Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier: dDfwyHe08dY9/XTAs/gnv+P7+gR6MrQfpv6zZfDNof0=
Subject key identifier: 40:8C:64:5C:59:5D:8A:7C:50:C4:92:3B:84:4E:9F:F8:5E:A2:D5:A6
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial: 019921B116FAF3C0BB51C57D58A007F0BB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number: 128A
Signing time: Sun 07 Sep 2025 01:01:17 +0000
Manifest this update: Sun 07 Sep 2025 01:01:17 +0000
Manifest next update: Mon 08 Sep 2025 01:01:17 +0000
Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: EgqKdJ4d7Cl08E5f1EY1C9Y9I8dmTlU2IF1OvUZuhOA=)
2: 2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa (hash: GJ30AXhunHYfQ1Yyx4o1wHy0UcxPP3zTYg1IKwU8P4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:16:fa:f3:c0:bb:51:c5:7d:58:a0:07:f0:bb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Validity
Not Before: Sep 7 01:01:17 2025 GMT
Not After : Sep 8 01:01:17 2025 GMT
Subject: CN=408c645c595d8a7c50c4923b844e9ff85ea2d5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:97:3f:cb:69:ff:80:4c:f7:c0:6c:b8:99:
e6:ff:3b:94:42:70:65:20:6a:db:a0:d2:08:55:da:
45:07:33:88:61:7b:04:d6:ec:6e:93:90:f2:e9:fd:
cc:71:01:3d:ae:79:ce:2b:5c:e3:bb:d3:f1:6f:97:
5d:ad:84:f7:c1:c6:f1:4c:f3:f7:cd:a1:90:62:70:
0c:bd:b9:04:fe:04:8f:e4:dc:4d:0c:15:28:42:82:
c6:dc:b8:b9:11:4b:e2:9b:da:4e:da:71:45:68:67:
ef:2a:ea:be:7a:22:89:f7:29:d3:67:d1:b0:c2:2f:
55:77:16:48:a8:a6:3a:e0:26:f7:00:4f:6e:51:06:
08:73:57:23:90:f4:b8:15:78:1f:de:9a:86:57:95:
36:10:20:01:7b:05:1f:f4:c1:c3:a3:a9:c3:25:32:
ec:43:67:16:16:59:d0:93:56:2b:7f:78:3f:ae:be:
42:3a:85:53:38:5d:85:29:e7:3d:e6:20:df:37:35:
10:4b:b7:5e:38:7e:70:97:c6:91:9e:8e:52:48:7b:
4f:d4:64:09:c5:e7:95:72:3c:78:30:10:80:29:ea:
17:c1:0c:bd:d0:99:82:c5:b3:90:d4:22:3e:ad:03:
f6:88:f8:dd:0c:94:b0:da:9c:a1:3f:b7:87:f4:51:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8C:64:5C:59:5D:8A:7C:50:C4:92:3B:84:4E:9F:F8:5E:A2:D5:A6
X509v3 Authority Key Identifier:
keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a5:96:27:fb:21:5a:5b:25:eb:f4:e0:d3:de:cb:ae:92:53:
f2:f3:77:45:2d:f4:d0:de:70:7e:9a:38:30:79:95:ca:7d:75:
d0:6c:8f:e9:86:f0:97:b5:5e:8e:b7:c0:a6:1e:25:ff:38:16:
fe:ac:7e:ba:4a:9f:31:25:7f:a3:59:2d:03:26:8f:e9:88:49:
4a:ed:1f:2d:42:5f:3e:a2:aa:7b:11:ad:a4:2f:f6:9f:f7:b5:
09:65:fa:3c:fc:b9:0d:03:05:4e:a2:9c:b2:31:9a:9d:37:75:
0c:ac:1d:da:4a:84:3d:be:86:c9:0c:3f:2b:c6:96:1b:1e:87:
19:35:d2:14:6d:96:c6:ea:f7:d9:0b:be:34:d6:c3:78:5a:da:
8e:80:d6:5f:01:0e:0e:85:57:e1:a9:2e:23:25:07:f1:9f:72:
7e:f5:29:c5:9d:f8:b7:b1:57:bc:3d:10:ad:84:f4:ac:d0:17:
1c:c4:38:c5:80:c6:d3:28:9d:82:ff:76:0c:47:82:a1:ea:d9:
cf:8b:cd:81:c4:a6:ad:d7:e4:f4:7e:7b:ba:a2:34:1e:64:a7:
23:8b:23:7d:95:fe:c7:fe:8e:a4:0b:c7:3f:14:2e:50:0c:f8:
f6:67:ac:f8:fc:1e:d1:78:ae:0f:74:e4:b1:3c:22:7a:96:e4:
ea:29:e6:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsRb688C7UcV9WKAH8LtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MDYxZWU4N2Y1YjU1ZjE5MDNhMmIzNzA0ZWJhMDk0NGFi
MGM1YWMwHhcNMjUwOTA3MDEwMTE3WhcNMjUwOTA4MDEwMTE3WjAzMTEwLwYDVQQD
Eyg0MDhjNjQ1YzU5NWQ4YTdjNTBjNDkyM2I4NDRlOWZmODVlYTJkNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6iXP8tp/4BM98BsuJnm/zuUQnBl
IGrboNIIVdpFBzOIYXsE1uxuk5Dy6f3McQE9rnnOK1zju9Pxb5ddrYT3wcbxTPP3
zaGQYnAMvbkE/gSP5NxNDBUoQoLG3Li5EUvim9pO2nFFaGfvKuq+eiKJ9ynTZ9Gw
wi9VdxZIqKY64Cb3AE9uUQYIc1cjkPS4FXgf3pqGV5U2ECABewUf9MHDo6nDJTLs
Q2cWFlnQk1Yrf3g/rr5COoVTOF2FKec95iDfNzUQS7deOH5wl8aRno5SSHtP1GQJ
xeeVcjx4MBCAKeoXwQy90JmCxbOQ1CI+rQP2iPjdDJSw2pyhP7eH9FH5uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECMZFxZXYp8UMSSO4ROn/heotWmMB8GA1UdIwQY
MBaAFNcGHuh/W1XxkDorNwTroJRKsMWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2It
Mjg4M2Y4OGE4NmVjLzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMTEzYzQtN2NmMS00MTFjLTg3M2ItMjg4M2Y4OGE4NmVj
LzEvMXdZZTZIOWJWZkdRT2lzM0JPdWdsRXF3eGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaWWJ/sh
Wlsl6/Tg097LrpJT8vN3RS300N5wfpo4MHmVyn110GyP6Ybwl7VejrfAph4l/zgW
/qx+ukqfMSV/o1ktAyaP6YhJSu0fLUJfPqKqexGtpC/2n/e1CWX6PPy5DQMFTqKc
sjGanTd1DKwd2kqEPb6GyQw/K8aWGx6HGTXSFG2Wxur32Qu+NNbDeFrajoDWXwEO
DoVX4akuIyUH8Z9yfvUpxZ34t7FXvD0QrYT0rNAXHMQ4xYDG0yidgv92DEeCoerZ
z4vNgcSmrdfk9H57uqI0HmSnI4sjfZX+x/6OpAvHPxQuUAz49mes+Pwe0XiuD3Tk
sTwiepbk6inmFQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:46 2025 by rpki-client