Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
File: sTSesOfbZTbKeYKWH_rJsykWXF8.mft (raw, json)
Hash identifier: PDPuznq1Nf/WpFrBBeDvqs76Ir12dxUcx+HiFx66orM=
Subject key identifier: BF:60:C8:64:99:CF:F0:D5:95:AB:42:54:2B:54:E6:46:B5:5E:94:D1
Authority key identifier: B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
Certificate issuer: /CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Certificate serial: 019923317F350DDC19FF0A58249E4446861E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
Manifest number: 0326
Signing time: Sun 07 Sep 2025 08:01:10 +0000
Manifest this update: Sun 07 Sep 2025 08:01:10 +0000
Manifest next update: Mon 08 Sep 2025 08:01:10 +0000
Files and hashes: 1: sTSesOfbZTbKeYKWH_rJsykWXF8.crl (hash: dUFim+SsL3glhh7BjBLNjP+A2mQslfHEc5h0Z+QwInY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:7f:35:0d:dc:19:ff:0a:58:24:9e:44:46:86:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Validity
Not Before: Sep 7 08:01:10 2025 GMT
Not After : Sep 8 08:01:10 2025 GMT
Subject: CN=bf60c86499cff0d595ab42542b54e646b55e94d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:2c:8c:08:fb:2e:37:6e:99:d7:bd:e0:81:
6a:50:ce:40:25:ae:14:41:e8:cc:a5:4e:73:84:31:
d3:f3:b2:8d:62:af:bf:2d:3c:2d:52:53:bc:ee:f5:
fd:69:8f:7b:f3:65:d9:6b:69:bf:ac:c2:d1:96:ed:
86:3f:ec:1c:ac:3a:bc:92:ed:90:27:34:dd:4d:3c:
a5:ca:17:d5:29:9b:79:74:ef:7f:5f:1f:e5:c2:09:
18:e4:44:e1:ad:4e:76:11:43:d4:81:73:1f:ff:33:
01:12:82:1d:7c:9e:b3:e2:a5:8c:0f:9c:46:ba:13:
a0:ac:9a:69:fc:cf:10:cc:68:ce:90:1a:b3:f0:b8:
f1:9a:00:74:91:91:46:2d:83:21:47:52:8a:ec:35:
cf:d9:d2:46:0f:0f:5a:1d:a2:c9:5e:05:39:a7:03:
67:ff:94:62:fe:f2:be:e9:74:79:25:9d:da:67:46:
9e:e7:db:0d:de:fb:c7:51:30:dc:03:b1:bd:ba:26:
76:8c:af:5d:41:59:a4:76:7a:2e:11:80:ab:f4:75:
04:c9:ad:84:f1:cd:b8:ef:ff:31:7d:14:a5:a9:b7:
5f:7e:d1:39:7a:2a:5a:73:88:17:d4:de:3a:b5:51:
f9:c5:48:64:bf:8b:67:ef:e3:25:fe:ea:ce:71:a6:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:C8:64:99:CF:F0:D5:95:AB:42:54:2B:54:E6:46:B5:5E:94:D1
X509v3 Authority Key Identifier:
keyid:B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:ba:75:bb:5d:3e:9b:59:5f:47:c3:32:9c:ea:b5:53:62:e3:
20:3b:dd:4e:5f:26:d9:86:9c:f7:a1:eb:67:db:21:ad:2b:40:
c0:7e:72:3b:bf:75:5b:16:71:65:c3:3a:73:e9:20:e9:7d:b5:
c8:51:1e:2a:0c:89:44:02:94:30:7b:fe:a4:e7:ae:c4:2e:68:
80:a4:2a:71:4c:c6:07:df:a2:06:89:db:59:a1:d8:76:e7:15:
bf:a5:b1:32:cf:06:e9:23:94:8c:16:bb:3c:3e:67:fe:b6:65:
47:62:5e:47:4e:26:25:95:77:ae:a5:08:18:6c:d4:15:5d:f6:
c2:2b:6b:cc:7e:c4:8d:09:3d:9d:2b:8c:99:86:3b:bf:a4:2a:
45:b1:b7:5e:0a:5a:c3:b2:f6:3d:4c:4c:be:4b:28:10:ba:74:
13:db:10:93:06:eb:ba:bd:88:31:dd:55:ef:b3:23:55:9a:34:
88:e3:45:61:3c:f3:0e:e3:9d:7a:63:36:12:4a:8a:7f:3a:27:
e1:bf:40:41:06:87:f3:5f:f3:77:69:b0:1c:4f:d6:9b:d8:34:
e5:97:bc:a0:a9:bc:85:be:19:74:2b:68:39:44:95:cd:10:f9:
cf:f2:30:53:63:60:86:40:71:c8:c9:48:e6:83:4b:f5:d7:6d:
6a:c4:e2:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMX81DdwZ/wpYJJ5ERoYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzQ5ZWIwZTdkYjY1MzZjYTc5ODI5NjFmZmFjOWIzMjkx
NjVjNWYwHhcNMjUwOTA3MDgwMTEwWhcNMjUwOTA4MDgwMTEwWjAzMTEwLwYDVQQD
EyhiZjYwYzg2NDk5Y2ZmMGQ1OTVhYjQyNTQyYjU0ZTY0NmI1NWU5NGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb0sjAj7Ljdumde94IFqUM5AJa4U
QejMpU5zhDHT87KNYq+/LTwtUlO87vX9aY9782XZa2m/rMLRlu2GP+wcrDq8ku2Q
JzTdTTylyhfVKZt5dO9/Xx/lwgkY5EThrU52EUPUgXMf/zMBEoIdfJ6z4qWMD5xG
uhOgrJpp/M8QzGjOkBqz8LjxmgB0kZFGLYMhR1KK7DXP2dJGDw9aHaLJXgU5pwNn
/5Ri/vK+6XR5JZ3aZ0ae59sN3vvHUTDcA7G9uiZ2jK9dQVmkdnouEYCr9HUEya2E
8c247/8xfRSlqbdfftE5eipac4gX1N46tVH5xUhkv4tn7+Ml/urOcaYjvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9gyGSZz/DVlatCVCtU5ka1XpTRMB8GA1UdIwQY
MBaAFLE0nrDn22U2ynmClh/6ybMpFlxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RTZXNPZmJaVGJLZVlLV0hfckpzeWtXWEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYjMwYmYtYmNjNy00Nzc3LTkxNDYt
N2EzMGJlNWNlY2MwLzEvc1RTZXNPZmJaVGJLZVlLV0hfckpzeWtXWEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xYjMwYmYtYmNjNy00Nzc3LTkxNDYtN2EzMGJlNWNlY2Mw
LzEvc1RTZXNPZmJaVGJLZVlLV0hfckpzeWtXWEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2rp1u10+
m1lfR8MynOq1U2LjIDvdTl8m2Yac96HrZ9shrStAwH5yO791WxZxZcM6c+kg6X21
yFEeKgyJRAKUMHv+pOeuxC5ogKQqcUzGB9+iBonbWaHYducVv6WxMs8G6SOUjBa7
PD5n/rZlR2JeR04mJZV3rqUIGGzUFV32witrzH7EjQk9nSuMmYY7v6QqRbG3Xgpa
w7L2PUxMvksoELp0E9sQkwbrur2IMd1V77MjVZo0iONFYTzzDuOdemM2EkqKfzon
4b9AQQaH81/zd2mwHE/Wm9g05Ze8oKm8hb4ZdCtoOUSVzRD5z/IwU2NghkBxyMlI
5oNL9ddtasTiNQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:31 2025 by rpki-client