
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
File: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft (raw, json)
Hash identifier: jEjWqLBqqy5FtGK9tOiGVthT5Lx5jTYH2RWkC6cIqyo=
Subject key identifier: 09:19:67:8C:18:F4:44:1C:E0:C5:E0:B6:41:59:46:43:C2:47:89:C2
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Certificate issuer: /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial: 0199221F30488EC5AF26BF8FCE1BD006E178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 03:01:33 +0000
Manifest this update: Sun 07 Sep 2025 03:01:33 +0000
Manifest next update: Mon 08 Sep 2025 03:01:33 +0000
Files and hashes: 1: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl (hash: EbvdrrDuefAqV+pv8VRBzRd540otSuxhhL1nx/jt7WM=)
2: zZd3gJy36oVWVgmrpGXSBEMHa_E.roa (hash: pKDeM3EslRORlEnCyv6iQ4XZ7Q0avsrweW8tC90yBl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:30:48:8e:c5:af:26:bf:8f:ce:1b:d0:06:e1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Validity
Not Before: Sep 7 03:01:33 2025 GMT
Not After : Sep 8 03:01:33 2025 GMT
Subject: CN=0919678c18f4441ce0c5e0b641594643c24789c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:9d:e8:8a:4d:0f:7e:93:8d:15:20:da:89:
b7:33:08:f0:b7:bc:83:12:c7:09:ff:8e:e9:c9:cb:
43:b0:f5:01:e5:a2:6e:c4:02:31:45:72:e0:6c:10:
3a:12:26:d1:10:0a:a3:94:9c:1e:0f:df:b1:fe:b8:
cc:11:1b:98:28:c4:47:29:34:6d:e7:fc:77:ec:33:
42:88:54:87:4a:2d:73:38:09:42:81:f6:52:f5:48:
ab:45:d3:b8:6c:f1:73:ae:87:d5:a5:78:4d:10:a1:
7c:c2:54:c2:b6:d4:b5:0c:6d:c7:8a:d1:7e:0a:14:
e9:a9:44:2e:ce:f1:25:1b:09:7e:e5:94:2a:b5:a4:
c5:64:f5:bb:f8:d5:03:f4:e3:3a:29:e6:84:93:45:
f3:e3:7a:ef:a1:4f:8c:4c:59:75:b4:40:f7:57:a9:
44:77:2a:7e:93:a5:6f:c6:ab:5a:47:37:8b:90:76:
31:6c:a7:ef:ab:d9:76:e4:80:7d:35:c0:33:c7:1b:
03:a8:8f:a0:47:f8:b2:8d:69:0c:56:74:1a:83:95:
a8:b9:2a:f6:ab:de:a6:9a:d3:39:78:58:76:72:2f:
65:95:42:36:74:e3:e3:14:14:c9:12:a8:c6:e4:b7:
b3:21:14:50:c3:f9:13:fb:b7:af:e6:1b:53:06:2f:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:19:67:8C:18:F4:44:1C:E0:C5:E0:B6:41:59:46:43:C2:47:89:C2
X509v3 Authority Key Identifier:
keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ec:39:75:f3:3c:a8:92:22:ec:76:2d:ba:40:6b:cc:8c:5c:
39:d6:95:d2:2d:6a:47:21:c7:99:8b:5b:d4:35:3f:29:e7:1b:
14:60:8b:58:f8:ca:b6:80:1d:fb:f9:31:c3:b4:67:c0:c2:28:
3a:11:df:75:5a:4f:28:3e:02:e4:a7:2d:cb:bb:a3:0a:31:1c:
b9:34:3b:d5:61:64:10:e8:65:17:6d:1e:6e:8c:b2:af:bb:86:
10:1e:bd:17:4c:ea:af:b5:fd:ff:08:41:59:c5:ef:8d:56:ed:
85:28:b0:af:eb:5c:08:fe:ca:8a:30:6e:08:61:17:a1:bd:94:
0a:81:53:3f:60:d3:ec:dd:70:22:36:4d:02:bb:cd:79:9b:44:
c7:9e:1b:09:81:cb:bd:09:db:24:b1:6c:05:54:1d:39:93:e8:
c1:ca:c8:84:9d:d3:3f:96:1d:9e:f2:18:8a:11:bc:86:2b:7e:
7c:43:20:24:1e:9d:f9:cf:c1:ec:e8:6c:a7:f4:1d:0d:25:66:
94:5a:21:63:42:f1:c4:9e:0e:e4:74:e6:4d:44:55:88:92:0a:
b5:e1:c6:19:89:8d:90:96:43:00:cb:bd:ba:41:72:a2:e2:8d:
9c:16:eb:2c:9a:63:e8:a2:4c:71:a5:f0:29:a0:4b:ff:8f:7a:
d0:83:4d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHzBIjsWvJr+PzhvQBuF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzdjNGVhYjVjMDc5NDhjYmY0NGE4YTAxYzZhODI3ZmRh
ZTkzNDEwHhcNMjUwOTA3MDMwMTMzWhcNMjUwOTA4MDMwMTMzWjAzMTEwLwYDVQQD
EygwOTE5Njc4YzE4ZjQ0NDFjZTBjNWUwYjY0MTU5NDY0M2MyNDc4OWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY+d6IpND36TjRUg2om3Mwjwt7yD
EscJ/47pyctDsPUB5aJuxAIxRXLgbBA6EibREAqjlJweD9+x/rjMERuYKMRHKTRt
5/x37DNCiFSHSi1zOAlCgfZS9UirRdO4bPFzrofVpXhNEKF8wlTCttS1DG3HitF+
ChTpqUQuzvElGwl+5ZQqtaTFZPW7+NUD9OM6KeaEk0Xz43rvoU+MTFl1tED3V6lE
dyp+k6VvxqtaRzeLkHYxbKfvq9l25IB9NcAzxxsDqI+gR/iyjWkMVnQag5WouSr2
q96mmtM5eFh2ci9llUI2dOPjFBTJEqjG5LezIRRQw/kT+7ev5htTBi9uewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkZZ4wY9EQc4MXgtkFZRkPCR4nCMB8GA1UdIwQY
MBaAFNTHxOq1wHlIy/RKigHGqCf9rpNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81ODYzZWEtNDE5YS00YzI5LThlM2Ut
OGQ1MjVhNTYzZTYxLzEvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81ODYzZWEtNDE5YS00YzI5LThlM2UtOGQ1MjVhNTYzZTYx
LzEvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOw5dfM8
qJIi7HYtukBrzIxcOdaV0i1qRyHHmYtb1DU/KecbFGCLWPjKtoAd+/kxw7RnwMIo
OhHfdVpPKD4C5Kcty7ujCjEcuTQ71WFkEOhlF20eboyyr7uGEB69F0zqr7X9/whB
WcXvjVbthSiwr+tcCP7KijBuCGEXob2UCoFTP2DT7N1wIjZNArvNeZtEx54bCYHL
vQnbJLFsBVQdOZPowcrIhJ3TP5YdnvIYihG8hit+fEMgJB6d+c/B7Ohsp/QdDSVm
lFohY0LxxJ4O5HTmTURViJIKteHGGYmNkJZDAMu9ukFyouKNnBbrLJpj6KJMcaXw
KaBL/4960INN0g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:48 2025 by rpki-client