
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier: mBsFEtFdsz+pK8vWGHkSI1XoQuN41+iUKYFZ3PZ4+oU=
Subject key identifier: 7D:F9:16:2C:09:E0:37:A7:69:70:BC:CC:BA:6D:B1:86:F3:0D:5E:F2
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial: 0198D5BBCE7D5FD6DCF6F859286F64D5020B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: rahUpwwdgF9mxTscwPbcR9K9ZMOEZsuWBOaoRa6lK/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ce:7d:5f:d6:dc:f6:f8:59:28:6f:64:d5:02:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=7df9162c09e037a76970bcccba6db186f30d5ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:28:16:0b:3a:c5:98:9e:df:7f:24:7d:89:
24:2d:68:b5:2d:10:0c:07:1c:c6:6b:11:f6:85:3b:
2d:d6:cd:9c:30:f5:ee:83:91:4f:e8:83:10:35:2c:
87:f8:25:92:96:ce:23:e0:9e:c6:d6:fa:9a:fc:6a:
f5:af:1f:a3:b0:e5:d3:ff:27:f9:c9:12:f7:ec:cb:
93:87:f1:01:00:f8:04:b2:f5:a6:6e:02:a5:79:b4:
8b:05:3a:c8:e9:c1:a9:43:a8:53:da:1c:64:61:3b:
17:68:6a:7f:f8:2e:0c:25:ee:b9:69:8d:67:88:65:
41:56:5c:c4:2b:75:ba:a6:36:ca:52:a6:d6:f9:da:
68:1b:e4:47:c3:71:a8:e2:c7:15:1d:82:5e:c0:92:
39:bb:db:99:8f:38:87:01:b0:a1:21:4b:e2:f6:bc:
47:c6:b7:b1:01:3b:52:02:5c:66:e7:6d:ed:0a:55:
9b:72:4f:cf:f5:25:5a:67:c0:35:11:4a:12:86:f9:
69:49:f8:83:62:c0:17:1d:8e:ac:ff:b7:8a:26:6c:
a2:a6:99:71:e6:9a:1f:f2:bc:b5:f7:32:51:dd:3b:
7a:0f:b7:e1:af:c0:26:db:84:b9:83:f7:54:18:08:
4b:68:03:1e:8e:8d:dd:42:f4:1e:7f:05:e5:4c:70:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F9:16:2C:09:E0:37:A7:69:70:BC:CC:BA:6D:B1:86:F3:0D:5E:F2
X509v3 Authority Key Identifier:
keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bf:c9:59:0c:ab:06:38:7a:62:5d:fa:54:8e:fe:79:e6:dd:
e8:ab:bd:19:57:05:4b:b3:67:1d:61:db:26:3e:c3:aa:a1:96:
61:4e:bd:13:20:42:94:0d:18:18:98:97:1b:83:81:a0:56:55:
c8:2b:d8:a6:cc:f1:1e:c2:a1:fd:93:4a:01:2f:e3:37:72:54:
06:9b:e4:1a:20:ff:d8:f8:1c:9f:b5:4f:80:68:df:5b:53:18:
ec:0e:c6:5e:df:af:ba:d7:09:38:ca:66:6a:9b:1f:5c:a1:86:
a6:db:cd:eb:f7:81:fa:d6:d7:05:1f:e2:45:df:ad:80:ab:e7:
d5:fa:42:7b:c1:b9:ab:44:24:66:d9:10:77:e8:69:bc:91:c1:
bf:47:ad:be:22:c9:64:2c:48:64:80:e8:7c:97:70:9c:2d:9a:
5f:a5:74:b2:45:10:6d:93:3a:bc:66:21:4b:74:9d:05:06:c9:
d1:d3:5b:00:3d:11:42:78:17:22:3f:70:2d:ff:58:a3:4c:05:
e8:49:58:8b:26:e5:43:1e:6a:b2:f2:b9:be:df:fb:9b:37:33:
7a:f4:08:de:2c:46:db:2f:53:f1:ce:74:c2:2c:24:52:1d:f7:
28:c4:63:23:b7:be:97:d8:a2:30:10:31:e4:cf:f1:7d:89:d4:
bb:e1:db:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu859X9bc9vhZKG9k1QILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NTZlZTdlNDg0YWUyZWYwOTIwZDA5NWJjYWUyNjhmYWZk
Njk2MTkwHhcNMjUwODIzMDcwMTUxWhcNMjUwODI0MDcwMTUxWjAzMTEwLwYDVQQD
Eyg3ZGY5MTYyYzA5ZTAzN2E3Njk3MGJjY2NiYTZkYjE4NmYzMGQ1ZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPUoFgs6xZie338kfYkkLWi1LRAM
BxzGaxH2hTst1s2cMPXug5FP6IMQNSyH+CWSls4j4J7G1vqa/Gr1rx+jsOXT/yf5
yRL37MuTh/EBAPgEsvWmbgKlebSLBTrI6cGpQ6hT2hxkYTsXaGp/+C4MJe65aY1n
iGVBVlzEK3W6pjbKUqbW+dpoG+RHw3Go4scVHYJewJI5u9uZjziHAbChIUvi9rxH
xrexATtSAlxm523tClWbck/P9SVaZ8A1EUoShvlpSfiDYsAXHY6s/7eKJmyipplx
5pof8ry19zJR3Tt6D7fhr8Am24S5g/dUGAhLaAMejo3dQvQefwXlTHBjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH35FiwJ4DenaXC8zLptsYbzDV7yMB8GA1UdIwQY
MBaAFNRW7n5ISuLvCSDQlbyuJo+v1pYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82ZTljMjctNGUxNS00ODg1LTg3YWUt
NTRlOWZmZDNiYmUwLzEvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82ZTljMjctNGUxNS00ODg1LTg3YWUtNTRlOWZmZDNiYmUw
LzEvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7/JWQyr
Bjh6Yl36VI7+eebd6Ku9GVcFS7NnHWHbJj7DqqGWYU69EyBClA0YGJiXG4OBoFZV
yCvYpszxHsKh/ZNKAS/jN3JUBpvkGiD/2Pgcn7VPgGjfW1MY7A7GXt+vutcJOMpm
apsfXKGGptvN6/eB+tbXBR/iRd+tgKvn1fpCe8G5q0QkZtkQd+hpvJHBv0etviLJ
ZCxIZIDofJdwnC2aX6V0skUQbZM6vGYhS3SdBQbJ0dNbAD0RQngXIj9wLf9Yo0wF
6ElYiyblQx5qsvK5vt/7mzczevQI3ixG2y9T8c50wiwkUh33KMRjI7e+l9iiMBAx
5M/xfYnUu+Hbug==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:54 2025 by rpki-client