Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: GnZ48vWLDanYQAhpy4vyVQVVWhcqlCiSutLiPn8HH5E=
Subject key identifier: 4F:C6:9D:15:24:CC:6A:4E:DB:D8:22:E6:18:AD:87:55:71:CD:26:EE
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 0199228D25C4BA4F9061B504B2EFC4D4697A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 05:01:39 +0000
Manifest this update: Sun 07 Sep 2025 05:01:39 +0000
Manifest next update: Mon 08 Sep 2025 05:01:39 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: wEAlKJpXh9IVjq4fLCL7BFrlHm/EKyuA7Ca61D/2nak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:25:c4:ba:4f:90:61:b5:04:b2:ef:c4:d4:69:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: Sep 7 05:01:39 2025 GMT
Not After : Sep 8 05:01:39 2025 GMT
Subject: CN=4fc69d1524cc6a4edbd822e618ad875571cd26ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:77:77:5d:97:18:a3:73:7d:69:a1:6e:29:
26:98:49:5c:d2:f2:9c:6f:75:2a:08:19:e5:c9:cb:
97:c6:31:a4:44:45:7e:02:1b:de:8a:60:9c:63:81:
50:4e:34:78:d6:6b:f5:42:f2:70:13:0a:f7:2a:e5:
41:94:9c:73:d8:bc:fb:9d:3f:69:42:02:da:a9:da:
eb:1b:d7:3c:c4:20:8d:ce:dd:9e:dd:de:0b:99:0d:
7f:1a:7b:1f:6a:a7:1e:f1:96:ee:c3:a9:f3:93:3d:
83:c9:92:f7:cf:c7:11:ef:4c:3e:24:83:4f:08:de:
ce:5a:ae:87:f8:98:90:ec:64:e1:d5:84:23:4a:c5:
52:a5:09:90:84:7d:ca:60:5f:26:98:fa:24:c0:8e:
0d:5f:eb:f4:91:78:a6:4e:9b:d0:1b:e0:d2:12:c8:
f4:da:8e:8b:7f:0e:26:71:10:8f:5e:d0:6f:d9:5d:
1b:c9:5f:b2:62:54:cb:66:62:ae:32:99:35:40:27:
4c:a5:8c:6c:8f:b2:57:c9:d6:a2:36:4b:86:96:1f:
6d:9c:48:15:f6:2c:fb:86:53:9e:a8:d7:90:9a:b3:
c5:21:78:33:ed:72:62:88:93:b0:76:f6:9e:a8:a1:
69:06:8e:b6:e3:a8:93:26:12:ca:e8:5e:49:44:de:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C6:9D:15:24:CC:6A:4E:DB:D8:22:E6:18:AD:87:55:71:CD:26:EE
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:75:24:75:5a:64:a8:30:47:fd:0b:84:a9:12:46:71:2f:41:
bf:e1:bc:88:ee:64:63:f8:40:5c:e2:e4:2e:86:9f:60:42:4e:
c4:03:f7:ae:8c:2e:67:49:cb:f6:48:8b:5f:1e:a8:94:f6:af:
9f:f5:91:36:11:06:8d:4e:02:6f:11:74:71:e0:15:2b:71:8c:
cd:01:b9:92:09:6d:7b:37:8c:7f:1a:8c:d6:0b:89:b4:c1:d5:
44:80:b3:28:d4:ff:f8:33:55:ff:76:ec:6e:3e:7f:ea:7a:15:
86:4b:c9:5b:0e:29:6a:70:29:4d:f8:c2:54:e6:f6:e3:17:05:
75:3c:6a:f4:cf:c9:e5:97:be:2e:4b:dc:18:c4:ab:71:38:9e:
c7:6a:f8:70:11:11:a2:71:c3:38:10:0e:25:0b:11:2a:ca:cd:
04:f0:54:04:3a:3a:d1:d4:58:5d:a2:94:4d:f7:3f:99:22:a7:
c7:ff:1e:45:a4:bd:63:ce:50:d3:e1:e1:91:bb:3c:46:24:02:
92:10:99:46:e0:87:cb:16:2f:20:f0:27:cb:e3:44:93:fd:64:
fb:49:14:dd:f4:0d:19:a0:b5:5c:72:e0:06:ef:e3:1c:b6:c4:
c5:ae:f1:42:ee:04:7b:90:92:f6:50:a2:0e:4f:f0:9a:c1:a5:
9e:9c:25:5e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkijSXEuk+QYbUEsu/E1Gl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZGE1YWFhNmM5OTQ2MmZlYjE1OWY1NmIxYzBhZjJkZDNm
NDYyNWIwHhcNMjUwOTA3MDUwMTM5WhcNMjUwOTA4MDUwMTM5WjAzMTEwLwYDVQQD
Eyg0ZmM2OWQxNTI0Y2M2YTRlZGJkODIyZTYxOGFkODc1NTcxY2QyNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzB3d12XGKNzfWmhbikmmElc0vKc
b3UqCBnlycuXxjGkREV+AhveimCcY4FQTjR41mv1QvJwEwr3KuVBlJxz2Lz7nT9p
QgLaqdrrG9c8xCCNzt2e3d4LmQ1/Gnsfaqce8Zbuw6nzkz2DyZL3z8cR70w+JINP
CN7OWq6H+JiQ7GTh1YQjSsVSpQmQhH3KYF8mmPokwI4NX+v0kXimTpvQG+DSEsj0
2o6Lfw4mcRCPXtBv2V0byV+yYlTLZmKuMpk1QCdMpYxsj7JXydaiNkuGlh9tnEgV
9iz7hlOeqNeQmrPFIXgz7XJiiJOwdvaeqKFpBo6246iTJhLK6F5JRN6jTQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE/GnRUkzGpO29gi5hith1VxzSbuMB8GA1UdIwQY
MBaAFPraWqpsmUYv6xWfVrHAry3T9GJbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10cGFxbXlaUmlfckZaOVdzY0N2TGRQMFlscy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMDYxNTA2LWVkZjAtNDhkNy1iZTdk
LTZmMWIwMzdiYTZlMi8xLzEtdHBhcW15WlJpX3JGWjlXc2NDdkxkUDBZbHMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FjLzA2MTUwNi1lZGYwLTQ4ZDctYmU3ZC02ZjFiMDM3YmE2
ZTIvMS8xLXRwYXFteVpSaV9yRlo5V3NjQ3ZMZFAwWWxzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXUk
dVpkqDBH/QuEqRJGcS9Bv+G8iO5kY/hAXOLkLoafYEJOxAP3rowuZ0nL9kiLXx6o
lPavn/WRNhEGjU4CbxF0ceAVK3GMzQG5kgltezeMfxqM1guJtMHVRICzKNT/+DNV
/3bsbj5/6noVhkvJWw4panApTfjCVOb24xcFdTxq9M/J5Ze+LkvcGMSrcTiex2r4
cBERonHDOBAOJQsRKsrNBPBUBDo60dRYXaKUTfc/mSKnx/8eRaS9Y85Q0+Hhkbs8
RiQCkhCZRuCHyxYvIPAny+NEk/1k+0kU3fQNGaC1XHLgBu/jHLbExa7xQu4Ee5CS
9lCiDk/wmsGlnpwlXg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:58 2025 by rpki-client