
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier: 5/YBepwzD8PteN4fxyNPwsvEWmxA0hDTpGkkWitHsC8=
Subject key identifier: C3:2E:6D:ED:07:D3:4A:E5:69:99:CD:1B:D1:C4:3B:6A:FD:6F:D0:2E
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial: 01991764A84ACA1CC58D21A06EE417F7758B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number: 25
Signing time: Fri 05 Sep 2025 01:01:36 +0000
Manifest this update: Fri 05 Sep 2025 01:01:36 +0000
Manifest next update: Sat 06 Sep 2025 01:01:36 +0000
Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: 7+jv3d5mIKxMxCwn///ncx7c0kVxzFZjr/xs3OHv1pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:a8:4a:ca:1c:c5:8d:21:a0:6e:e4:17:f7:75:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Validity
Not Before: Sep 5 01:01:36 2025 GMT
Not After : Sep 6 01:01:36 2025 GMT
Subject: CN=c32e6ded07d34ae56999cd1bd1c43b6afd6fd02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:e6:51:d3:1e:eb:b2:69:51:09:bd:f5:ce:
85:d2:23:eb:40:e3:d9:a1:b4:f1:67:87:c2:22:41:
4b:56:46:13:e4:f8:2a:1d:e2:fb:57:1f:a6:f1:f3:
3f:47:03:60:67:f1:3b:36:a0:eb:a1:37:cf:b6:30:
92:d4:1a:06:88:44:e7:9f:63:de:05:45:f2:f4:57:
b0:43:d0:1f:42:21:c1:ad:8f:7b:5c:45:09:d8:56:
b8:bf:e8:26:4c:e9:82:42:c1:06:49:94:7d:5e:c1:
40:4b:b3:1c:26:d9:2b:83:8b:01:96:7d:d2:b1:de:
ab:cf:51:4a:9f:10:82:16:c7:be:1a:cb:db:45:81:
b8:7d:45:cb:5a:53:72:b1:96:9f:81:9e:b8:71:0b:
fd:49:02:0e:f4:8a:40:3d:9e:ac:ad:65:5b:2a:af:
15:e6:04:0c:d3:b8:09:c1:5f:35:49:00:e5:87:14:
1f:c3:d3:37:30:60:b7:33:ea:be:1b:ab:95:ce:95:
5c:91:0d:5e:56:99:9a:ec:c8:a9:5f:1f:7a:2a:50:
d6:2b:bb:6f:17:47:cc:34:3c:ab:53:46:bb:6c:99:
41:97:30:24:a1:d5:fe:1e:1d:1b:29:4d:e3:ad:b0:
21:ec:dc:1a:dd:2d:95:77:3f:f4:12:b1:79:2c:1f:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:6D:ED:07:D3:4A:E5:69:99:CD:1B:D1:C4:3B:6A:FD:6F:D0:2E
X509v3 Authority Key Identifier:
keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6a:3a:8e:37:74:81:6e:05:97:04:eb:d9:78:d5:63:f4:ce:
e6:a2:1d:ef:05:38:f3:b4:df:9d:6b:76:47:3e:65:b1:65:84:
91:fc:ef:12:a6:93:33:c0:06:da:aa:cb:a0:b4:be:7d:d5:a3:
75:49:8c:3f:49:fa:6f:bb:5d:c3:46:57:dc:03:35:a3:09:1c:
b4:d1:76:88:d6:9c:b8:96:42:0d:18:c0:02:ae:5d:ce:aa:f6:
99:1c:e2:5b:0a:1d:2e:b5:d9:35:c5:33:ef:c4:20:a2:7f:53:
3d:56:4a:a2:31:bd:2f:b7:28:5c:a7:14:2e:eb:28:62:d5:68:
e4:10:ce:ac:5b:de:7a:88:e1:ae:4d:a3:a8:db:25:5d:b7:b9:
dd:81:5a:4a:b6:71:b0:d8:91:be:38:87:da:0f:f6:d5:2c:0c:
c6:e8:90:ad:50:1e:44:42:13:f5:e6:6e:d8:a6:ea:9a:03:51:
91:07:28:a1:ed:ab:d0:34:6d:86:46:f7:83:96:b3:63:cd:32:
3f:59:d9:ef:c8:ee:95:dc:03:8c:2d:f0:74:fd:49:55:a3:f6:
74:bb:08:93:54:4c:0f:1f:19:da:1d:7b:c4:d5:f8:5c:5e:95:
28:2b:d7:51:e5:20:ad:ad:9d:ab:40:38:22:52:2e:e8:31:e7:
eb:a8:ce:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXZKhKyhzFjSGgbuQX93WLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YzFmN2JmMWJkY2NlMzU4YmEwYmZkY2ZiZjY5NjRmM2Jl
YTIzNjIwHhcNMjUwOTA1MDEwMTM2WhcNMjUwOTA2MDEwMTM2WjAzMTEwLwYDVQQD
EyhjMzJlNmRlZDA3ZDM0YWU1Njk5OWNkMWJkMWM0M2I2YWZkNmZkMDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v7mUdMe67JpUQm99c6F0iPrQOPZ
obTxZ4fCIkFLVkYT5PgqHeL7Vx+m8fM/RwNgZ/E7NqDroTfPtjCS1BoGiETnn2Pe
BUXy9FewQ9AfQiHBrY97XEUJ2Fa4v+gmTOmCQsEGSZR9XsFAS7McJtkrg4sBln3S
sd6rz1FKnxCCFse+GsvbRYG4fUXLWlNysZafgZ64cQv9SQIO9IpAPZ6srWVbKq8V
5gQM07gJwV81SQDlhxQfw9M3MGC3M+q+G6uVzpVckQ1eVpma7MipXx96KlDWK7tv
F0fMNDyrU0a7bJlBlzAkodX+Hh0bKU3jrbAh7Nwa3S2Vdz/0ErF5LB/J2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMube0H00rlaZnNG9HEO2r9b9AuMB8GA1UdIwQY
MBaAFNXB978b3M41i6C/3Pv2lk876iNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWNIM3Z4dmN6aldMb0xfYy1fYVdUenZxSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jOTZmNWItNDkxNy00NzQzLWI2Yjkt
NjgwNzYxMzI1NWIyLzEvMWNIM3Z4dmN6aldMb0xfYy1fYVdUenZxSTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jOTZmNWItNDkxNy00NzQzLWI2YjktNjgwNzYxMzI1NWIy
LzEvMWNIM3Z4dmN6aldMb0xfYy1fYVdUenZxSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGo6jjd0
gW4FlwTr2XjVY/TO5qId7wU487TfnWt2Rz5lsWWEkfzvEqaTM8AG2qrLoLS+fdWj
dUmMP0n6b7tdw0ZX3AM1owkctNF2iNacuJZCDRjAAq5dzqr2mRziWwodLrXZNcUz
78Qgon9TPVZKojG9L7coXKcULusoYtVo5BDOrFveeojhrk2jqNslXbe53YFaSrZx
sNiRvjiH2g/21SwMxuiQrVAeREIT9eZu2KbqmgNRkQcooe2r0DRthkb3g5azY80y
P1nZ78juldwDjC3wdP1JVaP2dLsIk1RMDx8Z2h17xNX4XF6VKCvXUeUgra2dq0A4
IlIu6DHn66jOHA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:52 2025 by rpki-client