Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
File: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft (raw, json)
Hash identifier: dlqKje8H//M9f7d85UaL9tPzOKDDgmMa0kPOcNW4ejs=
Subject key identifier: D1:15:24:9A:38:6E:A3:A0:41:4F:F5:CC:8E:DF:F6:BB:7F:5B:C1:8C
Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
Certificate issuer: /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Certificate serial: 01991763D46812BF81F62FC2D98C4414F7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
Manifest number: 0151
Signing time: Fri 05 Sep 2025 01:00:42 +0000
Manifest this update: Fri 05 Sep 2025 01:00:42 +0000
Manifest next update: Sat 06 Sep 2025 01:00:42 +0000
Files and hashes: 1: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl (hash: sZRFzt7yUcEigjCcXYt71GB9Silv4CizZ4LOGPhEGX0=)
2: NXwlVXiim_zGBDcqjx0eFIuUGWk.roa (hash: mei7vYH+6OQG8yo3aepSsguWF4MAUBo4s0J/dbzC4gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:63:d4:68:12:bf:81:f6:2f:c2:d9:8c:44:14:f7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Validity
Not Before: Sep 5 01:00:42 2025 GMT
Not After : Sep 6 01:00:42 2025 GMT
Subject: CN=d115249a386ea3a0414ff5cc8edff6bb7f5bc18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:31:96:e4:b2:7f:6e:bf:1d:1f:a8:73:0f:
c7:a6:85:c4:da:02:f3:6d:25:ad:0f:df:c2:0b:59:
38:86:50:ca:d1:ba:0f:51:99:88:c6:c4:6a:e0:e4:
13:b3:70:ab:53:78:91:82:f2:92:65:e6:cf:b6:af:
7c:72:77:21:cb:f3:72:d9:ec:23:c4:bf:ad:5b:f1:
c0:7c:ce:38:44:d2:78:fc:01:cd:f1:5e:f1:1d:ce:
c6:a2:43:45:c3:cf:5d:5d:46:c7:47:c2:84:4b:d4:
09:11:13:c1:fe:6b:68:99:1b:5a:a9:d4:0c:c5:09:
76:42:cd:03:74:10:54:77:2e:e4:55:48:82:88:b5:
1e:fe:f5:a8:67:bb:74:17:9b:5c:38:fb:30:58:97:
08:58:ad:f8:bc:02:4d:bb:93:54:27:78:64:a5:dc:
37:da:a1:7e:33:0e:c5:75:97:f6:36:e9:ee:6e:85:
c4:a2:e3:83:e7:b6:5a:de:29:0a:cc:70:a8:27:f6:
65:33:8f:01:72:e2:04:e9:d9:98:ea:55:ec:d7:a2:
f0:63:d2:00:b3:ff:bb:6b:db:b3:1f:68:91:d8:00:
a5:c7:84:24:f4:98:bd:a2:48:41:38:2f:cd:3b:d8:
31:9b:e2:75:eb:de:06:9f:0a:e0:fe:8c:69:22:a7:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:15:24:9A:38:6E:A3:A0:41:4F:F5:CC:8E:DF:F6:BB:7F:5B:C1:8C
X509v3 Authority Key Identifier:
keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:29:9a:fc:e1:cc:02:ff:26:2b:69:b9:56:26:9b:4e:68:cf:
09:35:9a:8b:69:69:1e:98:ff:95:90:21:69:83:25:1a:35:a2:
38:38:12:ca:0c:1a:5c:eb:db:4a:80:8c:28:26:86:9a:4f:69:
d2:dc:0b:38:22:88:30:16:a7:88:00:6e:0d:4a:cf:b1:21:c0:
e9:74:f0:d2:31:f7:36:d5:93:d4:16:46:57:2b:74:2c:ea:e2:
8d:39:e5:03:72:62:23:80:6c:bd:79:02:49:6b:ba:3f:db:14:
b3:50:16:b6:9a:aa:d2:bf:2f:48:b3:bf:ab:d7:67:87:ef:69:
83:06:c8:9c:76:bb:6d:74:3e:eb:9d:e8:34:fd:e4:81:f4:f9:
e6:01:b5:ff:cf:ca:35:12:29:9b:e8:1f:3c:0a:6f:65:be:7e:
8d:ad:60:8d:08:ca:81:cf:a2:40:79:6d:03:90:0c:52:48:51:
f9:3b:79:99:19:54:0c:fa:66:c0:ac:04:1a:d4:69:98:3b:69:
91:cb:d9:98:62:5e:7e:4d:a1:51:c4:dd:59:50:d1:1e:8d:ab:
cc:81:b1:cb:2e:75:f6:38:28:ef:d4:ad:9a:0c:eb:39:9c:cc:
21:a4:a5:1c:99:08:b7:7c:96:42:06:de:dc:85:49:df:78:f6:
fa:15:e0:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXY9RoEr+B9i/C2YxEFPfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODFmYTY2YmUyY2VhMzRiNTg4M2MyMWM2ZjgzZjM0NjRl
MmVlZTEwHhcNMjUwOTA1MDEwMDQyWhcNMjUwOTA2MDEwMDQyWjAzMTEwLwYDVQQD
EyhkMTE1MjQ5YTM4NmVhM2EwNDE0ZmY1Y2M4ZWRmZjZiYjdmNWJjMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9wxluSyf26/HR+ocw/HpoXE2gLz
bSWtD9/CC1k4hlDK0boPUZmIxsRq4OQTs3CrU3iRgvKSZebPtq98cnchy/Ny2ewj
xL+tW/HAfM44RNJ4/AHN8V7xHc7GokNFw89dXUbHR8KES9QJERPB/mtomRtaqdQM
xQl2Qs0DdBBUdy7kVUiCiLUe/vWoZ7t0F5tcOPswWJcIWK34vAJNu5NUJ3hkpdw3
2qF+Mw7FdZf2NunuboXEouOD57Za3ikKzHCoJ/ZlM48BcuIE6dmY6lXs16LwY9IA
s/+7a9uzH2iR2AClx4Qk9Ji9okhBOC/NO9gxm+J1694Gnwrg/oxpIqf06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEVJJo4bqOgQU/1zI7f9rt/W8GMMB8GA1UdIwQY
MBaAFNaB+ma+LOo0tYg8Icb4PzRk4u7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNDAxNjUtZDk3NC00MjliLWExYzEt
YTNlZjBhNGEzMTE5LzEvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yNDAxNjUtZDk3NC00MjliLWExYzEtYTNlZjBhNGEzMTE5
LzEvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCma/OHM
Av8mK2m5ViabTmjPCTWai2lpHpj/lZAhaYMlGjWiODgSygwaXOvbSoCMKCaGmk9p
0twLOCKIMBaniABuDUrPsSHA6XTw0jH3NtWT1BZGVyt0LOrijTnlA3JiI4BsvXkC
SWu6P9sUs1AWtpqq0r8vSLO/q9dnh+9pgwbInHa7bXQ+653oNP3kgfT55gG1/8/K
NRIpm+gfPApvZb5+ja1gjQjKgc+iQHltA5AMUkhR+Tt5mRlUDPpmwKwEGtRpmDtp
kcvZmGJefk2hUcTdWVDRHo2rzIGxyy519jgo79StmgzrOZzMIaSlHJkIt3yWQgbe
3IVJ33j2+hXg/w==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:32 2025 by rpki-client