Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: 1Z57CPv7LbphokgcPnUn6Hm7irUPhKMXrAQ51XG7s/M=
Subject key identifier: E5:FE:6A:8D:89:8C:9E:AA:10:1F:EE:A4:79:92:D6:C1:DA:04:21:97
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 01976F2C4A8A170D447727D49186E1134C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0A5E
Signing time: Sat 14 Jun 2025 16:01:02 +0000
Manifest this update: Sat 14 Jun 2025 16:01:02 +0000
Manifest next update: Sun 15 Jun 2025 16:01:02 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: e7Bk1VUGYBqwF8WEMnmkPJLoHoSB7guTi8aTWi+ZraM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:4a:8a:17:0d:44:77:27:d4:91:86:e1:13:4c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Jun 14 16:01:02 2025 GMT
Not After : Jun 15 16:01:02 2025 GMT
Subject: CN=e5fe6a8d898c9eaa101feea47992d6c1da042197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:04:58:46:2b:48:b5:85:fa:d5:39:c2:81:
9c:84:30:92:0d:df:99:35:5f:03:69:20:08:aa:02:
eb:af:26:e7:77:c9:67:67:b2:27:b6:56:1e:4f:07:
36:be:9f:ed:50:97:1b:bb:22:1a:a9:40:bc:7c:5a:
d0:92:41:c1:0d:49:2e:1f:69:89:c1:59:5f:15:06:
07:b3:1e:ab:bc:4b:98:c3:a3:01:99:f8:7b:95:45:
61:3d:82:1c:b9:a6:03:f2:a0:5d:71:d0:7e:c5:94:
05:aa:a9:03:ad:d4:39:fa:2e:d1:d0:a2:76:fb:74:
81:98:2b:a7:58:4c:47:fb:48:b9:42:4c:69:0e:f2:
b9:c1:6e:80:c5:8b:1e:63:86:64:e0:f5:bb:f0:5f:
01:54:e7:95:ab:f7:ac:3f:bb:a6:ee:87:52:df:78:
64:b9:21:db:8f:ec:c9:11:b8:14:fb:62:df:2a:28:
b4:45:82:61:95:e0:dc:d7:c2:c5:12:29:9f:bd:c8:
25:b3:1a:9c:a8:6e:f4:e2:d7:3f:ef:ab:0a:e6:8c:
47:67:d7:27:66:62:e0:a2:11:08:8d:a1:d3:6b:5e:
8b:dd:3d:39:05:f2:cb:75:c5:ed:1a:45:26:84:59:
6e:49:ee:f7:83:9f:2f:83:e5:55:89:86:fa:bd:57:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:6A:8D:89:8C:9E:AA:10:1F:EE:A4:79:92:D6:C1:DA:04:21:97
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:63:1b:bf:8c:7f:b5:77:58:94:55:98:51:73:75:b0:de:80:
12:78:4c:86:40:06:4f:f1:33:86:ce:7d:bd:71:f0:63:8f:53:
8e:35:b7:b0:10:c1:d0:18:d4:76:3d:47:ca:2e:b1:ba:5a:fb:
bc:71:e9:ca:b0:59:5c:ae:bf:d3:59:fb:df:07:56:59:07:54:
16:99:a9:74:3b:3a:a8:72:01:61:cc:eb:16:0e:d0:1c:09:ea:
47:2e:4a:3b:d1:af:cf:75:a4:b9:6d:67:33:52:c7:80:47:5a:
e7:63:1e:d8:c3:a8:c0:45:b3:7e:80:40:04:ce:d6:24:71:80:
26:43:43:5a:58:0a:e1:f8:ef:c4:1d:c1:1b:ae:48:0a:96:d4:
ae:22:18:e5:b8:fa:de:1c:a3:24:1c:86:32:f5:86:76:c3:41:
18:8d:95:c1:a8:ee:a4:cd:ab:cb:9f:f6:dc:21:3b:dc:14:83:
93:29:93:32:30:a0:e3:9a:ad:df:28:2a:42:ee:a4:d0:5e:64:
6c:ba:99:f2:dc:c9:7a:19:d3:43:c8:48:a0:cc:b4:22:aa:c1:
ec:cd:92:a3:ad:39:dd:39:a8:73:af:18:72:44:11:37:85:22:
5a:5c:67:12:f6:e6:db:88:65:c8:76:15:23:a9:6b:5e:87:bd:
02:ba:8c:db
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdvLEqKFw1EdyfUkYbhE0yTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDE3OGNkNjAyODk2OThiN2NkOTVkZGQ3YjE2OTE3NDkw
YjQ0MDcwHhcNMjUwNjE0MTYwMTAyWhcNMjUwNjE1MTYwMTAyWjAzMTEwLwYDVQQD
EyhlNWZlNmE4ZDg5OGM5ZWFhMTAxZmVlYTQ3OTkyZDZjMWRhMDQyMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW8EWEYrSLWF+tU5woGchDCSDd+Z
NV8DaSAIqgLrrybnd8lnZ7IntlYeTwc2vp/tUJcbuyIaqUC8fFrQkkHBDUkuH2mJ
wVlfFQYHsx6rvEuYw6MBmfh7lUVhPYIcuaYD8qBdcdB+xZQFqqkDrdQ5+i7R0KJ2
+3SBmCunWExH+0i5QkxpDvK5wW6AxYseY4Zk4PW78F8BVOeVq/esP7um7odS33hk
uSHbj+zJEbgU+2LfKii0RYJhleDc18LFEimfvcglsxqcqG704tc/76sK5oxHZ9cn
ZmLgohEIjaHTa16L3T05BfLLdcXtGkUmhFluSe73g58vg+VViYb6vVc7PQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOX+ao2JjJ6qEB/upHmS1sHaBCGXMB8GA1UdIwQY
MBaAFPvReM1gKJaYt82V3dexaRdJC0QHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05RjR6V0FvbHBpM3paWGQxN0ZwRjBrTFJBYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvMjdiZjJhLTgyYTQtNDhkOS1iNGUy
LTJiNzFmYzMzMzY2My8xLzEtOUY0eldBb2xwaTN6WlhkMTdGcEYwa0xSQWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzLzI3YmYyYS04MmE0LTQ4ZDktYjRlMi0yYjcxZmMzMzM2
NjMvMS8xLTlGNHpXQW9scGkzelpYZDE3RnBGMGtMUkFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGMb
v4x/tXdYlFWYUXN1sN6AEnhMhkAGT/Ezhs59vXHwY49TjjW3sBDB0BjUdj1Hyi6x
ulr7vHHpyrBZXK6/01n73wdWWQdUFpmpdDs6qHIBYczrFg7QHAnqRy5KO9Gvz3Wk
uW1nM1LHgEda52Me2MOowEWzfoBABM7WJHGAJkNDWlgK4fjvxB3BG65ICpbUriIY
5bj63hyjJByGMvWGdsNBGI2VwajupM2ry5/23CE73BSDkymTMjCg45qt3ygqQu6k
0F5kbLqZ8tzJehnTQ8hIoMy0IqrB7M2So6053Tmoc68YckQRN4UiWlxnEvbm24hl
yHYVI6lrXoe9ArqM2w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:56 2025 by rpki-client