Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: aD319t1wMTa56DlH6yZ+PpXfCzQeZ7d6QWoMPhYL85A=
Subject key identifier: 89:FA:F0:67:90:F5:99:5E:14:8A:99:AC:68:71:94:B1:62:CE:FB:09
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 0197B6D75E4B35947B51AAEF9D5307A8F855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 02E1
Signing time: Sat 28 Jun 2025 14:00:56 +0000
Manifest this update: Sat 28 Jun 2025 14:00:56 +0000
Manifest next update: Sun 29 Jun 2025 14:00:56 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: B9pQg5122zoOxzecGDdGDvYsd5HC8nzoU4A9DXLxgFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5e:4b:35:94:7b:51:aa:ef:9d:53:07:a8:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Jun 28 14:00:56 2025 GMT
Not After : Jun 29 14:00:56 2025 GMT
Subject: CN=89faf06790f5995e148a99ac687194b162cefb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:07:a5:5f:ce:18:92:0a:72:4c:c9:a0:be:
a6:ae:7d:4e:dc:67:56:f7:2a:ef:ad:ee:30:48:01:
3b:54:2d:75:1e:0e:e8:e9:ca:fd:5b:2a:6a:cf:8f:
52:ca:9b:83:3a:d0:7d:28:a2:22:9f:d3:79:ae:62:
55:85:a0:83:c7:b5:ce:8b:a9:e3:b3:cc:ae:68:56:
62:ba:9a:63:c4:ee:96:7c:ef:02:d6:04:b9:10:3d:
e1:7f:d6:73:cd:c1:b9:7b:79:d3:e8:06:0d:41:70:
b3:1b:3c:be:72:70:9f:9d:e2:74:9f:55:42:d1:e9:
c8:a1:94:09:7b:08:d6:33:03:e9:cd:04:37:fb:21:
da:3c:6f:bd:df:3c:46:20:d8:f5:ad:d3:1d:20:ae:
2c:28:01:c5:63:2f:86:8e:58:5d:8d:10:91:ab:76:
95:46:b2:a1:1a:ed:83:a0:49:6a:b9:01:9f:f8:2d:
78:16:d8:4d:9d:d5:1c:13:ac:ca:a9:80:26:36:c9:
8b:f6:65:38:ae:2f:04:1e:75:1d:92:f5:e5:1c:1f:
dd:39:41:d6:bc:0b:52:3a:6f:0a:da:8f:3e:a7:f3:
48:8e:d4:6f:14:7b:84:d7:1e:a1:e3:be:87:ad:2e:
d1:99:6c:c8:11:45:08:c7:0e:23:cf:a9:95:08:fe:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:F0:67:90:F5:99:5E:14:8A:99:AC:68:71:94:B1:62:CE:FB:09
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6d:47:d3:41:b9:be:5d:17:b7:3f:d9:27:dd:1b:e5:4e:a2:
d6:8b:88:10:56:9f:94:a8:f5:4b:fc:1d:d7:55:8f:1a:82:b4:
13:73:e7:82:bf:14:b9:4e:d5:5c:67:e5:28:f9:7f:8a:b7:7f:
c6:b4:a9:af:53:27:7e:0f:c3:6e:5d:97:d1:a1:55:2a:a0:25:
51:82:d2:fd:d4:fe:f7:2e:80:6d:f7:22:2a:99:e9:89:6f:e8:
20:44:50:02:14:be:3d:55:07:bb:92:8d:6f:f0:3e:9f:b1:e6:
2d:71:b2:47:45:ef:31:c3:1c:06:56:90:5f:1d:53:ee:94:5e:
10:92:86:42:1e:48:c6:d2:11:64:27:34:f8:72:b6:5b:f1:cc:
9c:93:06:0f:cd:d4:19:5a:0e:bb:65:1c:af:ca:60:74:9a:79:
46:6e:56:c3:3c:4b:0b:ad:92:b3:cd:3f:28:a0:90:65:ce:b7:
a0:20:08:0e:15:fc:b0:11:aa:e8:3a:1c:18:3e:36:59:b3:5d:
50:57:18:c6:a6:15:00:75:00:50:29:90:f3:69:6a:84:2b:4b:
6a:88:87:80:4d:d9:ac:2c:fb:04:ea:2c:ae:75:b0:2f:58:3b:
6a:3a:80:cf:6e:89:2d:3a:bc:ab:5e:e1:cb:2b:81:bf:58:49:
cc:ab:9d:fd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe2115LNZR7UarvnVMHqPhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzU4NWExMDVlZTgzYzY0NWUyZWVmMTNkYzA4MWUzNWNh
YTJjMDQwHhcNMjUwNjI4MTQwMDU2WhcNMjUwNjI5MTQwMDU2WjAzMTEwLwYDVQQD
Eyg4OWZhZjA2NzkwZjU5OTVlMTQ4YTk5YWM2ODcxOTRiMTYyY2VmYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo94HpV/OGJIKckzJoL6mrn1O3GdW
9yrvre4wSAE7VC11Hg7o6cr9Wypqz49SypuDOtB9KKIin9N5rmJVhaCDx7XOi6nj
s8yuaFZiuppjxO6WfO8C1gS5ED3hf9ZzzcG5e3nT6AYNQXCzGzy+cnCfneJ0n1VC
0enIoZQJewjWMwPpzQQ3+yHaPG+93zxGINj1rdMdIK4sKAHFYy+GjlhdjRCRq3aV
RrKhGu2DoElquQGf+C14FthNndUcE6zKqYAmNsmL9mU4ri8EHnUdkvXlHB/dOUHW
vAtSOm8K2o8+p/NIjtRvFHuE1x6h476HrS7RmWzIEUUIxw4jz6mVCP5MOwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIn68GeQ9ZleFIqZrGhxlLFizvsJMB8GA1UdIwQY
MBaAFPo1haEF7oPGReLu8T3AgeNcqiwEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qV0ZvUVh1ZzhaRjR1N3hQY0NCNDF5cUxBUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjk3YWExLTZmM2MtNGJkNS05MWQ0
LWM0YTliOTU3NjVhYy8xLzEtaldGb1FYdWc4WkY0dTd4UGNDQjQxeXFMQVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JiL2Y5N2FhMS02ZjNjLTRiZDUtOTFkNC1jNGE5Yjk1NzY1
YWMvMS8xLWpXRm9RWHVnOFpGNHU3eFBjQ0I0MXlxTEFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoG1H
00G5vl0Xtz/ZJ90b5U6i1ouIEFaflKj1S/wd11WPGoK0E3Pngr8UuU7VXGflKPl/
ird/xrSpr1Mnfg/Dbl2X0aFVKqAlUYLS/dT+9y6AbfciKpnpiW/oIERQAhS+PVUH
u5KNb/A+n7HmLXGyR0XvMcMcBlaQXx1T7pReEJKGQh5IxtIRZCc0+HK2W/HMnJMG
D83UGVoOu2Ucr8pgdJp5Rm5WwzxLC62Ss80/KKCQZc63oCAIDhX8sBGq6DocGD42
WbNdUFcYxqYVAHUAUCmQ82lqhCtLaoiHgE3ZrCz7BOosrnWwL1g7ajqAz26JLTq8
q17hyyuBv1hJzKud/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:04 2025 by rpki-client