Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: LDmd7zihdtpZ0BEEE6RrNIwkvGzYhkAdY/bcU5LoimI=
Subject key identifier: C1:FE:33:94:14:DB:41:D1:BD:47:93:E8:77:17:D5:53:FD:CE:2E:20
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 019921B0B4E663FB5733E94A13838356F7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 01:00:52 +0000
Manifest this update: Sun 07 Sep 2025 01:00:52 +0000
Manifest next update: Mon 08 Sep 2025 01:00:52 +0000
Files and hashes: 1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: t80jAywZ3V3aPHoHVzEpbAcGLX6t+lvFa8UTICwrVMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:b4:e6:63:fb:57:33:e9:4a:13:83:83:56:f7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: Sep 7 01:00:52 2025 GMT
Not After : Sep 8 01:00:52 2025 GMT
Subject: CN=c1fe339414db41d1bd4793e87717d553fdce2e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:75:2d:66:98:2b:71:92:59:51:31:2a:ed:
26:f1:70:24:ee:33:d2:7f:c8:54:7f:32:1f:fc:54:
3a:ff:00:1c:34:60:77:61:47:9f:8d:70:6c:f2:55:
c5:6a:3d:e5:c4:7d:00:7c:59:a9:42:4a:5b:58:b8:
dd:04:c9:65:04:b5:56:bc:3c:77:c3:75:d4:e2:e9:
b2:74:19:fe:16:0c:96:5a:44:46:8a:74:2b:c5:ff:
f9:d0:e4:96:f8:0d:fa:63:e4:8a:f4:d0:b5:6e:d9:
78:94:86:d8:50:50:65:bc:eb:1a:1e:62:cb:d9:b7:
dd:02:e9:29:1c:23:fd:7e:58:98:55:70:77:9f:07:
83:4e:b0:0f:62:81:b2:fc:bf:58:95:34:87:48:2a:
81:d7:a4:c7:12:2b:3b:cc:ef:2c:05:8e:1f:a8:14:
70:c2:b1:2c:36:44:b8:02:67:b8:34:a7:17:d4:92:
0f:73:66:74:61:fd:3f:27:31:4a:dd:e9:30:c4:57:
f3:2c:77:5d:ba:59:e1:bd:72:0b:5f:6a:75:82:b4:
ed:72:54:34:0b:e5:da:de:30:02:6b:d0:5a:0f:43:
73:dd:73:fd:ce:78:8a:07:71:a6:e5:62:19:81:8a:
67:92:d2:80:86:94:0a:ff:cc:5f:77:eb:c8:e7:28:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:33:94:14:DB:41:D1:BD:47:93:E8:77:17:D5:53:FD:CE:2E:20
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:40:c2:07:cc:e2:8d:44:0e:85:d4:4d:7c:4d:d4:c4:96:37:
1a:51:c8:c1:e1:ba:24:15:86:a4:22:1d:e4:bc:be:c6:d6:7a:
80:74:4d:d5:f8:40:46:ff:a0:ee:6e:03:aa:11:87:f5:57:3a:
02:19:09:5b:15:20:8a:f0:ed:8b:33:5b:70:f8:f4:62:a9:4e:
d1:c0:9c:04:82:b3:ac:84:38:3d:a7:ae:8c:30:92:9f:55:3e:
d3:ca:5d:ac:f2:c9:53:a7:50:31:5d:80:59:b5:c3:01:c2:b2:
2f:c3:6a:21:a9:97:cb:a2:bb:bb:58:25:89:42:fb:10:8e:d9:
33:ca:ec:40:5b:43:f2:36:c3:36:19:04:25:8a:3c:a0:3b:b1:
9f:29:57:93:cc:1d:6a:4c:d3:90:c7:bc:d6:0f:dc:41:53:20:
83:45:59:92:45:7b:28:27:c8:9d:48:99:7f:f9:68:0c:2f:8e:
3d:3f:c4:af:ea:06:a2:6b:19:91:0a:2b:95:e1:06:20:a1:50:
36:6e:5b:df:05:4f:5d:0c:bd:69:14:ad:8e:ca:10:b1:25:80:
49:d3:d6:56:11:96:1b:de:97:07:ac:d7:06:b6:e9:da:6f:ca:
93:87:7f:3e:31:fb:0c:55:7b:ce:a0:88:fa:34:ff:f4:2d:39:
55:dc:92:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsLTmY/tXM+lKE4ODVvemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJkOWVkNTA0ZWVmNjU5ZWNmYzkxOWExOTVjZDJhODAz
YjYwYTcwHhcNMjUwOTA3MDEwMDUyWhcNMjUwOTA4MDEwMDUyWjAzMTEwLwYDVQQD
EyhjMWZlMzM5NDE0ZGI0MWQxYmQ0NzkzZTg3NzE3ZDU1M2ZkY2UyZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM51LWaYK3GSWVExKu0m8XAk7jPS
f8hUfzIf/FQ6/wAcNGB3YUefjXBs8lXFaj3lxH0AfFmpQkpbWLjdBMllBLVWvDx3
w3XU4umydBn+FgyWWkRGinQrxf/50OSW+A36Y+SK9NC1btl4lIbYUFBlvOsaHmLL
2bfdAukpHCP9fliYVXB3nweDTrAPYoGy/L9YlTSHSCqB16THEis7zO8sBY4fqBRw
wrEsNkS4Ame4NKcX1JIPc2Z0Yf0/JzFK3ekwxFfzLHddulnhvXILX2p1grTtclQ0
C+Xa3jACa9BaD0Nz3XP9zniKB3Gm5WIZgYpnktKAhpQK/8xfd+vI5yiDCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH+M5QU20HRvUeT6HcX1VP9zi4gMB8GA1UdIwQY
MBaAFNb72e1QTu9lns/JGaGVzSqAO2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMt
YWNjY2FlNjkwZTc1LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMtYWNjY2FlNjkwZTc1
LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxEDCB8zi
jUQOhdRNfE3UxJY3GlHIweG6JBWGpCId5Ly+xtZ6gHRN1fhARv+g7m4DqhGH9Vc6
AhkJWxUgivDtizNbcPj0YqlO0cCcBIKzrIQ4PaeujDCSn1U+08pdrPLJU6dQMV2A
WbXDAcKyL8NqIamXy6K7u1gliUL7EI7ZM8rsQFtD8jbDNhkEJYo8oDuxnylXk8wd
akzTkMe81g/cQVMgg0VZkkV7KCfInUiZf/loDC+OPT/Er+oGomsZkQorleEGIKFQ
Nm5b3wVPXQy9aRStjsoQsSWASdPWVhGWG96XB6zXBrbp2m/Kk4d/PjH7DFV7zqCI
+jT/9C05VdyScw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:24 2025 by rpki-client