Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
File: rRIanMsoPqIejQoHCi4LakDph30.mft (raw, json)
Hash identifier: yCy6dH986OyfxeHgs3Ck615Fr6T42brH1hiLy3YA2Jc=
Subject key identifier: CA:43:63:9C:F6:B5:D6:6E:CD:91:55:AD:89:6B:7D:DC:9D:3A:9B:81
Authority key identifier: AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D
Certificate issuer: /CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d
Certificate serial: 0198530E0647DFF46B88923596FFE212910C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
Manifest number: 1602
Signing time: Mon 28 Jul 2025 22:01:24 +0000
Manifest this update: Mon 28 Jul 2025 22:01:24 +0000
Manifest next update: Tue 29 Jul 2025 22:01:24 +0000
Files and hashes: 1: rRIanMsoPqIejQoHCi4LakDph30.crl (hash: eJGITa2u4H/drNn2hIZ8TL/t8EZxwdtJGjMPsOVug2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:06:47:df:f4:6b:88:92:35:96:ff:e2:12:91:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d
Validity
Not Before: Jul 28 22:01:24 2025 GMT
Not After : Jul 29 22:01:24 2025 GMT
Subject: CN=ca43639cf6b5d66ecd9155ad896b7ddc9d3a9b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:c7:c8:ac:5f:9a:76:7d:14:eb:5c:75:fb:
c2:09:d4:6b:d0:95:e4:e7:b0:31:ec:a0:56:18:71:
ad:04:31:45:af:37:eb:a6:20:63:95:d5:0d:62:e2:
f0:9a:89:35:4f:e8:f5:f2:2e:82:9e:ec:28:2d:30:
72:44:4f:11:ef:4b:9f:12:b4:f4:01:16:4c:5b:84:
43:13:92:16:c6:d8:f4:4f:f1:e6:a4:df:71:44:45:
30:2b:2b:58:d6:a2:a6:01:f2:0e:af:4e:e5:89:0c:
f5:34:78:50:fb:2c:b2:45:cb:28:56:d5:2b:f5:d8:
2e:5e:09:e0:0a:b7:c7:ed:8e:f0:8a:cf:c4:57:4e:
7d:02:e3:3e:d0:d6:ef:0a:3f:4d:cd:47:37:4d:1b:
08:cb:22:29:e0:7f:ec:06:c2:86:8f:c1:d1:9b:cb:
e5:68:c3:26:51:4b:bf:23:ef:7f:e8:6f:18:ea:28:
57:fe:b7:0c:d5:6e:02:13:74:b0:b3:fd:31:c0:71:
97:a0:0c:7e:90:66:45:13:99:ba:66:36:45:a2:51:
0e:8e:c8:cd:b9:62:13:79:1c:01:02:9e:20:cd:2e:
0d:c6:cc:50:5b:82:44:c7:82:d8:b7:a2:3b:b4:cd:
2e:18:8b:9e:1e:a6:3b:7e:b5:bc:12:aa:b2:b2:6e:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:43:63:9C:F6:B5:D6:6E:CD:91:55:AD:89:6B:7D:DC:9D:3A:9B:81
X509v3 Authority Key Identifier:
keyid:AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7b:9c:cb:d3:29:9d:07:cb:0f:d7:03:b3:7d:85:93:02:8d:
f1:ba:81:3b:52:97:87:4d:92:36:ac:74:bc:f7:c7:3b:98:4d:
51:b1:b5:5f:1f:1b:a4:e9:c3:10:77:31:69:30:0c:a7:70:fc:
fd:3e:8f:f8:fe:b1:be:f2:cd:53:1d:15:c0:26:e7:3b:9d:0c:
b1:c1:3f:e2:d5:81:67:3f:9e:3c:d9:f3:12:62:f5:3f:64:8a:
67:c4:e6:e2:6e:df:a4:0b:c6:91:5a:fe:11:11:33:c4:f8:ed:
09:44:b1:11:46:1a:0a:44:e5:82:01:63:82:34:5c:6d:30:d4:
ea:42:b0:10:0d:bb:b0:2f:92:2a:00:b2:20:5a:74:cc:eb:2a:
49:94:cc:71:94:a0:61:30:7e:dd:8e:13:77:9e:e4:02:98:f2:
ae:13:a1:66:01:f4:ab:a1:7d:27:db:97:16:69:70:8b:4c:1a:
c3:74:ac:db:2a:23:e6:e6:52:ab:05:d2:2f:b2:f6:2e:d0:c2:
93:5f:d4:70:70:18:34:fd:ee:69:01:21:b1:81:e4:8f:10:89:
6c:4e:58:9f:6d:9f:15:2b:19:0f:97:33:56:9a:e9:8c:dc:36:
d9:8a:98:d3:e1:0c:d1:8d:e2:c2:de:32:74:fb:a7:37:66:51:
75:5d:e8:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDgZH3/RriJI1lv/iEpEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTIxYTljY2IyODNlYTIxZThkMGEwNzBhMmUwYjZhNDBl
OTg3N2QwHhcNMjUwNzI4MjIwMTI0WhcNMjUwNzI5MjIwMTI0WjAzMTEwLwYDVQQD
EyhjYTQzNjM5Y2Y2YjVkNjZlY2Q5MTU1YWQ4OTZiN2RkYzlkM2E5YjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KLHyKxfmnZ9FOtcdfvCCdRr0JXk
57Ax7KBWGHGtBDFFrzfrpiBjldUNYuLwmok1T+j18i6CnuwoLTByRE8R70ufErT0
ARZMW4RDE5IWxtj0T/HmpN9xREUwKytY1qKmAfIOr07liQz1NHhQ+yyyRcsoVtUr
9dguXgngCrfH7Y7wis/EV059AuM+0NbvCj9NzUc3TRsIyyIp4H/sBsKGj8HRm8vl
aMMmUUu/I+9/6G8Y6ihX/rcM1W4CE3Sws/0xwHGXoAx+kGZFE5m6ZjZFolEOjsjN
uWITeRwBAp4gzS4NxsxQW4JEx4LYt6I7tM0uGIueHqY7frW8Eqqysm6iWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpDY5z2tdZuzZFVrYlrfdydOpuBMB8GA1UdIwQY
MBaAFK0SGpzLKD6iHo0KBwouC2pA6Yd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJJYW5Nc29QcUllalFvSENpNExha0RwaDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yN2Y3ZmEtYjAxOS00ODQyLWE2YTYt
NTlkZjczZDNiYjkxLzEvclJJYW5Nc29QcUllalFvSENpNExha0RwaDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8yN2Y3ZmEtYjAxOS00ODQyLWE2YTYtNTlkZjczZDNiYjkx
LzEvclJJYW5Nc29QcUllalFvSENpNExha0RwaDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXucy9Mp
nQfLD9cDs32FkwKN8bqBO1KXh02SNqx0vPfHO5hNUbG1Xx8bpOnDEHcxaTAMp3D8
/T6P+P6xvvLNUx0VwCbnO50MscE/4tWBZz+ePNnzEmL1P2SKZ8Tm4m7fpAvGkVr+
EREzxPjtCUSxEUYaCkTlggFjgjRcbTDU6kKwEA27sC+SKgCyIFp0zOsqSZTMcZSg
YTB+3Y4Td57kApjyrhOhZgH0q6F9J9uXFmlwi0waw3Ss2yoj5uZSqwXSL7L2LtDC
k1/UcHAYNP3uaQEhsYHkjxCJbE5Yn22fFSsZD5czVprpjNw22YqY0+EM0Y3iwt4y
dPunN2ZRdV3o1w==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:15:09 2025 by rpki-client