Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
File: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json)
Hash identifier: TQ9pGi/QJTTDbv8bj9Doxcsp+s2Guarg5q4Fth+MIIM=
Subject key identifier: 28:8A:9E:63:44:DC:E7:88:93:1F:5E:86:CC:8B:60:89:B0:0D:F5:D6
Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
Certificate issuer: /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Certificate serial: 01991DD58FF661451939BA97DC8E2E149629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
Manifest number: 0411
Signing time: Sat 06 Sep 2025 07:02:39 +0000
Manifest this update: Sat 06 Sep 2025 07:02:39 +0000
Manifest next update: Sun 07 Sep 2025 07:02:39 +0000
Files and hashes: 1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: EWKNxGs4AxN0QFgtBiOtPgzKSHZ2Rt6vTxsGeaDhLIQ=)
2: D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa (hash: gHeiDeVEOHYv0WXJX1y/YBwNlFOyEUt5hFygVZ9yIyc=)
3: YNsqLkitHpqkjiltdLgc2bdx6rs.roa (hash: 3Qov5yHW6YQLGF3KdMXPXf4671PbN4pLA5bsaPPsRlI=)
4: gkfVq5pqris09sYZ6oxV9_B3k7k.roa (hash: txlMX2TP/JiHw0qHy7bbrrf1DRw3ThhHjdL7DQDHFqs=)
5: zi6tgxxdXu-KjRvwqkHo4TAbCCY.roa (hash: /Ka11sy39OKnCI674OTDKtIC713gWaXNerptag8ixr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d5:8f:f6:61:45:19:39:ba:97:dc:8e:2e:14:96:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Validity
Not Before: Sep 6 07:02:39 2025 GMT
Not After : Sep 7 07:02:39 2025 GMT
Subject: CN=288a9e6344dce788931f5e86cc8b6089b00df5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:13:47:1b:fb:f6:56:32:53:9b:c6:b7:f6:
9f:40:96:4d:22:a9:b4:85:94:4e:4e:77:05:58:e2:
94:59:a5:e3:b3:3a:ec:96:2f:c7:44:9c:e8:5b:26:
4e:81:e9:6e:56:bd:e7:e5:0c:b7:98:0c:47:fc:b6:
fd:fd:f9:17:95:a6:14:54:a8:f4:b6:0a:98:5e:f1:
21:43:60:d0:58:fc:fb:3e:2b:b1:81:e2:48:7d:5d:
28:30:4c:f7:b5:77:e8:37:75:2a:ea:75:88:12:09:
8b:03:31:58:c3:86:ca:fd:13:2e:0f:b8:92:8b:84:
ab:c3:f6:e4:cd:a4:89:6c:0a:a5:69:cb:64:8d:bd:
41:78:ac:e6:84:ae:5c:56:82:99:7c:f1:1b:03:93:
70:ad:1e:82:24:48:30:e4:7f:1e:8b:25:7d:ba:e5:
12:92:1a:66:d8:ee:91:d4:1d:05:37:89:c8:e8:46:
37:bd:45:b1:4c:47:88:10:b3:9b:1f:a7:73:8c:f5:
18:35:bf:85:73:1b:f5:0a:d8:d5:f8:f2:d9:9a:b0:
3a:19:01:34:2b:eb:10:cb:a8:de:b1:7a:30:09:8b:
de:e2:c7:2b:ef:64:d5:bb:6a:f2:ce:03:16:38:5d:
00:0e:cd:59:36:9d:f7:99:f9:d2:1c:35:de:57:55:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8A:9E:63:44:DC:E7:88:93:1F:5E:86:CC:8B:60:89:B0:0D:F5:D6
X509v3 Authority Key Identifier:
keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:94:a5:ee:19:d1:ae:74:cd:d9:ac:20:90:6e:c3:cd:35:8d:
c3:d4:0b:4c:2e:f4:8e:0e:91:f2:13:9e:ba:4b:8b:fc:5e:6b:
3e:bc:1a:ac:95:90:e4:3d:2b:24:cf:26:11:ea:59:c1:3d:57:
e2:78:68:57:44:c8:14:65:6e:d1:73:93:c6:7d:a1:11:cb:55:
7c:45:df:d4:3b:d3:d6:d7:21:1c:01:27:32:9b:51:bb:7f:a5:
50:68:4a:b3:7b:2e:44:5d:3b:28:9a:0f:65:86:19:fd:fa:bb:
ec:76:15:0c:18:53:46:53:c8:ed:9f:2f:df:47:b0:bd:49:57:
26:db:14:e8:67:d4:37:6e:60:1a:2e:da:29:30:69:aa:45:28:
0c:a6:a9:9c:d7:fc:92:5a:14:9e:b3:a7:3e:66:62:37:e0:62:
c0:3b:1c:8c:02:0b:65:7a:36:8e:a0:6b:4a:f6:d2:67:5a:53:
e7:5b:f5:d0:00:bc:4a:84:f7:54:23:b8:b3:a6:4f:a3:1a:dd:
b0:96:4c:17:0f:2a:8f:99:68:d8:5a:6d:90:a6:fa:c9:fa:2c:
2b:5b:ee:8c:a3:59:65:79:36:a9:62:6b:7d:28:bd:03:61:cf:
3e:98:88:1a:12:14:ad:ca:f6:17:d3:49:60:9a:a4:e2:4a:52:
23:c1:88:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkd1Y/2YUUZObqX3I4uFJYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MTVmMmU5MTQ5Y2UxYjQyOGM4ZjFlZGZjMDA5MjE1ZTI4
NDdmNTUwHhcNMjUwOTA2MDcwMjM5WhcNMjUwOTA3MDcwMjM5WjAzMTEwLwYDVQQD
EygyODhhOWU2MzQ0ZGNlNzg4OTMxZjVlODZjYzhiNjA4OWIwMGRmNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VoTRxv79lYyU5vGt/afQJZNIqm0
hZROTncFWOKUWaXjszrsli/HRJzoWyZOgeluVr3n5Qy3mAxH/Lb9/fkXlaYUVKj0
tgqYXvEhQ2DQWPz7PiuxgeJIfV0oMEz3tXfoN3Uq6nWIEgmLAzFYw4bK/RMuD7iS
i4Srw/bkzaSJbAqlactkjb1BeKzmhK5cVoKZfPEbA5NwrR6CJEgw5H8eiyV9uuUS
khpm2O6R1B0FN4nI6EY3vUWxTEeIELObH6dzjPUYNb+Fcxv1CtjV+PLZmrA6GQE0
K+sQy6jesXowCYve4scr72TVu2ryzgMWOF0ADs1ZNp33mfnSHDXeV1VkeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiKnmNE3OeIkx9ehsyLYImwDfXWMB8GA1UdIwQY
MBaAFNUV8ukUnOG0KMjx7fwAkhXihH9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTIt
MDA4OTk0NDk4MGNhLzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTItMDA4OTk0NDk4MGNh
LzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJSl7hnR
rnTN2awgkG7DzTWNw9QLTC70jg6R8hOeukuL/F5rPrwarJWQ5D0rJM8mEepZwT1X
4nhoV0TIFGVu0XOTxn2hEctVfEXf1DvT1tchHAEnMptRu3+lUGhKs3suRF07KJoP
ZYYZ/fq77HYVDBhTRlPI7Z8v30ewvUlXJtsU6GfUN25gGi7aKTBpqkUoDKapnNf8
kloUnrOnPmZiN+BiwDscjAILZXo2jqBrSvbSZ1pT51v10AC8SoT3VCO4s6ZPoxrd
sJZMFw8qj5lo2FptkKb6yfosK1vujKNZZXk2qWJrfSi9A2HPPpiIGhIUrcr2F9NJ
YJqk4kpSI8GI6Q==
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:31:44 2025 by rpki-client