Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
File: gSdW6ySj41K9bonR9aoISIlhpnQ.mft (raw, json)
Hash identifier: 1+aUuBf9BzMk/8BSqC9H/LrmKKZQDrqaP5l0sctbvI4=
Subject key identifier: CC:9B:A9:17:92:53:1C:09:59:4E:86:A5:0B:7E:90:6E:66:C4:63:B3
Authority key identifier: 81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74
Certificate issuer: /CN=812756eb24a3e352bd6e89d1f5aa08488961a674
Certificate serial: 0198D6614C07F2B5153B664B4E1AF50A648C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
Manifest number: 0961
Signing time: Sat 23 Aug 2025 10:02:37 +0000
Manifest this update: Sat 23 Aug 2025 10:02:37 +0000
Manifest next update: Sun 24 Aug 2025 10:02:37 +0000
Files and hashes: 1: gSdW6ySj41K9bonR9aoISIlhpnQ.crl (hash: YXOSTVUPul3tXfZhQE6RYfHC6Av8LV+CY3SLRJgoqcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:4c:07:f2:b5:15:3b:66:4b:4e:1a:f5:0a:64:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=812756eb24a3e352bd6e89d1f5aa08488961a674
Validity
Not Before: Aug 23 10:02:37 2025 GMT
Not After : Aug 24 10:02:37 2025 GMT
Subject: CN=cc9ba91792531c09594e86a50b7e906e66c463b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:ac:ba:67:d3:5a:ac:23:9f:1e:0e:82:de:
14:34:d3:8d:44:53:0e:ed:d8:8c:33:8e:11:52:8c:
a0:ee:38:01:47:bc:4e:4b:44:2c:a5:49:2d:86:49:
60:d2:61:f4:76:76:f5:4c:94:f4:04:e7:e4:14:95:
b9:e4:ec:ea:c0:19:ad:46:a6:58:60:a1:2b:0e:fc:
b9:4f:19:20:a1:4b:70:85:ac:2d:79:39:68:cd:a1:
7f:d9:89:ee:62:b5:24:31:d5:9f:ac:69:62:1d:0f:
3d:c1:00:5f:63:94:0b:d6:fe:4c:43:d4:bb:bb:f5:
71:65:33:5f:b6:14:42:05:31:3f:1e:d4:ed:50:a6:
54:a7:80:58:8c:44:d6:a6:ba:c1:ea:7f:4b:b1:bd:
2f:dc:2e:4b:c0:97:0f:95:b9:0b:38:1b:bb:81:32:
42:36:b2:b8:59:96:66:72:e5:f6:2f:f2:85:c5:27:
97:81:a3:bd:fe:eb:ed:08:a2:c0:ca:bb:bb:09:75:
df:fd:1e:5b:95:f0:e3:97:89:c7:6d:14:49:4a:02:
93:f7:6f:c1:97:b9:7c:55:46:64:64:c2:f2:f7:1f:
15:bb:65:ce:a8:34:70:b9:bb:42:57:a6:3c:e3:d7:
db:52:cb:3c:2f:68:cc:75:2c:f8:fc:9f:c6:8c:71:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9B:A9:17:92:53:1C:09:59:4E:86:A5:0B:7E:90:6E:66:C4:63:B3
X509v3 Authority Key Identifier:
keyid:81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:88:a0:4b:8e:0f:a4:67:18:53:da:98:9c:85:b9:d1:36:6b:
a7:fa:59:9a:36:b7:c4:dd:bc:8e:b3:0f:77:7d:53:08:20:56:
78:2d:77:88:73:c3:66:ec:66:0b:69:ad:a9:a6:70:e0:e6:4e:
b3:86:5b:3b:1c:b6:ab:0b:f2:38:e2:52:b1:12:02:39:37:75:
62:56:e8:8f:99:5e:7b:7c:dc:d2:23:0c:27:ee:de:fc:e4:17:
cb:fa:23:50:cc:05:4f:b3:72:9a:df:73:1e:8c:5e:a3:f2:f8:
1a:36:8d:5b:a8:85:df:16:cc:9e:15:2d:85:18:d3:fc:a6:a1:
da:f8:53:8a:64:3d:9e:11:4e:e5:ea:99:7f:96:66:20:10:47:
fe:91:9d:76:17:85:d7:52:e8:a3:04:5e:09:b4:40:8f:f2:da:
8a:bc:38:5d:52:b6:ba:91:a3:ec:f3:d1:e7:b9:9b:78:01:79:
f4:08:6f:e2:1d:ba:57:6a:f2:27:53:4a:db:77:f7:94:2a:59:
ce:e3:ad:ff:35:01:99:b6:b3:be:af:c6:84:ca:d7:33:3c:fb:
6c:1c:4d:3a:ea:f4:6b:57:c0:59:99:c2:70:ad:39:32:75:e2:
ee:43:27:e2:59:cb:1e:7c:4b:b3:58:b9:67:84:9b:d8:65:91:
24:e9:0a:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYUwH8rUVO2ZLThr1CmSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMjc1NmViMjRhM2UzNTJiZDZlODlkMWY1YWEwODQ4ODk2
MWE2NzQwHhcNMjUwODIzMTAwMjM3WhcNMjUwODI0MTAwMjM3WjAzMTEwLwYDVQQD
EyhjYzliYTkxNzkyNTMxYzA5NTk0ZTg2YTUwYjdlOTA2ZTY2YzQ2M2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/esumfTWqwjnx4Ogt4UNNONRFMO
7diMM44RUoyg7jgBR7xOS0QspUkthklg0mH0dnb1TJT0BOfkFJW55OzqwBmtRqZY
YKErDvy5TxkgoUtwhawteTlozaF/2YnuYrUkMdWfrGliHQ89wQBfY5QL1v5MQ9S7
u/VxZTNfthRCBTE/HtTtUKZUp4BYjETWprrB6n9Lsb0v3C5LwJcPlbkLOBu7gTJC
NrK4WZZmcuX2L/KFxSeXgaO9/uvtCKLAyru7CXXf/R5blfDjl4nHbRRJSgKT92/B
l7l8VUZkZMLy9x8Vu2XOqDRwubtCV6Y849fbUss8L2jMdSz4/J/GjHHQ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMybqReSUxwJWU6GpQt+kG5mxGOzMB8GA1UdIwQY
MBaAFIEnVusko+NSvW6J0fWqCEiJYaZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1NkVzZ5U2o0MUs5Ym9uUjlhb0lTSWxocG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iYTY2MzQtZTkxNS00MDM2LWE5OTct
NmQ1MjFiYzQ3NGY0LzEvZ1NkVzZ5U2o0MUs5Ym9uUjlhb0lTSWxocG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iYTY2MzQtZTkxNS00MDM2LWE5OTctNmQ1MjFiYzQ3NGY0
LzEvZ1NkVzZ5U2o0MUs5Ym9uUjlhb0lTSWxocG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIigS44P
pGcYU9qYnIW50TZrp/pZmja3xN28jrMPd31TCCBWeC13iHPDZuxmC2mtqaZw4OZO
s4ZbOxy2qwvyOOJSsRICOTd1Ylboj5lee3zc0iMMJ+7e/OQXy/ojUMwFT7Nymt9z
Hoxeo/L4GjaNW6iF3xbMnhUthRjT/Kah2vhTimQ9nhFO5eqZf5ZmIBBH/pGddheF
11LoowReCbRAj/Lairw4XVK2upGj7PPR57mbeAF59Ahv4h26V2ryJ1NK23f3lCpZ
zuOt/zUBmbazvq/GhMrXMzz7bBxNOur0a1fAWZnCcK05MnXi7kMn4lnLHnxLs1i5
Z4Sb2GWRJOkKQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:39 2025 by rpki-client