Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: 7kHsEu5yk/nZB/UKfjr5jIhrbqOdDS9Bo6IllJGgP8w=
Subject key identifier: 8C:21:6A:F9:0F:47:33:B0:44:DE:02:EC:D0:A2:1D:DF:CD:2C:95:1C
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 0198D660965C9E615233B6E88C34610FBEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:50 +0000
Manifest this update: Sat 23 Aug 2025 10:01:50 +0000
Manifest next update: Sun 24 Aug 2025 10:01:50 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: dUecTOhiYXN7GgACUqiAr9OLLM1TrnRnkxOwMtUD0dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:96:5c:9e:61:52:33:b6:e8:8c:34:61:0f:be:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Aug 23 10:01:50 2025 GMT
Not After : Aug 24 10:01:50 2025 GMT
Subject: CN=8c216af90f4733b044de02ecd0a21ddfcd2c951c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:89:ab:88:6c:af:68:e3:32:36:a2:47:f9:
29:67:80:12:6e:b0:4c:07:e5:2b:ff:78:53:a8:d5:
6b:0d:50:f0:75:a0:a2:6b:82:ba:36:d1:64:fc:77:
94:9f:67:c2:53:0d:7a:6b:12:24:31:21:51:77:71:
ff:88:f7:d8:98:90:44:9f:58:a9:2a:7d:ad:71:2f:
b7:11:f0:23:de:a3:0c:d0:85:18:77:3e:03:c6:91:
87:b7:52:a8:c1:e0:5d:eb:44:08:bd:65:19:75:77:
b3:6e:ea:b3:72:73:ae:bf:b5:03:d0:9b:82:fe:6d:
b2:3b:52:91:4c:a8:ec:14:fc:fa:ce:2c:f5:2b:54:
2e:25:e4:00:92:46:2d:e2:83:ad:db:00:80:25:8d:
5c:c8:8d:a4:64:7f:82:7e:3f:4f:fc:a5:66:80:00:
16:5c:cc:f9:50:4c:bc:aa:f3:b8:b5:a0:4f:c6:21:
f8:15:86:0e:94:b9:5a:8d:5b:ef:89:4a:cb:1f:6f:
13:08:15:31:89:8b:97:c0:ba:69:5c:e7:09:ac:20:
60:b0:89:82:a3:3c:63:d0:a4:56:ef:7a:68:69:42:
5c:dc:a8:1e:46:97:bc:97:8f:5e:05:53:8f:a8:57:
8c:41:8c:42:d3:ef:33:d9:b9:23:a1:5b:ef:db:09:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:6A:F9:0F:47:33:B0:44:DE:02:EC:D0:A2:1D:DF:CD:2C:95:1C
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b8:89:30:6c:9a:a3:14:68:8a:5d:23:12:d4:2f:b3:b5:e0:
f8:a6:6b:c5:ad:94:6b:c9:dd:0f:33:51:23:ad:49:01:e8:c5:
d7:b8:e1:e4:60:55:da:0c:b0:72:e9:3f:4a:f8:f0:43:3a:0a:
59:54:24:4f:9f:15:c1:15:f8:4c:93:e2:52:7a:d1:5c:af:27:
c1:8e:a9:72:ed:35:e8:a5:fd:9d:f2:bc:84:66:ed:e2:17:fe:
e4:5f:7c:1f:e6:78:9d:bd:7e:d1:95:53:95:58:61:33:a8:b4:
a5:0c:f0:d1:ad:58:fa:fa:2d:74:23:9c:a8:3a:9d:85:45:d3:
b5:26:79:b1:f6:8b:23:68:28:05:4b:9c:7c:1c:b0:2e:2a:9a:
eb:22:a8:c0:f6:e9:b7:1c:a5:be:0e:7a:40:54:6b:9c:bd:36:
31:16:a9:71:f6:ae:7e:b8:f2:1b:ab:8c:67:18:52:53:aa:81:
46:b5:d2:cd:db:86:82:ef:57:c5:64:9f:74:b4:c5:75:d4:73:
50:f8:c4:35:df:e6:90:2b:a6:bd:a0:78:11:99:02:da:2f:f6:
f1:96:e7:2b:1a:7a:0b:92:ff:5c:77:ba:50:39:59:dc:b7:cb:
61:38:72:ec:fe:e0:b7:20:30:d5:1c:65:3c:79:34:4e:5b:a5:
3a:fb:aa:10
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjWYJZcnmFSM7bojDRhD76hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OWM5YTY5MjM0NTI3Yjc4Njk0OGIyZWI0YzY1MDlkYjBh
NGQ1YTgwHhcNMjUwODIzMTAwMTUwWhcNMjUwODI0MTAwMTUwWjAzMTEwLwYDVQQD
Eyg4YzIxNmFmOTBmNDczM2IwNDRkZTAyZWNkMGEyMWRkZmNkMmM5NTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hKJq4hsr2jjMjaiR/kpZ4ASbrBM
B+Ur/3hTqNVrDVDwdaCia4K6NtFk/HeUn2fCUw16axIkMSFRd3H/iPfYmJBEn1ip
Kn2tcS+3EfAj3qMM0IUYdz4DxpGHt1KoweBd60QIvWUZdXezbuqzcnOuv7UD0JuC
/m2yO1KRTKjsFPz6ziz1K1QuJeQAkkYt4oOt2wCAJY1cyI2kZH+Cfj9P/KVmgAAW
XMz5UEy8qvO4taBPxiH4FYYOlLlajVvviUrLH28TCBUxiYuXwLppXOcJrCBgsImC
ozxj0KRW73poaUJc3KgeRpe8l49eBVOPqFeMQYxC0+8z2bkjoVvv2wnMuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIwhavkPRzOwRN4C7NCiHd/NLJUcMB8GA1UdIwQY
MBaAFPicmmkjRSe3hpSLLrTGUJ2wpNWoMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KeWFhU05GSjdlR2xJc3V0TVpRbmJDazFhZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvOTk5MmMyLTBjZGQtNDM2MS05YzAz
LWMyY2NjZTZjNDdhNC8xLzEtSnlhYVNORko3ZUdsSXN1dE1aUW5iQ2sxYWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxLzk5OTJjMi0wY2RkLTQzNjEtOWMwMy1jMmNjY2U2YzQ3
YTQvMS8xLUp5YWFTTkZKN2VHbElzdXRNWlFuYkNrMWFnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLiJ
MGyaoxRoil0jEtQvs7Xg+KZrxa2Ua8ndDzNRI61JAejF17jh5GBV2gywcuk/Svjw
QzoKWVQkT58VwRX4TJPiUnrRXK8nwY6pcu016KX9nfK8hGbt4hf+5F98H+Z4nb1+
0ZVTlVhhM6i0pQzw0a1Y+votdCOcqDqdhUXTtSZ5sfaLI2goBUucfBywLiqa6yKo
wPbptxylvg56QFRrnL02MRapcfaufrjyG6uMZxhSU6qBRrXSzduGgu9XxWSfdLTF
ddRzUPjENd/mkCumvaB4EZkC2i/28ZbnKxp6C5L/XHe6UDlZ3LfLYThy7P7gtyAw
1RxlPHk0TlulOvuqEA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:18 2025 by rpki-client