Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier: QzNF0j/1y+EkjeWTbzCglNavl0BG3YGTisCAU4ck6wo=
Subject key identifier: 98:AF:B6:9A:14:07:EF:55:EC:CB:AB:79:FA:70:CF:A4:56:3E:64:19
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 019922FAB801F6377FF8831DF5E97FD5F3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 07:01:20 +0000
Manifest this update: Sun 07 Sep 2025 07:01:20 +0000
Manifest next update: Mon 08 Sep 2025 07:01:20 +0000
Files and hashes: 1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: 00NPM5hekJDfYTCR/2zPMUbQG4CGBCQ1Lz8NZPMuH4w=)
2: lWvdh1tW9Nr29e037SncsLGwjfI.roa (hash: j1dUTiHWBt3aDo99E5yf928X8VvKCbJydPoVbx3OYLA=)
3: lv5jL_rYGh7Uv0rWQaR0zgeQbZY.roa (hash: aiK+jeojasCoIONEiBsew2dpW6Sl1vqGI4o1s3u6sNg=)
4: tpwCcvQj5buTsmFRUmHDkFF9loo.roa (hash: mW6eLdMENzR4XVFpPs8//f09RPHYqnyv9VrQnjo145o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b8:01:f6:37:7f:f8:83:1d:f5:e9:7f:d5:f3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Sep 7 07:01:20 2025 GMT
Not After : Sep 8 07:01:20 2025 GMT
Subject: CN=98afb69a1407ef55eccbab79fa70cfa4563e6419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:10:87:20:fa:77:91:5d:59:e7:00:ca:06:
1b:51:7e:d6:e5:b1:59:44:d3:09:b2:b4:5a:f7:36:
ba:ab:f2:af:67:3d:c6:58:70:7f:05:a2:88:d6:e7:
88:c2:04:09:6e:d8:1c:0f:98:58:cd:e7:20:8e:e3:
56:19:89:67:eb:b5:a8:6c:d4:ba:6e:51:e6:c2:3c:
58:ce:16:0a:c5:7b:9b:82:aa:f4:d7:30:f4:4e:2e:
09:bc:14:ee:fd:26:e1:dc:67:94:de:66:52:f9:43:
f7:0c:f9:db:5e:08:35:c6:55:15:5b:c4:96:2d:49:
48:6c:f7:3d:0d:72:ec:7a:c2:02:82:77:77:e8:dc:
bf:80:d1:5e:cd:cf:94:e4:3e:60:b5:82:22:cc:e1:
c6:9e:2d:97:47:6a:07:e0:8e:b1:56:d9:44:5b:a1:
64:e1:fe:7f:ef:b6:06:05:7b:1b:b1:89:1f:d9:4c:
52:31:03:bd:cb:28:ff:52:c5:f3:d5:6f:12:6d:cc:
82:68:5a:5c:d6:6d:cd:6d:ec:78:08:c5:10:25:8d:
0a:7f:6b:01:42:c7:3a:76:89:da:9f:5a:59:50:f6:
ec:1c:41:95:6c:6c:6e:bc:d1:a2:96:66:ce:b0:9b:
16:83:a8:64:ed:24:3d:19:4c:ae:55:45:00:38:bc:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:B6:9A:14:07:EF:55:EC:CB:AB:79:FA:70:CF:A4:56:3E:64:19
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7e:6d:03:09:29:85:10:f4:ec:90:f8:70:f5:cf:37:4f:5a:
6a:e5:f7:58:38:33:23:d3:e0:88:b7:f0:13:7d:3a:03:ea:15:
5b:55:e3:1d:48:10:8c:c2:bf:25:69:b8:9f:cf:bf:a3:ff:94:
4e:c7:d4:54:16:32:6a:3a:10:dc:4c:75:50:da:67:48:1d:9a:
49:ed:08:d4:9d:8c:9a:1f:84:43:99:79:33:1a:31:87:be:04:
16:bc:40:f3:9b:de:58:10:eb:1b:0e:8c:aa:57:37:0f:db:76:
b7:65:b7:1c:78:74:1b:f5:8b:0b:98:3a:c0:30:3a:d7:01:14:
6e:ca:37:34:70:45:97:d2:8d:e2:bc:ff:03:ec:f0:72:e0:2d:
48:4a:52:e2:0a:e1:e6:45:a2:5f:e1:f8:f5:ef:5e:58:43:c6:
a3:38:58:50:33:83:b9:f1:10:b2:fa:58:eb:c5:53:f4:15:8e:
fc:6c:35:7a:a8:ee:c0:dd:fb:e6:ab:0e:13:3b:b4:22:ab:29:
85:89:67:6a:1b:53:03:3e:a2:95:04:48:4e:7e:d2:26:e2:e5:
e8:50:5d:31:cf:57:6f:75:3f:f7:15:bc:6d:8c:cf:24:32:c3:
80:e5:5e:3e:17:d9:20:cd:65:f5:22:b4:48:03:2f:89:31:9c:
ac:48:bb:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+rgB9jd/+IMd9el/1fPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTVjYjg2NTg2Y2JmZDI0NjJhZmEwNTJjOTZhMjVjMTYy
ODMwYTgwHhcNMjUwOTA3MDcwMTIwWhcNMjUwOTA4MDcwMTIwWjAzMTEwLwYDVQQD
Eyg5OGFmYjY5YTE0MDdlZjU1ZWNjYmFiNzlmYTcwY2ZhNDU2M2U2NDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PUQhyD6d5FdWecAygYbUX7W5bFZ
RNMJsrRa9za6q/KvZz3GWHB/BaKI1ueIwgQJbtgcD5hYzecgjuNWGYln67WobNS6
blHmwjxYzhYKxXubgqr01zD0Ti4JvBTu/Sbh3GeU3mZS+UP3DPnbXgg1xlUVW8SW
LUlIbPc9DXLsesICgnd36Ny/gNFezc+U5D5gtYIizOHGni2XR2oH4I6xVtlEW6Fk
4f5/77YGBXsbsYkf2UxSMQO9yyj/UsXz1W8SbcyCaFpc1m3Nbex4CMUQJY0Kf2sB
Qsc6donan1pZUPbsHEGVbGxuvNGilmbOsJsWg6hk7SQ9GUyuVUUAOLyZCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJivtpoUB+9V7Murefpwz6RWPmQZMB8GA1UdIwQY
MBaAFNaVy4ZYbL/SRir6BSyWolwWKDCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTkt
YTVjZDgxYjVlMDBiLzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTktYTVjZDgxYjVlMDBi
LzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMH5tAwkp
hRD07JD4cPXPN09aauX3WDgzI9PgiLfwE306A+oVW1XjHUgQjMK/JWm4n8+/o/+U
TsfUVBYyajoQ3Ex1UNpnSB2aSe0I1J2Mmh+EQ5l5Mxoxh74EFrxA85veWBDrGw6M
qlc3D9t2t2W3HHh0G/WLC5g6wDA61wEUbso3NHBFl9KN4rz/A+zwcuAtSEpS4grh
5kWiX+H49e9eWEPGozhYUDODufEQsvpY68VT9BWO/Gw1eqjuwN375qsOEzu0Iqsp
hYlnahtTAz6ilQRITn7SJuLl6FBdMc9Xb3U/9xW8bYzPJDLDgOVePhfZIM1l9SK0
SAMviTGcrEi7/w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:04 2025 by rpki-client