Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier: q851fMhKKlpThl0HKpoY8YQdjURehpeGxEc0ryHg110=
Subject key identifier: 28:B2:F2:4F:95:F6:A8:04:90:A4:26:CE:D8:9E:DF:EA:40:79:95:49
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial: 01987D89D1B3E58159C48DC934E72FE63903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:00:40 +0000
Manifest this update: Wed 06 Aug 2025 04:00:40 +0000
Manifest next update: Thu 07 Aug 2025 04:00:40 +0000
Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: mQCaqyRnFhFGjOxAt38WDQ9Ty1/hF5a7Rw6o3XqMvYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:d1:b3:e5:81:59:c4:8d:c9:34:e7:2f:e6:39:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Validity
Not Before: Aug 6 04:00:40 2025 GMT
Not After : Aug 7 04:00:40 2025 GMT
Subject: CN=28b2f24f95f6a80490a426ced89edfea40799549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:e8:09:7a:fe:48:cc:7f:66:af:7a:34:2c:
e6:58:ff:34:ea:75:74:b1:22:fd:46:7f:70:0b:e0:
f0:80:1f:e1:cb:66:ff:34:1c:d5:8b:72:ec:4d:57:
7a:06:d0:0b:23:5c:a8:dc:16:dc:6d:88:4d:de:64:
1e:ab:48:3e:d1:f6:5c:7e:45:a3:9e:c4:52:ea:dd:
d7:45:b9:7a:61:61:42:ea:4c:af:d8:31:75:f4:94:
8b:49:16:36:4f:b0:9e:92:ca:bf:ed:14:4a:40:ee:
6b:41:11:21:ad:c1:f5:40:60:5b:f9:33:a0:62:a1:
8d:0b:fe:bf:f7:b5:91:05:34:a1:a9:1e:5b:23:ad:
55:06:04:80:da:39:a0:08:1e:41:de:ff:ff:4c:c8:
1d:8c:1f:ac:f1:51:a1:02:ab:67:aa:33:a9:a5:62:
e8:85:11:2c:66:9b:26:79:d8:78:83:3c:ce:53:28:
4e:4a:77:b9:ab:b3:2e:18:0d:1e:7c:53:8a:f6:0c:
0d:38:aa:c4:d6:e3:b2:db:7e:fe:17:a4:a5:19:46:
09:51:a5:e1:b3:a6:c7:39:53:71:d2:0a:c6:11:98:
60:97:28:0d:a3:9a:0b:db:ce:fe:e3:73:a2:2a:f9:
5e:ab:11:13:0c:a7:9e:6d:f1:77:1d:18:08:35:21:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B2:F2:4F:95:F6:A8:04:90:A4:26:CE:D8:9E:DF:EA:40:79:95:49
X509v3 Authority Key Identifier:
keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:bb:51:96:14:b3:87:51:28:8e:e7:09:af:6e:df:08:2e:
34:25:12:f5:18:3b:3a:31:c1:9e:10:73:f9:e9:60:cf:6b:63:
cf:f0:26:79:61:7f:df:6f:a2:b8:2f:92:c8:18:b3:55:84:71:
d7:4a:4d:c3:2e:0e:de:3a:49:04:d7:73:23:22:79:ff:91:da:
a5:6b:93:84:a7:e4:39:0b:d0:5d:f8:8e:fa:a2:49:96:a2:dc:
b3:81:12:1a:bc:8f:0b:50:e5:d9:b5:dc:0f:18:64:55:34:3c:
b2:95:42:8c:d7:d8:46:c3:8f:a1:9b:dd:f3:1a:b3:87:25:fe:
4c:49:f1:35:54:ee:61:c4:35:ab:aa:6e:74:ff:9c:1b:40:49:
3f:ef:35:b4:0e:3b:43:84:1d:da:d9:fe:87:30:c3:fe:15:87:
d5:b3:cd:5b:97:95:fe:da:ee:72:b0:a0:65:55:d2:0e:d8:45:
af:57:fd:93:01:97:82:53:f5:8b:36:43:49:6f:6d:b1:25:1d:
f4:8d:59:dc:d6:45:55:40:d3:fe:9f:d8:56:dd:c2:e3:82:c2:
ce:8d:c1:b1:a6:b6:35:8b:30:48:64:f9:3a:4f:9e:a0:14:00:
f2:79:2f:ef:de:37:7f:3c:4d:dd:cd:2c:d9:ac:98:9b:6a:49:
6a:04:d6:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9idGz5YFZxI3JNOcv5jkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YjI3MzdlNWQ5N2UxMTA4ZWIwNDk5MDRkZTliMTZmMzZh
ZWIxZTAwHhcNMjUwODA2MDQwMDQwWhcNMjUwODA3MDQwMDQwWjAzMTEwLwYDVQQD
EygyOGIyZjI0Zjk1ZjZhODA0OTBhNDI2Y2VkODllZGZlYTQwNzk5NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYPoCXr+SMx/Zq96NCzmWP806nV0
sSL9Rn9wC+DwgB/hy2b/NBzVi3LsTVd6BtALI1yo3BbcbYhN3mQeq0g+0fZcfkWj
nsRS6t3XRbl6YWFC6kyv2DF19JSLSRY2T7Ceksq/7RRKQO5rQREhrcH1QGBb+TOg
YqGNC/6/97WRBTShqR5bI61VBgSA2jmgCB5B3v//TMgdjB+s8VGhAqtnqjOppWLo
hREsZpsmedh4gzzOUyhOSne5q7MuGA0efFOK9gwNOKrE1uOy237+F6SlGUYJUaXh
s6bHOVNx0grGEZhglygNo5oL287+43OiKvleqxETDKeebfF3HRgINSGD5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiy8k+V9qgEkKQmztie3+pAeZVJMB8GA1UdIwQY
MBaAFPWyc35dl+EQjrBJkE3psW82rrHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83NGZiZWUtNmVlMC00ZjVhLTk1Y2Ut
ZWQyZGZkYTdkZjZhLzEvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83NGZiZWUtNmVlMC00ZjVhLTk1Y2UtZWQyZGZkYTdkZjZh
LzEvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7K7UZYU
s4dRKI7nCa9u3wguNCUS9Rg7OjHBnhBz+elgz2tjz/AmeWF/32+iuC+SyBizVYRx
10pNwy4O3jpJBNdzIyJ5/5HapWuThKfkOQvQXfiO+qJJlqLcs4ESGryPC1Dl2bXc
DxhkVTQ8spVCjNfYRsOPoZvd8xqzhyX+TEnxNVTuYcQ1q6pudP+cG0BJP+81tA47
Q4Qd2tn+hzDD/hWH1bPNW5eV/trucrCgZVXSDthFr1f9kwGXglP1izZDSW9tsSUd
9I1Z3NZFVUDT/p/YVt3C44LCzo3Bsaa2NYswSGT5Ok+eoBQA8nkv7943fzxN3c0s
2ayYm2pJagTWpA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:40 2025 by rpki-client