Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier: X3tAkIRsNu3DCcWrjw7fd1OpGTpFGPU7Eu8XAjH4eZo=
Subject key identifier: 0F:A0:08:C9:71:AD:27:F7:96:D0:82:F2:4E:D7:7F:A7:E0:8E:43:44
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 01993124A2F71921291C9C2248C3C976EA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number: 07B0
Signing time: Wed 10 Sep 2025 01:01:48 +0000
Manifest this update: Wed 10 Sep 2025 01:01:48 +0000
Manifest next update: Thu 11 Sep 2025 01:01:48 +0000
Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: AtzOAY8dvQkmadv+nt3AhM/RAi7Tq6nZ2afk3D+8Zv0=)
2: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (hash: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:a2:f7:19:21:29:1c:9c:22:48:c3:c9:76:ea:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: Sep 10 01:01:48 2025 GMT
Not After : Sep 11 01:01:48 2025 GMT
Subject: CN=0fa008c971ad27f796d082f24ed77fa7e08e4344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:d4:34:1a:58:10:b5:41:e2:aa:16:55:ac:
28:e6:0a:b4:8f:83:3a:14:46:6a:88:2d:38:2e:1c:
69:1f:ef:26:36:a9:95:26:f5:9c:57:ac:9c:8d:b0:
c9:d3:06:0e:61:10:b5:df:d7:e5:61:f5:27:37:a9:
c5:f2:ca:b9:2b:cd:54:1e:02:e5:32:f1:3e:a6:09:
4e:40:ec:83:01:c8:dd:49:3d:86:30:83:7c:27:c7:
ad:b7:81:c9:24:0a:c2:bd:50:62:bd:a5:85:40:ae:
16:22:8c:a1:e8:1f:80:47:14:fb:a2:95:bc:fd:5c:
04:bc:6b:4b:13:54:1a:a6:17:db:5e:f5:84:bd:e6:
1d:c6:65:1f:f1:da:70:40:68:a6:73:5c:71:2b:51:
12:ce:2c:bf:ac:7d:d7:73:22:60:f3:c8:23:28:d5:
e8:ae:0e:bd:19:13:1e:15:ec:5c:25:ee:4b:0b:f1:
e8:c5:17:cb:98:0f:d4:1e:60:66:5d:a1:64:ef:1f:
de:89:06:97:3f:ef:5f:bd:7a:f0:a8:68:1e:32:73:
02:bf:9d:49:98:eb:4f:c3:8f:fe:3d:14:e4:53:70:
25:f0:24:29:e5:20:73:7d:8c:29:fe:72:1c:13:e3:
0e:c5:f6:ff:78:46:a4:95:e2:4d:80:67:99:30:6c:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A0:08:C9:71:AD:27:F7:96:D0:82:F2:4E:D7:7F:A7:E0:8E:43:44
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3f:b3:52:ae:17:c1:a3:08:c5:ac:47:96:bc:da:ad:e0:1f:
c3:43:89:3a:4e:70:bd:bf:2d:c7:99:dc:74:76:30:41:30:29:
ee:e3:90:c1:02:83:d6:6a:18:c1:65:23:4b:a5:c8:43:99:b6:
6f:cc:12:23:53:86:70:57:f8:2b:df:0f:fd:2e:03:0b:b9:f0:
80:67:1a:33:4c:86:e6:25:fb:8f:e5:3d:f2:f1:4c:25:0a:8c:
17:78:70:2a:c4:c2:7d:c0:0d:81:1e:c3:95:2c:ad:63:fa:1b:
9a:bb:18:1a:85:f1:de:5f:67:ea:95:4f:79:3e:30:62:97:d5:
3b:f2:0a:2a:cb:b8:b4:df:84:6b:96:cc:2d:47:13:31:67:46:
c9:ed:7e:86:29:f7:39:f8:db:de:32:8c:93:b8:11:22:19:4a:
07:46:75:4e:ac:3b:c5:28:d6:98:b1:bb:e4:6e:1f:97:10:c8:
bb:74:d4:96:84:fe:d3:6c:a9:95:63:f8:e9:f2:19:6d:08:5b:
2f:a3:99:37:58:22:f6:dc:b7:b4:23:7f:80:ee:26:28:aa:16:
ac:08:96:de:02:b4:b7:2f:02:13:61:4c:57:6b:d6:13:0a:36:
db:0f:c4:d5:48:43:71:4f:e4:3e:68:6a:25:a4:19:4a:63:a4:
c6:f8:02:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJKL3GSEpHJwiSMPJdupEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NGQ0YjkwODYxNThiYzI5NmIyMDBhNjBmYzM3NTBlOTUx
ZDIyZjgwHhcNMjUwOTEwMDEwMTQ4WhcNMjUwOTExMDEwMTQ4WjAzMTEwLwYDVQQD
EygwZmEwMDhjOTcxYWQyN2Y3OTZkMDgyZjI0ZWQ3N2ZhN2UwOGU0MzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvrUNBpYELVB4qoWVawo5gq0j4M6
FEZqiC04LhxpH+8mNqmVJvWcV6ycjbDJ0wYOYRC139flYfUnN6nF8sq5K81UHgLl
MvE+pglOQOyDAcjdST2GMIN8J8ett4HJJArCvVBivaWFQK4WIoyh6B+ARxT7opW8
/VwEvGtLE1QaphfbXvWEveYdxmUf8dpwQGimc1xxK1ESziy/rH3XcyJg88gjKNXo
rg69GRMeFexcJe5LC/HoxRfLmA/UHmBmXaFk7x/eiQaXP+9fvXrwqGgeMnMCv51J
mOtPw4/+PRTkU3Al8CQp5SBzfYwp/nIcE+MOxfb/eEakleJNgGeZMGzBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+gCMlxrSf3ltCC8k7Xf6fgjkNEMB8GA1UdIwQY
MBaAFNZNS5CGFYvClrIApg/DdQ6VHSL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lOTE4MTYtNzdkOC00MDY5LWFlYjct
YTViZmM1NDQwMDVjLzEvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lOTE4MTYtNzdkOC00MDY5LWFlYjctYTViZmM1NDQwMDVj
LzEvMWsxTGtJWVZpOEtXc2dDbUQ4TjFEcFVkSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAj+zUq4X
waMIxaxHlrzareAfw0OJOk5wvb8tx5ncdHYwQTAp7uOQwQKD1moYwWUjS6XIQ5m2
b8wSI1OGcFf4K98P/S4DC7nwgGcaM0yG5iX7j+U98vFMJQqMF3hwKsTCfcANgR7D
lSytY/obmrsYGoXx3l9n6pVPeT4wYpfVO/IKKsu4tN+Ea5bMLUcTMWdGye1+hin3
Ofjb3jKMk7gRIhlKB0Z1Tqw7xSjWmLG75G4flxDIu3TUloT+02yplWP46fIZbQhb
L6OZN1gi9ty3tCN/gO4mKKoWrAiW3gK0ty8CE2FMV2vWEwo22w/E1UhDcU/kPmhq
JaQZSmOkxvgCqg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:57:24 2025 by rpki-client