Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: gwQUCQ3GWOtT4PI/UTF4qsR0+VuLqO1vXC2JJ/NKeGQ=
Subject key identifier: EF:B3:45:0E:66:1B:17:EB:20:4E:9C:13:BE:B1:00:D1:05:8B:B9:8D
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 0199239F4AB468E3324067B0A5DEDF988351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 1605
Signing time: Sun 07 Sep 2025 10:01:05 +0000
Manifest this update: Sun 07 Sep 2025 10:01:05 +0000
Manifest next update: Mon 08 Sep 2025 10:01:05 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: 7gNTaF5E7CY8mwwW1xyFwmyguplZeutODpNEsVKOGhc=)
2: s1SLHtKOtkgq5r5rHF__j6OHoGY.roa (hash: KY4xp5ySp/G6GnIfRT4waP6fnoRJIDEZEgF7zNS/QEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:4a:b4:68:e3:32:40:67:b0:a5:de:df:98:83:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Sep 7 10:01:05 2025 GMT
Not After : Sep 8 10:01:05 2025 GMT
Subject: CN=efb3450e661b17eb204e9c13beb100d1058bb98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:c8:ce:4b:38:2f:af:d0:d7:80:6b:82:1e:
c7:21:9c:4e:e4:90:cf:40:9e:89:b0:85:28:94:8c:
86:af:22:d7:c2:c0:04:5f:ef:aa:60:65:3a:df:d3:
e7:76:2d:93:fe:94:9a:82:1e:17:09:0b:07:04:01:
1e:79:13:2a:9a:01:95:13:ec:3b:46:5c:e5:e4:a8:
25:89:5c:27:15:46:4a:2a:90:3b:b4:95:fd:7a:44:
e3:cf:81:c8:16:ff:34:b3:ba:a6:ac:d9:89:32:10:
45:2e:77:bf:31:40:9d:54:d0:9b:a4:88:fc:54:3b:
a2:2d:39:47:13:69:d5:5b:a5:aa:a4:f9:65:85:91:
59:a8:04:77:68:5e:30:8d:a9:e9:d5:fd:d8:b2:35:
73:55:1d:62:71:f1:43:c6:02:04:b9:45:54:d5:4e:
e9:6e:6b:1f:cd:94:13:f7:e2:58:87:8b:d3:ff:e7:
54:bf:a0:2b:f3:e5:c1:24:c5:41:15:e1:b8:77:a1:
be:91:63:83:d5:b0:5c:d1:04:4f:f6:82:73:f8:33:
ea:a1:ed:cd:2f:40:a8:e9:06:5f:8e:39:8e:df:d9:
33:ed:b3:23:29:73:b6:cb:97:24:32:76:64:3c:27:
65:e6:8c:ca:fd:6d:25:04:36:ad:05:cf:86:fc:c0:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B3:45:0E:66:1B:17:EB:20:4E:9C:13:BE:B1:00:D1:05:8B:B9:8D
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0a:02:67:a3:52:ad:ca:93:27:c9:15:a8:5b:48:74:e0:ff:
e7:a9:52:cf:52:83:93:fe:74:4f:c7:f7:06:f4:1c:e0:53:3b:
e2:0a:1f:77:92:90:20:16:84:b2:c4:69:e7:d1:77:6e:7a:c4:
34:44:b5:22:3e:d4:2f:13:79:0b:68:15:6e:77:4e:97:2f:09:
ca:99:81:58:15:43:27:21:e2:5e:02:c5:c4:34:ca:56:e1:cd:
5b:c4:b5:5b:42:6a:6a:30:53:52:54:65:49:10:cc:da:01:fe:
47:6a:2e:27:31:3a:34:8e:61:e2:a9:fa:71:82:0c:6b:0e:88:
8d:f5:6c:b0:1f:c4:08:b7:d5:c8:07:f9:27:6e:1c:6d:9d:71:
45:81:6e:cd:db:dd:0d:e4:36:14:d5:8b:ca:cd:5a:ce:4f:5b:
68:ae:86:14:92:66:82:8e:73:14:f8:a3:34:60:6f:ca:63:cc:
a1:45:17:84:ee:7e:51:d9:6a:6d:31:3b:56:f4:e1:b7:c9:d3:
8a:53:db:3e:9e:da:b6:c9:50:90:28:40:5f:b2:ad:14:7a:e3:
af:ea:d5:0c:e9:23:a0:c6:04:e6:33:38:5f:75:63:c8:e2:ba:
16:b3:f2:48:6a:b0:d5:39:9d:03:e3:29:c7:5b:28:04:7a:15:
aa:cd:a0:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn0q0aOMyQGewpd7fmINRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTAzOWFlZWU2MjEwM2IyODhjNmM4Yjk2OTJjZjU4MDg3
NDNlMjEwHhcNMjUwOTA3MTAwMTA1WhcNMjUwOTA4MTAwMTA1WjAzMTEwLwYDVQQD
EyhlZmIzNDUwZTY2MWIxN2ViMjA0ZTljMTNiZWIxMDBkMTA1OGJiOThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrzIzks4L6/Q14Brgh7HIZxO5JDP
QJ6JsIUolIyGryLXwsAEX++qYGU639Pndi2T/pSagh4XCQsHBAEeeRMqmgGVE+w7
Rlzl5KgliVwnFUZKKpA7tJX9ekTjz4HIFv80s7qmrNmJMhBFLne/MUCdVNCbpIj8
VDuiLTlHE2nVW6WqpPllhZFZqAR3aF4wjanp1f3YsjVzVR1icfFDxgIEuUVU1U7p
bmsfzZQT9+JYh4vT/+dUv6Ar8+XBJMVBFeG4d6G+kWOD1bBc0QRP9oJz+DPqoe3N
L0Co6QZfjjmO39kz7bMjKXO2y5ckMnZkPCdl5ozK/W0lBDatBc+G/MC0cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+zRQ5mGxfrIE6cE76xANEFi7mNMB8GA1UdIwQY
MBaAFNSgOa7uYhA7KIxsi5aSz1gIdD4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzkt
NjJjZTg0ZjcwNzVlLzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzktNjJjZTg0ZjcwNzVl
LzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQoCZ6NS
rcqTJ8kVqFtIdOD/56lSz1KDk/50T8f3BvQc4FM74gofd5KQIBaEssRp59F3bnrE
NES1Ij7ULxN5C2gVbndOly8JypmBWBVDJyHiXgLFxDTKVuHNW8S1W0JqajBTUlRl
SRDM2gH+R2ouJzE6NI5h4qn6cYIMaw6IjfVssB/ECLfVyAf5J24cbZ1xRYFuzdvd
DeQ2FNWLys1azk9baK6GFJJmgo5zFPijNGBvymPMoUUXhO5+UdlqbTE7VvTht8nT
ilPbPp7atslQkChAX7KtFHrjr+rVDOkjoMYE5jM4X3VjyOK6FrPySGqw1TmdA+Mp
x1soBHoVqs2gPA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:50 2025 by rpki-client