Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: luOD0Z7VTfC4R9RF0qKFAOgo+3Zogo+yybU4uG/+QiE=
Subject key identifier: F7:F6:76:19:85:C8:88:3B:B0:08:E2:6E:07:CC:A8:FD:5B:91:A7:5C
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 0197B5FC2CDFC2FFB2EE911B76A8550524E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 0ED9
Signing time: Sat 28 Jun 2025 10:01:31 +0000
Manifest this update: Sat 28 Jun 2025 10:01:31 +0000
Manifest next update: Sun 29 Jun 2025 10:01:31 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: bA9eOlWuRgy+3xxGFu2UIfu/6W2eG4+5Tvt8JqugVK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:2c:df:c2:ff:b2:ee:91:1b:76:a8:55:05:24:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Jun 28 10:01:31 2025 GMT
Not After : Jun 29 10:01:31 2025 GMT
Subject: CN=f7f6761985c8883bb008e26e07cca8fd5b91a75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:29:1a:a6:3f:76:a4:a5:f7:5a:10:7d:ec:
0d:40:7f:a5:76:d0:45:af:79:76:4b:ee:7f:7f:15:
d7:2c:5e:ac:1b:15:75:25:9a:af:a9:15:a7:5a:88:
58:96:97:7c:77:8a:18:19:6d:b6:3d:ef:64:eb:43:
e7:09:90:f2:cc:8a:63:42:57:ae:f7:9e:e6:7e:93:
eb:c1:bc:25:39:f4:1d:ab:59:28:f5:d5:fe:96:f5:
6e:8c:44:b3:95:39:1a:62:a2:70:96:c6:b7:69:25:
2c:d4:1d:bc:dc:9a:76:2b:f0:5f:ce:a0:a7:a7:c1:
59:5e:3c:cd:41:d6:1b:83:a6:c8:0e:27:71:5d:5e:
8d:7e:73:36:aa:f1:40:0b:cd:45:1f:63:8c:1d:6b:
16:75:de:26:0e:0a:0c:49:ae:89:d4:eb:0c:1f:67:
3b:e7:c6:20:10:7a:d0:50:c2:74:18:9e:2d:14:69:
f6:35:1a:13:fb:16:94:ab:b8:a6:6b:79:da:f1:ad:
f1:00:54:56:ab:1a:7c:fc:06:2e:be:a5:6d:b5:76:
dd:94:3d:03:32:f4:16:03:6f:6a:79:47:40:c2:5d:
6c:23:bb:00:36:00:c9:40:e4:aa:52:05:a6:e1:4f:
86:42:e9:dc:14:f0:f2:ff:94:19:01:95:c1:01:6e:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F6:76:19:85:C8:88:3B:B0:08:E2:6E:07:CC:A8:FD:5B:91:A7:5C
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:81:0f:e1:14:37:8c:e9:03:e1:ee:30:5b:c0:80:93:15:43:
ba:7a:70:2e:de:3a:3d:94:09:8e:0e:f4:c3:15:b4:ab:02:4d:
92:07:24:a1:a0:15:3d:9a:8d:cf:1b:be:8a:49:2e:b3:bd:e2:
e2:5b:db:e4:0f:ce:8e:6c:7b:a0:8a:10:a5:24:bd:21:0a:ce:
ec:d2:be:89:be:00:2e:a1:9c:cc:a5:22:7a:c4:41:66:47:ac:
18:49:59:5d:20:d1:1f:fd:9b:a1:14:e0:20:21:93:a0:19:8d:
40:19:c9:be:6e:be:7c:80:a8:bc:c9:13:0d:8d:97:f7:b7:81:
b2:97:36:b9:14:9c:ff:8e:53:1a:00:a4:91:80:5f:f9:d6:e8:
14:15:c3:1b:ef:26:d6:8a:03:df:84:ec:9b:9d:81:02:08:2b:
96:6a:f3:06:53:40:3a:76:9e:33:35:bf:d4:9e:80:25:25:d3:
4d:a9:69:37:79:d3:c1:66:67:bf:4b:1b:14:1c:88:94:be:df:
8c:82:b0:15:f9:1f:a5:aa:54:7b:4d:0a:f3:d0:84:cb:f3:e6:
77:98:23:83:d7:3d:11:d9:76:66:1c:12:4c:65:d2:5f:2e:b7:
30:4f:34:3c:58:38:f4:1c:88:8d:ef:9b:cb:94:52:51:b3:aa:
08:be:92:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/Czfwv+y7pEbdqhVBSTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MmE1M2RhMDM4MjUyZjY0YjZjMjkzNTljZmFjNDEwNGMz
NWI3ZTkwHhcNMjUwNjI4MTAwMTMxWhcNMjUwNjI5MTAwMTMxWjAzMTEwLwYDVQQD
EyhmN2Y2NzYxOTg1Yzg4ODNiYjAwOGUyNmUwN2NjYThmZDViOTFhNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXQpGqY/dqSl91oQfewNQH+ldtBF
r3l2S+5/fxXXLF6sGxV1JZqvqRWnWohYlpd8d4oYGW22Pe9k60PnCZDyzIpjQleu
957mfpPrwbwlOfQdq1ko9dX+lvVujESzlTkaYqJwlsa3aSUs1B283Jp2K/BfzqCn
p8FZXjzNQdYbg6bIDidxXV6NfnM2qvFAC81FH2OMHWsWdd4mDgoMSa6J1OsMH2c7
58YgEHrQUMJ0GJ4tFGn2NRoT+xaUq7ima3na8a3xAFRWqxp8/AYuvqVttXbdlD0D
MvQWA29qeUdAwl1sI7sANgDJQOSqUgWm4U+GQuncFPDy/5QZAZXBAW7QLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPf2dhmFyIg7sAjibgfMqP1bkadcMB8GA1UdIwQY
MBaAFNQqU9oDglL2S2wpNZz6xBBMNbfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEt
Yzg2OTlkYzczMTAwLzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEtYzg2OTlkYzczMTAw
LzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoEP4RQ3
jOkD4e4wW8CAkxVDunpwLt46PZQJjg70wxW0qwJNkgckoaAVPZqNzxu+ikkus73i
4lvb5A/Ojmx7oIoQpSS9IQrO7NK+ib4ALqGczKUiesRBZkesGElZXSDRH/2boRTg
ICGToBmNQBnJvm6+fICovMkTDY2X97eBspc2uRSc/45TGgCkkYBf+dboFBXDG+8m
1ooD34Tsm52BAggrlmrzBlNAOnaeMzW/1J6AJSXTTalpN3nTwWZnv0sbFByIlL7f
jIKwFfkfpapUe00K89CEy/Pmd5gjg9c9Edl2ZhwSTGXSXy63ME80PFg49ByIje+b
y5RSUbOqCL6SiA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:25 2025 by rpki-client