Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
File: G3esnt9lAaus5fStroTZyv4HkI0.mft (raw, json)
Hash identifier: mostIkzSK256txac+00P5cFtB80OHQ0t4sfIDCgySEo=
Subject key identifier: 3D:46:C1:4F:C6:B4:FA:40:9B:AA:D8:03:26:7A:64:C5:F3:19:F8:39
Authority key identifier: 1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
Certificate issuer: /CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Certificate serial: 01984777BDB124AD5516901FDF4C5EA84513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 16:01:26 +0000
Manifest this update: Sat 26 Jul 2025 16:01:26 +0000
Manifest next update: Sun 27 Jul 2025 16:01:26 +0000
Files and hashes: 1: G3esnt9lAaus5fStroTZyv4HkI0.crl (hash: iOgsAfKcOnOKQthCas/YAsfr2l8TUgNSVwwnDzv6yHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:bd:b1:24:ad:55:16:90:1f:df:4c:5e:a8:45:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Validity
Not Before: Jul 26 16:01:26 2025 GMT
Not After : Jul 27 16:01:26 2025 GMT
Subject: CN=3d46c14fc6b4fa409baad803267a64c5f319f839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:6b:69:c4:84:77:d0:b4:f8:7c:eb:b3:24:
70:14:4d:2b:85:97:d6:62:d6:70:e1:eb:66:59:52:
7a:90:58:74:33:a6:f2:1f:88:dd:a5:f3:a0:27:5e:
20:27:a4:9f:29:d8:db:f3:26:58:8c:02:d8:04:8a:
f5:20:3a:a8:18:b5:62:15:19:40:d1:6a:e6:99:80:
68:d5:58:8c:4b:3f:ea:39:57:c8:2f:52:e6:15:52:
55:6b:81:7c:3c:a8:90:97:46:a0:95:9f:95:1f:17:
38:43:f5:eb:25:e9:c2:19:b6:2a:c0:5f:b6:fa:4c:
9b:40:e4:68:09:25:d7:b1:7b:d8:dc:b0:29:c6:4e:
5a:94:f8:09:e9:07:ec:22:71:c7:45:82:fb:7b:b0:
00:c4:50:ab:06:7e:3c:a4:c5:42:f1:cd:ac:9c:a0:
4e:76:15:28:a7:fa:29:58:64:27:81:3f:3c:ae:d0:
4b:e7:d0:b3:16:4c:95:15:82:20:50:f9:55:66:12:
78:64:1e:d4:88:d2:e1:50:2d:d3:e4:d3:4c:a7:d6:
ce:3f:bb:13:3a:79:a7:63:c9:af:32:9f:98:dd:2d:
34:ee:67:25:6d:eb:9d:3f:94:c4:54:e1:2b:1d:a2:
ea:f7:95:9f:f7:5d:99:5c:95:ea:3e:93:0a:50:fc:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:46:C1:4F:C6:B4:FA:40:9B:AA:D8:03:26:7A:64:C5:F3:19:F8:39
X509v3 Authority Key Identifier:
keyid:1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9d:7c:e9:42:0e:bf:14:12:5c:6c:67:44:68:52:87:0b:4d:
b4:f8:88:d7:b9:4b:6e:36:6d:7e:ed:df:1e:d9:7f:a7:59:4d:
5c:dd:e7:25:51:0c:5e:00:dc:40:17:3b:d7:93:6a:c1:43:02:
98:33:4c:38:ad:45:94:08:fc:97:7a:07:c2:4e:2a:46:14:a6:
f6:c2:2e:fd:6a:01:ec:a6:94:df:e5:35:a1:d5:7f:3e:5d:48:
d7:73:27:79:9a:fb:51:4a:fd:4c:c7:d4:55:24:68:6a:a5:f8:
0b:dc:0e:be:6f:ee:b2:29:c3:e9:d2:26:2c:c0:9e:70:be:a9:
d9:36:28:1a:c7:78:a5:67:76:03:92:e7:64:cb:5b:f8:74:35:
ed:0c:28:e5:8f:c7:13:e4:79:33:fb:f9:e7:98:04:70:47:47:
dd:7a:78:3b:40:da:b1:b8:43:41:08:c0:55:5a:87:b5:a0:b0:
ad:33:bd:91:37:95:df:76:54:b4:7a:2f:e2:9a:72:d9:91:74:
9e:4c:14:53:a9:47:6d:26:ca:30:25:c5:ea:4a:21:e5:35:f2:
8c:89:40:6d:97:4c:62:47:e3:86:58:61:11:f9:f5:16:75:e4:
a4:b6:55:c7:9a:a9:59:fa:f3:5d:fe:11:02:7d:fd:c8:f6:9b:
f7:fd:03:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd72xJK1VFpAf30xeqEUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNzdhYzllZGY2NTAxYWJhY2U1ZjRhZGFlODRkOWNhZmUw
NzkwOGQwHhcNMjUwNzI2MTYwMTI2WhcNMjUwNzI3MTYwMTI2WjAzMTEwLwYDVQQD
EygzZDQ2YzE0ZmM2YjRmYTQwOWJhYWQ4MDMyNjdhNjRjNWYzMTlmODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE9racSEd9C0+HzrsyRwFE0rhZfW
YtZw4etmWVJ6kFh0M6byH4jdpfOgJ14gJ6SfKdjb8yZYjALYBIr1IDqoGLViFRlA
0WrmmYBo1ViMSz/qOVfIL1LmFVJVa4F8PKiQl0aglZ+VHxc4Q/XrJenCGbYqwF+2
+kybQORoCSXXsXvY3LApxk5alPgJ6QfsInHHRYL7e7AAxFCrBn48pMVC8c2snKBO
dhUop/opWGQngT88rtBL59CzFkyVFYIgUPlVZhJ4ZB7UiNLhUC3T5NNMp9bOP7sT
OnmnY8mvMp+Y3S007mclbeudP5TEVOErHaLq95Wf912ZXJXqPpMKUPx04QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1GwU/GtPpAm6rYAyZ6ZMXzGfg5MB8GA1UdIwQY
MBaAFBt3rJ7fZQGrrOX0ra6E2cr+B5CNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83MWJlNzYtNTY0Zi00Mjk0LTljMjQt
ZDE1OGQ1YzVjYmNjLzEvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83MWJlNzYtNTY0Zi00Mjk0LTljMjQtZDE1OGQ1YzVjYmNj
LzEvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYp186UIO
vxQSXGxnRGhShwtNtPiI17lLbjZtfu3fHtl/p1lNXN3nJVEMXgDcQBc715NqwUMC
mDNMOK1FlAj8l3oHwk4qRhSm9sIu/WoB7KaU3+U1odV/Pl1I13MneZr7UUr9TMfU
VSRoaqX4C9wOvm/usinD6dImLMCecL6p2TYoGsd4pWd2A5LnZMtb+HQ17Qwo5Y/H
E+R5M/v555gEcEdH3Xp4O0DasbhDQQjAVVqHtaCwrTO9kTeV33ZUtHov4ppy2ZF0
nkwUU6lHbSbKMCXF6koh5TXyjIlAbZdMYkfjhlhhEfn1FnXkpLZVx5qpWfrzXf4R
An39yPab9/0DIw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:37:43 2025 by rpki-client