Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier: ZvF1tqtLxOIXn338sIieUhmNxLaFU5ENY8gr8LRO7DM=
Subject key identifier: 07:1A:24:D7:5C:29:5D:43:C3:5C:9F:3E:AF:45:32:7E:AF:0D:39:CF
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial: 0198D65FD1C3C3670A49823ACD6AC6D09E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number: 09B1
Signing time: Sat 23 Aug 2025 10:01:00 +0000
Manifest this update: Sat 23 Aug 2025 10:01:00 +0000
Manifest next update: Sun 24 Aug 2025 10:01:00 +0000
Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: OWIUjLh9TKCILkthURfiWoW8ceLjBuot23I/5Gjo/fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d1:c3:c3:67:0a:49:82:3a:cd:6a:c6:d0:9e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Validity
Not Before: Aug 23 10:01:00 2025 GMT
Not After : Aug 24 10:01:00 2025 GMT
Subject: CN=071a24d75c295d43c35c9f3eaf45327eaf0d39cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:f6:47:0c:76:d2:1a:78:0f:70:b6:92:50:
ac:8f:65:eb:78:1a:59:b6:68:b7:ed:90:ea:4c:6f:
ae:82:d0:9d:ea:31:cf:e4:63:0f:39:da:62:75:40:
63:82:44:35:09:3b:db:82:98:b1:ce:14:af:ef:e2:
3b:90:85:69:59:dd:16:5a:78:bb:f6:ff:cf:78:50:
cd:5b:15:e1:2b:db:5c:b6:68:14:f1:35:57:10:40:
87:a8:27:f8:cf:b9:a6:a4:03:cb:65:1b:ad:58:16:
50:e3:91:fc:ba:c1:1e:d2:05:0f:da:63:15:b5:ae:
9a:62:0c:b1:7c:ea:fa:f2:f4:2f:a0:ef:47:fd:3f:
4e:12:a5:2b:4f:15:c4:e0:d2:58:cd:16:ec:c0:a2:
c8:bb:78:21:ea:fb:86:5d:91:b7:7f:bf:1a:4d:35:
14:52:81:73:c8:2b:55:f8:e7:70:48:af:e5:88:79:
3a:de:8f:1a:62:72:04:68:cb:bf:4c:3a:37:dd:b4:
fa:8f:04:9c:de:6f:19:1f:24:8a:72:bc:e3:af:c1:
dc:80:20:bf:2d:7a:92:88:21:50:87:43:df:2e:13:
0f:05:ec:a5:ab:1c:e4:75:21:99:da:f2:bd:7d:75:
33:66:bb:b8:3d:5f:b6:ed:96:da:65:86:b4:eb:41:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1A:24:D7:5C:29:5D:43:C3:5C:9F:3E:AF:45:32:7E:AF:0D:39:CF
X509v3 Authority Key Identifier:
keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5c:dc:bf:d1:d7:1f:ea:de:14:28:b4:ed:5d:82:af:35:f2:
a5:b2:41:fe:f5:07:4f:3c:a6:2b:08:9f:c2:ba:df:13:60:b7:
55:90:74:47:36:ac:4d:45:87:6d:c3:b4:e8:86:63:9e:5e:46:
7b:c4:c7:77:d3:59:9d:21:22:c1:fc:0b:4c:17:34:c5:7e:9f:
30:9e:94:85:2c:c3:ef:a8:18:5a:be:5c:44:f7:c4:36:58:fb:
c6:cb:ce:e9:21:c9:b7:56:45:33:3f:55:31:3f:18:07:08:87:
23:1c:2d:79:e5:6a:43:1c:92:cc:2b:96:cd:0b:32:72:58:cd:
6d:69:04:a3:c6:36:23:d4:51:06:be:c7:85:62:2c:a5:a9:29:
d7:51:ea:23:4d:53:5d:91:5d:77:83:3f:f2:23:61:db:a9:7c:
d3:f2:6c:03:8e:03:9a:bb:8a:40:75:26:c7:25:db:58:03:89:
32:5a:33:68:6b:f0:96:3c:46:46:16:7f:5b:f8:e3:23:1d:2a:
bb:d8:7f:82:b6:dd:0c:c7:bd:a4:29:9c:ba:f9:e5:fd:49:5e:
a7:5d:08:4f:9d:72:31:97:b1:2d:20:5a:4f:18:92:0f:97:55:
f4:85:2e:99:10:fe:1d:b2:bd:f7:94:96:2a:55:75:93:9f:64:
e6:9d:cf:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX9HDw2cKSYI6zWrG0J5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTIwMTE5Mzk2ZWViNTZlMjRjZDBhOWIyZWUyNWZhMmRh
NGI1ZTYwHhcNMjUwODIzMTAwMTAwWhcNMjUwODI0MTAwMTAwWjAzMTEwLwYDVQQD
EygwNzFhMjRkNzVjMjk1ZDQzYzM1YzlmM2VhZjQ1MzI3ZWFmMGQzOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0b2Rwx20hp4D3C2klCsj2XreBpZ
tmi37ZDqTG+ugtCd6jHP5GMPOdpidUBjgkQ1CTvbgpixzhSv7+I7kIVpWd0WWni7
9v/PeFDNWxXhK9tctmgU8TVXEECHqCf4z7mmpAPLZRutWBZQ45H8usEe0gUP2mMV
ta6aYgyxfOr68vQvoO9H/T9OEqUrTxXE4NJYzRbswKLIu3gh6vuGXZG3f78aTTUU
UoFzyCtV+OdwSK/liHk63o8aYnIEaMu/TDo33bT6jwSc3m8ZHySKcrzjr8HcgCC/
LXqSiCFQh0PfLhMPBeylqxzkdSGZ2vK9fXUzZru4PV+27ZbaZYa060HrrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcaJNdcKV1Dw1yfPq9FMn6vDTnPMB8GA1UdIwQY
MBaAFBuiARk5butW4kzQqbLuJfotpLXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAt
NTVhYzIwMjY2NTNiLzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNzcxNjAtNGE4NS00NzhkLWE1NDAtNTVhYzIwMjY2NTNi
LzEvRzZJQkdUbHU2MWJpVE5DcHN1NGwtaTJrdGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVzcv9HX
H+reFCi07V2CrzXypbJB/vUHTzymKwifwrrfE2C3VZB0RzasTUWHbcO06IZjnl5G
e8THd9NZnSEiwfwLTBc0xX6fMJ6UhSzD76gYWr5cRPfENlj7xsvO6SHJt1ZFMz9V
MT8YBwiHIxwteeVqQxySzCuWzQsycljNbWkEo8Y2I9RRBr7HhWIspakp11HqI01T
XZFdd4M/8iNh26l80/JsA44DmruKQHUmxyXbWAOJMlozaGvwljxGRhZ/W/jjIx0q
u9h/grbdDMe9pCmcuvnl/Ulep10IT51yMZexLSBaTxiSD5dV9IUumRD+HbK995SW
KlV1k59k5p3PQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:27 2025 by rpki-client