Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File: 1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier: Woo0YvTWKrEiL1Bh//LlTELX+tJlh62tl4JNswVrX9w=
Subject key identifier: E1:0E:BD:9D:F6:E8:34:F2:E1:66:AF:51:EA:61:1D:65:AA:B1:C0:EC
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 0199364A12099DEC1F1D2ABF3481E1C5E3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number: 1684
Signing time: Thu 11 Sep 2025 01:00:47 +0000
Manifest this update: Thu 11 Sep 2025 01:00:47 +0000
Manifest next update: Fri 12 Sep 2025 01:00:47 +0000
Files and hashes: 1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=)
2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: xdqMzmqUmSNUegsBwwS+MjiVACWSnxQwC51L5B548cw=)
3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=)
4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=)
5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:12:09:9d:ec:1f:1d:2a:bf:34:81:e1:c5:e3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Sep 11 01:00:47 2025 GMT
Not After : Sep 12 01:00:47 2025 GMT
Subject: CN=e10ebd9df6e834f2e166af51ea611d65aab1c0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:c1:6a:da:97:0a:16:25:80:b7:44:4c:41:
4f:78:57:16:09:96:15:cd:8c:02:92:3f:5e:68:72:
bb:91:e4:f9:3f:4f:03:32:79:f0:b3:fd:be:f7:6c:
c2:b4:33:a7:a0:39:b5:ec:87:ea:17:ee:52:57:1b:
e3:8e:80:4a:68:2b:66:a4:1d:5a:ef:1d:f6:b2:ea:
87:4c:5e:fc:97:f0:68:ec:de:5e:7d:d9:12:bb:b2:
c7:21:99:f3:f1:98:82:b4:f9:ee:16:0f:b4:a1:d6:
fc:22:d5:0e:b4:1e:3a:e4:9d:4e:4f:7e:2f:40:cb:
38:a9:04:61:28:2d:7d:40:07:af:c2:a3:08:5e:37:
ff:8c:1d:fc:f7:13:36:f2:e6:5c:ca:be:7d:a1:fe:
c5:7c:c9:6c:57:5c:9c:4d:eb:02:78:a7:f1:19:94:
ea:92:40:a3:e2:56:00:29:74:cd:78:ee:90:4d:d9:
01:20:e4:1d:7b:0f:0a:20:59:a3:57:0a:5f:22:90:
92:a3:13:e9:64:71:4d:82:ef:6e:ca:9a:50:ce:8c:
f3:67:70:39:74:a3:cd:5e:07:c0:4d:bf:3f:fa:59:
9e:58:12:7c:d4:d3:7a:16:06:33:0a:7d:5e:0c:90:
d4:dd:31:8f:b4:ee:a1:5e:94:d7:bf:f6:e1:ba:22:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0E:BD:9D:F6:E8:34:F2:E1:66:AF:51:EA:61:1D:65:AA:B1:C0:EC
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d4:eb:5a:ca:62:69:f3:b1:65:46:53:76:78:05:8b:6c:3b:
74:00:d3:ae:a0:59:84:36:87:2c:07:ba:c8:0e:4c:23:d1:db:
e1:21:df:ce:7e:76:98:22:7c:c4:91:8c:a7:b1:50:b0:1d:40:
8c:1b:c1:df:61:4d:14:0d:d2:e1:5a:db:22:78:50:4e:bb:bf:
d5:63:12:c1:12:5b:68:84:1a:a0:bf:a5:f4:66:ec:4b:34:0a:
d7:f9:4c:19:c0:bc:5d:92:56:13:e4:61:a6:fc:aa:02:9f:ab:
3f:d2:90:50:23:3e:3d:06:96:8e:45:1c:07:25:ed:ab:5a:31:
f1:80:b2:ef:14:dc:5a:a6:19:89:e2:53:35:ec:55:d8:51:48:
88:bb:3c:09:13:1d:a9:b3:98:dd:b4:58:b3:84:62:72:a1:0d:
09:4e:a9:5f:63:31:5d:59:81:36:c4:39:5f:53:b7:b4:cb:73:
16:bb:a1:24:4f:0d:06:06:43:1f:3d:3c:a4:57:21:14:a4:f3:
9c:89:ca:5e:2b:40:68:e2:85:6b:1c:c9:0c:8e:8f:8e:44:4d:
af:84:66:cf:f1:53:8b:ff:fe:51:32:6a:f3:e1:da:eb:6e:6a:
39:87:9f:50:cc:b7:c4:70:2c:57:27:00:55:f2:57:a2:70:f9:
a1:8c:44:73
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZk2ShIJnewfHSq/NIHhxePEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWQ1NDM2MjRmOGQzMjgxZWM5NzA0NThlZTc1MmYxMGE0
MjQ1MjkwHhcNMjUwOTExMDEwMDQ3WhcNMjUwOTEyMDEwMDQ3WjAzMTEwLwYDVQQD
EyhlMTBlYmQ5ZGY2ZTgzNGYyZTE2NmFmNTFlYTYxMWQ2NWFhYjFjMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq7BatqXChYlgLdETEFPeFcWCZYV
zYwCkj9eaHK7keT5P08DMnnws/2+92zCtDOnoDm17IfqF+5SVxvjjoBKaCtmpB1a
7x32suqHTF78l/Bo7N5efdkSu7LHIZnz8ZiCtPnuFg+0odb8ItUOtB465J1OT34v
QMs4qQRhKC19QAevwqMIXjf/jB389xM28uZcyr59of7FfMlsV1ycTesCeKfxGZTq
kkCj4lYAKXTNeO6QTdkBIOQdew8KIFmjVwpfIpCSoxPpZHFNgu9uyppQzozzZ3A5
dKPNXgfATb8/+lmeWBJ81NN6FgYzCn1eDJDU3TGPtO6hXpTXv/bhuiLlEQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOEOvZ326DTy4WavUephHWWqscDsMB8GA1UdIwQY
MBaAFPitVDYk+NMoHslwRY7nUvEKQkUpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LMVVOaVQ0MHlnZXlYQkZqdWRTOFFwQ1JTay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5
LThhMTFiNDcxOWQ4Mi8xLzEtSzFVTmlUNDB5Z2V5WEJGanVkUzhRcENSU2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIwL2FmMWY2NC1jMzVmLTQ3ZTgtODdjOS04YTExYjQ3MTlk
ODIvMS8xLUsxVU5pVDQweWdleVhCRmp1ZFM4UXBDUlNrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9Tr
WspiafOxZUZTdngFi2w7dADTrqBZhDaHLAe6yA5MI9Hb4SHfzn52mCJ8xJGMp7FQ
sB1AjBvB32FNFA3S4VrbInhQTru/1WMSwRJbaIQaoL+l9GbsSzQK1/lMGcC8XZJW
E+RhpvyqAp+rP9KQUCM+PQaWjkUcByXtq1ox8YCy7xTcWqYZieJTNexV2FFIiLs8
CRMdqbOY3bRYs4RicqENCU6pX2MxXVmBNsQ5X1O3tMtzFruhJE8NBgZDHz08pFch
FKTznInKXitAaOKFaxzJDI6PjkRNr4Rmz/FTi//+UTJq8+Ha625qOYefUMy3xHAs
VycAVfJXonD5oYxEcw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 10:19:11 2025 by rpki-client