Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: xqA8B5jBZy8D+44T58DRcgCMbWxuv7dcncG4Ek01KF8=
Subject key identifier: C2:BF:B9:E8:96:42:1C:5F:39:08:06:D3:A1:AA:4C:60:3C:28:53:5E
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 0197B6D7A7BCAA20955B046E1B6A0A3F4A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:15 +0000
Manifest this update: Sat 28 Jun 2025 14:01:15 +0000
Manifest next update: Sun 29 Jun 2025 14:01:15 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: Q20DRK45kbS6uNGtYgMS+Lwdpnv2hresAaU7VMbAA5A=)
2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a7:bc:aa:20:95:5b:04:6e:1b:6a:0a:3f:4a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Jun 28 14:01:15 2025 GMT
Not After : Jun 29 14:01:15 2025 GMT
Subject: CN=c2bfb9e896421c5f390806d3a1aa4c603c28535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:2d:fd:ef:0c:28:a1:9d:cf:6c:f2:58:8f:
d9:56:91:e4:76:85:c0:70:ff:ca:3d:4b:64:50:c7:
a6:b6:ef:da:64:f1:e6:8e:97:ad:61:87:9c:2e:d6:
c5:db:d8:29:78:d6:ad:cd:11:e4:20:fc:2d:30:43:
b7:e7:77:d2:6a:58:a1:4e:fe:ed:20:7e:01:c8:08:
77:6d:38:68:d8:ba:33:8e:de:3b:76:3e:72:50:d1:
75:86:16:03:24:79:22:ee:59:93:34:e3:23:91:a0:
65:09:e7:23:e9:b8:28:77:44:8b:5b:03:bf:ce:8e:
9b:85:e0:da:97:7a:33:93:dc:b9:e0:dc:65:ba:b2:
3e:70:fa:b4:bd:a7:9e:94:7f:1f:00:f7:0a:7b:df:
c2:b3:d9:81:28:12:fc:5e:f6:ef:a3:38:7d:4f:2c:
34:d7:d0:ef:64:4e:38:36:7c:75:a9:9c:fe:43:7f:
72:a2:f0:61:33:aa:3d:e4:98:b4:ae:10:30:b7:57:
58:37:b1:92:98:9a:14:d4:cc:5f:63:d9:46:1c:b9:
4e:31:0d:b8:e3:d4:32:27:91:7f:61:9a:da:0f:ea:
e8:86:2a:0b:ab:32:f0:eb:ae:19:3f:86:e4:45:87:
ee:57:42:5b:c2:ee:b0:43:7d:75:b6:21:00:e7:f9:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:B9:E8:96:42:1C:5F:39:08:06:D3:A1:AA:4C:60:3C:28:53:5E
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:37:99:15:84:6b:6f:c0:92:88:b9:23:cd:7e:c6:a0:81:71:
b1:21:f2:e1:47:63:47:31:e8:1f:05:d4:de:22:a8:76:be:e3:
45:09:82:3d:aa:b6:cf:6e:de:cb:13:34:1d:cb:8e:91:46:c3:
8f:18:ba:9f:6c:f1:7b:47:ec:9d:ac:d5:f1:56:b2:09:05:9c:
da:4f:a0:2a:70:7e:6a:fb:8f:55:db:0a:81:5b:13:ed:d5:3f:
87:37:2e:ab:b8:8d:3a:07:c2:9f:82:0d:2d:4e:6a:a7:fe:89:
21:22:80:bc:d9:e5:2b:bb:94:f2:e0:97:64:0d:b5:cb:e1:e2:
14:c0:2a:3b:47:1a:6e:7a:64:40:ff:6e:80:0c:62:3c:75:c4:
7b:d6:96:2b:a2:3c:20:ed:ec:38:50:4a:66:83:56:27:d8:99:
8f:5f:eb:6c:71:1a:16:6d:2c:df:d3:20:8b:ef:e7:83:8f:87:
00:78:0b:bf:51:73:0f:38:3e:dc:e3:a2:7d:f4:17:24:df:6c:
3b:4a:3d:b0:7d:09:fb:5c:48:07:db:58:e0:e1:e8:61:fb:df:
e1:6c:f9:a7:be:81:aa:b1:28:0a:ff:0d:f5:a3:0c:52:c6:e4:
0f:ce:1f:33:2a:7e:40:96:aa:7b:12:25:28:00:5d:22:49:45:
26:74:ba:0e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe216e8qiCVWwRuG2oKP0oYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MWY2YWQwZGYzODM3MjBkM2E1ZDAzYmE4OGMxOTMwOTVj
NTc0ZWYwHhcNMjUwNjI4MTQwMTE1WhcNMjUwNjI5MTQwMTE1WjAzMTEwLwYDVQQD
EyhjMmJmYjllODk2NDIxYzVmMzkwODA2ZDNhMWFhNGM2MDNjMjg1MzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthct/e8MKKGdz2zyWI/ZVpHkdoXA
cP/KPUtkUMemtu/aZPHmjpetYYecLtbF29gpeNatzRHkIPwtMEO353fSalihTv7t
IH4ByAh3bTho2Lozjt47dj5yUNF1hhYDJHki7lmTNOMjkaBlCecj6bgod0SLWwO/
zo6bheDal3ozk9y54NxlurI+cPq0vaeelH8fAPcKe9/Cs9mBKBL8Xvbvozh9Tyw0
19DvZE44Nnx1qZz+Q39yovBhM6o95Ji0rhAwt1dYN7GSmJoU1MxfY9lGHLlOMQ24
49QyJ5F/YZraD+rohioLqzLw664ZP4bkRYfuV0Jbwu6wQ311tiEA5/kDHQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMK/ueiWQhxfOQgG06GqTGA8KFNeMB8GA1UdIwQY
MBaAFPgfatDfODcg06XQO6iMGTCVxXTvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1COXEwTjg0TnlEVHBkQTdxSXdaTUpYRmRPOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZTkzZTlmLThjYWYtNDlhMC04Njhl
LWE4YzRhZGY5ODcyMS8xLzEtQjlxME44NE55RFRwZEE3cUl3Wk1KWEZkTzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA0L2U5M2U5Zi04Y2FmLTQ5YTAtODY4ZS1hOGM0YWRmOTg3
MjEvMS8xLUI5cTBOODROeURUcGRBN3FJd1pNSlhGZE84LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjeZ
FYRrb8CSiLkjzX7GoIFxsSHy4UdjRzHoHwXU3iKodr7jRQmCPaq2z27eyxM0HcuO
kUbDjxi6n2zxe0fsnazV8VayCQWc2k+gKnB+avuPVdsKgVsT7dU/hzcuq7iNOgfC
n4INLU5qp/6JISKAvNnlK7uU8uCXZA21y+HiFMAqO0cabnpkQP9ugAxiPHXEe9aW
K6I8IO3sOFBKZoNWJ9iZj1/rbHEaFm0s39Mgi+/ng4+HAHgLv1FzDzg+3OOiffQX
JN9sO0o9sH0J+1xIB9tY4OHoYfvf4Wz5p76BqrEoCv8N9aMMUsbkD84fMyp+QJaq
exIlKABdIklFJnS6Dg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:16 2025 by rpki-client