Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: ofbEfKGKWmN1GMpW10LgjfA6D8MsFiTz7lAtKG3vdc4=
Subject key identifier: 2A:F9:B8:6A:C0:9E:AB:0F:9B:F1:17:99:DD:3F:17:74:6D:03:CE:D6
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019922FAA521FB013C20899595A84FA69EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 147F
Signing time: Sun 07 Sep 2025 07:01:15 +0000
Manifest this update: Sun 07 Sep 2025 07:01:15 +0000
Manifest next update: Mon 08 Sep 2025 07:01:15 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: XHdXd/cpQnK4mo8xAewm3tzEnJCpILqF8CBTomkVIOo=)
2: BkhUnEeKLpdw7zqQsCW8fb_TG_I.roa (hash: krWgcFHtgzZmGIlUNG6InVr0KfezPC+cFYoPcdTkKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a5:21:fb:01:3c:20:89:95:95:a8:4f:a6:9e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Sep 7 07:01:15 2025 GMT
Not After : Sep 8 07:01:15 2025 GMT
Subject: CN=2af9b86ac09eab0f9bf11799dd3f17746d03ced6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:ac:62:a2:ab:ae:4c:2e:24:67:a0:85:69:
73:98:7f:df:b3:48:d1:5d:ec:90:9f:fa:b2:70:1d:
31:d4:32:cf:b3:00:9a:c0:8d:3b:48:23:4d:a3:66:
2f:97:39:1c:62:63:1b:4f:81:4f:5b:67:1f:8d:fc:
b9:9f:18:0f:87:69:d3:a5:d1:35:03:b7:4f:47:47:
51:66:e9:08:41:98:ff:bb:bb:1a:43:7e:0b:9a:6f:
ce:35:ec:87:c8:3c:d5:94:7f:83:be:c3:96:d0:ff:
6d:96:e5:91:2b:ba:b7:0b:da:8e:84:65:fb:9c:93:
ed:d8:77:b7:33:28:1c:34:bd:fe:14:05:9f:c8:38:
42:d4:c2:66:d8:27:35:06:90:81:56:4e:04:c1:d7:
39:23:b7:9c:d3:16:50:e8:05:23:01:13:2c:15:0f:
4b:61:23:90:80:38:a6:6b:02:3c:4e:a1:a2:06:03:
14:52:06:3b:f1:47:ce:d6:09:62:98:a5:c9:bf:94:
7d:14:97:9b:18:d9:89:7d:3a:05:34:27:7e:54:a6:
81:ff:20:03:50:78:86:bd:50:63:9f:95:cc:4e:3f:
16:1c:3a:38:ac:e6:6f:27:be:51:f3:9c:ad:0b:77:
f5:dd:87:cd:de:fa:a5:85:7a:a8:70:16:36:ee:17:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:B8:6A:C0:9E:AB:0F:9B:F1:17:99:DD:3F:17:74:6D:03:CE:D6
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:83:84:d5:2c:10:92:7d:a1:bd:aa:17:67:cb:e0:76:af:c6:
f1:50:a8:f1:39:87:39:0c:a5:e9:6c:0e:d3:50:22:31:5a:92:
31:be:31:9f:95:d3:05:94:90:a9:b9:61:67:1f:9d:58:67:38:
b9:3c:3b:af:5f:5d:a6:b7:ea:1a:bd:60:0a:db:fa:87:09:33:
d8:60:67:ae:4b:9a:de:43:af:d6:d7:74:df:51:d8:a8:07:13:
95:90:30:32:6e:18:e9:22:86:6c:1f:c7:2d:9d:28:23:63:8f:
38:56:ff:c8:dc:2e:33:83:33:47:1e:65:3d:d0:eb:07:26:d4:
12:48:f6:15:62:3f:53:ce:32:56:9a:ec:d0:fb:4a:31:ce:e8:
d6:ad:f4:73:61:15:16:8d:26:56:8c:1d:70:17:1c:44:f8:3c:
6a:24:36:64:a1:9a:3a:c1:d2:0c:92:65:d4:05:e7:95:7a:5b:
45:6d:ff:ec:b3:df:ea:2e:47:24:b7:e7:37:3e:90:69:c1:17:
f0:cb:70:15:6e:9d:5a:b9:68:9b:0f:a4:e6:a1:5a:eb:39:99:
ee:de:3b:51:2e:31:9f:77:b5:e9:e2:42:6f:3c:c7:f4:a6:d9:
13:7a:e3:dd:7b:16:f5:e8:69:fa:8d:89:7d:56:b1:2b:0e:f0:
08:a5:94:9d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZki+qUh+wE8IImVlahPpp65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOWI4OWYzNjdkNGZiOTUwMjg3NzAxZjYyZDRhMDM5Yjdm
NmNiMjAwHhcNMjUwOTA3MDcwMTE1WhcNMjUwOTA4MDcwMTE1WjAzMTEwLwYDVQQD
EygyYWY5Yjg2YWMwOWVhYjBmOWJmMTE3OTlkZDNmMTc3NDZkMDNjZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskisYqKrrkwuJGeghWlzmH/fs0jR
XeyQn/qycB0x1DLPswCawI07SCNNo2YvlzkcYmMbT4FPW2cfjfy5nxgPh2nTpdE1
A7dPR0dRZukIQZj/u7saQ34Lmm/ONeyHyDzVlH+DvsOW0P9tluWRK7q3C9qOhGX7
nJPt2He3MygcNL3+FAWfyDhC1MJm2Cc1BpCBVk4Ewdc5I7ec0xZQ6AUjARMsFQ9L
YSOQgDimawI8TqGiBgMUUgY78UfO1glimKXJv5R9FJebGNmJfToFNCd+VKaB/yAD
UHiGvVBjn5XMTj8WHDo4rOZvJ75R85ytC3f13YfN3vqlhXqocBY27hc8BQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCr5uGrAnqsPm/EXmd0/F3RtA87WMB8GA1UdIwQY
MBaAFPqbifNn1PuVAodwH2LUoDm39ssgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wdUo4MmZVLTVVQ2gzQWZZdFNnT2JmMnl5QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIx
LTBlMWE2OGM3NTYzYi8xLzEtcHVKODJmVS01VUNoM0FmWXRTZ09iZjJ5eUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY1Lzk4OTMzYS03NTgxLTQ5NzktOTEyMS0wZTFhNjhjNzU2
M2IvMS8xLXB1SjgyZlUtNVVDaDNBZll0U2dPYmYyeXlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYOE
1SwQkn2hvaoXZ8vgdq/G8VCo8TmHOQyl6WwO01AiMVqSMb4xn5XTBZSQqblhZx+d
WGc4uTw7r19dprfqGr1gCtv6hwkz2GBnrkua3kOv1td031HYqAcTlZAwMm4Y6SKG
bB/HLZ0oI2OPOFb/yNwuM4MzRx5lPdDrBybUEkj2FWI/U84yVprs0PtKMc7o1q30
c2EVFo0mVowdcBccRPg8aiQ2ZKGaOsHSDJJl1AXnlXpbRW3/7LPf6i5HJLfnNz6Q
acEX8MtwFW6dWrlomw+k5qFa6zmZ7t47US4xn3e16eJCbzzH9KbZE3rj3XsW9ehp
+o2JfVaxKw7wCKWUnQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:39 2025 by rpki-client