Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
File: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft (raw, json)
Hash identifier: HTKzMCmeScQ8etKrVp+TQOP/YkKQXo4BEiG9xzxfynU=
Subject key identifier: E9:B7:95:02:6F:8B:F5:CD:B8:77:4B:84:40:01:D7:34:E4:B8:82:86
Authority key identifier: D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
Certificate issuer: /CN=d60ce3443860a7f70d43350776909a4810a48621
Certificate serial: 01984965832FF5F623AD99C6A7997B21D89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
Manifest number: 0B46
Signing time: Sun 27 Jul 2025 01:00:46 +0000
Manifest this update: Sun 27 Jul 2025 01:00:46 +0000
Manifest next update: Mon 28 Jul 2025 01:00:46 +0000
Files and hashes: 1: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl (hash: DVFplAotSf8jBv//oBmpEXxlrun2PnuXDN7KYKNDq1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:83:2f:f5:f6:23:ad:99:c6:a7:99:7b:21:d8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60ce3443860a7f70d43350776909a4810a48621
Validity
Not Before: Jul 27 01:00:46 2025 GMT
Not After : Jul 28 01:00:46 2025 GMT
Subject: CN=e9b795026f8bf5cdb8774b844001d734e4b88286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:c0:7c:0a:0e:35:a1:f7:22:d1:82:d4:13:
2a:93:47:fc:b0:8a:5d:30:31:5e:19:38:ad:8a:8f:
c7:56:01:8b:62:35:3c:21:b9:59:16:dc:51:3b:2e:
67:80:c4:fe:90:bb:21:d9:4c:83:1f:6b:2a:f7:25:
35:36:3a:9e:c7:df:be:b1:ff:58:7a:35:cb:57:ad:
c9:ca:0d:2b:3f:02:f6:f9:a6:e6:83:15:3b:53:82:
16:fc:0b:93:04:df:2d:ea:11:80:cc:d6:94:82:ca:
76:ac:c2:92:67:0f:e3:c0:a6:80:89:3f:2b:9e:cb:
7c:aa:01:0e:a3:68:8a:bf:cf:ff:48:17:ac:9f:d3:
0c:46:aa:cc:1e:fc:a5:3b:1d:c3:ef:19:f0:b7:e6:
48:f7:7b:8e:8c:01:13:b0:3a:9a:c0:3b:08:33:14:
5b:ab:d1:f2:f5:b8:a8:37:18:03:5a:00:10:e0:67:
8a:cb:91:23:13:6c:75:e5:67:23:3e:6c:0c:88:ec:
89:d6:d5:03:4a:c9:5e:3e:3c:e4:fc:b4:c6:b9:4b:
f0:b2:ff:0e:f9:fc:38:46:ea:d2:f4:06:61:20:3d:
d1:45:9a:eb:91:3c:44:0a:21:bf:9d:df:b6:22:ff:
c7:8c:74:c8:fd:9b:30:81:d4:e6:3b:c5:53:86:fc:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B7:95:02:6F:8B:F5:CD:B8:77:4B:84:40:01:D7:34:E4:B8:82:86
X509v3 Authority Key Identifier:
keyid:D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f8:9d:0c:f9:9a:34:d1:79:ad:84:a6:dd:42:a5:8b:48:28:
13:d4:bd:ba:ed:37:f9:11:9a:5e:0a:79:8a:22:05:9c:3f:34:
bf:0e:b6:6e:06:52:44:3d:bf:f5:cf:ee:09:99:68:9f:63:7e:
9c:8c:64:2c:d3:ba:90:39:2f:31:f0:dd:bf:18:4f:72:43:41:
6c:10:9e:2b:66:88:cf:dd:26:a1:cc:41:46:ff:04:f3:ee:95:
61:2d:4c:ef:d9:68:bb:0c:ea:55:ba:49:b0:4c:d5:d4:a7:c0:
2a:80:cd:36:9a:c9:69:1b:b1:3a:68:46:b4:0f:cc:c5:a7:34:
fc:1d:49:51:3a:00:42:07:13:6a:a8:43:48:d8:4c:76:c2:46:
64:4b:ea:d6:b7:4f:52:8b:b1:9c:31:73:b6:09:cf:7c:ee:31:
8f:25:40:be:20:4b:16:bb:99:b4:f4:ff:e0:23:0d:3c:12:ac:
24:53:42:0c:5b:41:24:ff:ce:11:d3:45:d4:59:84:92:94:d7:
ad:f4:d9:7d:90:f6:ad:73:65:7a:d7:8c:70:01:8a:d8:46:b4:
20:6e:32:a9:77:ad:38:3f:70:8d:9d:54:ca:4a:b2:5c:41:91:
71:39:51:6b:6c:3c:e5:7f:1c:b3:ef:9c:bf:75:e3:94:db:73:
a5:1b:39:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZYMv9fYjrZnGp5l7IdibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MGNlMzQ0Mzg2MGE3ZjcwZDQzMzUwNzc2OTA5YTQ4MTBh
NDg2MjEwHhcNMjUwNzI3MDEwMDQ2WhcNMjUwNzI4MDEwMDQ2WjAzMTEwLwYDVQQD
EyhlOWI3OTUwMjZmOGJmNWNkYjg3NzRiODQ0MDAxZDczNGU0Yjg4Mjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRTAfAoONaH3ItGC1BMqk0f8sIpd
MDFeGTitio/HVgGLYjU8IblZFtxROy5ngMT+kLsh2UyDH2sq9yU1Njqex9++sf9Y
ejXLV63Jyg0rPwL2+abmgxU7U4IW/AuTBN8t6hGAzNaUgsp2rMKSZw/jwKaAiT8r
nst8qgEOo2iKv8//SBesn9MMRqrMHvylOx3D7xnwt+ZI93uOjAETsDqawDsIMxRb
q9Hy9bioNxgDWgAQ4GeKy5EjE2x15WcjPmwMiOyJ1tUDSslePjzk/LTGuUvwsv8O
+fw4RurS9AZhID3RRZrrkTxECiG/nd+2Iv/HjHTI/ZswgdTmO8VThvzKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOm3lQJvi/XNuHdLhEAB1zTkuIKGMB8GA1UdIwQY
MBaAFNYM40Q4YKf3DUM1B3aQmkgQpIYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWd6alJEaGdwX2NOUXpVSGRwQ2FTQkNraGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wODY0YzMtODYwYi00MWMwLTk0MTct
ZGFmZmU1MmI5ZjBkLzEvMWd6alJEaGdwX2NOUXpVSGRwQ2FTQkNraGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wODY0YzMtODYwYi00MWMwLTk0MTctZGFmZmU1MmI5ZjBk
LzEvMWd6alJEaGdwX2NOUXpVSGRwQ2FTQkNraGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfidDPma
NNF5rYSm3UKli0goE9S9uu03+RGaXgp5iiIFnD80vw62bgZSRD2/9c/uCZlon2N+
nIxkLNO6kDkvMfDdvxhPckNBbBCeK2aIz90mocxBRv8E8+6VYS1M79louwzqVbpJ
sEzV1KfAKoDNNprJaRuxOmhGtA/Mxac0/B1JUToAQgcTaqhDSNhMdsJGZEvq1rdP
UouxnDFztgnPfO4xjyVAviBLFruZtPT/4CMNPBKsJFNCDFtBJP/OEdNF1FmEkpTX
rfTZfZD2rXNleteMcAGK2Ea0IG4yqXetOD9wjZ1UykqyXEGRcTlRa2w85X8cs++c
v3XjlNtzpRs5Bw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:58 2025 by rpki-client