Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: F8M+u0+ZbccxVWB2yOtnpQqaBs9KM3EPHDHXTEAYupE=
Subject key identifier: 5C:ED:40:E5:16:9B:FD:B3:A3:ED:57:10:24:79:E4:6C:75:D0:E7:78
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 01984B54BADEF75DA40F05119E1EBA43416C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 1531
Signing time: Sun 27 Jul 2025 10:01:40 +0000
Manifest this update: Sun 27 Jul 2025 10:01:40 +0000
Manifest next update: Mon 28 Jul 2025 10:01:40 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: iEB67J+WbzQFhLm6U+0KnyFqk9goh4SEVShwOshmqGI=)
2: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (hash: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:ba:de:f7:5d:a4:0f:05:11:9e:1e:ba:43:41:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Jul 27 10:01:40 2025 GMT
Not After : Jul 28 10:01:40 2025 GMT
Subject: CN=5ced40e5169bfdb3a3ed57102479e46c75d0e778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:8d:b7:b0:6d:7b:5f:1b:a5:bd:b2:9c:bc:
35:55:d8:b9:16:ad:44:1a:bf:0a:57:84:3e:69:03:
c8:68:98:59:a8:27:4f:bc:f5:a4:b4:ef:a3:28:48:
f1:90:83:e4:44:20:9e:0d:9a:3f:b1:31:1c:aa:ac:
5e:6d:d8:bb:b3:69:68:b2:fc:d9:00:6d:95:8f:bc:
51:67:f0:e6:10:30:45:74:a7:70:48:ca:5e:b9:80:
eb:50:62:fe:c5:d3:39:aa:af:5f:cd:ff:96:42:9c:
be:da:98:d2:03:e5:6e:3a:da:40:30:91:bd:2a:0e:
72:b0:42:31:44:84:4d:f7:86:88:c6:c8:df:55:84:
e1:24:48:62:c2:5c:8a:1a:67:d4:72:a4:eb:d7:34:
b2:16:34:3c:88:c3:76:a3:93:31:d7:78:37:74:8e:
e8:f2:56:75:22:ca:67:87:b5:13:1a:68:c8:9c:14:
fe:0d:0b:14:ca:03:0b:15:36:49:d0:c9:33:c1:d6:
c7:de:82:b9:5d:d7:a6:4d:75:fe:82:d0:c1:03:91:
f0:ed:fe:68:aa:54:a1:4b:b2:76:43:2c:e1:44:50:
45:ef:e7:de:0d:61:03:65:ac:85:59:07:34:54:80:
1e:5b:7c:fc:93:ec:35:86:37:09:52:87:28:aa:f6:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:40:E5:16:9B:FD:B3:A3:ED:57:10:24:79:E4:6C:75:D0:E7:78
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:98:e6:1c:6e:ee:89:5e:4a:54:11:aa:72:3b:9a:19:8b:ca:
03:5a:79:dd:60:24:7b:12:1b:17:77:e0:b4:9d:5b:6b:fb:31:
56:c2:bf:a3:1d:d4:8f:14:94:94:f3:01:82:6d:9e:b7:da:00:
00:6d:26:fa:22:46:4f:34:a9:c5:bd:23:2b:ea:ea:af:2a:b3:
fe:42:62:33:4a:80:e7:2c:5f:e2:d4:64:26:73:50:9b:fc:71:
63:f6:d4:84:38:76:36:14:6c:3e:90:d6:28:65:c4:7d:8e:2e:
c8:b5:cf:78:bb:c5:46:e8:d2:6b:b9:1b:3b:8f:65:e9:be:99:
21:e1:58:69:89:2d:57:38:49:68:16:2a:d1:7d:ac:61:81:0f:
9e:8e:50:40:ff:90:79:58:e1:bc:8b:72:10:2a:2a:e0:50:4f:
a0:7a:17:a5:d5:86:24:27:71:34:f9:b5:4a:b1:7f:92:a2:2d:
44:52:60:f8:fd:ac:08:97:b1:7a:cf:6c:fa:01:07:0f:18:37:
60:73:62:b2:90:3d:fb:c5:33:ca:61:55:c8:70:76:12:28:71:
0c:10:b0:50:2b:c6:1e:91:87:2f:b5:b4:f9:1e:99:c4:cf:81:
a3:13:05:fa:4b:5d:85:e3:a5:44:a9:a0:fe:1b:61:9c:af:3c:
bf:c4:05:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVLre912kDwURnh66Q0FsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzg2NTg3YWQ0NzIwNWE4MTEyOGU1NzhjOTBjYWVlMWU0
ODgyOGIwHhcNMjUwNzI3MTAwMTQwWhcNMjUwNzI4MTAwMTQwWjAzMTEwLwYDVQQD
Eyg1Y2VkNDBlNTE2OWJmZGIzYTNlZDU3MTAyNDc5ZTQ2Yzc1ZDBlNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34qNt7Bte18bpb2ynLw1Vdi5Fq1E
Gr8KV4Q+aQPIaJhZqCdPvPWktO+jKEjxkIPkRCCeDZo/sTEcqqxebdi7s2losvzZ
AG2Vj7xRZ/DmEDBFdKdwSMpeuYDrUGL+xdM5qq9fzf+WQpy+2pjSA+VuOtpAMJG9
Kg5ysEIxRIRN94aIxsjfVYThJEhiwlyKGmfUcqTr1zSyFjQ8iMN2o5Mx13g3dI7o
8lZ1Ispnh7UTGmjInBT+DQsUygMLFTZJ0MkzwdbH3oK5XdemTXX+gtDBA5Hw7f5o
qlShS7J2QyzhRFBF7+feDWEDZayFWQc0VIAeW3z8k+w1hjcJUocoqvaxeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFztQOUWm/2zo+1XECR55Gx10Od4MB8GA1UdIwQY
MBaAFON4ZYetRyBagRKOV4yQyu4eSIKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMt
MDdjYzQ2ZTYzYjUwLzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMtMDdjYzQ2ZTYzYjUw
LzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZjmHG7u
iV5KVBGqcjuaGYvKA1p53WAkexIbF3fgtJ1ba/sxVsK/ox3UjxSUlPMBgm2et9oA
AG0m+iJGTzSpxb0jK+rqryqz/kJiM0qA5yxf4tRkJnNQm/xxY/bUhDh2NhRsPpDW
KGXEfY4uyLXPeLvFRujSa7kbO49l6b6ZIeFYaYktVzhJaBYq0X2sYYEPno5QQP+Q
eVjhvItyECoq4FBPoHoXpdWGJCdxNPm1SrF/kqItRFJg+P2sCJexes9s+gEHDxg3
YHNispA9+8UzymFVyHB2EihxDBCwUCvGHpGHL7W0+R6ZxM+BoxMF+ktdheOlRKmg
/hthnK88v8QFjg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:36:49 2025 by rpki-client