Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
File: 1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft (raw, json)
Hash identifier: z2kmoc/4P7hBfPTazVbt3VU9Epz5mEcJWPPEkLpbHHc=
Subject key identifier: B8:51:F7:17:0E:FD:D4:E6:6D:D3:D3:8B:30:3B:BF:32:DA:6A:B9:81
Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
Certificate issuer: /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Certificate serial: 019840CFDB5302249C918667A3B97D1CBA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
Manifest number: 0ECF
Signing time: Fri 25 Jul 2025 09:00:20 +0000
Manifest this update: Fri 25 Jul 2025 09:00:20 +0000
Manifest next update: Sat 26 Jul 2025 09:00:20 +0000
Files and hashes: 1: 1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl (hash: DjmDM5J725RlQDZSVwBsJj2vPJ8ltzBo9UNZ4fZYySs=)
2: OyzZxs_hVYKW1cYJmnARu5WD5PU.roa (hash: Mxe+uv54doiDC6rq1qVmsEa8Vr9FlHaFSsIh3iiGLqc=)
3: YpJ4HYND8zUWDrh84VOwJrCjN64.roa (hash: YH9M+YVc2VsTqAzLHq7oW1kqlXcbhCJ/cLoedv2bt3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:db:53:02:24:9c:91:86:67:a3:b9:7d:1c:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Validity
Not Before: Jul 25 09:00:20 2025 GMT
Not After : Jul 26 09:00:20 2025 GMT
Subject: CN=b851f7170efdd4e66dd3d38b303bbf32da6ab981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:33:aa:a1:71:49:ed:d2:b6:1a:7d:c4:eb:
27:c8:33:f3:4f:cc:3f:95:56:d1:8c:15:c2:6a:fc:
14:e9:73:22:9d:42:63:1b:7c:9c:44:0c:19:78:0a:
80:cb:e0:91:de:52:d2:52:11:34:56:d1:98:0c:ce:
74:5b:32:de:81:3e:19:84:92:83:c3:23:05:0e:20:
7b:0d:f5:77:0c:bc:af:66:44:df:08:c1:f0:35:79:
5b:e3:d2:53:8a:88:9f:83:ba:fc:a6:7c:80:f8:e8:
8b:0f:91:12:7b:ff:34:2c:82:3a:6f:da:1f:1a:e2:
81:aa:38:2a:66:3c:1b:96:05:57:30:64:de:dc:48:
4a:a3:48:19:34:00:c4:cd:6c:32:e9:db:14:67:32:
fb:c0:cb:78:d7:64:c2:02:6b:3c:25:e7:41:2e:aa:
60:1c:6b:93:09:86:50:7f:89:ca:2d:65:42:33:f8:
73:64:c7:49:62:f3:5e:08:61:90:d6:69:03:30:f3:
c2:99:45:09:43:fa:15:dc:ea:70:c6:11:a2:be:5a:
d7:d1:82:5a:40:3f:7a:82:cf:6f:17:51:2d:c2:4c:
1d:b7:46:57:d3:b7:d5:06:e3:eb:6b:28:da:cb:d9:
0b:4f:ed:a3:d8:b8:e1:20:3c:36:ae:0c:9a:69:d5:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:F7:17:0E:FD:D4:E6:6D:D3:D3:8B:30:3B:BF:32:DA:6A:B9:81
X509v3 Authority Key Identifier:
keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:10:55:ed:21:ff:35:e9:fc:39:ac:46:b7:64:4a:9b:9e:0c:
0f:58:72:22:05:9a:b3:3c:2f:9b:22:8c:22:eb:6a:e8:73:90:
c4:8a:01:f8:2c:b1:21:41:87:e9:30:07:fd:d4:c4:2c:3f:64:
3d:4d:58:b2:eb:ef:dd:bd:c2:7e:10:7a:d3:a0:c6:8d:81:f5:
28:6c:9b:07:2a:36:48:a5:c4:cb:45:81:e5:b8:7f:12:0a:8e:
43:07:43:df:1b:ff:2e:0f:b4:a5:3f:58:ec:f6:2b:57:70:f6:
d6:24:b4:31:e1:cb:46:bc:09:33:60:3f:7e:0d:35:3b:86:94:
30:72:57:68:c2:34:19:4b:68:9e:e2:70:07:92:16:6e:43:71:
f1:28:01:ee:0a:0e:cf:40:c3:06:54:cf:ed:03:c9:11:d1:88:
d6:7b:38:3d:7c:dc:83:72:ca:80:43:05:db:6c:f7:b4:55:d9:
cc:e6:03:a6:af:df:a1:0e:a6:e7:91:6e:a8:8a:60:21:e9:c7:
7c:7c:b9:d6:fa:d2:3d:0e:ba:64:ec:2a:a6:c4:98:d6:c2:2f:
44:ec:f5:da:23:a1:bc:ea:27:62:27:78:ed:7f:34:56:54:62:
3b:26:aa:a6:f8:db:12:03:b2:f1:1b:cc:ff:d4:3a:bd:5f:f1:
20:98:25:d1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhAz9tTAiSckYZno7l9HLqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MjZmZmU5NmNkYzQxZWZhYThiZmIzMTI1ODYyZDY1OTRi
ZTk4MjcwHhcNMjUwNzI1MDkwMDIwWhcNMjUwNzI2MDkwMDIwWjAzMTEwLwYDVQQD
EyhiODUxZjcxNzBlZmRkNGU2NmRkM2QzOGIzMDNiYmYzMmRhNmFiOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTIzqqFxSe3Sthp9xOsnyDPzT8w/
lVbRjBXCavwU6XMinUJjG3ycRAwZeAqAy+CR3lLSUhE0VtGYDM50WzLegT4ZhJKD
wyMFDiB7DfV3DLyvZkTfCMHwNXlb49JTioifg7r8pnyA+OiLD5ESe/80LII6b9of
GuKBqjgqZjwblgVXMGTe3EhKo0gZNADEzWwy6dsUZzL7wMt412TCAms8JedBLqpg
HGuTCYZQf4nKLWVCM/hzZMdJYvNeCGGQ1mkDMPPCmUUJQ/oV3OpwxhGivlrX0YJa
QD96gs9vF1Etwkwdt0ZX07fVBuPrayjay9kLT+2j2LjhIDw2rgyaadWk/wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLhR9xcO/dTmbdPTizA7vzLaarmBMB8GA1UdIwQY
MBaAFPgm/+ls3EHvqov7MSWGLWWUvpgnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1DYl82V3pjUWUtcWlfc3hKWVl0WlpTLW1DYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNmY2ODI2LTFhYWQtNGMzYy1iZDkx
LWNjYTM3ZTJmMjcyOS8xLzEtQ2JfNld6Y1FlLXFpX3N4SllZdFpaUy1tQ2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IyLzZmNjgyNi0xYWFkLTRjM2MtYmQ5MS1jY2EzN2UyZjI3
MjkvMS8xLUNiXzZXemNRZS1xaV9zeEpZWXRaWlMtbUNjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRBV
7SH/Nen8OaxGt2RKm54MD1hyIgWaszwvmyKMIutq6HOQxIoB+CyxIUGH6TAH/dTE
LD9kPU1Ysuvv3b3CfhB606DGjYH1KGybByo2SKXEy0WB5bh/EgqOQwdD3xv/Lg+0
pT9Y7PYrV3D21iS0MeHLRrwJM2A/fg01O4aUMHJXaMI0GUtonuJwB5IWbkNx8SgB
7goOz0DDBlTP7QPJEdGI1ns4PXzcg3LKgEMF22z3tFXZzOYDpq/foQ6m55FuqIpg
IenHfHy51vrSPQ66ZOwqpsSY1sIvROz12iOhvOonYid47X80VlRiOyaqpvjbEgOy
8RvM/9Q6vV/xIJgl0Q==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:29 2025 by rpki-client