Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier: LvFeYI1LTNJ8LGYfmDD+iTuYgHDb+peeK2Lrwthw5JM=
Subject key identifier: 70:3D:FB:8D:DA:51:B8:C8:58:8A:F0:8D:D2:83:04:80:72:56:4D:C0
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial: 01984A09D268C67FF999E10B5EA8CE4E9DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number: 127D
Signing time: Sun 27 Jul 2025 04:00:14 +0000
Manifest this update: Sun 27 Jul 2025 04:00:14 +0000
Manifest next update: Mon 28 Jul 2025 04:00:14 +0000
Files and hashes: 1: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: 2T31Gcyi4K6n0IrzpF7nEVgJNbZD50BwpdZcM7hzI/E=)
2: t1PClou-z7vfeF555qMb4l57MSc.roa (hash: 9X/H2c1jyHWtYn2BaqYb1fxAsJf2gSZ8sASmz7CE+Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d2:68:c6:7f:f9:99:e1:0b:5e:a8:ce:4e:9d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Validity
Not Before: Jul 27 04:00:14 2025 GMT
Not After : Jul 28 04:00:14 2025 GMT
Subject: CN=703dfb8dda51b8c8588af08dd283048072564dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:06:87:9e:e1:02:e7:4f:4d:e6:8c:e2:dc:
c4:ab:6e:cf:92:fb:3f:8d:3a:f7:d3:13:27:52:83:
90:9a:bf:7a:f3:85:46:8e:bc:ec:12:73:48:1d:06:
64:1a:c9:31:ca:05:dd:d6:0a:a9:13:28:a7:1f:a1:
b8:3d:ea:3b:18:c5:cc:62:75:10:06:4d:86:88:36:
a1:85:39:90:06:95:bf:2c:27:54:20:a9:6c:78:6d:
52:17:22:5c:8a:7f:10:93:e5:68:ad:89:f4:bc:98:
81:14:ab:1a:be:5c:0b:f5:41:30:b4:11:ee:d0:4b:
16:61:9a:df:4d:3b:55:04:79:7b:03:de:f3:84:42:
80:31:94:d4:10:74:f6:31:03:65:3b:1a:4a:12:e3:
a6:27:23:a6:b8:9c:cf:40:13:a5:28:59:0e:c3:e7:
c5:c7:2a:81:81:74:96:65:6d:1a:3e:5a:9f:01:0d:
3e:e9:63:14:78:9f:5d:7a:a8:2f:e2:f6:5b:5f:ee:
88:4f:fa:bc:10:be:ee:b7:8a:85:79:db:08:86:5c:
d4:b7:2d:fe:2b:59:4a:5c:b4:0b:da:6d:fd:0e:c8:
a6:82:60:d4:43:e1:ef:79:00:15:d8:f0:99:81:fc:
d2:60:57:5f:3f:07:85:9d:71:62:8d:9d:0d:bb:29:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3D:FB:8D:DA:51:B8:C8:58:8A:F0:8D:D2:83:04:80:72:56:4D:C0
X509v3 Authority Key Identifier:
keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:41:74:e1:28:0e:a2:6e:86:10:d6:10:6b:a5:31:03:d7:e5:
27:bb:06:2b:1c:ff:d7:39:d6:7a:37:1c:1c:ef:6d:e9:8d:57:
23:1b:06:20:b9:96:40:fc:5a:a0:f2:11:41:96:9d:db:d6:47:
1b:4a:a8:61:7b:67:5e:ea:59:93:5c:ec:a8:f7:8a:f7:60:07:
4c:d4:65:a0:8d:92:06:ea:37:9e:91:65:ea:59:b5:0f:cd:49:
a0:f5:82:1b:13:16:ce:72:bb:fc:8b:f4:41:da:f8:f8:2b:88:
82:78:d1:e9:0a:0f:fe:eb:73:47:c2:93:35:5d:6f:48:c9:a9:
42:9f:f8:03:8a:37:57:22:0e:18:f0:bf:a4:58:6b:ab:f8:16:
e4:84:82:82:2f:f3:00:eb:25:5f:3e:17:e5:81:02:a6:49:c5:
57:58:16:28:1e:ca:7b:bc:65:0d:10:fb:48:b8:b9:d1:b7:bb:
82:02:85:3d:ad:a9:00:b3:b9:f6:bc:35:a1:0e:dc:86:3e:43:
af:94:3b:7a:5b:e9:98:07:ae:5d:bf:8c:d0:31:bd:4f:e4:4a:
ec:4b:7e:2c:bb:55:5e:e2:1f:21:5f:81:10:b8:ef:84:c5:65:
e8:a8:b0:f5:33:25:22:f5:d2:ae:e2:ae:0b:ed:c8:f0:79:69:
ad:f8:ed:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCdJoxn/5meELXqjOTp27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTg0MWIwN2NjZjYzOTk3OTliMzU4NmExYjIyODg1OTIz
ZGY4YmYwHhcNMjUwNzI3MDQwMDE0WhcNMjUwNzI4MDQwMDE0WjAzMTEwLwYDVQQD
Eyg3MDNkZmI4ZGRhNTFiOGM4NTg4YWYwOGRkMjgzMDQ4MDcyNTY0ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TwGh57hAudPTeaM4tzEq27Pkvs/
jTr30xMnUoOQmr9684VGjrzsEnNIHQZkGskxygXd1gqpEyinH6G4Peo7GMXMYnUQ
Bk2GiDahhTmQBpW/LCdUIKlseG1SFyJcin8Qk+VorYn0vJiBFKsavlwL9UEwtBHu
0EsWYZrfTTtVBHl7A97zhEKAMZTUEHT2MQNlOxpKEuOmJyOmuJzPQBOlKFkOw+fF
xyqBgXSWZW0aPlqfAQ0+6WMUeJ9deqgv4vZbX+6IT/q8EL7ut4qFedsIhlzUty3+
K1lKXLQL2m39DsimgmDUQ+HveQAV2PCZgfzSYFdfPweFnXFijZ0Nuymj0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA9+43aUbjIWIrwjdKDBIByVk3AMB8GA1UdIwQY
MBaAFJtYQbB8z2OZeZs1hqGyKIWSPfi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5Yjgt
NTMzOWYzN2ZmYzc3LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5YjgtNTMzOWYzN2ZmYzc3
LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0F04SgO
om6GENYQa6UxA9flJ7sGKxz/1znWejccHO9t6Y1XIxsGILmWQPxaoPIRQZad29ZH
G0qoYXtnXupZk1zsqPeK92AHTNRloI2SBuo3npFl6lm1D81JoPWCGxMWznK7/Iv0
Qdr4+CuIgnjR6QoP/utzR8KTNV1vSMmpQp/4A4o3VyIOGPC/pFhrq/gW5ISCgi/z
AOslXz4X5YECpknFV1gWKB7Ke7xlDRD7SLi50be7ggKFPa2pALO59rw1oQ7chj5D
r5Q7elvpmAeuXb+M0DG9T+RK7Et+LLtVXuIfIV+BELjvhMVl6Kiw9TMlIvXSruKu
C+3I8HlprfjtqA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:41 2025 by rpki-client