Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: yBnSeTYmmzncjSFRBr2d3HGHwjKxuNkH6Rdudg5pPRs=
Subject key identifier: C1:FA:66:76:61:4B:A2:2D:47:DC:07:1E:19:AA:14:58:15:B5:A9:8C
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 019873E36730E620989493A32B0FF59417F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:02:19 +0000
Manifest this update: Mon 04 Aug 2025 07:02:19 +0000
Manifest next update: Tue 05 Aug 2025 07:02:19 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: 4ddXyThiCoeIkP6X4ZujwyR40O7uxB724H7WWhAZXOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:67:30:e6:20:98:94:93:a3:2b:0f:f5:94:17:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Aug 4 07:02:19 2025 GMT
Not After : Aug 5 07:02:19 2025 GMT
Subject: CN=c1fa6676614ba22d47dc071e19aa145815b5a98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:64:c3:49:0b:53:3f:cb:25:38:45:4b:b2:
c5:94:d7:19:3f:68:84:04:2e:02:a6:07:df:65:07:
9f:8c:b2:2b:71:8d:fc:e6:a0:ad:c1:64:ed:27:1f:
5b:6f:34:fe:73:6b:e0:f7:70:2f:69:e2:a7:4e:2c:
6a:b7:cd:27:76:ef:59:db:a5:3a:26:49:e8:2f:30:
23:db:b3:74:79:ae:d1:9d:35:39:ce:12:e7:27:a5:
a9:57:e8:37:ed:3f:d7:fe:a8:32:26:2c:33:d8:e3:
38:fb:25:df:e0:e4:9f:cb:b4:35:77:cd:1d:8b:c9:
7c:93:7c:77:da:ed:31:86:6c:e7:53:dd:80:4c:de:
42:9c:e2:99:b1:e9:f6:3d:ac:6d:a8:61:77:e4:f7:
dc:f4:0c:83:38:3c:6a:d8:ec:88:21:15:b2:b5:6b:
cf:89:ea:16:80:81:39:ef:77:ef:e7:74:d1:85:af:
9e:83:ba:9e:75:4a:81:83:a6:75:6b:7a:df:61:5d:
01:7e:fb:75:24:88:2d:fb:78:78:42:72:f3:97:bb:
7b:91:15:74:3e:f1:71:a5:a2:b4:6a:f7:9e:bf:a4:
e0:d1:23:04:36:d8:5c:7f:9c:d2:47:00:64:40:a0:
7d:98:ec:4a:07:41:64:2c:5e:01:10:c5:ca:45:25:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FA:66:76:61:4B:A2:2D:47:DC:07:1E:19:AA:14:58:15:B5:A9:8C
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5a:44:02:02:74:89:5a:07:cc:0d:03:80:e8:22:0f:21:6c:
57:a7:69:df:85:ec:d8:49:60:8e:f4:65:a4:65:ef:88:7f:b1:
8a:2d:34:37:d4:35:0c:96:f2:a5:66:79:39:82:b4:1a:63:87:
71:4c:e5:41:e8:0e:e5:ff:da:38:55:a9:fc:d5:04:e8:73:08:
87:3a:16:00:96:83:79:ce:d1:1c:24:94:be:12:a9:3e:9a:dc:
b3:d9:61:f9:ba:8b:4f:16:2e:92:c6:88:76:08:19:60:c2:0b:
c4:5c:69:6c:cb:7f:7e:6d:ea:27:f9:01:5c:6d:5c:a7:f1:e4:
f9:d6:4a:bc:69:d4:49:07:15:1e:b0:7e:cf:f7:58:64:35:d8:
3a:4f:22:72:1a:a0:ef:56:dc:78:4c:9b:90:00:cb:4d:54:e6:
9f:fc:7a:c3:5e:62:87:4c:80:6c:24:8a:78:71:a7:cf:db:b1:
45:3c:36:b2:7d:3b:25:0d:da:b7:08:3a:9e:ef:51:70:0b:6b:
d5:6b:76:41:17:58:be:1a:1c:09:99:f9:6c:fc:48:88:38:c9:
53:92:82:0e:ea:00:07:2b:6e:de:ec:9b:cf:2d:57:5d:43:86:
c2:a5:a7:a8:c9:4a:f5:69:0d:60:b6:7f:a0:6d:e2:05:3e:30:
3b:c8:ac:9b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhz42cw5iCYlJOjKw/1lBf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OWM5YTY5MjM0NTI3Yjc4Njk0OGIyZWI0YzY1MDlkYjBh
NGQ1YTgwHhcNMjUwODA0MDcwMjE5WhcNMjUwODA1MDcwMjE5WjAzMTEwLwYDVQQD
EyhjMWZhNjY3NjYxNGJhMjJkNDdkYzA3MWUxOWFhMTQ1ODE1YjVhOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTZkw0kLUz/LJThFS7LFlNcZP2iE
BC4CpgffZQefjLIrcY385qCtwWTtJx9bbzT+c2vg93AvaeKnTixqt80ndu9Z26U6
JknoLzAj27N0ea7RnTU5zhLnJ6WpV+g37T/X/qgyJiwz2OM4+yXf4OSfy7Q1d80d
i8l8k3x32u0xhmznU92ATN5CnOKZsen2PaxtqGF35Pfc9AyDODxq2OyIIRWytWvP
ieoWgIE573fv53TRha+eg7qedUqBg6Z1a3rfYV0Bfvt1JIgt+3h4QnLzl7t7kRV0
PvFxpaK0aveev6Tg0SMENthcf5zSRwBkQKB9mOxKB0FkLF4BEMXKRSUIaQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMH6ZnZhS6ItR9wHHhmqFFgVtamMMB8GA1UdIwQY
MBaAFPicmmkjRSe3hpSLLrTGUJ2wpNWoMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KeWFhU05GSjdlR2xJc3V0TVpRbmJDazFhZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvOTk5MmMyLTBjZGQtNDM2MS05YzAz
LWMyY2NjZTZjNDdhNC8xLzEtSnlhYVNORko3ZUdsSXN1dE1aUW5iQ2sxYWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxLzk5OTJjMi0wY2RkLTQzNjEtOWMwMy1jMmNjY2U2YzQ3
YTQvMS8xLUp5YWFTTkZKN2VHbElzdXRNWlFuYkNrMWFnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1pE
AgJ0iVoHzA0DgOgiDyFsV6dp34Xs2ElgjvRlpGXviH+xii00N9Q1DJbypWZ5OYK0
GmOHcUzlQegO5f/aOFWp/NUE6HMIhzoWAJaDec7RHCSUvhKpPprcs9lh+bqLTxYu
ksaIdggZYMILxFxpbMt/fm3qJ/kBXG1cp/Hk+dZKvGnUSQcVHrB+z/dYZDXYOk8i
chqg71bceEybkADLTVTmn/x6w15ih0yAbCSKeHGnz9uxRTw2sn07JQ3atwg6nu9R
cAtr1Wt2QRdYvhocCZn5bPxIiDjJU5KCDuoABytu3uybzy1XXUOGwqWnqMlK9WkN
YLZ/oG3iBT4wO8ismw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:54 2025 by rpki-client