Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: XTsX7pax0So7JYgNyvyEhIgPXs2+iLOUBPZngyz5qCY=
Subject key identifier: 84:BB:F9:1B:9B:80:B1:0F:CE:8A:11:DC:80:5D:F6:1A:B9:CD:3F:23
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 0198447606EEA597EE59FA731992322E4EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0811
Signing time: Sat 26 Jul 2025 02:00:42 +0000
Manifest this update: Sat 26 Jul 2025 02:00:42 +0000
Manifest next update: Sun 27 Jul 2025 02:00:42 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: ZHK0f59D08klIkWic949Z76VnOz6mB4iU/aFgQN/mO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:06:ee:a5:97:ee:59:fa:73:19:92:32:2e:4e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Jul 26 02:00:42 2025 GMT
Not After : Jul 27 02:00:42 2025 GMT
Subject: CN=84bbf91b9b80b10fce8a11dc805df61ab9cd3f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:c3:16:ec:87:1b:2d:f4:7e:93:33:2d:5b:
0d:03:99:5f:b3:c6:38:71:02:08:72:f4:ed:09:12:
ec:8d:75:f9:b9:2d:f6:26:85:52:50:38:f1:0a:a8:
f5:75:60:06:54:ca:db:70:0c:a9:ef:98:ed:74:b9:
6b:97:8c:d8:24:e6:81:4d:b3:2b:2a:03:1b:cb:18:
0b:7b:1c:51:b6:42:c8:06:c8:18:b7:f3:c7:be:d6:
a4:58:dc:ae:85:ea:26:81:c3:73:2a:65:ec:42:0f:
bb:78:51:e5:ee:f1:4e:6e:c8:a1:52:ac:98:64:55:
30:9f:85:2a:9c:d5:55:ca:58:12:c8:e6:88:b4:c1:
35:93:ca:76:f5:49:14:81:db:cd:8a:1d:83:71:49:
36:27:2b:e6:8e:d3:48:45:62:97:88:2b:c5:c1:e9:
59:7d:e1:38:bf:62:87:7a:9c:be:5d:6c:05:9d:70:
ed:c5:2e:1b:c8:71:27:ee:9c:d7:7b:65:9e:77:10:
3c:53:e5:5c:28:fa:e2:cb:56:33:e9:7d:59:14:ab:
48:1e:02:e3:99:70:fa:7d:41:95:48:40:27:58:61:
53:32:b9:b5:d7:12:1d:3a:68:32:3b:da:e9:07:59:
23:f2:09:3c:1a:1b:12:f7:1f:c3:3f:3f:61:c9:96:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BB:F9:1B:9B:80:B1:0F:CE:8A:11:DC:80:5D:F6:1A:B9:CD:3F:23
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2d:eb:85:19:d2:0d:93:1b:25:d8:96:31:4c:19:38:82:39:
a8:6b:59:86:8a:17:26:55:de:43:e0:ad:af:e0:00:52:cd:f9:
57:f0:a9:21:cf:b8:42:6d:ed:f3:d5:5e:4c:54:8e:08:54:4c:
23:d2:79:66:ad:e5:6b:af:90:78:60:83:9c:27:af:7e:3d:74:
5d:b1:b6:5f:4d:c9:1b:1c:69:59:ad:e5:e5:38:e4:91:66:16:
1f:ca:48:f8:6e:fc:80:57:98:d0:38:5e:11:90:a1:8b:72:27:
c6:2a:b7:f8:ae:58:43:c7:44:09:b8:c7:43:d9:6e:b9:1e:38:
82:3a:b7:45:7b:14:6b:42:b7:ce:d9:97:d9:d2:d1:0c:07:d6:
53:90:2a:99:01:bd:a0:0c:a1:b2:bf:7c:61:db:c2:f4:73:3f:
01:e6:6a:fe:ee:87:ac:ee:89:2b:56:50:4c:57:cc:d5:15:92:
b0:ee:af:3e:de:33:86:cf:f4:fe:0d:bb:98:14:bf:90:62:bc:
b9:22:4f:d0:bc:78:7a:f7:04:08:75:3f:e8:db:f5:01:1b:6e:
27:df:6a:0b:d6:81:1c:a7:f8:c9:2a:e9:92:de:40:56:a6:d0:
d3:3d:70:3b:98:48:96:d4:d7:b8:76:d0:9b:d4:4a:47:7d:65:
42:a7:e8:d3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhEdgbupZfuWfpzGZIyLk6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OTZjMzQ4OWZlZWJiYzA5NDI1NWQyN2VkY2Q4NjU1MTIx
MDI3YmMwHhcNMjUwNzI2MDIwMDQyWhcNMjUwNzI3MDIwMDQyWjAzMTEwLwYDVQQD
Eyg4NGJiZjkxYjliODBiMTBmY2U4YTExZGM4MDVkZjYxYWI5Y2QzZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04nDFuyHGy30fpMzLVsNA5lfs8Y4
cQIIcvTtCRLsjXX5uS32JoVSUDjxCqj1dWAGVMrbcAyp75jtdLlrl4zYJOaBTbMr
KgMbyxgLexxRtkLIBsgYt/PHvtakWNyuheomgcNzKmXsQg+7eFHl7vFObsihUqyY
ZFUwn4UqnNVVylgSyOaItME1k8p29UkUgdvNih2DcUk2JyvmjtNIRWKXiCvFwelZ
feE4v2KHepy+XWwFnXDtxS4byHEn7pzXe2WedxA8U+VcKPriy1Yz6X1ZFKtIHgLj
mXD6fUGVSEAnWGFTMrm11xIdOmgyO9rpB1kj8gk8GhsS9x/DPz9hyZb96QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIS7+RubgLEPzooR3IBd9hq5zT8jMB8GA1UdIwQY
MBaAFPiWw0if7rvAlCVdJ+3NhlUSECe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KYkRTSl91dThDVUpWMG43YzJHVlJJUUo3dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNDhmZDFlLTBhYWItNDM3MS04OWM0
LWI1MWNjNGYwNWFhYS8xLzEtSmJEU0pfdXU4Q1VKVjBuN2MyR1ZSSVFKN3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QyLzQ4ZmQxZS0wYWFiLTQzNzEtODljNC1iNTFjYzRmMDVh
YWEvMS8xLUpiRFNKX3V1OENVSlYwbjdjMkdWUklRSjd3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgS3r
hRnSDZMbJdiWMUwZOII5qGtZhooXJlXeQ+Ctr+AAUs35V/CpIc+4Qm3t89VeTFSO
CFRMI9J5Zq3la6+QeGCDnCevfj10XbG2X03JGxxpWa3l5TjkkWYWH8pI+G78gFeY
0DheEZChi3Inxiq3+K5YQ8dECbjHQ9luuR44gjq3RXsUa0K3ztmX2dLRDAfWU5Aq
mQG9oAyhsr98YdvC9HM/AeZq/u6HrO6JK1ZQTFfM1RWSsO6vPt4zhs/0/g27mBS/
kGK8uSJP0Lx4evcECHU/6Nv1ARtuJ99qC9aBHKf4ySrpkt5AVqbQ0z1wO5hIltTX
uHbQm9RKR31lQqfo0w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:01:02 2025 by rpki-client