:9d:4f:4d:62:1b:cc:01:59:b5:6a:cd:
43:23:2f:2a:ed:a3:9b:7f:97:58:66:00:92:19:05:
04:85:b0:14:9f:07:37:43:f3:df:25:8d:69:1b:6e:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BD:22:5C:4E:61:B5:A7:23:0E:EF:3A:2D:1D:AA:5E:C1:16:26:D5
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5f:77:23:af:64:52:67:c2:e5:c0:a9:d5:7b:ea:c5:46:bd:
58:b1:7e:3a:e0:e7:e4:1e:d6:7b:cc:c5:86:51:2f:8b:e4:de:
6a:f1:10:37:43:87:38:b9:ce:a6:6d:f9:94:80:17:15:6f:09:
86:f7:3e:9c:c5:7f:54:62:3f:0c:2f:c3:c7:5e:c5:19:6b:3c:
b8:19:f6:4c:19:a0:fe:07:a7:c1:39:4e:57:7e:29:89:e3:16:
55:7d:63:99:be:40:34:d5:5d:5a:23:74:a1:bf:fa:29:07:b5:
07:f0:0d:a6:4b:f7:0b:e1:91:2f:1d:a2:47:af:ab:5c:2a:a0:
1e:b0:b8:a2:a6:55:cf:5b:d2:e6:c1:96:fd:55:aa:dd:ef:f2:
5e:a1:6c:5e:ab:6a:4d:f6:51:af:16:b9:dc:72:b8:bf:45:3c:
71:54:6d:16:ab:1a:88:0f:a4:a4:b3:3b:d2:f0:80:ee:b5:34:
5b:80:8a:50:32:5a:a6:23:c6:c8:5c:b1:86:c9:47:ba:89:55:
59:21:0b:4f:54:68:96:a4:23:f9:3d:22:0c:07:54:c8:0a:5e:
bf:cf:9e:85:5a:2f:86:c6:2b:3d:dd:1b:99:c6:d4:a9:76:7d:
2e:64:86:38:0c:48:47:8d:d4:46:29:78:1c:b7:ff:88:1b:eb:
96:de:1a:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCdH8lIwlus754U+ZU1TVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTI4M2NjYmYxMTY5OGI2ZjIyZWMxN2I1ZjYzZTNhNTNl
NDExMjAwHhcNMjUwOTA1MDQwMjAwWhcNMjUwOTA2MDQwMjAwWjAzMTEwLwYDVQQD
EyhlOWJkMjI1YzRlNjFiNWE3MjMwZWVmM2EyZDFkYWE1ZWMxMTYyNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zqNuXetPy/fTEz3hat+EkF38u4g
8FIO4MsMXAUGVCi4eRQRkA9qkZfe095ymY1J0boTwlm0uVZ9AyebY0bBvgE8wDwl
oHcXemm5zGgYsy2YygIwy8j+um98+eHfG5HSMM/YRO+nCQ3T7L+sZbTmpPHQYeeR
OkvgY3dW8BPOGPlhzgJAm8SVYHFd/ILLpLmi9h7S1MyZ9D8LzMHqpgZIMa4q27Hi
IoO2PMn5nXfoth9ERTU27pIzZC2E4FFiM7kAmS1OPfxdGsahmuHBYOC16xysZ/xA
nU9NYhvMAVm1as1DIy8q7aObf5dYZgCSGQUEhbAUnwc3Q/PfJY1pG27jtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOm9IlxOYbWnIw7vOi0dql7BFibVMB8GA1UdIwQY
MBaAFNXig8y/EWmLbyLsF7X2PjpT5BEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDIt
MGY2MmJiZDliNTY4LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDItMGY2MmJiZDliNTY4
LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV93I69k
UmfC5cCp1XvqxUa9WLF+OuDn5B7We8zFhlEvi+TeavEQN0OHOLnOpm35lIAXFW8J
hvc+nMV/VGI/DC/Dx17FGWs8uBn2TBmg/genwTlOV34pieMWVX1jmb5ANNVdWiN0
ob/6KQe1B/ANpkv3C+GRLx2iR6+rXCqgHrC4oqZVz1vS5sGW/VWq3e/yXqFsXqtq
TfZRrxa53HK4v0U8cVRtFqsaiA+kpLM70vCA7rU0W4CKUDJapiPGyFyxhslHuolV
WSELT1RolqQj+T0iDAdUyApev8+ehVovhsYrPd0bmcbUqXZ9LmSGOAxIR43URil4
HLf/iBvrlt4agw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:45 2025 by rpki-client