Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: 15Lsm782VKptQ8j+rhbl/4Vq+i1zd4kJH4sB8dUDOXI=
Subject key identifier: 03:43:ED:10:D3:D1:E4:DF:AF:F5:4C:6F:60:2A:E7:76:62:F2:F1:41
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 0197488CA522342C45116B86F699E9E7BFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 08AB
Signing time: Sat 07 Jun 2025 04:01:06 +0000
Manifest this update: Sat 07 Jun 2025 04:01:06 +0000
Manifest next update: Sun 08 Jun 2025 04:01:06 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: IIpPk9Km6xaGwWoGXZsNGNMZsCHZKlq7bcEfmUrGj6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:a5:22:34:2c:45:11:6b:86:f6:99:e9:e7:bf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Jun 7 04:01:06 2025 GMT
Not After : Jun 8 04:01:06 2025 GMT
Subject: CN=0343ed10d3d1e4dfaff54c6f602ae77662f2f141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:36:c5:56:d4:05:65:f9:ef:24:9a:b4:e0:
f3:a2:b3:74:a1:dc:be:a3:b9:f7:fa:9b:c5:73:b2:
1c:3d:5f:de:c5:69:da:05:15:89:09:fd:c9:f4:f6:
07:23:8d:58:b1:ad:c4:2c:5b:0a:70:62:70:a8:6a:
7f:53:15:d5:1b:4e:11:8d:83:a1:c0:bf:fd:5c:c2:
ba:3d:66:7c:33:e3:77:6e:53:45:ee:96:e6:7e:64:
be:fb:38:18:1b:1e:08:53:bd:82:23:d3:1c:09:7c:
5a:5d:2b:38:e9:ec:a2:65:5b:02:e3:32:2e:be:3a:
a5:94:68:26:b6:80:8c:fe:cb:3b:82:ca:61:9d:1a:
c2:0c:29:49:23:a9:31:43:65:6e:51:7d:c1:82:dd:
82:07:b6:8a:17:70:77:31:f0:a7:6e:62:2a:fa:e9:
e5:20:f2:2e:bc:91:51:fd:f7:55:e5:10:41:2f:05:
81:04:a2:91:11:53:d7:ba:f9:fe:f0:cf:cb:3b:1d:
9e:48:da:6f:e9:70:97:5f:07:76:ef:ce:d8:78:82:
c4:68:0f:a2:22:be:82:a9:a2:7f:f2:47:0d:7a:e5:
87:4d:7b:c6:54:e0:b3:bc:88:43:e6:63:88:13:61:
f0:7d:3b:4a:60:bc:e3:ea:0d:30:58:c0:25:74:35:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:43:ED:10:D3:D1:E4:DF:AF:F5:4C:6F:60:2A:E7:76:62:F2:F1:41
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dd:0f:8a:33:ee:68:24:58:59:9d:cc:38:ca:e8:f2:bb:39:
41:97:ca:ee:65:c1:a4:28:58:2b:01:e0:33:58:fa:eb:c3:ee:
66:a2:3c:91:02:df:b1:c1:33:f0:1c:88:18:50:be:93:1b:f1:
d3:98:3c:af:64:44:ff:5c:2a:65:41:01:0e:94:e3:7f:4c:f7:
c9:04:02:bf:ab:2c:3a:c8:72:a4:47:7f:64:b5:89:c8:7e:df:
a6:ae:ef:02:c1:e0:6e:6d:eb:49:8b:80:13:ed:14:8f:98:51:
45:07:11:49:03:e3:b7:80:b2:e1:a9:4b:49:25:09:25:9c:5e:
50:a6:24:57:dc:95:aa:00:91:82:51:96:4e:cc:c3:c7:cb:5d:
59:ee:f0:df:c8:7b:be:6d:fe:b2:c7:1f:81:e4:91:0a:18:14:
fa:1a:eb:9d:13:75:fc:05:ed:5b:3c:b9:b9:8a:b2:1d:16:b7:
92:98:ef:0f:1a:35:67:3d:b7:b9:1b:0e:4d:ad:8f:eb:a5:2d:
cb:47:85:f8:17:81:02:82:2c:39:bf:33:41:73:31:fa:69:ec:
56:f0:1a:ef:bf:7b:7f:91:87:6a:6f:0f:7c:e9:1c:99:f8:9b:
24:85:26:63:ea:35:98:91:d8:5b:12:5d:fd:d5:bb:05:69:7e:
78:45:04:b1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdIjKUiNCxFEWuG9pnp57/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjgwYzA1Yjc2OTEyYTA5Y2IxMjkzNGRiMzNjOGU1MjBh
Y2RkOTYwHhcNMjUwNjA3MDQwMTA2WhcNMjUwNjA4MDQwMTA2WjAzMTEwLwYDVQQD
EygwMzQzZWQxMGQzZDFlNGRmYWZmNTRjNmY2MDJhZTc3NjYyZjJmMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2A2xVbUBWX57ySatODzorN0ody+
o7n3+pvFc7IcPV/exWnaBRWJCf3J9PYHI41Ysa3ELFsKcGJwqGp/UxXVG04RjYOh
wL/9XMK6PWZ8M+N3blNF7pbmfmS++zgYGx4IU72CI9McCXxaXSs46eyiZVsC4zIu
vjqllGgmtoCM/ss7gsphnRrCDClJI6kxQ2VuUX3Bgt2CB7aKF3B3MfCnbmIq+unl
IPIuvJFR/fdV5RBBLwWBBKKREVPXuvn+8M/LOx2eSNpv6XCXXwd2787YeILEaA+i
Ir6CqaJ/8kcNeuWHTXvGVOCzvIhD5mOIE2HwfTtKYLzj6g0wWMAldDW1AwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAND7RDT0eTfr/VMb2Aq53Zi8vFBMB8GA1UdIwQY
MBaAFPsoDAW3aRKgnLEpNNszyOUgrN2WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15Z01CYmRwRXFDY3NTazAyelBJNVNDczNaWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjQ4Nzg0LWY1ODktNGFiNi1iZTI2
LTI1ZDJmZGJlYTdkMi8xLzEteWdNQmJkcEVxQ2NzU2swMnpQSTVTQ3MzWlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JiL2Y0ODc4NC1mNTg5LTRhYjYtYmUyNi0yNWQyZmRiZWE3
ZDIvMS8xLXlnTUJiZHBFcUNjc1NrMDJ6UEk1U0NzM1pZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMt0P
ijPuaCRYWZ3MOMro8rs5QZfK7mXBpChYKwHgM1j668PuZqI8kQLfscEz8ByIGFC+
kxvx05g8r2RE/1wqZUEBDpTjf0z3yQQCv6ssOshypEd/ZLWJyH7fpq7vAsHgbm3r
SYuAE+0Uj5hRRQcRSQPjt4Cy4alLSSUJJZxeUKYkV9yVqgCRglGWTszDx8tdWe7w
38h7vm3+sscfgeSRChgU+hrrnRN1/AXtWzy5uYqyHRa3kpjvDxo1Zz23uRsOTa2P
66Uty0eF+BeBAoIsOb8zQXMx+mnsVvAa7797f5GHam8PfOkcmfibJIUmY+o1mJHY
WxJd/dW7BWl+eEUEsQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:30 2025 by rpki-client