Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft (raw, json)
Hash identifier: KhTCnkCiXLirGHlrtHK+on0C1ClWODGPhnbgQjNBV5s=
Subject key identifier: 1B:68:0E:DD:79:5A:F5:4E:BE:67:0A:4E:1E:34:C0:19:E0:30:F1:34
Authority key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
Certificate issuer: /CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Certificate serial: 019922C32F0C2B7FF3EDCB5996E34B1B902F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
Manifest number: 05F8
Signing time: Sun 07 Sep 2025 06:00:40 +0000
Manifest this update: Sun 07 Sep 2025 06:00:40 +0000
Manifest next update: Mon 08 Sep 2025 06:00:40 +0000
Files and hashes: 1: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl (hash: X4IsPGdSGewO6RLWjzkqsF5gADBcDiB5bIQD+otLO+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:2f:0c:2b:7f:f3:ed:cb:59:96:e3:4b:1b:90:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Validity
Not Before: Sep 7 06:00:40 2025 GMT
Not After : Sep 8 06:00:40 2025 GMT
Subject: CN=1b680edd795af54ebe670a4e1e34c019e030f134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:26:ef:56:6c:26:44:dd:49:a1:51:e4:c1:
36:b3:45:5b:ea:26:8f:b5:25:fa:8f:d9:8e:1e:89:
c0:92:70:72:9c:cf:a6:32:7f:b3:ba:8c:e1:d6:c0:
76:8e:7b:f8:5d:32:1f:b1:26:a7:41:ce:60:8e:e8:
46:12:33:17:dc:ad:27:c2:57:d6:3e:b0:51:ec:ab:
cd:ad:c2:c0:19:34:03:48:1f:b6:35:ca:ec:f4:00:
82:1e:eb:21:bc:56:1c:d2:0c:9a:a6:76:a1:22:66:
ac:5b:a6:27:99:a5:4c:7e:2d:ee:12:42:c7:5e:e2:
91:49:89:44:66:7e:3e:11:d4:12:8b:c3:2f:1e:a3:
ca:96:99:13:26:82:2c:31:23:c0:d5:0e:eb:da:9a:
d6:77:e4:06:d8:12:b0:dd:ac:0f:1a:2b:f7:4b:0a:
f0:1c:fa:57:7b:2e:7b:7f:a9:17:e2:81:b9:1d:2b:
3c:ef:14:9e:60:70:7d:fa:50:2d:42:20:7f:30:8f:
bd:02:92:f4:97:1f:15:be:b8:a7:4f:e0:2f:6b:85:
74:d2:0e:ca:d1:71:6d:55:1f:60:44:7e:59:f7:a9:
42:37:85:96:ff:fe:42:ee:9a:59:d4:78:23:c0:77:
49:de:e4:e5:52:9f:e1:21:9d:3f:e7:3e:b1:9a:70:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:68:0E:DD:79:5A:F5:4E:BE:67:0A:4E:1E:34:C0:19:E0:30:F1:34
X509v3 Authority Key Identifier:
keyid:B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:79:5c:b3:ab:d3:dd:4c:06:19:9d:46:70:77:1f:49:50:ed:
78:3a:2f:fe:b8:ec:ac:36:1f:bb:54:d8:2e:af:1e:97:3f:e0:
1f:c9:bd:8f:3f:5e:e7:5b:8b:3a:4f:b4:7e:85:d5:86:68:53:
29:a5:4b:22:2a:48:1f:51:8b:6d:78:94:b2:fc:dd:44:31:8c:
43:02:09:67:fb:51:f8:b6:97:5c:b7:73:1b:c9:e3:6d:f0:20:
f2:1a:12:1f:a1:2e:88:ab:f3:63:a5:c5:1e:5a:e0:c0:56:59:
ee:9b:7c:e5:02:b2:b0:8a:27:86:02:6f:b2:b3:3e:1d:68:81:
c9:f6:d4:f7:3d:65:e3:ca:21:b3:ae:a2:24:3f:71:bd:fd:e0:
eb:80:64:68:ac:5e:b9:8e:e7:d4:37:50:88:63:a6:06:36:55:
e2:03:01:57:48:31:90:b9:31:06:29:56:10:d7:75:1b:c5:d2:
4f:bb:8f:db:cb:8c:ab:db:37:ba:00:02:e8:8d:ef:73:f5:d2:
7c:8b:5b:bc:f6:ce:af:22:01:e8:ff:d8:66:79:2e:2a:57:78:
54:b8:4c:c2:b7:dd:42:e9:e0:97:ad:c5:13:cf:65:d9:7f:c3:
d4:ec:72:41:4f:5d:50:20:7e:86:29:83:ae:df:24:39:b7:d1:
40:9a:24:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwy8MK3/z7ctZluNLG5AvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOWQ0NmE2YTMzNjM1M2E5MGYxNzRmYTk5MGZjMjI0MTIw
MWViMWMwHhcNMjUwOTA3MDYwMDQwWhcNMjUwOTA4MDYwMDQwWjAzMTEwLwYDVQQD
EygxYjY4MGVkZDc5NWFmNTRlYmU2NzBhNGUxZTM0YzAxOWUwMzBmMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNcm71ZsJkTdSaFR5ME2s0Vb6iaP
tSX6j9mOHonAknBynM+mMn+zuozh1sB2jnv4XTIfsSanQc5gjuhGEjMX3K0nwlfW
PrBR7KvNrcLAGTQDSB+2Ncrs9ACCHushvFYc0gyapnahImasW6YnmaVMfi3uEkLH
XuKRSYlEZn4+EdQSi8MvHqPKlpkTJoIsMSPA1Q7r2prWd+QG2BKw3awPGiv3Swrw
HPpXey57f6kX4oG5HSs87xSeYHB9+lAtQiB/MI+9ApL0lx8VvrinT+Ava4V00g7K
0XFtVR9gRH5Z96lCN4WW//5C7ppZ1HgjwHdJ3uTlUp/hIZ0/5z6xmnAhpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtoDt15WvVOvmcKTh40wBngMPE0MB8GA1UdIwQY
MBaAFLGdRqajNjU6kPF0+pkPwiQSAescMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMt
NTk0YzY5ZmIwNzExLzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMtNTk0YzY5ZmIwNzEx
LzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3lcs6vT
3UwGGZ1GcHcfSVDteDov/rjsrDYfu1TYLq8elz/gH8m9jz9e51uLOk+0foXVhmhT
KaVLIipIH1GLbXiUsvzdRDGMQwIJZ/tR+LaXXLdzG8njbfAg8hoSH6EuiKvzY6XF
HlrgwFZZ7pt85QKysIonhgJvsrM+HWiByfbU9z1l48ohs66iJD9xvf3g64BkaKxe
uY7n1DdQiGOmBjZV4gMBV0gxkLkxBilWENd1G8XST7uP28uMq9s3ugAC6I3vc/XS
fItbvPbOryIB6P/YZnkuKld4VLhMwrfdQungl63FE89l2X/D1OxyQU9dUCB+himD
rt8kObfRQJokOw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:11 2025 by rpki-client