Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: M1h1EFDf0W7Rf685yKUzw3avE0T3mjDwYXCvbfXttcg=
Subject key identifier: 07:8F:B9:AD:17:4D:F5:1C:5F:20:2A:20:2A:16:FE:46:96:84:A9:F9
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 0199364A6393BA8BAD4314F4736B558ABF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 01:01:08 +0000
Manifest this update: Thu 11 Sep 2025 01:01:08 +0000
Manifest next update: Fri 12 Sep 2025 01:01:08 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: OBVqYycZRM98F5KuUrhr9tc1SHVQSjpfTCHMnTzHcoc=)
2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=)
3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=)
4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:63:93:ba:8b:ad:43:14:f4:73:6b:55:8a:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Sep 11 01:01:08 2025 GMT
Not After : Sep 12 01:01:08 2025 GMT
Subject: CN=078fb9ad174df51c5f202a202a16fe469684a9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:c4:08:01:6b:90:86:45:41:ef:4e:66:b6:
0d:5a:d1:75:2a:2d:ad:3d:24:2a:81:54:ee:b4:80:
42:69:20:8d:23:55:48:47:9b:fb:b1:ae:e5:f1:9c:
5f:51:90:a5:60:83:a2:28:a8:fe:fb:f4:b0:84:b7:
eb:24:db:65:f2:f9:80:6d:f9:2f:00:3e:13:a4:2e:
1a:a6:57:50:34:da:7e:5e:57:f7:e4:23:17:a9:26:
92:88:3d:4b:8e:07:1d:3f:6d:6a:7f:2f:a8:e8:df:
0b:43:29:bc:d8:f7:62:97:6b:6f:4e:87:45:8a:9b:
ce:92:17:9a:ca:48:7e:35:b0:73:6a:ed:ab:ca:bc:
25:ce:ed:99:84:c8:10:2c:6f:89:fb:2d:6a:46:79:
94:27:51:cd:1e:9c:79:a7:0a:c7:d6:a8:2e:4f:fa:
a9:5e:10:93:bd:d7:9a:32:07:db:7c:13:71:6b:91:
37:93:5f:6f:08:6e:a4:d3:45:cd:34:aa:73:9d:eb:
0a:d6:9a:85:da:b6:12:d6:4f:6f:af:4e:bd:3d:2b:
d4:73:2e:f3:fb:4b:6a:5a:b7:64:0b:44:76:e0:d3:
ef:a8:09:47:86:09:76:06:ec:84:33:ca:08:01:84:
35:71:dc:26:c1:3f:5e:03:c1:e7:52:72:e0:3d:2a:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8F:B9:AD:17:4D:F5:1C:5F:20:2A:20:2A:16:FE:46:96:84:A9:F9
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:58:95:51:15:f7:61:7f:09:96:1f:3c:3f:cd:19:47:b4:89:
27:59:db:65:0c:92:89:d5:d9:ee:d4:ec:52:0b:b8:94:f1:a3:
66:9d:5e:06:77:d4:12:8b:fd:07:44:04:44:48:6e:85:7a:01:
2f:d5:a6:53:f4:bc:43:49:c2:32:1e:33:68:9b:db:bd:38:97:
5e:39:4d:47:ff:4b:f0:11:d0:33:28:ff:86:fa:94:40:c3:d9:
cf:37:6c:7c:ea:de:66:3f:15:36:5e:fe:4e:b7:15:ce:7f:8a:
24:aa:d9:5e:17:6b:e2:68:b0:46:aa:53:60:89:ca:a7:76:26:
91:e4:01:26:20:b5:30:05:8a:a0:3d:88:8f:26:06:32:1f:50:
2f:e1:d2:e0:0b:9d:35:4e:2f:6e:28:78:8c:27:fb:cc:ef:e3:
07:f4:fb:25:07:e7:9d:47:6b:45:90:85:0f:b6:48:ba:3f:25:
c8:74:62:45:b2:82:9f:df:ab:88:6e:3a:f0:28:e6:43:bd:93:
61:52:8b:fc:16:89:e3:34:c1:be:76:d6:03:e1:d6:f0:7a:25:
a5:43:e1:b7:b0:22:ca:43:6c:1b:24:21:ad:c3:07:da:0a:88:
f8:28:f8:a7:b7:fd:50:bc:18:f4:2e:5e:9f:7f:50:7e:9e:c8:
47:83:ed:3e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZk2SmOTuoutQxT0c2tVir9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NWQwMDQ0NDYxODJkNTFmZDM4ZjdmNzVmZTJhNWM4NjA4
YmM4NmQwHhcNMjUwOTExMDEwMTA4WhcNMjUwOTEyMDEwMTA4WjAzMTEwLwYDVQQD
EygwNzhmYjlhZDE3NGRmNTFjNWYyMDJhMjAyYTE2ZmU0Njk2ODRhOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPPECAFrkIZFQe9OZrYNWtF1Ki2t
PSQqgVTutIBCaSCNI1VIR5v7sa7l8ZxfUZClYIOiKKj++/SwhLfrJNtl8vmAbfkv
AD4TpC4apldQNNp+Xlf35CMXqSaSiD1LjgcdP21qfy+o6N8LQym82Pdil2tvTodF
ipvOkheaykh+NbBzau2ryrwlzu2ZhMgQLG+J+y1qRnmUJ1HNHpx5pwrH1qguT/qp
XhCTvdeaMgfbfBNxa5E3k19vCG6k00XNNKpznesK1pqF2rYS1k9vr069PSvUcy7z
+0tqWrdkC0R24NPvqAlHhgl2BuyEM8oIAYQ1cdwmwT9eA8HnUnLgPSpgsQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAePua0XTfUcXyAqICoW/kaWhKn5MB8GA1UdIwQY
MBaAFPhdAERGGC1R/Tj391/ipchgi8htMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GMEFSRVlZTFZIOU9QZjNYLUtseUdDTHlHMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1
LTA4MGVlMGE5N2Y2YS8xLzEtRjBBUkVZWUxWSDlPUGYzWC1LbHlHQ0x5RzAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M5ZGI1Mi1hYzkxLTQwNmEtOWY5NS0wODBlZTBhOTdm
NmEvMS8xLUYwQVJFWVlMVkg5T1BmM1gtS2x5R0NMeUcwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXViV
URX3YX8Jlh88P80ZR7SJJ1nbZQySidXZ7tTsUgu4lPGjZp1eBnfUEov9B0QEREhu
hXoBL9WmU/S8Q0nCMh4zaJvbvTiXXjlNR/9L8BHQMyj/hvqUQMPZzzdsfOreZj8V
Nl7+TrcVzn+KJKrZXhdr4miwRqpTYInKp3YmkeQBJiC1MAWKoD2IjyYGMh9QL+HS
4AudNU4vbih4jCf7zO/jB/T7JQfnnUdrRZCFD7ZIuj8lyHRiRbKCn9+riG468Cjm
Q72TYVKL/BaJ4zTBvnbWA+HW8HolpUPht7AiykNsGyQhrcMH2gqI+Cj4p7f9ULwY
9C5en39Qfp7IR4PtPg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 10:19:08 2025 by rpki-client