Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: Artl7iZetdd5pCPTeVuM37/qUyjsLc2LuQNyqg3kTw8=
Subject key identifier: B0:03:1E:22:73:03:C0:6E:D0:F1:B0:16:B0:B8:6A:D8:24:27:AD:92
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 01991B77962AA3CCFA37B5EE4A5B4D19D3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 13B3
Signing time: Fri 05 Sep 2025 20:00:45 +0000
Manifest this update: Fri 05 Sep 2025 20:00:45 +0000
Manifest next update: Sat 06 Sep 2025 20:00:45 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: JqDHMl9Eh1rQt2kGpQ1K+0kGH/gI93GtKZ0pZuO7gpw=)
2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=)
3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:77:96:2a:a3:cc:fa:37:b5:ee:4a:5b:4d:19:d3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Sep 5 20:00:45 2025 GMT
Not After : Sep 6 20:00:45 2025 GMT
Subject: CN=b0031e227303c06ed0f1b016b0b86ad82427ad92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:d2:bb:f9:82:1f:90:e6:06:e3:36:24:9f:
a1:d6:76:48:71:0d:e5:8d:bc:0f:80:07:3e:91:d0:
72:cb:c5:d7:92:5b:4f:73:97:a1:cf:8b:b7:04:67:
a7:74:e1:36:8b:c6:3c:e4:8d:35:d0:18:1e:39:6b:
8a:87:bd:10:aa:7f:21:1a:07:0b:54:f0:ca:da:82:
99:70:8d:d9:d5:83:da:f3:37:6f:f5:42:a5:fe:11:
52:1a:6a:1b:7d:46:76:2a:4b:4a:64:3a:de:81:20:
51:28:5d:d6:0c:a4:b3:63:59:25:ab:0b:7a:71:26:
fb:50:f7:6c:36:1f:43:b5:13:a8:a7:ff:ec:51:6f:
99:b1:f2:5c:bd:20:72:61:cd:a8:73:81:89:ee:ee:
12:95:03:fd:31:0a:41:97:4e:f8:64:10:71:88:75:
55:06:47:bf:40:f4:fb:56:e2:81:fd:fb:0f:de:dd:
06:79:27:e8:58:c8:10:e3:b0:70:c4:14:a0:07:57:
c1:63:f4:c0:69:b6:51:8f:99:3b:e1:7b:eb:9a:62:
71:bb:d2:b9:56:09:97:94:40:f7:22:05:a6:08:3c:
93:f4:c6:63:10:0f:f3:1a:7a:da:78:2d:50:33:d1:
76:3d:99:8b:a7:7f:f3:d5:18:f1:81:d1:0f:ab:1c:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:03:1E:22:73:03:C0:6E:D0:F1:B0:16:B0:B8:6A:D8:24:27:AD:92
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:41:93:97:1e:d4:dc:80:ab:01:c3:0c:ad:8d:4d:e1:70:40:
49:e1:ae:7e:f6:eb:51:fc:8c:4a:93:e3:aa:4f:4f:e6:6c:9c:
19:38:3a:18:83:ce:e5:9e:d3:92:95:b6:f3:82:40:ad:df:e6:
59:a6:96:d3:6e:e2:dd:1a:c4:67:c8:2a:5c:b8:32:32:0c:9a:
34:12:b6:1d:46:c7:f7:5b:7f:81:8c:dc:9a:c8:07:30:40:2b:
4b:11:31:73:66:2a:be:bc:13:85:6e:ea:a1:88:d0:f3:aa:90:
18:64:13:40:2e:63:9f:6e:63:df:2a:3d:71:82:f4:ee:21:6f:
7a:3e:03:d0:c5:e6:9b:13:b3:1f:8c:aa:a0:e2:b7:18:a9:f6:
6a:8a:48:b4:52:ea:3c:e9:d8:f7:96:5e:92:92:21:16:7c:7e:
6c:3d:e4:43:73:9a:f5:2b:3b:ac:48:22:3b:ec:68:8c:01:45:
ff:c3:81:0c:8d:37:5f:71:48:fb:9b:0b:40:31:f7:00:a6:ed:
a0:12:49:f1:84:de:1a:c5:27:20:99:2c:6a:e1:a8:66:7f:10:
8c:69:f5:5a:83:5b:fe:4b:f5:25:fd:8b:e4:18:4f:5a:bf:4b:
0e:67:31:83:99:f7:bb:b0:c6:ad:14:b7:1d:4a:93:31:bf:79:
1d:a7:1d:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkbd5Yqo8z6N7XuSltNGdP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTkyYWFjNDg5NTIyZDVkYjE4ZmQ2MzkxZTAzNWE5Nzc4
ZWEzYjEwHhcNMjUwOTA1MjAwMDQ1WhcNMjUwOTA2MjAwMDQ1WjAzMTEwLwYDVQQD
EyhiMDAzMWUyMjczMDNjMDZlZDBmMWIwMTZiMGI4NmFkODI0MjdhZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u7Su/mCH5DmBuM2JJ+h1nZIcQ3l
jbwPgAc+kdByy8XXkltPc5ehz4u3BGendOE2i8Y85I010BgeOWuKh70Qqn8hGgcL
VPDK2oKZcI3Z1YPa8zdv9UKl/hFSGmobfUZ2KktKZDregSBRKF3WDKSzY1klqwt6
cSb7UPdsNh9DtROop//sUW+ZsfJcvSByYc2oc4GJ7u4SlQP9MQpBl074ZBBxiHVV
Bke/QPT7VuKB/fsP3t0GeSfoWMgQ47BwxBSgB1fBY/TAabZRj5k74XvrmmJxu9K5
VgmXlED3IgWmCDyT9MZjEA/zGnraeC1QM9F2PZmLp3/z1RjxgdEPqxye0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLADHiJzA8Bu0PGwFrC4atgkJ62SMB8GA1UdIwQY
MBaAFNNZKqxIlSLV2xj9Y5HgNal3jqOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUt
ZTMzYWUxMDZiNTRkLzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUtZTMzYWUxMDZiNTRk
LzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0GTlx7U
3ICrAcMMrY1N4XBASeGufvbrUfyMSpPjqk9P5mycGTg6GIPO5Z7TkpW284JArd/m
WaaW027i3RrEZ8gqXLgyMgyaNBK2HUbH91t/gYzcmsgHMEArSxExc2YqvrwThW7q
oYjQ86qQGGQTQC5jn25j3yo9cYL07iFvej4D0MXmmxOzH4yqoOK3GKn2aopItFLq
POnY95ZekpIhFnx+bD3kQ3Oa9Ss7rEgiO+xojAFF/8OBDI03X3FI+5sLQDH3AKbt
oBJJ8YTeGsUnIJksauGoZn8QjGn1WoNb/kv1Jf2L5BhPWr9LDmcxg5n3u7DGrRS3
HUqTMb95HacdJA==
-----END CERTIFICATE-----
Generated at Sat Sep 6 04:50:45 2025 by rpki-client