Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: uJuRiYcNAlkSlNOsKpyW8crDZ4dSIzuY5CFNfmpQMd0=
Subject key identifier: 4C:AB:8F:0F:BF:93:C1:C8:15:0F:D9:93:44:35:ED:2E:EF:1F:9D:22
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 0197703EC0AA77984AEAAB1388ABDC20FB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 21:00:50 +0000
Manifest this update: Sat 14 Jun 2025 21:00:50 +0000
Manifest next update: Sun 15 Jun 2025 21:00:50 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: yssEzIZXCW3ZWzuTCS6t5NjIhA6/Qqibf4eiMHB8Hw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:c0:aa:77:98:4a:ea:ab:13:88:ab:dc:20:fb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Jun 14 21:00:50 2025 GMT
Not After : Jun 15 21:00:50 2025 GMT
Subject: CN=4cab8f0fbf93c1c8150fd9934435ed2eef1f9d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:32:d5:6b:24:a7:f3:a3:1c:36:96:00:ba:
2d:f0:c7:39:4f:89:e5:a0:d7:19:d2:c3:e6:1a:d6:
2c:41:8c:7e:3d:c6:e2:c6:d8:c3:e9:4a:7c:f1:f1:
6e:ac:a3:de:3a:0a:c3:37:9e:f2:3a:45:99:1e:2f:
83:45:78:89:8a:d4:c6:c0:22:30:fc:9f:35:44:99:
68:89:8b:9c:6f:6f:f3:36:5d:1f:ec:80:e0:4c:7c:
cc:e0:ed:ac:6d:8b:c4:aa:28:32:7a:6c:68:e6:c4:
39:a1:dc:e9:48:34:39:45:4c:54:cc:61:80:ad:a9:
cf:ad:6e:21:e3:7b:ac:71:f5:26:40:26:19:a3:b1:
fd:fb:2a:d8:ef:6f:a8:7f:8a:00:6d:25:e6:32:cb:
7b:3f:4f:4d:ad:24:ea:fe:48:5a:65:e0:9e:c9:b5:
14:da:51:aa:49:a2:b3:9a:e5:ea:a8:60:55:53:a1:
7d:b2:bc:4a:24:c3:70:95:50:71:fd:a7:65:e7:a6:
60:3d:2f:8e:df:a6:8b:48:25:a2:70:02:3b:21:87:
1e:a1:c5:05:dc:1b:6a:52:9a:2c:d8:07:a5:c4:1b:
8d:6a:10:d4:e1:88:4b:3c:a6:d6:f7:8c:63:b2:b5:
05:ca:60:a6:bb:8e:12:f6:cf:64:a4:e9:a6:e4:e9:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AB:8F:0F:BF:93:C1:C8:15:0F:D9:93:44:35:ED:2E:EF:1F:9D:22
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8c:67:24:84:7a:d6:ab:19:6f:aa:6b:01:94:f7:53:60:70:
17:51:88:07:55:f9:6d:3c:54:ef:8a:ef:7a:9c:71:95:a7:a8:
4e:56:09:11:d8:2d:e6:3e:45:f1:53:2e:ba:9c:0a:6b:57:1c:
83:7d:92:9c:e0:7c:28:bc:dd:06:ac:76:6e:84:54:d0:4b:8e:
14:ed:e7:97:3c:80:71:ff:b0:38:59:94:f4:d8:75:63:22:1e:
5c:cd:c8:b9:fa:cb:9e:ef:f0:e8:4d:c1:19:33:84:60:3a:0d:
4d:b3:b8:98:ec:f7:6e:d0:1f:ff:c1:1f:ef:71:01:fe:59:26:
e8:ea:41:09:1e:c1:9d:af:85:01:fd:ba:00:95:22:48:f1:c3:
73:9b:61:93:34:25:7e:09:09:ed:60:92:84:16:82:bd:bf:40:
39:39:a3:0a:64:13:10:79:e5:98:d7:04:5c:4f:28:fb:9a:60:
1e:8a:f0:d8:a2:ff:8f:58:81:17:6e:54:40:c6:11:39:45:ec:
02:43:20:61:c3:98:a2:e2:01:18:fc:ac:91:c6:df:61:e2:b7:
4f:b6:9e:cc:43:e2:cc:61:91:76:4a:12:37:eb:e4:51:99:97:
bd:8d:b1:f9:ee:30:b5:31:66:42:e2:dc:56:df:bc:95:1d:6a:
a5:0b:4d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPsCqd5hK6qsTiKvcIPt0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZDYxYWM4YzU2ZTM4ZmRmNjEyMzgwMzZjNzM1NDcyNzAw
MzQ2MzEwHhcNMjUwNjE0MjEwMDUwWhcNMjUwNjE1MjEwMDUwWjAzMTEwLwYDVQQD
Eyg0Y2FiOGYwZmJmOTNjMWM4MTUwZmQ5OTM0NDM1ZWQyZWVmMWY5ZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjisy1Wskp/OjHDaWALot8Mc5T4nl
oNcZ0sPmGtYsQYx+PcbixtjD6Up88fFurKPeOgrDN57yOkWZHi+DRXiJitTGwCIw
/J81RJloiYucb2/zNl0f7IDgTHzM4O2sbYvEqigyemxo5sQ5odzpSDQ5RUxUzGGA
ranPrW4h43uscfUmQCYZo7H9+yrY72+of4oAbSXmMst7P09NrSTq/khaZeCeybUU
2lGqSaKzmuXqqGBVU6F9srxKJMNwlVBx/adl56ZgPS+O36aLSCWicAI7IYceocUF
3BtqUpos2AelxBuNahDU4YhLPKbW94xjsrUFymCmu44S9s9kpOmm5OlGsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyrjw+/k8HIFQ/Zk0Q17S7vH50iMB8GA1UdIwQY
MBaAFP/WGsjFbjj99hI4A2xzVHJwA0YxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xNGQ3YjgtYWZjZS00NWExLWIyNzIt
MDRkOTZmYTgzZDA3LzEvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8xNGQ3YjgtYWZjZS00NWExLWIyNzItMDRkOTZmYTgzZDA3
LzEvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4xnJIR6
1qsZb6prAZT3U2BwF1GIB1X5bTxU74rvepxxlaeoTlYJEdgt5j5F8VMuupwKa1cc
g32SnOB8KLzdBqx2boRU0EuOFO3nlzyAcf+wOFmU9Nh1YyIeXM3IufrLnu/w6E3B
GTOEYDoNTbO4mOz3btAf/8Ef73EB/lkm6OpBCR7Bna+FAf26AJUiSPHDc5thkzQl
fgkJ7WCShBaCvb9AOTmjCmQTEHnlmNcEXE8o+5pgHorw2KL/j1iBF25UQMYROUXs
AkMgYcOYouIBGPyskcbfYeK3T7aezEPizGGRdkoSN+vkUZmXvY2x+e4wtTFmQuLc
Vt+8lR1qpQtNnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:58:53 2025 by rpki-client