Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: hT2PB5AmYJaqub8R8iS7CBxpKTQBmAn6Jlvvm+5XDNQ=
Subject key identifier: 32:A2:FF:41:15:8D:C4:96:95:A9:15:56:70:EC:9F:02:01:13:B9:5B
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 01976C2B2383F76F319AF001CFC914A09399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 07A1
Signing time: Sat 14 Jun 2025 02:00:55 +0000
Manifest this update: Sat 14 Jun 2025 02:00:55 +0000
Manifest next update: Sun 15 Jun 2025 02:00:55 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: x+adZ7jyTKHWZ3L1T9fZk7VA2dhCEdT8FsvTdhJrNws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:23:83:f7:6f:31:9a:f0:01:cf:c9:14:a0:93:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Jun 14 02:00:55 2025 GMT
Not After : Jun 15 02:00:55 2025 GMT
Subject: CN=32a2ff41158dc49695a9155670ec9f020113b95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:39:5e:99:aa:a7:b2:03:28:ec:56:22:28:
c9:98:72:31:d7:60:07:cc:47:82:c8:c0:c4:46:04:
48:45:46:be:89:46:c6:6c:f2:a7:f2:56:2c:bd:3b:
82:ef:41:3e:3e:22:75:5d:71:06:62:3b:ce:08:0f:
dd:94:f8:d9:db:ac:78:a2:c8:86:e5:fb:6b:a8:37:
10:29:3f:3f:03:b4:42:ea:10:28:3e:3b:7e:ad:56:
57:2f:b2:8b:53:fa:9a:ee:6c:a9:eb:0c:f9:61:88:
7f:12:54:e4:26:e8:0c:fe:9b:46:9e:51:34:d7:b8:
01:fe:a6:95:90:0f:66:90:ed:45:49:2c:3f:2b:f1:
86:ec:2c:51:c2:96:59:57:4d:f7:9d:50:3b:7a:5e:
cc:11:af:18:e9:58:a9:00:e4:f9:5f:92:dc:42:64:
df:62:ee:62:10:a7:8a:07:31:db:6f:dd:4a:3e:70:
c8:b4:d4:76:e3:1e:3a:46:69:7d:c9:27:9f:30:f3:
28:01:92:a8:7f:56:ca:cd:67:82:2f:31:f7:19:eb:
3c:d8:d0:f8:c4:bb:8e:51:68:b5:0a:1d:94:f9:a3:
25:0a:8d:87:84:19:96:fd:50:8e:b3:2e:fa:f2:4d:
c5:52:5d:b1:f6:0c:e1:75:7f:85:0b:f1:4d:13:2f:
9f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A2:FF:41:15:8D:C4:96:95:A9:15:56:70:EC:9F:02:01:13:B9:5B
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fb:66:56:95:84:ba:ac:e8:5f:b2:3d:81:7b:95:1d:52:1e:
c3:05:74:ca:e1:d6:f7:9a:81:07:72:9c:95:15:15:5b:5c:20:
01:ec:af:3e:00:96:e4:cf:f4:1f:ea:1a:4e:33:71:0c:cd:ac:
e4:d7:39:7e:5f:4d:4d:96:4e:c6:e4:f8:4f:f2:19:ff:66:ac:
02:74:ad:02:a9:33:28:5d:75:c2:9c:df:55:df:73:db:ac:50:
2a:7e:33:63:d3:4a:0a:eb:8e:6d:89:40:4a:22:be:38:89:9b:
d9:b8:84:57:5c:11:99:5c:11:d2:ba:37:f2:e6:e9:8a:53:64:
40:db:c2:81:5d:df:78:62:92:8d:0e:c2:aa:3a:55:36:89:8a:
4c:62:15:57:fd:f4:e4:c0:c6:4d:44:84:e2:b7:6a:be:46:d2:
9c:c3:03:9f:a5:f2:5b:9b:24:97:a9:81:35:6b:f0:8d:8c:d0:
e6:0d:28:71:f1:c1:6a:21:26:26:2a:03:cb:88:8b:42:95:c7:
f3:96:81:56:c4:91:38:3a:57:7f:83:26:3f:23:4b:8a:9b:54:
9a:1d:7d:26:5b:73:aa:04:74:5a:20:4a:f1:4d:c9:8b:be:f8:
32:46:ac:85:93:2a:bb:63:60:0a:af:d4:87:ee:fc:fa:2d:82:
de:7a:22:2d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdsKyOD928xmvABz8kUoJOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OTZjMzQ4OWZlZWJiYzA5NDI1NWQyN2VkY2Q4NjU1MTIx
MDI3YmMwHhcNMjUwNjE0MDIwMDU1WhcNMjUwNjE1MDIwMDU1WjAzMTEwLwYDVQQD
EygzMmEyZmY0MTE1OGRjNDk2OTVhOTE1NTY3MGVjOWYwMjAxMTNiOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGc5Xpmqp7IDKOxWIijJmHIx12AH
zEeCyMDERgRIRUa+iUbGbPKn8lYsvTuC70E+PiJ1XXEGYjvOCA/dlPjZ26x4osiG
5ftrqDcQKT8/A7RC6hAoPjt+rVZXL7KLU/qa7myp6wz5YYh/ElTkJugM/ptGnlE0
17gB/qaVkA9mkO1FSSw/K/GG7CxRwpZZV033nVA7el7MEa8Y6VipAOT5X5LcQmTf
Yu5iEKeKBzHbb91KPnDItNR24x46Rml9ySefMPMoAZKof1bKzWeCLzH3Ges82ND4
xLuOUWi1Ch2U+aMlCo2HhBmW/VCOsy768k3FUl2x9gzhdX+FC/FNEy+fjQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDKi/0EVjcSWlakVVnDsnwIBE7lbMB8GA1UdIwQY
MBaAFPiWw0if7rvAlCVdJ+3NhlUSECe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KYkRTSl91dThDVUpWMG43YzJHVlJJUUo3dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNDhmZDFlLTBhYWItNDM3MS04OWM0
LWI1MWNjNGYwNWFhYS8xLzEtSmJEU0pfdXU4Q1VKVjBuN2MyR1ZSSVFKN3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QyLzQ4ZmQxZS0wYWFiLTQzNzEtODljNC1iNTFjYzRmMDVh
YWEvMS8xLUpiRFNKX3V1OENVSlYwbjdjMkdWUklRSjd3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvtm
VpWEuqzoX7I9gXuVHVIewwV0yuHW95qBB3KclRUVW1wgAeyvPgCW5M/0H+oaTjNx
DM2s5Nc5fl9NTZZOxuT4T/IZ/2asAnStAqkzKF11wpzfVd9z26xQKn4zY9NKCuuO
bYlASiK+OImb2biEV1wRmVwR0ro38ubpilNkQNvCgV3feGKSjQ7CqjpVNomKTGIV
V/305MDGTUSE4rdqvkbSnMMDn6XyW5skl6mBNWvwjYzQ5g0ocfHBaiEmJioDy4iL
QpXH85aBVsSRODpXf4MmPyNLiptUmh19JltzqgR0WiBK8U3Ji774MkashZMqu2Ng
Cq/Uh+78+i2C3noiLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:02:28 2025 by rpki-client