Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
File: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft (raw, json)
Hash identifier: j5WNaMoa1F16JDMu0BP46EmN0niXLSr1Hw1Af9+O6PM=
Subject key identifier: D0:83:37:83:79:79:53:FF:10:3A:98:2D:C2:CA:23:CC:4B:B8:10:40
Authority key identifier: 30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F
Certificate issuer: /CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
Certificate serial: 0198D6606E33EC69C73CC0AA392FC4BF0A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
Manifest number: 09D1
Signing time: Sat 23 Aug 2025 10:01:40 +0000
Manifest this update: Sat 23 Aug 2025 10:01:40 +0000
Manifest next update: Sun 24 Aug 2025 10:01:40 +0000
Files and hashes: 1: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl (hash: DyRiR0U9Sm02UEKz1S2FfkeUoQRgATVxY3IwXpUHSFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6e:33:ec:69:c7:3c:c0:aa:39:2f:c4:bf:0a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
Validity
Not Before: Aug 23 10:01:40 2025 GMT
Not After : Aug 24 10:01:40 2025 GMT
Subject: CN=d0833783797953ff103a982dc2ca23cc4bb81040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:89:b4:52:c0:8d:f4:76:7f:5e:73:55:32:49:
88:dd:7a:38:e2:89:cc:fc:a4:3a:c2:6b:f9:28:7d:
ad:f4:e9:b3:39:0f:ab:c7:a3:c4:f2:b4:8d:77:9f:
ed:4b:c1:9f:b0:e0:e7:2a:93:44:6c:7c:14:ba:06:
fd:0b:5d:7c:63:24:39:bc:99:24:d9:39:15:d6:2c:
02:38:f1:2e:0c:1a:77:18:85:b7:f3:db:f5:5e:e4:
d7:47:d0:c7:46:87:41:bd:17:23:97:94:d4:47:dc:
c9:aa:e6:39:4b:0a:8b:04:51:9d:85:96:98:c8:78:
d2:19:04:fd:ce:bb:42:c3:46:95:77:69:b1:99:3b:
65:bd:29:ef:8c:bc:bf:ae:88:ec:0c:49:5d:31:da:
11:91:84:6f:b0:51:78:5d:ca:bd:11:10:a1:10:0a:
cb:e5:c1:f0:1d:a1:fe:0f:30:3c:9c:a5:3e:f6:fc:
b6:11:c6:62:51:32:f0:a1:17:98:55:12:02:85:9b:
56:ed:06:e6:73:d3:0f:a4:b4:fc:8b:2c:a2:4a:fd:
25:fd:51:07:6e:e0:f6:95:d7:15:e7:dd:41:f2:fc:
cc:ba:1e:93:f4:fc:93:dd:6c:4c:fe:a9:b7:59:4c:
9c:ef:de:36:a0:a5:ba:7a:4a:dc:fe:08:26:a8:f6:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:83:37:83:79:79:53:FF:10:3A:98:2D:C2:CA:23:CC:4B:B8:10:40
X509v3 Authority Key Identifier:
keyid:30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:95:d8:19:59:77:40:9c:eb:85:b6:1b:1a:ea:c2:1d:7b:2d:
2a:1b:52:ed:c4:02:50:8d:df:3c:2e:14:62:73:bb:d5:04:7a:
2b:1d:d5:54:4d:fd:80:8c:59:1e:f3:1e:19:b3:46:95:a6:ad:
3d:96:ff:e0:1d:ee:8e:36:4b:61:b6:a2:0e:0c:8f:9d:29:99:
e4:22:fc:71:4b:f6:8e:f3:8b:c5:07:3f:4e:33:24:04:58:fc:
ee:ad:eb:98:ad:04:77:a6:c7:25:cc:bb:7a:0f:56:ee:f9:c9:
af:4c:6f:9b:22:33:82:b3:c5:14:1f:e4:49:13:9e:d8:55:0e:
18:28:43:2c:36:58:87:9e:e2:72:c3:b6:4e:22:f9:f5:62:c4:
d7:f1:8d:35:93:b2:aa:06:dd:41:7e:b4:f2:f7:69:f9:ed:e8:
00:6a:18:2c:d3:69:01:18:6e:4d:6a:51:17:f8:1a:9d:f1:bc:
4f:52:aa:ef:f6:7b:1e:f1:34:e4:b9:e5:7d:36:c8:46:1f:65:
d2:5e:dd:7d:26:b4:95:7f:db:a6:3b:cc:45:7d:47:12:cf:2e:
80:bc:92:a1:5f:14:c9:d0:9d:ea:85:09:59:66:11:9e:e5:6e:
8f:62:01:8a:b4:f9:72:f3:c1:bf:78:c6:db:ab:28:e4:0e:5c:
0f:ab:66:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYG4z7GnHPMCqOS/EvwqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTI0MmNmNmMxNTI5YWFhMDY5MzM2N2U0NGM4NGEwN2Q4
YjBjOWYwHhcNMjUwODIzMTAwMTQwWhcNMjUwODI0MTAwMTQwWjAzMTEwLwYDVQQD
EyhkMDgzMzc4Mzc5Nzk1M2ZmMTAzYTk4MmRjMmNhMjNjYzRiYjgxMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ym0UsCN9HZ/XnNVMkmI3Xo44onM
/KQ6wmv5KH2t9OmzOQ+rx6PE8rSNd5/tS8GfsODnKpNEbHwUugb9C118YyQ5vJkk
2TkV1iwCOPEuDBp3GIW389v1XuTXR9DHRodBvRcjl5TUR9zJquY5SwqLBFGdhZaY
yHjSGQT9zrtCw0aVd2mxmTtlvSnvjLy/rojsDEldMdoRkYRvsFF4Xcq9ERChEArL
5cHwHaH+DzA8nKU+9vy2EcZiUTLwoReYVRIChZtW7Qbmc9MPpLT8iyyiSv0l/VEH
buD2ldcV591B8vzMuh6T9PyT3WxM/qm3WUyc7942oKW6ekrc/ggmqPYN9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCDN4N5eVP/EDqYLcLKI8xLuBBAMB8GA1UdIwQY
MBaAFDCiQs9sFSmqoGkzZ+RMhKB9iwyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtKQ3oyd1ZLYXFnYVRObjVFeUVvSDJMREo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xN2NkODYtN2ZiYi00MDhmLWEyOGMt
ZmEyNjc2ZmUzOGZkLzEvTUtKQ3oyd1ZLYXFnYVRObjVFeUVvSDJMREo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xN2NkODYtN2ZiYi00MDhmLWEyOGMtZmEyNjc2ZmUzOGZk
LzEvTUtKQ3oyd1ZLYXFnYVRObjVFeUVvSDJMREo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpXYGVl3
QJzrhbYbGurCHXstKhtS7cQCUI3fPC4UYnO71QR6Kx3VVE39gIxZHvMeGbNGlaat
PZb/4B3ujjZLYbaiDgyPnSmZ5CL8cUv2jvOLxQc/TjMkBFj87q3rmK0Ed6bHJcy7
eg9W7vnJr0xvmyIzgrPFFB/kSROe2FUOGChDLDZYh57icsO2TiL59WLE1/GNNZOy
qgbdQX608vdp+e3oAGoYLNNpARhuTWpRF/ganfG8T1Kq7/Z7HvE05LnlfTbIRh9l
0l7dfSa0lX/bpjvMRX1HEs8ugLySoV8UydCd6oUJWWYRnuVuj2IBirT5cvPBv3jG
26so5A5cD6tmTQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:06 2025 by rpki-client