Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
File: m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json)
Hash identifier: u4Mz/umiOFBcxPR6Jx2lk+it106mqb6dTEmI7w4o9K0=
Subject key identifier: FA:45:0C:8F:7A:5E:9F:59:1E:0A:EA:89:4B:1C:93:80:24:EB:B4:B0
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Certificate issuer: /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial: 019935A50A63B74E2752A413424D2B4511C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 22:00:32 +0000
Manifest this update: Wed 10 Sep 2025 22:00:32 +0000
Manifest next update: Thu 11 Sep 2025 22:00:32 +0000
Files and hashes: 1: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: 0JToxTfZvWPMMyVpPuBH/VN8/1mnknw5uePYi4v3lVk=)
2: rT8y0BCfTCAABxNQ5qnQez4Fr8I.roa (hash: zR6w/3gh7WRxc5V8iDYO22idpuoYZT3WfKeiyZYkIzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:0a:63:b7:4e:27:52:a4:13:42:4d:2b:45:11:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Validity
Not Before: Sep 10 22:00:32 2025 GMT
Not After : Sep 11 22:00:32 2025 GMT
Subject: CN=fa450c8f7a5e9f591e0aea894b1c938024ebb4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:de:6a:66:58:95:9d:f1:74:24:a6:78:e2:
3c:5b:90:1f:c9:1d:49:98:15:7d:10:8f:5c:1d:59:
c9:6b:9f:2a:51:72:ec:92:f3:1b:39:0c:b0:0c:a8:
01:14:83:a4:dc:a7:42:d1:9d:13:c8:17:ce:09:ba:
98:32:86:cb:a2:76:c8:e1:c2:93:a4:df:3e:a3:fd:
0d:4d:ab:96:f4:a8:01:27:9b:60:11:25:65:1c:b6:
93:b5:8b:7e:ca:2e:2b:85:ad:4e:2f:60:8d:23:40:
1a:98:0b:3b:00:9c:29:4e:fc:85:a8:2d:6f:08:3e:
35:9c:47:cf:5b:3a:fc:27:7f:d6:87:23:e6:07:5f:
19:0a:c3:8c:49:65:86:7a:ed:36:74:e6:75:87:20:
db:72:39:c8:bd:0b:30:d9:52:5d:da:fb:f3:cf:70:
09:e1:7c:eb:30:70:44:db:07:ee:6f:b5:97:e0:ac:
ba:47:49:a5:f2:34:ff:e5:5c:12:0c:a1:a5:6c:36:
a4:c3:cc:a5:65:66:a7:5e:20:41:f6:c6:0e:84:3e:
7a:a3:f4:20:27:0b:27:eb:8f:3b:fc:10:b2:cd:be:
72:85:54:e5:62:46:95:15:69:d8:f3:27:2e:ff:42:
79:84:ec:c1:a0:ac:d6:18:9a:6a:fe:b3:73:25:51:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:45:0C:8F:7A:5E:9F:59:1E:0A:EA:89:4B:1C:93:80:24:EB:B4:B0
X509v3 Authority Key Identifier:
keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:83:83:03:60:d9:1a:27:66:7c:6b:cc:91:1c:fd:22:8f:62:
1b:60:70:88:14:ac:d4:d4:12:04:cb:67:f8:32:cf:c9:1b:f2:
9d:d8:72:6f:79:f8:3e:53:15:25:84:d3:42:7f:ba:7c:32:81:
26:8d:e6:95:dc:c8:85:08:df:75:86:8d:95:b0:07:1c:04:0c:
f0:da:92:44:7a:25:0c:7d:e5:df:0a:b6:fa:ca:43:3b:30:7c:
79:b3:12:15:02:5a:81:d9:e8:55:5a:d8:2c:71:34:71:85:d1:
85:27:f1:26:2c:be:e9:96:ce:2a:88:c2:f8:09:cb:ed:40:b7:
bb:57:42:78:ce:e7:cd:c8:79:08:36:db:c7:6f:68:93:90:c6:
18:f2:27:d1:eb:6d:2e:f8:f5:6c:a2:41:8f:34:d9:50:77:bb:
8a:93:b9:d7:01:96:1f:30:79:ac:a4:4c:69:95:22:87:a6:32:
4f:7f:8e:38:0d:b8:43:c1:c1:3c:32:91:6a:01:a0:c4:f6:3e:
c1:c9:51:a0:b8:98:28:b5:65:31:44:97:7b:61:ac:20:66:1b:
b9:88:7c:29:30:ca:66:de:62:9a:1e:ef:47:25:4c:12:a0:a8:
12:24:c0:1a:3a:5f:99:82:cf:e2:f0:7e:64:d0:de:ce:30:7d:
cc:d6:77:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1pQpjt04nUqQTQk0rRRHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTg5NWU3ZjZhNmQ0YWJhOWM5NjFmNzEzYjJlNzk3MTVm
MDIxZjAwHhcNMjUwOTEwMjIwMDMyWhcNMjUwOTExMjIwMDMyWjAzMTEwLwYDVQQD
EyhmYTQ1MGM4ZjdhNWU5ZjU5MWUwYWVhODk0YjFjOTM4MDI0ZWJiNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfneamZYlZ3xdCSmeOI8W5AfyR1J
mBV9EI9cHVnJa58qUXLskvMbOQywDKgBFIOk3KdC0Z0TyBfOCbqYMobLonbI4cKT
pN8+o/0NTauW9KgBJ5tgESVlHLaTtYt+yi4rha1OL2CNI0AamAs7AJwpTvyFqC1v
CD41nEfPWzr8J3/WhyPmB18ZCsOMSWWGeu02dOZ1hyDbcjnIvQsw2VJd2vvzz3AJ
4XzrMHBE2wfub7WX4Ky6R0ml8jT/5VwSDKGlbDakw8ylZWanXiBB9sYOhD56o/Qg
Jwsn6487/BCyzb5yhVTlYkaVFWnY8ycu/0J5hOzBoKzWGJpq/rNzJVFdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpFDI96Xp9ZHgrqiUsck4Ak67SwMB8GA1UdIwQY
MBaAFJtYlef2ptSrqclh9xOy55cV8CHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzRiODItYmNmYi00NDVjLWJkNDIt
ZmMyYTk3YjdkNTNlLzEvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMzRiODItYmNmYi00NDVjLWJkNDItZmMyYTk3YjdkNTNl
LzEvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoODA2DZ
GidmfGvMkRz9Io9iG2BwiBSs1NQSBMtn+DLPyRvyndhyb3n4PlMVJYTTQn+6fDKB
Jo3mldzIhQjfdYaNlbAHHAQM8NqSRHolDH3l3wq2+spDOzB8ebMSFQJagdnoVVrY
LHE0cYXRhSfxJiy+6ZbOKojC+AnL7UC3u1dCeM7nzch5CDbbx29ok5DGGPIn0ett
Lvj1bKJBjzTZUHe7ipO51wGWHzB5rKRMaZUih6YyT3+OOA24Q8HBPDKRagGgxPY+
wclRoLiYKLVlMUSXe2GsIGYbuYh8KTDKZt5imh7vRyVMEqCoEiTAGjpfmYLP4vB+
ZNDezjB9zNZ3uw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:02:21 2025 by rpki-client