Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: ZfhQmUA0qfjcNSB+JYPgkG217sIpk+OlcHOMHkGBgTU=
Subject key identifier: 4B:BC:AE:4F:AC:DB:14:BA:A7:4D:0B:F7:8E:17:21:0A:09:61:84:F3
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 01984777C971D1DA3B0FFC77FE7AEB7E1792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0C2C
Signing time: Sat 26 Jul 2025 16:01:29 +0000
Manifest this update: Sat 26 Jul 2025 16:01:29 +0000
Manifest next update: Sun 27 Jul 2025 16:01:29 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: 8nfmOKqjI+QcITQOwZ4EOYfaitEZUUQZaKstFMfz06Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:c9:71:d1:da:3b:0f:fc:77:fe:7a:eb:7e:17:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Jul 26 16:01:29 2025 GMT
Not After : Jul 27 16:01:29 2025 GMT
Subject: CN=4bbcae4facdb14baa74d0bf78e17210a096184f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:4f:c2:89:27:b1:1b:86:c8:9b:ce:7a:db:
e8:e8:98:a4:82:ce:ca:44:07:46:59:f6:4a:a0:fd:
e9:1e:19:f8:cc:30:79:65:49:f8:c5:b2:59:87:5a:
c7:88:06:0e:c5:e7:82:1d:a1:5b:14:84:e0:ed:19:
42:04:e9:c0:91:e8:7a:80:13:e0:71:d7:c0:49:66:
0e:88:35:03:d2:ef:70:16:7b:59:0c:76:22:e7:e5:
da:85:8f:8d:30:bc:68:be:c9:56:ab:55:d6:94:f0:
0f:67:b1:0c:59:eb:8a:f0:3d:b7:fa:71:ea:a6:7a:
41:54:68:a3:c8:02:7e:8f:80:ea:ef:9f:14:2e:44:
c7:b2:cd:92:53:c7:68:8f:55:ae:45:15:b5:d7:44:
0b:d9:b8:6c:cb:50:83:70:8a:a7:29:10:25:84:ea:
db:33:70:a5:2e:55:f3:44:a3:bf:30:fa:0c:9a:00:
19:b2:99:74:76:25:12:d1:1d:0f:35:8e:6e:3c:47:
4d:cc:09:2f:39:b7:f0:46:2b:f1:23:0e:3a:56:9d:
10:90:e1:06:00:69:ea:83:1d:b7:b2:14:a3:bf:64:
82:ab:ad:f5:f3:07:8b:5d:c0:a7:31:3c:86:2f:ed:
3b:c3:53:58:23:15:8b:62:85:b4:41:fb:f0:b4:f4:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:AE:4F:AC:DB:14:BA:A7:4D:0B:F7:8E:17:21:0A:09:61:84:F3
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f0:33:c9:3d:c5:07:1c:a0:a2:c1:90:41:dd:91:eb:17:ab:
9f:81:19:8a:f1:b9:e5:60:60:7f:68:0a:05:ac:dd:bb:c4:43:
de:28:eb:9a:ca:31:ef:cc:d6:65:b4:ae:72:4f:2d:36:de:7d:
2d:11:e0:93:23:e7:82:a7:c1:36:a8:41:6d:c6:9b:5e:fd:51:
b0:43:c7:50:31:0a:74:22:98:9a:8d:de:12:8b:c5:c4:79:44:
bc:b5:cc:0b:07:68:b6:e9:90:02:7a:35:35:f6:a2:2c:5d:d9:
e0:8f:59:ee:50:36:45:06:af:19:91:13:65:d6:00:ca:17:c9:
58:23:e2:01:c8:30:8d:4c:e6:28:54:d6:7c:b4:bd:5f:7a:0c:
64:2d:83:22:2a:b7:8c:d8:9c:b1:4a:4b:4f:cb:62:9f:d5:e5:
f0:60:49:59:e2:71:0f:a7:0f:7f:c5:b1:7a:59:20:67:c3:b7:
83:ab:c9:58:17:eb:12:cc:9c:30:f6:85:cc:81:0d:38:ef:94:
64:68:b9:61:76:7e:b5:76:ee:ca:79:b1:6e:1f:96:ef:a5:c9:
76:79:e4:a0:6d:a7:23:9a:fd:ba:16:c0:39:25:3e:ea:dd:d5:
0f:0a:23:cd:09:03:01:1a:fe:ed:d1:61:31:67:ba:de:27:7f:
92:a5:14:21
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhHd8lx0do7D/x3/nrrfheSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOGU2MGU1NjM5OWZmOTM0NjBiMzQyN2NkNTUyNzRiNWE4
M2U3MjYwHhcNMjUwNzI2MTYwMTI5WhcNMjUwNzI3MTYwMTI5WjAzMTEwLwYDVQQD
Eyg0YmJjYWU0ZmFjZGIxNGJhYTc0ZDBiZjc4ZTE3MjEwYTA5NjE4NGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TlPwoknsRuGyJvOetvo6Jikgs7K
RAdGWfZKoP3pHhn4zDB5ZUn4xbJZh1rHiAYOxeeCHaFbFITg7RlCBOnAkeh6gBPg
cdfASWYOiDUD0u9wFntZDHYi5+XahY+NMLxovslWq1XWlPAPZ7EMWeuK8D23+nHq
pnpBVGijyAJ+j4Dq758ULkTHss2SU8doj1WuRRW110QL2bhsy1CDcIqnKRAlhOrb
M3ClLlXzRKO/MPoMmgAZspl0diUS0R0PNY5uPEdNzAkvObfwRivxIw46Vp0QkOEG
AGnqgx23shSjv2SCq6318weLXcCnMTyGL+07w1NYIxWLYoW0QfvwtPRLuQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEu8rk+s2xS6p00L944XIQoJYYTzMB8GA1UdIwQY
MBaAFPuOYOVjmf+TRgs0J81VJ0tag+cmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS00NWc1V09aXzVOR0N6UW56VlVuUzFxRDV5WS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYzY0Y2ViLTg2MTAtNDBlOS04MmFm
LWVlYjZjZGQ2ZmNmZi8xLzEtNDVnNVdPWl81TkdDelFuelZVblMxcUQ1eVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FlL2M2NGNlYi04NjEwLTQwZTktODJhZi1lZWI2Y2RkNmZj
ZmYvMS8xLTQ1ZzVXT1pfNU5HQ3pRbnpWVW5TMXFENXlZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfAz
yT3FBxygosGQQd2R6xern4EZivG55WBgf2gKBazdu8RD3ijrmsox78zWZbSuck8t
Nt59LRHgkyPngqfBNqhBbcabXv1RsEPHUDEKdCKYmo3eEovFxHlEvLXMCwdotumQ
Ano1NfaiLF3Z4I9Z7lA2RQavGZETZdYAyhfJWCPiAcgwjUzmKFTWfLS9X3oMZC2D
Iiq3jNicsUpLT8tin9Xl8GBJWeJxD6cPf8WxelkgZ8O3g6vJWBfrEsycMPaFzIEN
OO+UZGi5YXZ+tXbuynmxbh+W76XJdnnkoG2nI5r9uhbAOSU+6t3VDwojzQkDARr+
7dFhMWe63id/kqUUIQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:48:32 2025 by rpki-client