Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json)
Hash identifier: iVOL/QaeRYpBUqO8hopBC6HN6DWZ1zSUyMyHSSPWczc=
Subject key identifier: 51:62:01:60:EB:32:BC:88:D8:67:C6:C0:16:21:C3:BB:E7:B4:CE:52
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial: 0198898E3ACD51EE2D2583FCDE6310712881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
Manifest number: 06BC
Signing time: Fri 08 Aug 2025 12:00:56 +0000
Manifest this update: Fri 08 Aug 2025 12:00:56 +0000
Manifest next update: Sat 09 Aug 2025 12:00:56 +0000
Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: r6gOD2xFOG5K1sNKlFJeq5o4t+22X9YrDQyX3sBsygY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:3a:cd:51:ee:2d:25:83:fc:de:63:10:71:28:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Validity
Not Before: Aug 8 12:00:56 2025 GMT
Not After : Aug 9 12:00:56 2025 GMT
Subject: CN=51620160eb32bc88d867c6c01621c3bbe7b4ce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:24:56:5f:fd:bb:c3:58:c1:fa:d6:66:c2:
df:c0:f0:11:8e:33:91:6f:0a:80:e7:e8:0b:b7:5e:
19:a0:7a:3b:b2:d3:84:5f:9b:ba:3b:89:b3:8b:f9:
b4:44:7c:3a:c8:97:15:0c:25:20:51:14:95:0d:9e:
06:96:ca:01:9d:14:05:e1:55:76:11:d6:c7:35:e4:
44:0e:9e:56:fe:19:26:a5:7c:5a:79:f0:e7:60:d1:
f6:80:cb:27:68:49:2f:30:18:e3:e1:1a:eb:a7:07:
8f:9f:e4:7e:3a:31:d5:bb:97:4f:de:3d:e5:f9:cf:
77:6f:bd:02:19:4c:01:d6:1f:22:e6:2d:73:ff:28:
7a:b3:77:67:1f:9c:62:e5:e6:70:b4:bd:2a:ee:cb:
94:63:38:1f:9b:9b:2b:35:f6:b2:ab:97:bd:97:1f:
61:97:85:e1:b2:bd:83:30:9b:81:37:e0:7a:e5:b7:
8d:11:28:87:fd:67:b9:94:d8:52:3b:97:1b:03:f7:
7c:cd:b2:f6:47:55:d4:8a:42:67:fb:9d:59:58:c4:
6c:6d:86:0b:61:57:1a:84:f8:97:fd:03:fb:56:77:
a2:5c:32:15:5d:24:54:bf:f2:a7:8c:42:11:4c:55:
28:52:82:ca:9a:8b:96:0f:ed:90:c2:41:c9:e8:f2:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:62:01:60:EB:32:BC:88:D8:67:C6:C0:16:21:C3:BB:E7:B4:CE:52
X509v3 Authority Key Identifier:
keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:17:d3:07:a0:34:0a:e9:57:50:bd:41:07:9e:b5:67:5d:78:
a8:b6:72:5f:a2:93:b3:f4:38:d6:86:ff:c5:0b:ab:51:5e:0b:
03:1a:80:71:60:79:82:51:45:1c:74:72:5c:da:69:40:a8:4c:
c2:79:af:c9:19:8e:6a:c3:7f:91:c6:9d:23:5e:9e:13:07:47:
6f:ed:36:a0:5f:f5:6b:ba:8d:06:16:6c:5b:70:0c:fa:8f:8c:
cf:b7:c8:8e:5a:4f:73:c0:a7:8d:ee:77:85:7f:74:fc:87:ef:
3d:10:cb:75:51:7c:8c:96:f4:b2:92:d0:03:28:f2:87:c3:2f:
af:10:6d:f0:18:b8:9c:eb:24:d5:6b:bd:8a:52:bc:15:cd:47:
8f:6d:96:df:19:f0:3a:7c:43:5f:5d:28:f3:67:50:9a:77:5b:
d8:27:ff:94:5f:bb:3e:30:6e:78:d1:fd:d0:cb:82:9e:3b:13:
3f:e6:f8:f5:96:4f:f0:4a:66:cd:94:32:0a:3a:3f:31:66:ba:
d5:98:63:05:b5:7f:4d:b1:c3:db:b4:41:25:8d:b3:9d:dc:88:
d5:78:2b:b3:d5:3c:59:33:3f:89:e3:4b:01:cf:a0:fa:0c:16:
7c:1b:94:6e:5f:7b:ed:ca:19:40:1a:28:2d:0f:b5:45:5c:87:
8a:5b:ef:fa
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiJjjrNUe4tJYP83mMQcSiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGRmZmY3ZjNjZGFhNzlhYThjNTFmNWNlMTJiMjM4NzA2
NDQwODEwHhcNMjUwODA4MTIwMDU2WhcNMjUwODA5MTIwMDU2WjAzMTEwLwYDVQQD
Eyg1MTYyMDE2MGViMzJiYzg4ZDg2N2M2YzAxNjIxYzNiYmU3YjRjZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtMkVl/9u8NYwfrWZsLfwPARjjOR
bwqA5+gLt14ZoHo7stOEX5u6O4mzi/m0RHw6yJcVDCUgURSVDZ4GlsoBnRQF4VV2
EdbHNeREDp5W/hkmpXxaefDnYNH2gMsnaEkvMBjj4RrrpwePn+R+OjHVu5dP3j3l
+c93b70CGUwB1h8i5i1z/yh6s3dnH5xi5eZwtL0q7suUYzgfm5srNfayq5e9lx9h
l4Xhsr2DMJuBN+B65beNESiH/We5lNhSO5cbA/d8zbL2R1XUikJn+51ZWMRsbYYL
YVcahPiX/QP7VneiXDIVXSRUv/KnjEIRTFUoUoLKmouWD+2QwkHJ6PL5JwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFFiAWDrMryI2GfGwBYhw7vntM5SMB8GA1UdIwQY
MBaAFPmN//fzzap5qoxR9c4SsjhwZECBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZM185X1BOcW5tcWpGSDF6aEt5T0hCa1FJRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNTQ3MWE4LWFlZGYtNGQ4Ni1hNDZk
LTc4OGM2MzA2YmIzZi8xLzEtWTNfOV9QTnFubXFqRkgxemhLeU9IQmtRSUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY4LzU0NzFhOC1hZWRmLTRkODYtYTQ2ZC03ODhjNjMwNmJi
M2YvMS8xLVkzXzlfUE5xbm1xakZIMXpoS3lPSEJrUUlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBfT
B6A0CulXUL1BB561Z114qLZyX6KTs/Q41ob/xQurUV4LAxqAcWB5glFFHHRyXNpp
QKhMwnmvyRmOasN/kcadI16eEwdHb+02oF/1a7qNBhZsW3AM+o+Mz7fIjlpPc8Cn
je53hX90/IfvPRDLdVF8jJb0spLQAyjyh8MvrxBt8Bi4nOsk1Wu9ilK8Fc1Hj22W
3xnwOnxDX10o82dQmndb2Cf/lF+7PjBueNH90MuCnjsTP+b49ZZP8EpmzZQyCjo/
MWa61ZhjBbV/TbHD27RBJY2zndyI1Xgrs9U8WTM/ieNLAc+g+gwWfBuUbl977coZ
QBooLQ+1RVyHilvv+g==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:47:10 2025 by rpki-client