Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: 86hP+vimAmbu/m/QYiTC4mOag5Khy0g1jz3VE+kMcv0=
Subject key identifier: B4:54:F2:3D:D4:32:C9:8B:77:45:FA:7C:0E:6F:2B:53:04:9E:32:15
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 019933B6E0D21C63FF3313300BE96088F44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 0ACB
Signing time: Wed 10 Sep 2025 13:00:47 +0000
Manifest this update: Wed 10 Sep 2025 13:00:47 +0000
Manifest next update: Thu 11 Sep 2025 13:00:47 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: jFJPHrAaL4YoSiVsZqe1Ujgdz3CNQ+Ok1VdAwWjP980=)
2: D9KqMTAksNO2iOKAwulZkRCL4Fw.roa (hash: x9me+db9iBftpJ/9nLLqbm0SGnpLl+KbaGJCrguqqhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:e0:d2:1c:63:ff:33:13:30:0b:e9:60:88:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Sep 10 13:00:47 2025 GMT
Not After : Sep 11 13:00:47 2025 GMT
Subject: CN=b454f23dd432c98b7745fa7c0e6f2b53049e3215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:76:4e:8a:95:80:1a:32:02:62:c8:b9:68:
3f:a7:da:2f:e6:60:72:ff:89:e4:ca:3d:6a:78:20:
43:de:64:de:e7:6b:c8:4b:97:87:26:b3:43:de:aa:
1d:56:3d:59:a3:51:cc:56:52:68:d0:18:dc:82:7c:
5f:e4:1a:ed:a5:66:cc:d7:98:2d:0f:1b:f5:e0:f9:
ff:77:0b:87:72:c1:35:ef:01:fe:73:df:c9:df:9c:
77:dd:59:fb:e0:36:81:c2:69:37:f4:a1:7d:e5:89:
7a:ca:e0:17:12:4e:c1:4f:78:ac:e7:d2:8a:37:3f:
23:83:ec:ec:96:1e:32:a9:62:f1:15:ab:48:dc:f5:
6a:eb:52:94:54:28:11:80:30:f2:3e:30:34:6a:a5:
da:ba:91:ed:7c:b2:e4:83:56:1d:db:aa:54:c5:0b:
f1:de:89:a4:0d:c2:58:51:68:0f:58:32:31:16:95:
53:80:05:07:8d:fc:bf:ae:10:6c:f8:73:cc:6c:44:
b5:00:ab:a0:b2:42:12:8e:d2:fe:b7:17:d9:39:a6:
64:30:be:96:fe:4a:a5:73:8b:c6:56:82:0f:d4:92:
89:a0:08:af:bd:d4:62:04:8b:2b:97:b0:6f:c7:e5:
1e:17:9a:0f:85:b7:43:fb:0f:b3:e6:95:0c:2f:62:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:54:F2:3D:D4:32:C9:8B:77:45:FA:7C:0E:6F:2B:53:04:9E:32:15
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:06:4e:c3:40:5c:d0:53:d8:0f:06:b4:c0:d5:f8:9f:e0:97:
af:5f:bb:a1:79:9f:3e:24:52:dd:72:cd:90:4f:8a:50:8f:e4:
f5:ee:42:2b:78:dc:a6:39:2c:38:a3:d6:5e:4b:e5:56:fd:15:
51:c7:0c:35:62:cb:bb:cd:18:b6:64:0e:d8:ac:3c:60:c4:6e:
02:bd:9d:c0:0a:a4:bc:a6:83:2f:d8:f3:c9:38:84:42:82:de:
3c:91:d8:e0:fc:10:11:91:55:4c:7d:d2:8d:e8:aa:fb:8d:63:
99:2a:a1:96:99:20:fc:97:78:c2:00:60:ba:86:dc:03:ee:55:
23:09:46:a9:ae:5a:21:96:12:4b:49:f7:1f:2b:30:09:09:8f:
8a:0c:7a:a5:2f:dd:d6:75:1b:52:92:5e:49:f6:43:31:43:d8:
e2:56:d2:34:0a:db:36:38:1c:f0:35:09:00:5c:91:9b:e1:b6:
7c:ef:48:69:ba:31:80:89:46:70:28:7d:1e:23:43:e5:e5:d0:
6b:e1:ef:76:8f:66:6d:65:ea:0d:a3:32:9a:e8:e9:80:9e:ef:
86:d6:0a:2f:b9:f8:23:92:be:dc:08:c6:f0:c9:22:77:53:4f:
6d:bd:a2:5c:80:b9:b0:b4:65:a8:29:d9:d5:fe:a2:aa:fb:29:
6c:5b:42:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkztuDSHGP/MxMwC+lgiPRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1Zjk0Nzg2ZDAzNjY4NTQ0MDkwMWEzZGNlNWEzMzRjZjEz
MjcyYTAwHhcNMjUwOTEwMTMwMDQ3WhcNMjUwOTExMTMwMDQ3WjAzMTEwLwYDVQQD
EyhiNDU0ZjIzZGQ0MzJjOThiNzc0NWZhN2MwZTZmMmI1MzA0OWUzMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WN2ToqVgBoyAmLIuWg/p9ov5mBy
/4nkyj1qeCBD3mTe52vIS5eHJrND3qodVj1Zo1HMVlJo0Bjcgnxf5BrtpWbM15gt
Dxv14Pn/dwuHcsE17wH+c9/J35x33Vn74DaBwmk39KF95Yl6yuAXEk7BT3is59KK
Nz8jg+zslh4yqWLxFatI3PVq61KUVCgRgDDyPjA0aqXaupHtfLLkg1Yd26pUxQvx
3omkDcJYUWgPWDIxFpVTgAUHjfy/rhBs+HPMbES1AKugskISjtL+txfZOaZkML6W
/kqlc4vGVoIP1JKJoAivvdRiBIsrl7Bvx+UeF5oPhbdD+w+z5pUML2IQ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRU8j3UMsmLd0X6fA5vK1MEnjIVMB8GA1UdIwQY
MBaAFNX5R4bQNmhUQJAaPc5aM0zxMnKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83MDQ5NmMtNjNiOC00N2M4LWE3Njkt
YzlhNjk2ODNhOGU4LzEvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83MDQ5NmMtNjNiOC00N2M4LWE3NjktYzlhNjk2ODNhOGU4
LzEvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgZOw0Bc
0FPYDwa0wNX4n+CXr1+7oXmfPiRS3XLNkE+KUI/k9e5CK3jcpjksOKPWXkvlVv0V
UccMNWLLu80YtmQO2Kw8YMRuAr2dwAqkvKaDL9jzyTiEQoLePJHY4PwQEZFVTH3S
jeiq+41jmSqhlpkg/Jd4wgBguobcA+5VIwlGqa5aIZYSS0n3HyswCQmPigx6pS/d
1nUbUpJeSfZDMUPY4lbSNArbNjgc8DUJAFyRm+G2fO9IaboxgIlGcCh9HiND5eXQ
a+Hvdo9mbWXqDaMymujpgJ7vhtYKL7n4I5K+3AjG8Mkid1NPbb2iXIC5sLRlqCnZ
1f6iqvspbFtCjw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 19:33:55 2025 by rpki-client