Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: wjPsuUCQzAG4iEYpY5+V5TXztT3tM2u6K5IcQiQo4Jk=
Subject key identifier: 6D:E6:4B:E0:70:5C:97:01:89:05:35:97:11:C0:68:AD:8F:4E:5C:D3
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 01974779510747E15692CBB9ECA72995CEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 078E
Signing time: Fri 06 Jun 2025 23:00:22 +0000
Manifest this update: Fri 06 Jun 2025 23:00:22 +0000
Manifest next update: Sat 07 Jun 2025 23:00:22 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: BuVOlQCgdFgoPeYt8NXNw6wAcY9tc1jYN75LC8i7tmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:51:07:47:e1:56:92:cb:b9:ec:a7:29:95:ce:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Jun 6 23:00:22 2025 GMT
Not After : Jun 7 23:00:22 2025 GMT
Subject: CN=6de64be0705c97018905359711c068ad8f4e5cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:6f:a4:92:0b:c7:77:33:82:55:fc:55:7f:
ae:31:a1:25:0b:33:19:03:5d:a2:09:d3:f5:a4:15:
e6:3f:85:2f:57:ee:bd:b0:64:22:50:81:08:42:06:
71:82:d3:91:1e:d4:0e:04:9b:73:df:28:ea:a7:b3:
45:2e:c5:fc:1c:05:e3:9f:ae:b0:80:1c:02:9a:eb:
4d:b6:4c:7e:95:aa:37:8b:62:ae:d0:86:e9:bc:bc:
7a:29:aa:77:e4:c7:2c:b6:e1:8e:2d:dd:83:a8:9d:
20:c9:8c:e4:73:8f:cb:5b:89:ab:80:84:1c:76:03:
aa:92:7f:54:b1:09:ba:97:35:c5:d9:bf:30:6f:87:
8c:ac:91:ca:0c:70:3e:10:1b:47:3b:45:f5:6d:f6:
a5:a4:db:99:ae:e1:00:91:e5:bc:3e:54:72:3d:a3:
ea:f2:62:a5:8e:c6:65:b2:79:83:11:ea:4a:36:eb:
70:3f:ed:34:e5:12:71:f4:9f:64:1a:a6:f4:89:06:
33:ee:37:45:81:3d:3b:6c:d4:41:1a:38:2e:39:28:
e8:ea:5e:0e:95:07:03:ae:95:d4:bc:da:a9:78:fd:
5d:4e:77:7f:00:ec:15:b7:22:18:08:23:15:0c:3c:
99:ae:a0:d1:8d:c7:cb:1d:ba:6e:88:55:8e:02:60:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E6:4B:E0:70:5C:97:01:89:05:35:97:11:C0:68:AD:8F:4E:5C:D3
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b9:61:3b:a2:de:60:94:b8:07:af:d9:d7:30:5b:61:68:e2:
0a:b7:91:a2:56:81:d1:e0:a4:d1:8f:e8:f4:2c:c0:5f:7c:5b:
d8:16:96:05:bc:a3:fd:2b:8a:af:5a:d0:ef:19:ac:86:5a:c6:
19:3c:f0:96:1d:f7:e3:e1:1b:b5:59:63:69:ad:dc:31:8f:c1:
b6:36:78:22:c3:28:49:8c:ad:8d:42:5e:5e:f8:5c:5d:aa:9a:
b1:c9:ad:27:d8:f7:ee:dd:bc:aa:d6:1f:10:69:e5:60:b7:c5:
2e:a0:f1:bb:18:58:a3:10:3a:f0:0a:bb:da:2f:2b:a4:be:d7:
7b:98:b8:a3:f5:4c:22:d7:89:77:54:dc:9b:bb:bf:4a:ec:20:
8b:dd:16:bb:9e:df:7c:3b:87:09:13:cc:9a:8a:c3:eb:c1:e3:
4c:0d:43:3c:cb:a1:c6:4e:55:2f:de:65:d0:20:ce:7c:bd:a5:
59:e6:06:48:f8:9b:7f:38:ec:7e:ff:12:2c:da:44:12:25:2f:
c9:db:37:5b:9b:7b:fd:af:d8:73:09:48:4e:6d:4f:44:d9:10:
33:20:ad:10:e3:61:9f:64:5f:ea:76:b0:59:d4:3b:1e:49:3a:
d5:ba:c1:57:ee:bd:bd:5c:83:19:04:d0:ea:bc:66:ff:94:ea:
93:d8:70:dc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdHeVEHR+FWksu57Kcplc7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OTZjMzQ4OWZlZWJiYzA5NDI1NWQyN2VkY2Q4NjU1MTIx
MDI3YmMwHhcNMjUwNjA2MjMwMDIyWhcNMjUwNjA3MjMwMDIyWjAzMTEwLwYDVQQD
Eyg2ZGU2NGJlMDcwNWM5NzAxODkwNTM1OTcxMWMwNjhhZDhmNGU1Y2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i1vpJILx3czglX8VX+uMaElCzMZ
A12iCdP1pBXmP4UvV+69sGQiUIEIQgZxgtORHtQOBJtz3yjqp7NFLsX8HAXjn66w
gBwCmutNtkx+lao3i2Ku0IbpvLx6Kap35McstuGOLd2DqJ0gyYzkc4/LW4mrgIQc
dgOqkn9UsQm6lzXF2b8wb4eMrJHKDHA+EBtHO0X1bfalpNuZruEAkeW8PlRyPaPq
8mKljsZlsnmDEepKNutwP+005RJx9J9kGqb0iQYz7jdFgT07bNRBGjguOSjo6l4O
lQcDrpXUvNqpeP1dTnd/AOwVtyIYCCMVDDyZrqDRjcfLHbpuiFWOAmBS7QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG3mS+BwXJcBiQU1lxHAaK2PTlzTMB8GA1UdIwQY
MBaAFPiWw0if7rvAlCVdJ+3NhlUSECe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KYkRTSl91dThDVUpWMG43YzJHVlJJUUo3dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNDhmZDFlLTBhYWItNDM3MS04OWM0
LWI1MWNjNGYwNWFhYS8xLzEtSmJEU0pfdXU4Q1VKVjBuN2MyR1ZSSVFKN3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QyLzQ4ZmQxZS0wYWFiLTQzNzEtODljNC1iNTFjYzRmMDVh
YWEvMS8xLUpiRFNKX3V1OENVSlYwbjdjMkdWUklRSjd3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWblh
O6LeYJS4B6/Z1zBbYWjiCreRolaB0eCk0Y/o9CzAX3xb2BaWBbyj/SuKr1rQ7xms
hlrGGTzwlh334+EbtVljaa3cMY/BtjZ4IsMoSYytjUJeXvhcXaqascmtJ9j37t28
qtYfEGnlYLfFLqDxuxhYoxA68Aq72i8rpL7Xe5i4o/VMIteJd1Tcm7u/Suwgi90W
u57ffDuHCRPMmorD68HjTA1DPMuhxk5VL95l0CDOfL2lWeYGSPibfzjsfv8SLNpE
EiUvyds3W5t7/a/YcwlITm1PRNkQMyCtEONhn2Rf6nawWdQ7Hkk61brBV+69vVyD
GQTQ6rxm/5Tqk9hw3A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:18:37 2025 by rpki-client