Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File: 1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier: BV7dkEbb7+Ntca3DJKaz/dDBg8rmlhlvGChWRfrZje4=
Subject key identifier: A2:0A:CC:35:40:D2:58:9D:00:1D:D8:26:1B:AB:F9:95:B4:8E:AE:97
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 019921B149B115EA06F17D3169C483E0C48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number: 030A
Signing time: Sun 07 Sep 2025 01:01:30 +0000
Manifest this update: Sun 07 Sep 2025 01:01:30 +0000
Manifest next update: Mon 08 Sep 2025 01:01:30 +0000
Files and hashes: 1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: 0lSxgP/P8686eEXlE9S7Tx4tI0Lw15mC9QCeV7Ijj3s=)
2: jj4Fs6tF4xq0DkAC9XMLg7s4mmw.roa (hash: sivrAn80+5m3Ncmw+RXEZVkYOB9TZa2z37JwsZzW78E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:49:b1:15:ea:06:f1:7d:31:69:c4:83:e0:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: Sep 7 01:01:30 2025 GMT
Not After : Sep 8 01:01:30 2025 GMT
Subject: CN=a20acc3540d2589d001dd8261babf995b48eae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:3b:bd:c1:e3:6b:8d:72:50:f9:51:f2:10:
a6:ff:77:a2:10:d9:3b:83:66:58:6e:2a:2c:3c:91:
74:5c:b9:dd:92:4b:e6:55:c9:02:9e:fe:83:8f:45:
4b:0c:63:87:a8:e6:5b:e0:16:96:5e:d0:69:39:6d:
7a:66:96:c9:bd:32:66:96:9c:cb:b2:6c:5e:3f:f4:
0d:a3:a2:5b:15:64:4a:f0:ec:8d:9c:31:8f:91:35:
67:81:5f:6e:5d:f9:eb:1b:f1:e7:cf:8d:47:8d:ba:
3c:0c:dd:e1:bf:f0:05:1c:18:12:85:04:94:d8:56:
f2:23:bc:20:0c:d6:df:e5:a5:fc:2d:89:d0:91:48:
b9:32:d8:51:d8:f1:c9:4f:8b:5b:1a:08:a6:4b:d4:
7f:6f:b0:77:c3:db:db:5d:e3:45:dc:fa:f0:0b:03:
07:c7:e3:69:04:c6:4b:3c:d4:5b:98:d7:63:6d:c2:
53:10:4c:1e:f4:53:f4:2b:f7:3d:53:d5:53:e8:23:
d4:26:14:1f:ac:20:90:7f:ea:b1:5f:ad:28:c5:37:
bd:ea:4b:39:07:c2:68:02:84:70:b2:a1:68:b2:b3:
fe:cd:98:a0:d0:59:4f:97:00:21:a0:cd:3b:d6:54:
d8:a0:0b:3a:35:f3:65:a4:02:48:d5:fc:b4:9d:e6:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:CC:35:40:D2:58:9D:00:1D:D8:26:1B:AB:F9:95:B4:8E:AE:97
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9e:31:c1:e7:a7:26:d4:13:16:69:21:7f:3b:a8:10:49:80:
fb:23:24:11:5a:e4:59:9a:fe:f5:8c:e4:af:9b:a5:f6:a0:a6:
ae:23:2b:a7:10:f3:d2:33:4c:4b:6a:05:24:f4:be:dd:d6:a1:
b6:fb:4f:22:79:e5:89:59:7f:53:ff:67:81:77:7e:2c:82:43:
2e:d7:ed:0a:0f:2e:55:65:0c:09:61:32:06:75:8b:59:c9:a8:
03:fd:42:eb:0a:27:1e:eb:41:de:aa:da:7a:5d:9e:b9:e9:9e:
0d:c6:4c:bf:11:26:92:26:ec:82:12:13:51:c7:65:02:da:11:
fc:ad:40:6c:06:87:c6:bb:4c:05:94:bb:e1:16:8b:8a:b2:a0:
4a:33:48:a8:bc:25:35:c3:bf:fe:0d:76:aa:53:6b:08:7f:3f:
8b:ba:b0:f4:ed:9d:c3:5f:57:8d:99:d7:8c:d2:df:b4:e2:1a:
a6:c5:1e:1d:e7:a1:f1:6f:52:78:4f:34:21:32:02:fd:ca:a4:
7a:56:df:69:04:a2:65:04:91:61:45:cd:b0:17:16:dc:55:99:
3d:90:37:b1:a2:75:0c:65:10:93:bc:1d:c3:28:2d:1c:37:74:
19:44:e5:07:84:3f:d6:6f:36:c2:9f:bd:29:9e:38:d4:b2:6b:
15:5a:30:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsUmxFeoG8X0xacSD4MSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MWIwODFjMGRmOTk0MGEyYjAyMGE0ZWJlOGE5NzQ5Y2Jm
ZWFkNTUwHhcNMjUwOTA3MDEwMTMwWhcNMjUwOTA4MDEwMTMwWjAzMTEwLwYDVQQD
EyhhMjBhY2MzNTQwZDI1ODlkMDAxZGQ4MjYxYmFiZjk5NWI0OGVhZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH47vcHja41yUPlR8hCm/3eiENk7
g2ZYbiosPJF0XLndkkvmVckCnv6Dj0VLDGOHqOZb4BaWXtBpOW16ZpbJvTJmlpzL
smxeP/QNo6JbFWRK8OyNnDGPkTVngV9uXfnrG/Hnz41Hjbo8DN3hv/AFHBgShQSU
2FbyI7wgDNbf5aX8LYnQkUi5MthR2PHJT4tbGgimS9R/b7B3w9vbXeNF3PrwCwMH
x+NpBMZLPNRbmNdjbcJTEEwe9FP0K/c9U9VT6CPUJhQfrCCQf+qxX60oxTe96ks5
B8JoAoRwsqFosrP+zZig0FlPlwAhoM071lTYoAs6NfNlpAJI1fy0nea7SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIKzDVA0lidAB3YJhur+ZW0jq6XMB8GA1UdIwQY
MBaAFNQbCBwN+ZQKKwIKTr6Kl0nL/q1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJzSUhBMzVsQW9yQWdwT3ZvcVhTY3YtclZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNzg3YTItZDI4Yy00MzZkLTg1ZTkt
NWNlYjM0NTY0ZjA5LzEvMUJzSUhBMzVsQW9yQWdwT3ZvcVhTY3YtclZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jNzg3YTItZDI4Yy00MzZkLTg1ZTktNWNlYjM0NTY0ZjA5
LzEvMUJzSUhBMzVsQW9yQWdwT3ZvcVhTY3YtclZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa54xween
JtQTFmkhfzuoEEmA+yMkEVrkWZr+9Yzkr5ul9qCmriMrpxDz0jNMS2oFJPS+3dah
tvtPInnliVl/U/9ngXd+LIJDLtftCg8uVWUMCWEyBnWLWcmoA/1C6wonHutB3qra
el2euemeDcZMvxEmkibsghITUcdlAtoR/K1AbAaHxrtMBZS74RaLirKgSjNIqLwl
NcO//g12qlNrCH8/i7qw9O2dw19XjZnXjNLftOIapsUeHeeh8W9SeE80ITIC/cqk
elbfaQSiZQSRYUXNsBcW3FWZPZA3saJ1DGUQk7wdwygtHDd0GUTlB4Q/1m82wp+9
KZ441LJrFVowUw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:11 2025 by rpki-client