Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
File: 1-eS-AUv4OU5M185shKT6hPLln18.mft (raw, json)
Hash identifier: WmkvPl2jn1yTStj67hmDGYESHZkVcoPPNNZkzKTLdl8=
Subject key identifier: 71:4D:0F:4C:19:5C:80:D0:00:30:FA:1B:A7:A1:C4:D1:1A:90:9F:7B
Authority key identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
Certificate issuer: /CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Certificate serial: 01992330D3004709BA9A5B4DAC4E42396D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
Manifest number: CF
Signing time: Sun 07 Sep 2025 08:00:26 +0000
Manifest this update: Sun 07 Sep 2025 08:00:26 +0000
Manifest next update: Mon 08 Sep 2025 08:00:26 +0000
Files and hashes: 1: 1-eS-AUv4OU5M185shKT6hPLln18.crl (hash: oez7YerFzioO7UGagra0GZsac3h83SsCMBXFml9YNX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d3:00:47:09:ba:9a:5b:4d:ac:4e:42:39:6d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Validity
Not Before: Sep 7 08:00:26 2025 GMT
Not After : Sep 8 08:00:26 2025 GMT
Subject: CN=714d0f4c195c80d00030fa1ba7a1c4d11a909f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:7f:9a:af:7a:94:36:42:27:10:f6:b7:89:
d9:ec:4e:13:de:7d:64:78:dd:36:cd:f5:13:19:2f:
c6:dc:d6:e1:b9:0c:9e:25:d4:3d:50:3b:e0:9c:e8:
29:ca:97:47:f5:53:10:eb:a7:4e:4a:81:9d:27:69:
dc:2b:b4:9b:db:0e:a8:9b:7c:cb:10:d1:79:52:81:
be:13:78:de:f6:30:5a:15:f2:ad:33:31:85:21:36:
e3:8c:c1:d0:5f:09:ab:ca:9d:0a:69:56:a7:8e:16:
7b:7e:a9:cd:e4:42:6e:04:9b:77:f6:f7:b7:8d:9b:
75:c2:7d:75:42:63:ca:1d:d7:cb:62:d0:7e:bf:c6:
09:6d:a5:6f:67:47:a1:58:e4:c9:f3:68:89:fa:5a:
6e:79:7b:cd:d1:c4:5f:70:b4:e0:4b:e2:31:b8:a5:
d4:5c:30:79:d2:98:fc:af:db:da:d7:da:71:5f:85:
c5:58:d1:24:e2:4c:59:a2:4e:63:e7:99:cd:b6:4e:
b8:d7:68:1c:4e:8d:21:97:85:74:bf:51:86:a5:96:
fa:26:da:84:e6:7d:e8:da:47:3a:e9:8e:ee:c5:56:
21:e4:89:09:cc:ef:66:5c:de:06:48:ef:5a:19:70:
34:60:bb:78:e8:46:73:1c:db:97:0d:05:73:db:26:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4D:0F:4C:19:5C:80:D0:00:30:FA:1B:A7:A1:C4:D1:1A:90:9F:7B
X509v3 Authority Key Identifier:
keyid:F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e3:0c:e0:7e:20:03:95:b5:09:b7:a8:01:02:22:1d:d3:0c:
03:0c:c5:f7:6a:32:81:0c:6b:d7:6c:32:c6:76:fc:22:9b:d0:
c0:f6:35:b3:3c:ef:1e:0c:c3:7b:12:27:e2:e7:12:5f:15:28:
ee:4b:74:ed:ea:45:65:30:d0:9b:d2:b1:ec:5d:fe:0f:06:32:
2e:be:c6:3b:46:ab:71:f1:09:36:37:e2:d0:ce:96:54:a6:1e:
d8:6e:95:cd:ee:44:84:60:bb:24:9f:f2:d5:43:6e:b9:cd:1a:
09:37:c0:05:2b:af:bd:29:09:27:bd:e6:a7:61:09:9a:80:90:
b2:a7:b9:66:41:5f:88:4d:1e:23:5d:07:e5:de:f9:f5:47:a5:
73:31:51:a3:96:be:d9:c0:f6:63:ad:5d:25:b4:9c:ca:76:7c:
a9:8f:32:f3:c8:bc:16:e2:f1:0d:92:4b:4c:e4:67:c2:4a:d4:
c1:3a:59:64:3b:48:06:9e:ea:55:88:5c:64:d7:57:5b:b4:20:
3c:41:08:80:bf:b2:60:c1:b6:6d:6c:9e:dd:35:18:c9:5a:c7:
61:1e:55:fd:ce:91:78:b8:89:5e:c8:bc:0e:97:f3:54:5e:3b:
d3:34:0b:b7:0b:b8:e8:d6:d7:b2:6a:66:aa:bc:0a:2d:01:87:
ad:91:a2:d7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkjMNMARwm6mltNrE5COW0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTRiZTAxNGJmODM5NGU0Y2Q3Y2U2Yzg0YTRmYTg0ZjJl
NTlmNWYwHhcNMjUwOTA3MDgwMDI2WhcNMjUwOTA4MDgwMDI2WjAzMTEwLwYDVQQD
Eyg3MTRkMGY0YzE5NWM4MGQwMDAzMGZhMWJhN2ExYzRkMTFhOTA5ZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgd/mq96lDZCJxD2t4nZ7E4T3n1k
eN02zfUTGS/G3NbhuQyeJdQ9UDvgnOgpypdH9VMQ66dOSoGdJ2ncK7Sb2w6om3zL
ENF5UoG+E3je9jBaFfKtMzGFITbjjMHQXwmryp0KaVanjhZ7fqnN5EJuBJt39ve3
jZt1wn11QmPKHdfLYtB+v8YJbaVvZ0ehWOTJ82iJ+lpueXvN0cRfcLTgS+IxuKXU
XDB50pj8r9va19pxX4XFWNEk4kxZok5j55nNtk6412gcTo0hl4V0v1GGpZb6JtqE
5n3o2kc66Y7uxVYh5IkJzO9mXN4GSO9aGXA0YLt46EZzHNuXDQVz2yYORwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHFND0wZXIDQADD6G6ehxNEakJ97MB8GA1UdIwQY
MBaAFPnkvgFL+DlOTNfObISk+oTy5Z9fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lUy1BVXY0T1U1TTE4NXNoS1Q2aFBMbG4xOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNGQ1ODlmLTJkNTAtNDI0Yy05YjQ5
LWFjMzZkODIwNDQzNi8xLzEtZVMtQVV2NE9VNU0xODVzaEtUNmhQTGxuMTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg2LzRkNTg5Zi0yZDUwLTQyNGMtOWI0OS1hYzM2ZDgyMDQ0
MzYvMS8xLWVTLUFVdjRPVTVNMTg1c2hLVDZoUExsbjE4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+MM
4H4gA5W1CbeoAQIiHdMMAwzF92oygQxr12wyxnb8IpvQwPY1szzvHgzDexIn4ucS
XxUo7kt07epFZTDQm9Kx7F3+DwYyLr7GO0arcfEJNjfi0M6WVKYe2G6Vze5EhGC7
JJ/y1UNuuc0aCTfABSuvvSkJJ73mp2EJmoCQsqe5ZkFfiE0eI10H5d759UelczFR
o5a+2cD2Y61dJbScynZ8qY8y88i8FuLxDZJLTORnwkrUwTpZZDtIBp7qVYhcZNdX
W7QgPEEIgL+yYMG2bWye3TUYyVrHYR5V/c6ReLiJXsi8DpfzVF470zQLtwu46NbX
smpmqrwKLQGHrZGi1w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:21 2025 by rpki-client