Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
File: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft (raw, json)
Hash identifier: wRH416gg7PjsKgNv5SNmWAVaL3rRBAooZu848SfGhHo=
Subject key identifier: EC:B6:9D:3E:BE:AC:19:59:AC:D9:92:01:EA:D7:58:60:7A:55:1F:23
Authority key identifier: BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
Certificate issuer: /CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Certificate serial: 01984776D1EDD36275CA706592642F25A57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
Manifest number: 0C9F
Signing time: Sat 26 Jul 2025 16:00:25 +0000
Manifest this update: Sat 26 Jul 2025 16:00:25 +0000
Manifest next update: Sun 27 Jul 2025 16:00:25 +0000
Files and hashes: 1: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl (hash: KtQ6ym3frI1033jYBykBDSaQ06prjoaKoePy4laxDTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:d1:ed:d3:62:75:ca:70:65:92:64:2f:25:a5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Validity
Not Before: Jul 26 16:00:25 2025 GMT
Not After : Jul 27 16:00:25 2025 GMT
Subject: CN=ecb69d3ebeac1959acd99201ead758607a551f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:55:3d:e7:61:03:d7:37:39:dc:2a:04:08:
3f:30:e7:d1:23:77:fe:e2:78:65:be:35:93:72:52:
87:a0:9b:33:72:00:c9:e9:27:f3:a3:19:2f:2c:10:
58:bd:ad:e4:e6:b8:69:33:99:c1:8f:be:6f:6c:59:
7e:40:4b:ac:24:02:03:01:01:53:92:39:aa:a0:ec:
76:f6:62:29:a9:87:41:1b:61:cc:f3:75:52:95:2b:
27:3b:f2:a4:a9:b5:68:e4:33:47:f8:58:54:01:3f:
85:8f:2f:d6:ff:3a:77:ec:ea:44:be:5b:5b:70:3d:
1e:5a:d9:8a:1d:c6:38:4d:c1:44:09:14:a2:99:94:
19:b8:a4:30:b6:a9:a6:8c:29:76:9f:5f:09:6a:e0:
65:4a:f6:52:49:48:5d:8c:51:07:bd:c3:ac:b2:7c:
57:d4:90:72:58:f0:37:89:d5:92:19:c2:ef:41:c7:
02:52:5f:c4:d8:c7:06:f4:f2:c8:ee:ec:79:23:5c:
7f:f8:c6:2e:8d:b5:c3:47:55:5c:18:84:0c:ca:4f:
60:4b:71:c6:db:0d:42:fb:73:60:b4:d9:72:ab:b1:
10:04:52:29:e7:ed:a0:80:4f:25:b8:7b:f1:25:a2:
2a:07:a5:73:8e:58:17:b2:16:76:f1:70:b9:12:ae:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:9D:3E:BE:AC:19:59:AC:D9:92:01:EA:D7:58:60:7A:55:1F:23
X509v3 Authority Key Identifier:
keyid:BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9d:ff:5c:a5:81:a2:34:c4:59:ac:50:96:6a:37:35:ff:39:
8f:a2:30:ef:3b:e0:32:a0:3b:f8:d5:aa:63:c1:aa:23:c0:81:
5b:65:b9:b2:34:95:94:28:5c:42:8e:89:0a:8c:5d:7e:99:7b:
20:20:11:e4:7b:90:63:d1:2e:d6:14:75:00:fe:bc:8d:83:6f:
95:72:14:49:5b:75:a8:3d:40:70:06:30:f1:c8:3c:7a:e0:e4:
d4:56:b1:b3:c1:ab:c0:c2:a7:66:6e:2c:57:2a:01:0b:0f:a4:
6c:e5:ed:87:ed:f0:75:d8:f6:73:28:cb:8f:a4:da:fb:04:bc:
96:92:48:e2:e0:dd:ed:cf:e1:dc:15:20:4e:34:ef:26:56:52:
60:57:65:ab:d4:4a:cc:05:4d:48:ce:c3:19:c0:4c:67:c9:f2:
78:a1:46:12:70:c6:15:39:99:aa:bf:1f:a5:95:c9:85:06:5b:
93:81:99:78:f6:b8:bc:81:5f:f3:ad:23:b2:38:cc:23:ec:e7:
eb:4b:76:58:ab:72:4b:47:2e:fd:bc:c8:28:73:2d:f6:1a:d4:
2d:3f:85:1e:3a:1d:54:d4:22:8e:b7:dd:b6:48:f5:bf:df:e3:
5f:4b:c9:8f:24:9f:ce:67:4e:99:d2:a4:1e:8c:09:71:46:1e:
63:47:ed:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdtHt02J1ynBlkmQvJaV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDI0MDlhMWY4YzFjZWU1OTc0ZGI4YTQyZTFlYjY3MmVl
ODM0MzYwHhcNMjUwNzI2MTYwMDI1WhcNMjUwNzI3MTYwMDI1WjAzMTEwLwYDVQQD
EyhlY2I2OWQzZWJlYWMxOTU5YWNkOTkyMDFlYWQ3NTg2MDdhNTUxZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy41VPedhA9c3OdwqBAg/MOfRI3f+
4nhlvjWTclKHoJszcgDJ6SfzoxkvLBBYva3k5rhpM5nBj75vbFl+QEusJAIDAQFT
kjmqoOx29mIpqYdBG2HM83VSlSsnO/KkqbVo5DNH+FhUAT+Fjy/W/zp37OpEvltb
cD0eWtmKHcY4TcFECRSimZQZuKQwtqmmjCl2n18JauBlSvZSSUhdjFEHvcOssnxX
1JByWPA3idWSGcLvQccCUl/E2McG9PLI7ux5I1x/+MYujbXDR1VcGIQMyk9gS3HG
2w1C+3NgtNlyq7EQBFIp5+2ggE8luHvxJaIqB6VzjlgXshZ28XC5Eq6OsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy2nT6+rBlZrNmSAerXWGB6VR8jMB8GA1UdIwQY
MBaAFL9CQJofjBzuWXTbikLh62cu6DQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBKQW1oLU1ITzVaZE51S1F1SHJaeTdvTkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81NzJiNGEtZDIzMC00NjAzLThhNDIt
YTUxZjQ2YmI3NDY0LzEvdjBKQW1oLU1ITzVaZE51S1F1SHJaeTdvTkRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81NzJiNGEtZDIzMC00NjAzLThhNDItYTUxZjQ2YmI3NDY0
LzEvdjBKQW1oLU1ITzVaZE51S1F1SHJaeTdvTkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJ3/XKWB
ojTEWaxQlmo3Nf85j6Iw7zvgMqA7+NWqY8GqI8CBW2W5sjSVlChcQo6JCoxdfpl7
ICAR5HuQY9Eu1hR1AP68jYNvlXIUSVt1qD1AcAYw8cg8euDk1Faxs8GrwMKnZm4s
VyoBCw+kbOXth+3wddj2cyjLj6Ta+wS8lpJI4uDd7c/h3BUgTjTvJlZSYFdlq9RK
zAVNSM7DGcBMZ8nyeKFGEnDGFTmZqr8fpZXJhQZbk4GZePa4vIFf860jsjjMI+zn
60t2WKtyS0cu/bzIKHMt9hrULT+FHjodVNQijrfdtkj1v9/jX0vJjySfzmdOmdKk
HowJcUYeY0ftlA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:25:25 2025 by rpki-client