Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: OZrZcH8g5kvInXVCDbEn5/JH/FOfUqRayBfF9+uNuG8=
Subject key identifier: DB:50:67:D1:DE:E2:9F:86:A4:CA:35:B4:39:EA:98:E8:00:71:C1:38
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 0198C610A52BEBCC818D29117B91592B72A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 0FE4
Signing time: Wed 20 Aug 2025 06:00:36 +0000
Manifest this update: Wed 20 Aug 2025 06:00:36 +0000
Manifest next update: Thu 21 Aug 2025 06:00:36 +0000
Files and hashes: 1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=)
2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=)
3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: hLqLld3H9lV75alF0SZJaxXotpICVB52iFVqvG0AOlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:10:a5:2b:eb:cc:81:8d:29:11:7b:91:59:2b:72:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Aug 20 06:00:36 2025 GMT
Not After : Aug 21 06:00:36 2025 GMT
Subject: CN=db5067d1dee29f86a4ca35b439ea98e80071c138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2e:62:a9:bd:31:74:d3:38:58:94:b5:bf:56:
8f:ce:e1:69:66:bb:7d:a7:4d:22:9f:0f:3b:c3:9f:
ae:ab:e9:fd:62:09:ae:cb:6a:e2:b1:91:f7:5e:35:
ac:8f:54:32:52:9c:f0:8f:69:e9:57:d9:99:3c:4f:
b1:e9:ab:42:a8:40:9f:4a:eb:6c:d2:c4:52:5f:32:
de:17:61:45:9b:d0:84:a4:d7:94:80:f6:17:8e:1c:
95:56:2c:cc:0b:82:a9:59:d5:ee:49:09:61:a1:21:
4e:03:fa:e1:5c:df:e8:d6:0e:b8:50:2a:55:21:d5:
95:0a:12:f6:f4:7d:76:ef:34:7e:8f:87:f8:f0:8b:
f4:62:ed:cb:05:52:4d:07:74:3b:4e:07:6d:07:e2:
83:ec:35:e9:a5:08:e3:a1:c7:fa:aa:fb:41:78:fb:
2a:af:4a:54:62:83:59:21:8d:e3:6a:4b:51:96:26:
69:c0:69:5e:57:fe:45:ad:05:09:4b:76:4f:a4:40:
b3:54:75:86:53:ea:f3:b2:bd:cc:4b:7f:cf:a0:cc:
42:c7:b0:64:a0:c3:d2:1b:a0:57:b0:9a:7f:20:f7:
cd:32:2e:b6:df:e6:d9:b8:0e:80:bd:9f:2b:64:0f:
7a:bf:f1:52:bb:ec:bb:75:19:b2:7c:29:d5:9c:25:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:50:67:D1:DE:E2:9F:86:A4:CA:35:B4:39:EA:98:E8:00:71:C1:38
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:39:9e:01:24:0c:a8:3a:d7:14:b5:d5:6d:b5:89:ad:0a:14:
82:4b:7f:0b:61:ca:e2:fb:ad:eb:f7:fc:8d:5d:61:eb:87:78:
33:b8:4f:db:d5:2e:23:d8:00:35:3f:77:4e:b6:48:0f:c4:45:
5d:e9:51:bb:87:15:ee:d0:53:12:ac:86:38:55:6c:00:c9:5f:
2e:18:54:d3:bb:cf:a0:53:be:13:6f:2a:fa:fe:98:9b:92:89:
97:af:ae:93:71:9a:02:59:73:a4:1a:22:69:b5:27:d5:99:00:
5c:52:2f:54:b9:74:bd:82:2d:fb:95:2b:eb:62:cd:8d:cd:b8:
f1:11:e1:86:c1:72:03:d5:b9:68:37:fc:95:bb:4c:44:51:2a:
9a:08:ca:80:86:2d:73:31:61:7e:9a:bf:af:0c:bc:02:fd:37:
54:9e:e4:3b:93:8f:39:6b:fe:51:12:a2:ca:27:5e:13:77:22:
92:0f:0b:c2:5f:4b:b5:2e:57:0e:f4:65:b0:1e:6e:17:ab:8f:
ec:ab:46:04:37:e0:c2:a7:d5:07:8d:37:b9:79:c4:3a:ab:c9:
7a:39:d5:3e:58:25:83:6e:ce:39:1b:3b:9f:89:25:13:40:43:
ef:fc:2b:24:c4:40:2e:7c:89:08:85:cc:25:cc:de:8b:e8:79:
e2:34:df:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjGEKUr68yBjSkRe5FZK3KkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTk3YjQwYzZkNDQ2OWY5YjkxNGE3OGRjOGVjNDM5MzIz
YjBmYjgwHhcNMjUwODIwMDYwMDM2WhcNMjUwODIxMDYwMDM2WjAzMTEwLwYDVQQD
EyhkYjUwNjdkMWRlZTI5Zjg2YTRjYTM1YjQzOWVhOThlODAwNzFjMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6i5iqb0xdNM4WJS1v1aPzuFpZrt9
p00inw87w5+uq+n9Ygmuy2risZH3XjWsj1QyUpzwj2npV9mZPE+x6atCqECfSuts
0sRSXzLeF2FFm9CEpNeUgPYXjhyVVizMC4KpWdXuSQlhoSFOA/rhXN/o1g64UCpV
IdWVChL29H127zR+j4f48Iv0Yu3LBVJNB3Q7TgdtB+KD7DXppQjjocf6qvtBePsq
r0pUYoNZIY3jaktRliZpwGleV/5FrQUJS3ZPpECzVHWGU+rzsr3MS3/PoMxCx7Bk
oMPSG6BXsJp/IPfNMi623+bZuA6AvZ8rZA96v/FSu+y7dRmyfCnVnCWbhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtQZ9He4p+GpMo1tDnqmOgAccE4MB8GA1UdIwQY
MBaAFP9Ze0DG1Eafm5FKeNyOxDkyOw+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMt
ZmZiMmVmNGJmZTI1LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMtZmZiMmVmNGJmZTI1
LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTmeASQM
qDrXFLXVbbWJrQoUgkt/C2HK4vut6/f8jV1h64d4M7hP29UuI9gANT93TrZID8RF
XelRu4cV7tBTEqyGOFVsAMlfLhhU07vPoFO+E28q+v6Ym5KJl6+uk3GaAllzpBoi
abUn1ZkAXFIvVLl0vYIt+5Ur62LNjc248RHhhsFyA9W5aDf8lbtMRFEqmgjKgIYt
czFhfpq/rwy8Av03VJ7kO5OPOWv+URKiyideE3cikg8Lwl9LtS5XDvRlsB5uF6uP
7KtGBDfgwqfVB403uXnEOqvJejnVPlglg27OORs7n4klE0BD7/wrJMRALnyJCIXM
Jczei+h54jTfBw==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:31:40 2025 by rpki-client