Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
File: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json)
Hash identifier: ZsdD4GsBLBxfixU7UucX+Qfd/bR9J+g/tVMK25VMiJ8=
Subject key identifier: A5:72:F3:AF:9E:A2:5E:2F:99:39:86:EC:2E:FE:89:57:05:72:14:E9
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 01987E9C54CE8E32017578A384A0A739FC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
Manifest number: 03AF
Signing time: Wed 06 Aug 2025 09:00:31 +0000
Manifest this update: Wed 06 Aug 2025 09:00:31 +0000
Manifest next update: Thu 07 Aug 2025 09:00:31 +0000
Files and hashes: 1: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: T5XDH82uJHoFzpLOIpJIGD9ZHWhtKzRQ5F4nS+eCEJE=)
2: 8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa (hash: D9xl0kFJAWKH2xA+S2m21lyse1ulC1gNGZHY3WDEYOY=)
3: KI3V-Dqox_RP-IrhT4OI-uI43p8.roa (hash: orZRl+1ZfvhmNjNIuH/XpcJiUoUbYgZ+2tdOL/2fIOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:54:ce:8e:32:01:75:78:a3:84:a0:a7:39:fc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Aug 6 09:00:31 2025 GMT
Not After : Aug 7 09:00:31 2025 GMT
Subject: CN=a572f3af9ea25e2f993986ec2efe8957057214e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:c6:60:42:58:65:d3:5a:fe:7c:e3:bb:0c:
49:6e:ab:20:30:8a:3d:4d:27:03:97:63:79:db:24:
6a:0a:a4:2f:95:dc:a7:99:08:5c:d4:20:c3:15:38:
e6:5c:a2:88:47:d9:3f:65:41:bf:20:c3:51:87:87:
62:81:32:f9:a0:07:99:44:6b:26:81:c1:9f:d5:38:
6b:2c:8c:ab:15:10:cf:86:ed:40:d7:4e:dd:09:2c:
dd:6e:5f:ca:ed:28:86:2d:0e:4c:66:d5:e7:10:5c:
6d:19:96:e3:bf:6e:7d:b3:56:1f:fe:ee:5c:e6:9b:
45:c4:07:89:14:6e:58:98:1a:d6:26:ef:2b:b8:54:
2b:04:38:88:eb:51:52:eb:fe:4f:b2:68:87:f4:ec:
ce:ec:53:c9:15:1a:2b:ee:cf:2a:2b:ab:84:6b:ef:
cf:2d:4a:b0:55:83:17:96:f1:97:2c:da:d8:b8:50:
4e:60:5d:4e:dd:ca:3c:1f:12:de:2a:68:94:01:4c:
f3:f4:43:58:b8:41:7c:b6:3f:69:c7:cb:08:ab:0f:
5f:a5:75:c8:85:24:2c:f7:88:28:cc:88:06:95:5c:
54:bc:65:1c:94:b8:c8:ec:ef:aa:e0:fa:02:61:eb:
a2:56:4b:3f:ef:f5:e7:c1:c9:28:57:10:c5:c4:26:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:72:F3:AF:9E:A2:5E:2F:99:39:86:EC:2E:FE:89:57:05:72:14:E9
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3e:bb:2c:92:2f:c3:e7:0e:8c:8c:7d:8b:72:01:09:b0:ec:
4d:4d:fb:ba:a9:f9:14:2a:cf:ee:16:3f:3d:ff:a3:7c:58:2b:
eb:01:ce:36:43:87:77:30:75:3e:0e:20:bc:44:ba:03:fe:19:
90:04:c3:f0:d0:06:ac:e7:07:00:97:f1:5d:7f:30:06:d7:ab:
fd:65:b2:9a:4c:77:fc:3e:90:96:89:78:0d:cb:0b:fc:85:9f:
a1:e6:d7:b0:4b:08:15:82:88:49:75:89:1d:3c:4a:88:fd:6f:
2e:87:ce:b2:9d:a5:b5:94:be:de:0a:77:bb:15:3c:68:f8:f8:
aa:32:a4:8d:5d:c2:ad:de:55:36:68:db:1a:a5:30:b4:65:43:
b1:2c:a3:ee:d7:0f:64:d8:d6:68:3d:ee:87:3e:e4:f3:ab:e6:
d5:6d:7f:05:6a:ee:05:6f:6a:23:e0:6c:e1:3f:75:4c:66:e3:
61:9d:1b:55:35:2d:66:fd:11:92:b3:bc:fb:ee:f3:74:bb:46:
4f:c2:5e:df:08:d9:8c:7c:3a:b5:bf:ca:c9:80:85:d0:06:36:
1f:10:fc:53:5b:2e:62:8f:c2:04:2e:12:7a:0a:42:42:81:cb:
2d:65:dd:47:61:0d:71:fd:cd:bd:52:4a:30:e2:90:95:ca:3f:
85:c2:5e:5c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZh+nFTOjjIBdXijhKCnOfwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjhjZDVkMjRhMDhiNWE4YWZiNTdjOWU2MDRkMTkzYmM4
Y2FlMjAwHhcNMjUwODA2MDkwMDMxWhcNMjUwODA3MDkwMDMxWjAzMTEwLwYDVQQD
EyhhNTcyZjNhZjllYTI1ZTJmOTkzOTg2ZWMyZWZlODk1NzA1NzIxNGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphrGYEJYZdNa/nzjuwxJbqsgMIo9
TScDl2N52yRqCqQvldynmQhc1CDDFTjmXKKIR9k/ZUG/IMNRh4digTL5oAeZRGsm
gcGf1ThrLIyrFRDPhu1A107dCSzdbl/K7SiGLQ5MZtXnEFxtGZbjv259s1Yf/u5c
5ptFxAeJFG5YmBrWJu8ruFQrBDiI61FS6/5PsmiH9OzO7FPJFRor7s8qK6uEa+/P
LUqwVYMXlvGXLNrYuFBOYF1O3co8HxLeKmiUAUzz9ENYuEF8tj9px8sIqw9fpXXI
hSQs94gozIgGlVxUvGUclLjI7O+q4PoCYeuiVks/7/XnwckoVxDFxCaT+wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKVy86+eol4vmTmG7C7+iVcFchTpMB8GA1UdIwQY
MBaAFPv4zV0koItaivtXyeYE0ZO8jK4gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fak5YU1NnaTFxSy0xZko1Z1RSazd5TXJpQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZWIzZTliLTZkYjUtNDZjNi05YWEx
LWViODc4NjliZDFjOS8xLzEtX2pOWFNTZ2kxcUstMWZKNWdUUms3eU1yaUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MwL2ViM2U5Yi02ZGI1LTQ2YzYtOWFhMS1lYjg3ODY5YmQx
YzkvMS8xLV9qTlhTU2dpMXFLLTFmSjVnVFJrN3lNcmlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiT67
LJIvw+cOjIx9i3IBCbDsTU37uqn5FCrP7hY/Pf+jfFgr6wHONkOHdzB1Pg4gvES6
A/4ZkATD8NAGrOcHAJfxXX8wBter/WWymkx3/D6Qlol4DcsL/IWfoebXsEsIFYKI
SXWJHTxKiP1vLofOsp2ltZS+3gp3uxU8aPj4qjKkjV3Crd5VNmjbGqUwtGVDsSyj
7tcPZNjWaD3uhz7k86vm1W1/BWruBW9qI+Bs4T91TGbjYZ0bVTUtZv0RkrO8++7z
dLtGT8Je3wjZjHw6tb/KyYCF0AY2HxD8U1suYo/CBC4SegpCQoHLLWXdR2ENcf3N
vVJKMOKQlco/hcJeXA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:11 2025 by rpki-client