Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: dr0jk3l+RXEtfi5xdsztRyCTKj73z3KmntLkwsTmKYM=
Subject key identifier: 40:0E:58:B1:AC:99:B7:EB:95:06:FD:12:CA:8D:13:B0:7B:26:C8:83
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 01992330CA61DD166774624AEF5A6EC7BCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 15B6
Signing time: Sun 07 Sep 2025 08:00:24 +0000
Manifest this update: Sun 07 Sep 2025 08:00:24 +0000
Manifest next update: Mon 08 Sep 2025 08:00:24 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: Zy1FPjwiVp45o3l/BjVpHGP5BDxNq4kh+QH/I2WjqI0=)
2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ca:61:dd:16:67:74:62:4a:ef:5a:6e:c7:bc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Sep 7 08:00:24 2025 GMT
Not After : Sep 8 08:00:24 2025 GMT
Subject: CN=400e58b1ac99b7eb9506fd12ca8d13b07b26c883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d9:44:e1:d2:a1:91:86:72:91:95:61:15:00:
03:f8:ed:30:67:45:19:cf:61:52:90:1b:4c:3d:12:
0f:76:e7:9c:7b:ad:40:65:a1:49:b9:a2:69:f0:75:
f0:26:54:56:8c:6b:65:53:73:45:f2:f9:5a:5e:be:
29:a1:63:94:9b:f2:31:7b:9b:fa:03:8e:80:fc:30:
1e:cd:7b:48:fd:af:d7:51:a2:fe:2b:8d:7d:d4:5a:
15:9c:e7:8c:2f:15:ac:f7:cb:5d:00:df:df:a9:61:
d9:28:c4:5b:4d:16:55:49:04:25:63:78:49:d0:fe:
20:4f:ea:a5:14:88:e2:cc:cc:68:09:48:b6:de:be:
25:07:a2:b2:6e:76:5b:bf:02:0e:06:f5:5e:ac:60:
24:8e:6e:7d:74:90:a1:c8:94:a8:26:d3:24:c8:57:
a0:f3:0c:73:4f:e9:8e:50:d3:69:55:cd:d0:f2:84:
cd:59:65:8d:2a:84:2a:d5:be:60:21:1a:25:1f:11:
da:5d:65:3b:2d:62:a8:12:76:2b:71:a1:b0:e4:3d:
c2:12:4e:7f:c1:26:a8:34:79:60:16:15:69:05:80:
00:23:af:96:06:1d:6e:b3:16:b8:18:b9:3d:93:8e:
e9:c4:65:5c:0c:48:fd:cc:70:c8:f1:1e:4d:eb:d6:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0E:58:B1:AC:99:B7:EB:95:06:FD:12:CA:8D:13:B0:7B:26:C8:83
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cd:a7:ca:e0:d2:c8:7d:e1:7d:4d:69:0a:a9:61:c8:3e:11:
16:4b:42:95:05:f3:de:03:6b:89:db:f7:d6:9e:d6:7a:2b:d2:
18:df:d0:3f:3b:f3:ef:82:91:8d:d0:3c:9e:ac:95:57:cf:45:
37:01:28:44:8c:69:42:82:7a:21:ee:0a:4d:91:23:d8:58:bd:
63:a5:e7:32:9c:d5:90:04:07:a0:f2:f1:11:cd:a0:07:b7:54:
85:64:db:f2:de:81:18:e1:2b:dd:c2:89:8a:3f:d2:fb:f9:a6:
25:30:c8:af:8b:48:b6:9e:6f:f6:3b:1f:85:84:8c:16:c4:23:
51:7f:de:34:9d:ac:71:5b:58:d2:e0:b8:48:68:47:61:3a:51:
d9:01:c3:19:fc:3a:23:b7:cf:0a:93:3b:c3:5a:b3:65:b9:84:
c6:38:09:14:74:d2:4b:66:e5:42:d9:a1:13:3b:30:1c:05:97:
33:ce:09:90:16:2f:5e:40:fa:f7:15:93:ee:9c:4e:97:83:98:
4c:c4:76:b2:9b:ae:b1:f7:66:f5:54:2d:d1:6b:fe:62:e6:cd:
77:11:4c:09:dd:7a:ba:d4:fd:48:ff:04:08:9a:ac:af:b8:0a:
0b:2f:3f:77:5b:f7:fe:4b:df:36:84:21:0e:26:2c:c6:9b:7c:
ea:f7:cf:58
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkjMMph3RZndGJK71pux7y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4M2NjYWVmOWM5MTEyMGVjNmZiMTRmZjRjNGM1NzQ1YTAy
MzliNzcwHhcNMjUwOTA3MDgwMDI0WhcNMjUwOTA4MDgwMDI0WjAzMTEwLwYDVQQD
Eyg0MDBlNThiMWFjOTliN2ViOTUwNmZkMTJjYThkMTNiMDdiMjZjODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tlE4dKhkYZykZVhFQAD+O0wZ0UZ
z2FSkBtMPRIPduece61AZaFJuaJp8HXwJlRWjGtlU3NF8vlaXr4poWOUm/Ixe5v6
A46A/DAezXtI/a/XUaL+K4191FoVnOeMLxWs98tdAN/fqWHZKMRbTRZVSQQlY3hJ
0P4gT+qlFIjizMxoCUi23r4lB6KybnZbvwIOBvVerGAkjm59dJChyJSoJtMkyFeg
8wxzT+mOUNNpVc3Q8oTNWWWNKoQq1b5gIRolHxHaXWU7LWKoEnYrcaGw5D3CEk5/
wSaoNHlgFhVpBYAAI6+WBh1usxa4GLk9k47pxGVcDEj9zHDI8R5N69bIWQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEAOWLGsmbfrlQb9EsqNE7B7JsiDMB8GA1UdIwQY
MBaAFPg8yu+ckRIOxvsU/0xMV0WgI5t3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Eeks3NXlSRWc3Ry14VF9URXhYUmFBam0zYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNDVmY2Q1LTg4MTItNDMyZC1iNTM3
LTc2OTgyZjAzZWEwYy8xLzEtRHpLNzV5UkVnN0cteFRfVEV4WFJhQWptM2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JmLzQ1ZmNkNS04ODEyLTQzMmQtYjUzNy03Njk4MmYwM2Vh
MGMvMS8xLUR6Szc1eVJFZzdHLXhUX1RFeFhSYUFqbTNjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYs2n
yuDSyH3hfU1pCqlhyD4RFktClQXz3gNridv31p7WeivSGN/QPzvz74KRjdA8nqyV
V89FNwEoRIxpQoJ6Ie4KTZEj2Fi9Y6XnMpzVkAQHoPLxEc2gB7dUhWTb8t6BGOEr
3cKJij/S+/mmJTDIr4tItp5v9jsfhYSMFsQjUX/eNJ2scVtY0uC4SGhHYTpR2QHD
Gfw6I7fPCpM7w1qzZbmExjgJFHTSS2blQtmhEzswHAWXM84JkBYvXkD69xWT7pxO
l4OYTMR2spuusfdm9VQt0Wv+YubNdxFMCd16utT9SP8ECJqsr7gKCy8/d1v3/kvf
NoQhDiYsxpt86vfPWA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:45 2025 by rpki-client