Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
File: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft (raw, json)
Hash identifier: CqDx83AXCtGSNv0VbvQqn9BNM3Yhc/LmvS/EIRDfECs=
Subject key identifier: B0:22:A6:F8:A6:CF:1D:FF:CA:C8:9F:CD:6D:49:F1:9A:A2:4B:47:44
Authority key identifier: D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
Certificate issuer: /CN=d60ce3443860a7f70d43350776909a4810a48621
Certificate serial: 0198D473700B2EAF6C232E1F1F50A9405452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
Manifest number: 0B8E
Signing time: Sat 23 Aug 2025 01:03:11 +0000
Manifest this update: Sat 23 Aug 2025 01:03:11 +0000
Manifest next update: Sun 24 Aug 2025 01:03:11 +0000
Files and hashes: 1: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl (hash: w/ZZoiY1JyvG44qiECc1HruG6CwcJJlzQ03BKLZ0vEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:70:0b:2e:af:6c:23:2e:1f:1f:50:a9:40:54:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60ce3443860a7f70d43350776909a4810a48621
Validity
Not Before: Aug 23 01:03:11 2025 GMT
Not After : Aug 24 01:03:11 2025 GMT
Subject: CN=b022a6f8a6cf1dffcac89fcd6d49f19aa24b4744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:f1:57:13:ae:af:69:f9:c8:70:79:cb:e8:
ac:d4:b0:95:f2:86:34:d8:b2:11:62:e5:04:9d:45:
75:06:e9:89:ac:91:aa:f1:9c:23:ef:a6:75:de:fa:
6e:ee:9e:9c:24:d4:59:2c:81:04:4a:13:c7:9a:d5:
a1:7f:94:cc:ed:b5:5c:97:7d:21:fe:45:0f:8a:4a:
54:df:c7:59:f5:cc:a9:79:d6:12:7f:af:55:50:41:
d5:5a:1e:75:c4:9c:bd:45:28:ea:e3:73:90:90:0b:
9d:e0:79:b5:85:12:81:90:61:3e:47:9b:16:55:99:
c8:f2:2f:60:af:e1:49:3f:fb:1e:20:03:5f:a3:df:
c8:5d:69:c4:c6:b5:11:22:fd:83:14:ce:ed:45:75:
7a:c0:32:0d:c2:db:bf:d5:64:67:14:12:b0:52:96:
d5:b8:43:3d:c1:14:11:8b:7d:c4:c7:9b:3d:06:3b:
34:f7:00:73:d9:85:31:7b:4d:94:75:bd:91:15:32:
f0:6a:12:52:c0:b9:55:13:9d:b3:9e:6f:b2:9d:fb:
f2:c1:46:65:0b:6c:0e:ed:ad:de:3d:5a:3f:35:1c:
4f:41:21:85:24:85:83:62:82:e1:c3:bb:c7:ab:6a:
6b:ae:04:1a:16:03:31:f4:3a:61:36:33:18:37:79:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:A6:F8:A6:CF:1D:FF:CA:C8:9F:CD:6D:49:F1:9A:A2:4B:47:44
X509v3 Authority Key Identifier:
keyid:D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:23:c1:a3:0b:8d:de:6f:ee:7b:1d:56:75:ed:f3:cb:3a:97:
7b:26:43:c0:e4:d1:07:19:90:b2:60:ec:25:bd:91:db:b9:fc:
5c:c7:c6:66:39:ad:6a:7e:2c:0d:10:00:97:33:2d:4d:69:cd:
03:c7:04:b1:31:e2:f9:b4:97:df:fc:00:d7:fc:4a:32:28:e1:
a6:43:55:74:0e:9d:57:62:21:27:b0:a8:97:d4:6d:35:05:00:
96:3e:0d:d7:00:38:05:2b:ad:3c:c0:5c:86:99:4d:2c:93:51:
28:b3:ca:fb:83:d7:57:cf:06:62:5c:b7:6b:64:f0:eb:46:d0:
31:f9:50:d8:21:7a:45:44:1a:b7:0c:cc:53:8b:b9:aa:15:c7:
8b:ab:2f:9e:16:2e:3d:97:df:34:b7:09:51:07:7a:17:2f:56:
12:a5:19:73:7b:bd:5e:da:49:74:ff:a9:6d:9c:f2:a0:35:cf:
07:74:19:1a:3d:80:29:e0:25:6b:75:ad:22:fb:10:9c:92:03:
08:32:78:b3:72:5b:37:50:3a:3e:58:72:ec:fb:b9:8c:69:41:
90:fe:4b:c4:1f:77:83:ad:92:7b:42:f1:b8:76:74:c6:24:9d:
ad:9f:d8:d9:12:9b:43:80:78:ed:11:39:0d:42:ed:53:a7:13:
08:2c:6a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc3ALLq9sIy4fH1CpQFRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MGNlMzQ0Mzg2MGE3ZjcwZDQzMzUwNzc2OTA5YTQ4MTBh
NDg2MjEwHhcNMjUwODIzMDEwMzExWhcNMjUwODI0MDEwMzExWjAzMTEwLwYDVQQD
EyhiMDIyYTZmOGE2Y2YxZGZmY2FjODlmY2Q2ZDQ5ZjE5YWEyNGI0NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBPxVxOur2n5yHB5y+is1LCV8oY0
2LIRYuUEnUV1BumJrJGq8Zwj76Z13vpu7p6cJNRZLIEEShPHmtWhf5TM7bVcl30h
/kUPikpU38dZ9cypedYSf69VUEHVWh51xJy9RSjq43OQkAud4Hm1hRKBkGE+R5sW
VZnI8i9gr+FJP/seIANfo9/IXWnExrURIv2DFM7tRXV6wDINwtu/1WRnFBKwUpbV
uEM9wRQRi33Ex5s9Bjs09wBz2YUxe02Udb2RFTLwahJSwLlVE52znm+ynfvywUZl
C2wO7a3ePVo/NRxPQSGFJIWDYoLhw7vHq2prrgQaFgMx9DphNjMYN3kBVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAipvimzx3/ysifzW1J8ZqiS0dEMB8GA1UdIwQY
MBaAFNYM40Q4YKf3DUM1B3aQmkgQpIYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWd6alJEaGdwX2NOUXpVSGRwQ2FTQkNraGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wODY0YzMtODYwYi00MWMwLTk0MTct
ZGFmZmU1MmI5ZjBkLzEvMWd6alJEaGdwX2NOUXpVSGRwQ2FTQkNraGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wODY0YzMtODYwYi00MWMwLTk0MTctZGFmZmU1MmI5ZjBk
LzEvMWd6alJEaGdwX2NOUXpVSGRwQ2FTQkNraGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiPBowuN
3m/uex1Wde3zyzqXeyZDwOTRBxmQsmDsJb2R27n8XMfGZjmtan4sDRAAlzMtTWnN
A8cEsTHi+bSX3/wA1/xKMijhpkNVdA6dV2IhJ7Col9RtNQUAlj4N1wA4BSutPMBc
hplNLJNRKLPK+4PXV88GYly3a2Tw60bQMflQ2CF6RUQatwzMU4u5qhXHi6svnhYu
PZffNLcJUQd6Fy9WEqUZc3u9XtpJdP+pbZzyoDXPB3QZGj2AKeAla3WtIvsQnJID
CDJ4s3JbN1A6Plhy7Pu5jGlBkP5LxB93g62Se0LxuHZ0xiSdrZ/Y2RKbQ4B47RE5
DULtU6cTCCxqTw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:39 2025 by rpki-client