Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier: kZf0m1JeJ8i29+hQrap2jd4pl4uBdCTCXsRSE5IEhz4=
Subject key identifier: F9:47:4C:6B:BC:5A:60:F2:82:75:B1:A1:6A:25:70:A0:F3:E4:AC:9F
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial: 0198496508139CD144426FD277E3B5BF7990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:00:14 +0000
Manifest this update: Sun 27 Jul 2025 01:00:14 +0000
Manifest next update: Mon 28 Jul 2025 01:00:14 +0000
Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: pqL2LFT9C+TYaFK2rf0dUJQvdLq+7zmbgUQeI+iWTow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:08:13:9c:d1:44:42:6f:d2:77:e3:b5:bf:79:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Validity
Not Before: Jul 27 01:00:14 2025 GMT
Not After : Jul 28 01:00:14 2025 GMT
Subject: CN=f9474c6bbc5a60f28275b1a16a2570a0f3e4ac9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:c6:63:3f:bc:0d:e0:a2:21:b1:0a:30:4f:
32:10:00:4f:7a:27:18:77:81:c0:6b:e0:eb:25:43:
e5:bb:63:41:a0:0e:5d:0f:a8:b6:0e:41:98:3a:fa:
4e:2c:e3:80:8d:03:b6:0e:f1:1b:41:d2:9d:57:ac:
6d:36:2c:fc:05:e2:ca:cb:12:88:e6:23:14:7b:aa:
da:57:98:94:ca:da:92:02:0e:ac:df:4f:0a:c9:a8:
85:e8:3b:59:d6:ba:3f:30:f3:25:e4:82:f1:cb:19:
73:09:4b:30:cc:3f:13:89:e0:f0:19:38:03:c2:0f:
e9:d0:21:ce:7a:8a:2a:40:b8:0b:b1:86:d6:9b:cf:
64:35:a2:20:97:a3:90:c8:e3:49:c1:28:ab:bd:c9:
6f:79:b3:03:cd:a0:3e:a8:7e:31:e0:2e:7d:f8:03:
44:91:3c:f3:25:32:b3:95:91:87:52:12:09:61:ed:
8d:d6:28:4d:b0:bd:a0:87:df:8a:c4:82:07:f7:ad:
25:21:8a:54:a1:b0:50:a2:b3:25:3f:b7:fa:bc:af:
7a:9e:f2:6f:3e:73:4b:89:7b:4c:42:4a:43:d5:92:
b7:62:5a:3b:63:83:8a:2c:dd:e4:19:f0:e7:3f:1a:
fc:d3:57:33:ac:bd:e4:f1:ba:5f:5b:4b:19:29:05:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:47:4C:6B:BC:5A:60:F2:82:75:B1:A1:6A:25:70:A0:F3:E4:AC:9F
X509v3 Authority Key Identifier:
keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d7:dd:a9:a1:aa:b8:cd:55:7d:a8:8d:84:33:e6:d1:27:f1:
73:89:55:93:1b:df:7e:5e:66:7b:62:d7:64:fa:0c:41:40:fe:
82:8c:45:4d:a9:bf:68:f9:a7:f9:b4:6c:88:7c:5c:20:61:66:
99:4d:e8:bd:5c:37:49:75:9b:dd:ad:e3:50:7b:d1:5d:98:8b:
0f:dc:f8:8b:36:f2:8a:fd:8e:d4:f4:73:f7:3d:b7:a6:d6:e0:
fc:ed:0e:76:7d:da:89:5f:d8:f5:69:59:02:5d:4c:67:99:66:
9d:2d:c0:25:f3:82:4e:6c:de:f2:1b:c6:af:c8:5a:3a:d5:dd:
f0:08:00:86:fa:ed:5e:70:19:d5:46:ed:76:f7:04:8c:19:7c:
73:46:ce:9c:91:65:9e:15:6b:9a:1f:b2:d6:80:e7:77:87:2d:
5e:be:6e:84:95:7a:84:ba:50:aa:3c:a8:a2:e0:33:d5:e7:46:
84:04:c2:f0:15:f9:4c:45:8f:81:8b:ad:b7:a7:a8:eb:49:fe:
fd:a4:e4:f2:43:22:aa:83:1e:f3:a7:fd:6f:8c:90:f0:ab:a7:
34:f9:6b:b0:79:aa:f3:04:ca:aa:99:dc:bc:dd:32:2b:47:6f:
e5:42:2f:67:d2:22:83:69:bf:9a:27:e5:b7:2f:41:d2:e6:73:
3c:ce:a8:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZQgTnNFEQm/Sd+O1v3mQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0Y2Q1YThkYjJhNDgyYjQ5MzE2Yjc1NzNiOGE0Zjg3NGY2
ZWJiMTUwHhcNMjUwNzI3MDEwMDE0WhcNMjUwNzI4MDEwMDE0WjAzMTEwLwYDVQQD
EyhmOTQ3NGM2YmJjNWE2MGYyODI3NWIxYTE2YTI1NzBhMGYzZTRhYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE7GYz+8DeCiIbEKME8yEABPeicY
d4HAa+DrJUPlu2NBoA5dD6i2DkGYOvpOLOOAjQO2DvEbQdKdV6xtNiz8BeLKyxKI
5iMUe6raV5iUytqSAg6s308KyaiF6DtZ1ro/MPMl5ILxyxlzCUswzD8TieDwGTgD
wg/p0CHOeooqQLgLsYbWm89kNaIgl6OQyONJwSirvclvebMDzaA+qH4x4C59+ANE
kTzzJTKzlZGHUhIJYe2N1ihNsL2gh9+KxIIH960lIYpUobBQorMlP7f6vK96nvJv
PnNLiXtMQkpD1ZK3Ylo7Y4OKLN3kGfDnPxr801czrL3k8bpfW0sZKQXRyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlHTGu8WmDygnWxoWolcKDz5KyfMB8GA1UdIwQY
MBaAFHTNWo2ypIK0kxa3VzuKT4dPbrsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2Yzkt
ZjZmMmM1ODUwYjUxLzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2YzktZjZmMmM1ODUwYjUx
LzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtfdqaGq
uM1VfaiNhDPm0Sfxc4lVkxvffl5me2LXZPoMQUD+goxFTam/aPmn+bRsiHxcIGFm
mU3ovVw3SXWb3a3jUHvRXZiLD9z4izbyiv2O1PRz9z23ptbg/O0Odn3aiV/Y9WlZ
Al1MZ5lmnS3AJfOCTmze8hvGr8haOtXd8AgAhvrtXnAZ1UbtdvcEjBl8c0bOnJFl
nhVrmh+y1oDnd4ctXr5uhJV6hLpQqjyoouAz1edGhATC8BX5TEWPgYutt6eo60n+
/aTk8kMiqoMe86f9b4yQ8KunNPlrsHmq8wTKqpncvN0yK0dv5UIvZ9Iig2m/mifl
ty9B0uZzPM6obA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:41 2025 by rpki-client