Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier: X/IO2uRz89Qmxo+PLyNaJh8ZATH3robo9ylMQBSUC0g=
Subject key identifier: CC:3C:11:C1:C5:A7:22:15:74:C7:2C:36:3E:DA:2E:13:1E:95:A3:6C
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 01986091F536A3D1F2173E5691AEC1DC3C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number: 094F
Signing time: Thu 31 Jul 2025 13:00:34 +0000
Manifest this update: Thu 31 Jul 2025 13:00:34 +0000
Manifest next update: Fri 01 Aug 2025 13:00:34 +0000
Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: MQ67eqM9x6+0zUY/P1rWBQdJ/4xyZk6Ja6jR9ZIYu0g=)
2: b2-2zA239FER4wC7CBSDQ_s6itc.roa (hash: ttiQIOl1DGhdd6BIOrtS+dGFnQqKAzV6ghp1LfZsaAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:91:f5:36:a3:d1:f2:17:3e:56:91:ae:c1:dc:3c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Jul 31 13:00:34 2025 GMT
Not After : Aug 1 13:00:34 2025 GMT
Subject: CN=cc3c11c1c5a7221574c72c363eda2e131e95a36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:5a:64:b2:83:e6:58:d0:b6:91:37:5a:74:
ef:8b:1c:2a:59:f1:63:06:53:79:f8:9a:11:48:f2:
dd:a9:75:d6:c1:ab:0e:46:4e:54:9a:62:ae:bb:8b:
ec:d1:3e:f6:a6:a0:c2:63:6f:e2:f0:1f:30:85:00:
b8:6f:98:2a:64:8e:43:33:21:ee:82:97:c9:43:6c:
be:48:b5:00:49:45:ca:09:32:f0:e4:75:34:ee:87:
7c:c3:c4:8e:e6:12:bc:70:19:a2:c2:f6:9c:79:d6:
bf:01:0e:d6:ca:15:e0:1b:8b:03:fd:c9:98:35:b9:
e9:b2:f7:f5:e2:15:ce:68:89:72:df:e5:30:5f:40:
e0:59:55:e4:86:f8:d3:96:6b:76:55:63:e2:24:a3:
02:94:b1:9e:1b:2b:71:1d:27:e6:d6:c9:3c:5e:4b:
af:5c:47:15:da:e4:65:89:45:3c:13:3b:04:5d:d9:
de:0f:a5:c5:fb:17:42:17:5f:d9:5f:fb:4d:92:0b:
7b:e4:35:11:f0:e4:76:4b:df:c4:bd:9a:b7:8d:10:
48:d8:27:d4:5c:f4:1a:39:64:c2:49:84:24:2d:90:
75:bb:47:a6:2a:d3:b2:54:49:69:8b:36:f0:69:61:
14:d5:7c:d9:88:9e:c7:67:2c:47:85:e1:d7:50:a1:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3C:11:C1:C5:A7:22:15:74:C7:2C:36:3E:DA:2E:13:1E:95:A3:6C
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ff:90:32:f1:64:76:77:2a:ac:00:3b:1d:b9:35:64:e4:15:
30:60:92:42:51:af:2c:20:ad:0e:29:d1:8e:b6:da:47:99:77:
28:70:60:35:42:46:6f:a9:7d:c2:4d:d8:c2:6f:c9:03:35:38:
11:d7:09:2b:24:e3:0e:67:6d:81:28:cc:86:31:ee:07:23:b3:
94:f0:fe:d4:5e:1a:32:4e:06:38:81:d1:64:fe:56:f8:6d:5d:
e8:18:6a:8e:09:7a:a3:3c:02:17:45:c8:cb:b5:3d:e4:61:23:
eb:6c:f9:56:95:e5:56:e0:ee:b9:4d:13:62:77:84:c5:4d:57:
4e:31:d3:05:02:1e:07:fd:7b:95:d2:c9:97:75:79:7f:2e:d4:
0b:2a:3e:fc:d4:ba:15:bf:32:64:af:81:a4:67:b5:07:ff:cb:
f1:9f:35:35:7b:38:27:62:30:87:fe:05:27:ac:8f:5b:f0:65:
7a:6d:6c:2e:2d:56:ef:81:9a:24:c5:cc:bc:13:88:1a:cf:a2:
fb:3f:62:fe:4c:06:a2:21:12:a6:e0:29:47:a0:37:1f:5d:dc:
b4:0b:0c:4d:2b:c4:ff:16:a1:d8:96:de:38:7b:54:d2:1b:26:
72:8b:b5:ea:b3:7a:3c:3c:45:42:51:04:77:21:cd:68:9d:c0:
58:cb:81:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhgkfU2o9HyFz5Wka7B3DxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzNiMDk0MzBiMDQ4ZjA1MjZlZjZhOTM3Nzc0ZTdmMDYy
MDM3MzEwHhcNMjUwNzMxMTMwMDM0WhcNMjUwODAxMTMwMDM0WjAzMTEwLwYDVQQD
EyhjYzNjMTFjMWM1YTcyMjE1NzRjNzJjMzYzZWRhMmUxMzFlOTVhMzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm1aZLKD5ljQtpE3WnTvixwqWfFj
BlN5+JoRSPLdqXXWwasORk5UmmKuu4vs0T72pqDCY2/i8B8whQC4b5gqZI5DMyHu
gpfJQ2y+SLUASUXKCTLw5HU07od8w8SO5hK8cBmiwvaceda/AQ7WyhXgG4sD/cmY
Nbnpsvf14hXOaIly3+UwX0DgWVXkhvjTlmt2VWPiJKMClLGeGytxHSfm1sk8Xkuv
XEcV2uRliUU8EzsEXdneD6XF+xdCF1/ZX/tNkgt75DUR8OR2S9/EvZq3jRBI2CfU
XPQaOWTCSYQkLZB1u0emKtOyVElpizbwaWEU1XzZiJ7HZyxHheHXUKFy2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMw8EcHFpyIVdMcsNj7aLhMelaNsMB8GA1UdIwQY
MBaAFNUzsJQwsEjwUm72qTd3Tn8GIDcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRPd2xEQ3dTUEJTYnZhcE4zZE9md1lnTnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kNTI1ZjgtZDU0OS00OTA5LWI4YzAt
ZmYwMTQ5MDBiZThhLzEvMVRPd2xEQ3dTUEJTYnZhcE4zZE9md1lnTnpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kNTI1ZjgtZDU0OS00OTA5LWI4YzAtZmYwMTQ5MDBiZThh
LzEvMVRPd2xEQ3dTUEJTYnZhcE4zZE9md1lnTnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGv+QMvFk
dncqrAA7Hbk1ZOQVMGCSQlGvLCCtDinRjrbaR5l3KHBgNUJGb6l9wk3Ywm/JAzU4
EdcJKyTjDmdtgSjMhjHuByOzlPD+1F4aMk4GOIHRZP5W+G1d6Bhqjgl6ozwCF0XI
y7U95GEj62z5VpXlVuDuuU0TYneExU1XTjHTBQIeB/17ldLJl3V5fy7UCyo+/NS6
Fb8yZK+BpGe1B//L8Z81NXs4J2Iwh/4FJ6yPW/Blem1sLi1W74GaJMXMvBOIGs+i
+z9i/kwGoiESpuApR6A3H13ctAsMTSvE/xah2JbeOHtU0hsmcou16rN6PDxFQlEE
dyHNaJ3AWMuBKg==
-----END CERTIFICATE-----
Generated at Thu Jul 31 19:41:37 2025 by rpki-client