Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
File: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json)
Hash identifier: dCGPV7/EIDvN8J8IC0XzX0o4M32aR0x1zD2eFQ8g1gE=
Subject key identifier: 93:A9:64:63:D1:9D:01:75:78:09:75:4A:8C:DB:B0:39:DB:2C:81:1A
Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
Certificate issuer: /CN=44b437b31b50670384fa5d20d8924d611b91633e
Certificate serial: 0198D5BC502D51175AD9FB265660F901CCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
Manifest number: 0545
Signing time: Sat 23 Aug 2025 07:02:24 +0000
Manifest this update: Sat 23 Aug 2025 07:02:24 +0000
Manifest next update: Sun 24 Aug 2025 07:02:24 +0000
Files and hashes: 1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: H98JaQQb1w5KPqWUjGAejeAQuZmIsYQ57gBG25fSOJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:50:2d:51:17:5a:d9:fb:26:56:60:f9:01:cc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e
Validity
Not Before: Aug 23 07:02:24 2025 GMT
Not After : Aug 24 07:02:24 2025 GMT
Subject: CN=93a96463d19d01757809754a8cdbb039db2c811a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:8c:7e:1b:21:30:d1:25:d3:a3:96:73:c7:
d5:46:52:26:2a:e1:e1:16:2b:28:01:ad:f7:7f:8b:
a7:12:ec:88:88:b5:1a:33:b8:1d:de:2a:8d:87:e2:
c4:b6:61:2b:9a:06:d2:e2:be:0c:1c:d9:e3:e7:4c:
83:61:50:83:34:b6:16:7e:46:b0:b0:77:7e:20:d0:
2e:cb:f4:5c:c6:bd:b4:53:e2:94:d3:74:38:5c:37:
5d:ec:db:10:c7:3e:d1:69:e2:cd:2f:e1:ac:31:fc:
92:bc:32:e8:5c:95:f8:c3:13:63:5d:58:26:5d:27:
8d:34:fc:72:4b:52:82:49:0c:3a:19:0e:66:c5:49:
8d:d5:f8:58:24:38:ef:0e:36:0a:c0:e3:6c:f7:62:
6a:2d:23:18:58:69:f9:95:91:b5:c3:9f:48:66:ad:
20:c0:3d:35:fd:7f:cc:84:9c:1c:1a:86:0c:7f:85:
b6:f0:a4:c9:aa:af:a4:bd:64:98:44:24:b4:7a:19:
32:14:28:0d:be:4b:2b:25:97:1d:02:50:9f:80:6d:
24:f4:99:06:38:f1:f9:4c:bd:d0:73:d3:60:87:59:
ff:a5:dd:d8:b5:9b:05:0b:a2:32:a9:39:53:43:ed:
e9:ce:54:09:1a:a1:09:60:f8:37:9c:84:0c:23:43:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A9:64:63:D1:9D:01:75:78:09:75:4A:8C:DB:B0:39:DB:2C:81:1A
X509v3 Authority Key Identifier:
keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:90:0e:3e:4c:eb:9f:81:7c:ba:f5:5a:49:99:06:c6:f8:53:
75:16:f2:04:ac:a1:62:cb:df:f7:58:36:50:e3:db:19:cd:69:
76:20:a6:9a:9c:d7:c8:4e:0d:ec:51:4a:4b:91:86:ea:a4:51:
d6:0d:52:66:45:aa:a2:2a:d7:83:ef:92:66:75:22:da:09:e8:
e3:dd:c1:fb:de:e7:4d:e8:8e:7e:76:8f:08:e3:cf:b1:6d:60:
8e:0d:b6:71:1b:16:7a:2b:4d:78:04:95:bf:b4:36:ce:f2:e6:
93:a1:5d:71:b3:10:24:cf:c0:ff:9e:9a:ef:76:90:97:c4:d7:
6f:66:28:54:dc:ae:dd:f8:51:dd:ad:3c:e2:c7:7b:dd:6f:6c:
af:aa:a9:53:ba:f3:0c:c4:e9:f9:21:18:b5:f4:8f:fa:62:d6:
f3:80:12:18:30:e3:33:56:1b:1b:21:8d:bb:e9:a5:20:ba:2c:
14:67:c8:16:3c:44:1e:39:51:9d:45:51:77:c1:54:c2:ac:b7:
f3:5b:6a:84:0e:a9:31:c2:e9:bc:a1:42:7e:f8:6b:1f:0a:c6:
d0:cc:2a:10:62:6a:dc:f1:24:ed:58:1e:12:99:d3:c1:d8:1f:
84:c7:67:8f:18:85:f8:f4:30:5f:06:7e:4a:be:d7:82:c0:b2:
1d:5d:fd:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvFAtURda2fsmVmD5AczOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YjQzN2IzMWI1MDY3MDM4NGZhNWQyMGQ4OTI0ZDYxMWI5
MTYzM2UwHhcNMjUwODIzMDcwMjI0WhcNMjUwODI0MDcwMjI0WjAzMTEwLwYDVQQD
Eyg5M2E5NjQ2M2QxOWQwMTc1NzgwOTc1NGE4Y2RiYjAzOWRiMmM4MTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh2MfhshMNEl06OWc8fVRlImKuHh
FisoAa33f4unEuyIiLUaM7gd3iqNh+LEtmErmgbS4r4MHNnj50yDYVCDNLYWfkaw
sHd+INAuy/Rcxr20U+KU03Q4XDdd7NsQxz7RaeLNL+GsMfySvDLoXJX4wxNjXVgm
XSeNNPxyS1KCSQw6GQ5mxUmN1fhYJDjvDjYKwONs92JqLSMYWGn5lZG1w59IZq0g
wD01/X/MhJwcGoYMf4W28KTJqq+kvWSYRCS0ehkyFCgNvksrJZcdAlCfgG0k9JkG
OPH5TL3Qc9Ngh1n/pd3YtZsFC6IyqTlTQ+3pzlQJGqEJYPg3nIQMI0MvGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOpZGPRnQF1eAl1SozbsDnbLIEaMB8GA1UdIwQY
MBaAFES0N7MbUGcDhPpdINiSTWEbkWM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lMmVjMzQtYjdmMy00MDU1LTgzODgt
ZGUzYjc1NDczZmRkLzEvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lMmVjMzQtYjdmMy00MDU1LTgzODgtZGUzYjc1NDczZmRk
LzEvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpAOPkzr
n4F8uvVaSZkGxvhTdRbyBKyhYsvf91g2UOPbGc1pdiCmmpzXyE4N7FFKS5GG6qRR
1g1SZkWqoirXg++SZnUi2gno493B+97nTeiOfnaPCOPPsW1gjg22cRsWeitNeASV
v7Q2zvLmk6FdcbMQJM/A/56a73aQl8TXb2YoVNyu3fhR3a084sd73W9sr6qpU7rz
DMTp+SEYtfSP+mLW84ASGDDjM1YbGyGNu+mlILosFGfIFjxEHjlRnUVRd8FUwqy3
81tqhA6pMcLpvKFCfvhrHwrG0MwqEGJq3PEk7VgeEpnTwdgfhMdnjxiF+PQwXwZ+
Sr7XgsCyHV39Pg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:40 2025 by rpki-client