Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: JGKwQtSJfnbb1DK/rdesXJyehmHlrh5gc+hhBKtOhhg=
Subject key identifier: B0:27:25:79:A1:56:A8:B9:8D:52:85:4C:0C:D5:B1:DE:7A:D1:D4:87
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 019875627504C90B6176B065C5C12EE90B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 04DF
Signing time: Mon 04 Aug 2025 14:00:43 +0000
Manifest this update: Mon 04 Aug 2025 14:00:43 +0000
Manifest next update: Tue 05 Aug 2025 14:00:43 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: w4e3FaZcEy4PeCvLRlLw2bQJRoaCHV+DB40VRpVf/e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:75:04:c9:0b:61:76:b0:65:c5:c1:2e:e9:0b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Aug 4 14:00:43 2025 GMT
Not After : Aug 5 14:00:43 2025 GMT
Subject: CN=b0272579a156a8b98d52854c0cd5b1de7ad1d487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:be:83:9b:19:26:2e:43:59:bc:3d:32:3b:
d6:54:85:ab:9e:56:9c:ec:b6:20:4f:34:5c:54:f9:
37:9f:91:f6:4d:21:f5:ef:ac:33:1d:54:7a:22:a9:
e5:ff:61:9d:74:44:66:fb:e3:e3:c5:43:cd:a7:5b:
b2:08:f2:06:13:13:17:fa:7a:0f:67:ed:50:7f:27:
e8:27:d1:cd:8a:bb:19:87:3f:06:56:88:8b:4f:01:
97:c3:5e:19:e7:fa:12:01:71:64:1a:fd:2e:53:05:
54:6d:1b:ba:98:7d:53:7c:93:28:c6:5b:0b:d3:44:
7a:31:7b:4d:c8:d3:4f:d5:7b:65:54:2d:98:2c:b1:
f8:6c:de:98:5a:85:bd:9f:c8:28:12:b9:a6:2d:27:
a6:d0:71:96:e2:0a:9c:62:fa:7b:46:2b:2e:9a:94:
d1:4d:5d:53:cd:87:5d:cd:1f:13:c7:4d:b5:f9:3d:
41:ff:fe:60:ef:be:63:fb:39:a2:6f:1e:3a:7b:e8:
d7:a2:92:53:d2:05:dd:18:5c:3c:51:a3:7d:f5:52:
69:db:0c:9b:24:3d:a7:0e:be:48:11:95:63:b9:74:
17:db:f6:df:c4:93:06:a9:e7:03:57:a1:a2:82:f4:
52:be:84:0b:74:24:ae:7a:7a:e0:53:9b:63:1e:ca:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:27:25:79:A1:56:A8:B9:8D:52:85:4C:0C:D5:B1:DE:7A:D1:D4:87
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:01:0a:28:a2:3e:db:fb:0b:e8:1a:7b:22:43:2b:3f:68:79:
fe:25:c5:cb:df:2a:1f:d7:7d:e3:bc:13:bb:3c:7e:8a:4d:6e:
9c:4e:73:fc:b0:d4:db:14:78:a7:e3:bd:f7:50:df:54:ca:4d:
18:53:7b:b8:d7:0d:a6:a7:34:c2:e8:2f:37:7a:82:00:d8:53:
9e:ee:d5:56:3b:c6:78:67:dc:02:72:6b:3d:4d:74:f9:c9:1d:
53:dc:4b:6b:b9:76:6d:54:be:ae:18:d7:c6:fc:d6:55:70:a7:
90:95:34:6e:2e:50:74:f2:0d:3f:b6:a6:00:82:37:ce:51:24:
0d:34:75:77:d1:d3:75:32:4b:8d:04:5e:c5:64:a4:94:b6:bd:
01:f3:9c:9a:48:f5:e8:1e:0a:34:e4:56:5e:7f:3c:57:f9:b2:
24:2d:17:78:39:9a:a1:68:59:28:c7:1c:20:a7:eb:9b:2f:5a:
bc:46:26:c9:bc:e7:87:55:b9:ba:1d:29:0c:6a:29:ac:a6:fd:
26:f0:f3:3d:d0:76:eb:0e:23:73:2d:a7:d4:c8:f2:ee:ee:5f:
8e:49:2a:a2:3b:7d:46:c1:fd:8c:d1:f3:c0:71:be:b9:88:e6:
3d:ad:9d:b6:24:25:b2:7b:af:81:92:d2:3d:1c:43:d2:05:86:
fd:32:2e:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1YnUEyQthdrBlxcEu6QsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGQ3ZmY0NTZmNWZkYzdkZTYxZmE0MjBlZTA4NmE3N2Ex
ZTYxZTUwHhcNMjUwODA0MTQwMDQzWhcNMjUwODA1MTQwMDQzWjAzMTEwLwYDVQQD
EyhiMDI3MjU3OWExNTZhOGI5OGQ1Mjg1NGMwY2Q1YjFkZTdhZDFkNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28S+g5sZJi5DWbw9MjvWVIWrnlac
7LYgTzRcVPk3n5H2TSH176wzHVR6Iqnl/2GddERm++PjxUPNp1uyCPIGExMX+noP
Z+1QfyfoJ9HNirsZhz8GVoiLTwGXw14Z5/oSAXFkGv0uUwVUbRu6mH1TfJMoxlsL
00R6MXtNyNNP1XtlVC2YLLH4bN6YWoW9n8goErmmLSem0HGW4gqcYvp7RisumpTR
TV1TzYddzR8Tx021+T1B//5g775j+zmibx46e+jXopJT0gXdGFw8UaN99VJp2wyb
JD2nDr5IEZVjuXQX2/bfxJMGqecDV6GigvRSvoQLdCSuenrgU5tjHsqG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAnJXmhVqi5jVKFTAzVsd560dSHMB8GA1UdIwQY
MBaAFK5Nf/RW9f3H3mH6Qg7ghqd6HmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yYWNlMWUtNzBkYi00YTBhLTkzYzQt
MDdiMThlNTE4NTYxLzEvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yYWNlMWUtNzBkYi00YTBhLTkzYzQtMDdiMThlNTE4NTYx
LzEvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAEKKKI+
2/sL6Bp7IkMrP2h5/iXFy98qH9d947wTuzx+ik1unE5z/LDU2xR4p+O991DfVMpN
GFN7uNcNpqc0wugvN3qCANhTnu7VVjvGeGfcAnJrPU10+ckdU9xLa7l2bVS+rhjX
xvzWVXCnkJU0bi5QdPINP7amAII3zlEkDTR1d9HTdTJLjQRexWSklLa9AfOcmkj1
6B4KNORWXn88V/myJC0XeDmaoWhZKMccIKfrmy9avEYmybznh1W5uh0pDGoprKb9
JvDzPdB26w4jcy2n1Mjy7u5fjkkqojt9RsH9jNHzwHG+uYjmPa2dtiQlsnuvgZLS
PRxD0gWG/TIuSQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:10 2025 by rpki-client