Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: /WOzMhYXa1cxMpuW/is9EF7zbHVi4PbPaAdguO688y4=
Subject key identifier: 9D:7C:74:D1:94:8F:B6:B3:C8:33:B9:0A:A0:9D:19:A4:EA:A2:B4:2E
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 0197B88ED5E1D6250F67D400ADF5EA265F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:00:57 +0000
Manifest this update: Sat 28 Jun 2025 22:00:57 +0000
Manifest next update: Sun 29 Jun 2025 22:00:57 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: vpyaJa2tkce2D8cOAMezWR25/k53klMmnMqdq2LCKvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:d5:e1:d6:25:0f:67:d4:00:ad:f5:ea:26:5f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Jun 28 22:00:57 2025 GMT
Not After : Jun 29 22:00:57 2025 GMT
Subject: CN=9d7c74d1948fb6b3c833b90aa09d19a4eaa2b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:fa:a0:8a:7d:92:f8:25:e6:fd:28:b9:b3:
12:ad:f8:30:7b:99:eb:ac:88:5a:ff:af:77:1b:6b:
97:44:f8:47:88:fb:c2:1a:0f:4f:72:e2:c3:ac:39:
56:07:c0:5d:9b:d1:7f:ea:47:0f:68:46:c8:a3:9a:
14:a7:a4:a8:64:83:44:b7:d4:79:77:9a:7c:39:ba:
00:56:15:9c:d5:9c:a2:72:b5:9b:cc:07:81:82:1a:
f4:b0:b3:07:86:1b:07:6d:b0:f8:3d:09:80:ce:d8:
02:df:b4:a4:e1:8e:4b:5b:c9:26:65:c5:6b:e5:53:
c2:73:a6:ff:9e:64:97:5f:10:01:39:d9:fe:83:4a:
61:09:38:fc:f9:35:cd:0f:1c:30:14:99:03:c7:5e:
80:5f:3f:db:0a:73:08:43:44:59:3e:a3:2f:c6:ca:
80:cb:a6:ab:8b:54:83:f3:66:11:99:5a:2b:2a:32:
89:91:e3:10:85:64:a4:f5:44:93:58:e8:3b:5c:66:
23:37:91:6f:c2:87:c1:19:6f:ee:8f:1f:68:a3:18:
93:c5:b4:8e:e6:90:df:7d:f3:c4:8b:2d:d7:1e:8a:
9c:4c:86:f5:34:04:de:c6:cb:2a:04:c0:70:73:ea:
e8:9d:9e:d6:e6:a4:9a:01:3a:6c:92:67:03:de:a1:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7C:74:D1:94:8F:B6:B3:C8:33:B9:0A:A0:9D:19:A4:EA:A2:B4:2E
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3b:8e:19:97:21:c9:fb:3d:76:bf:b7:8c:0b:42:cc:07:27:
25:c1:00:ad:cc:e3:99:5a:cd:fc:b1:f2:3f:60:41:0a:c6:cf:
05:46:66:0c:4d:31:3c:bf:ef:ca:b8:73:9f:26:3f:2e:e8:06:
02:af:ab:63:95:2a:56:a0:5e:d1:5e:f4:45:35:0e:d7:74:e2:
a3:72:97:95:6c:20:3e:0f:ed:0e:e8:c3:63:60:0f:31:28:40:
55:1e:87:36:56:9c:5d:95:3a:af:be:97:8a:7b:fe:cb:fd:06:
aa:d7:ef:f4:fa:8d:0b:a2:0f:62:5a:18:b8:fc:bb:8d:d9:62:
ae:79:95:98:f1:ee:e8:4b:c9:52:62:86:e6:cc:15:7a:0a:ba:
e9:d9:a3:9f:ae:08:e0:c8:7c:7b:18:25:a6:45:2c:fd:f0:ca:
52:9d:fb:e9:7b:c6:99:db:93:71:42:db:6b:00:eb:fa:40:88:
04:3a:bd:c7:d4:86:4a:b9:9c:db:e0:57:d5:ad:b1:d5:ac:7f:
a1:ac:18:0a:dc:3e:16:eb:77:61:25:7c:e7:58:e1:3b:b2:99:
2d:e0:16:ab:29:26:19:0c:b6:58:4f:62:fc:86:45:99:6b:89:
f0:c2:23:c9:ba:55:d3:e1:e8:6e:99:76:f8:63:37:db:87:e6:
e9:99:9c:b1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe4jtXh1iUPZ9QArfXqJl90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmM2I4NDYzZGExMTlmZGQ1NmQ4NWRhNTQ3YTA0MmEx
Nzk4YzQwHhcNMjUwNjI4MjIwMDU3WhcNMjUwNjI5MjIwMDU3WjAzMTEwLwYDVQQD
Eyg5ZDdjNzRkMTk0OGZiNmIzYzgzM2I5MGFhMDlkMTlhNGVhYTJiNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00/6oIp9kvgl5v0oubMSrfgwe5nr
rIha/693G2uXRPhHiPvCGg9PcuLDrDlWB8Bdm9F/6kcPaEbIo5oUp6SoZINEt9R5
d5p8OboAVhWc1ZyicrWbzAeBghr0sLMHhhsHbbD4PQmAztgC37Sk4Y5LW8kmZcVr
5VPCc6b/nmSXXxABOdn+g0phCTj8+TXNDxwwFJkDx16AXz/bCnMIQ0RZPqMvxsqA
y6ari1SD82YRmVorKjKJkeMQhWSk9USTWOg7XGYjN5FvwofBGW/ujx9ooxiTxbSO
5pDfffPEiy3XHoqcTIb1NATexssqBMBwc+ronZ7W5qSaATpskmcD3qFqSQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJ18dNGUj7azyDO5CqCdGaTqorQuMB8GA1UdIwQY
MBaAFPlN87hGPaEZ/dVthdpUegQqF5jEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3p1RVk5b1JuOTFXMkYybFI2QkNvWG1NUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvOWM5MzIzLTQ4MDAtNDFhYy05OGUy
LTI1ZTg2MWNkNmIzNC8xLzEtVTN6dUVZOW9SbjkxVzJGMmxSNkJDb1htTVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVkLzljOTMyMy00ODAwLTQxYWMtOThlMi0yNWU4NjFjZDZi
MzQvMS8xLVUzenVFWTlvUm45MVcyRjJsUjZCQ29YbU1RLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzuO
GZchyfs9dr+3jAtCzAcnJcEArczjmVrN/LHyP2BBCsbPBUZmDE0xPL/vyrhznyY/
LugGAq+rY5UqVqBe0V70RTUO13Tio3KXlWwgPg/tDujDY2APMShAVR6HNlacXZU6
r76Xinv+y/0Gqtfv9PqNC6IPYloYuPy7jdlirnmVmPHu6EvJUmKG5swVegq66dmj
n64I4Mh8exglpkUs/fDKUp376XvGmduTcULbawDr+kCIBDq9x9SGSrmc2+BX1a2x
1ax/oawYCtw+Fut3YSV851jhO7KZLeAWqykmGQy2WE9i/IZFmWuJ8MIjybpV0+Ho
bpl2+GM324fm6ZmcsQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:20 2025 by rpki-client