Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
File: dWQLapVyPRupdqH7EJKDnpRrWyQ.mft (raw, json)
Hash identifier: 4w0kwqlNFOKOJIFm0UsJPIY4CHNOhO6SBHb6QNrZXRM=
Subject key identifier: 8D:88:25:8C:5A:44:9A:70:54:0A:B8:23:36:2A:45:42:0C:2F:1B:66
Authority key identifier: 75:64:0B:6A:95:72:3D:1B:A9:76:A1:FB:10:92:83:9E:94:6B:5B:24
Certificate issuer: /CN=75640b6a95723d1ba976a1fb1092839e946b5b24
Certificate serial: 0198D7057A9B84AFB1DEC40985B1EFB95477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
Manifest number: 51
Signing time: Sat 23 Aug 2025 13:01:57 +0000
Manifest this update: Sat 23 Aug 2025 13:01:57 +0000
Manifest next update: Sun 24 Aug 2025 13:01:57 +0000
Files and hashes: 1: dWQLapVyPRupdqH7EJKDnpRrWyQ.crl (hash: GosCynNQ5tM6w0VNwNbqNQrdrDD8ZWvpKmswRrtblAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:7a:9b:84:af:b1:de:c4:09:85:b1:ef:b9:54:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75640b6a95723d1ba976a1fb1092839e946b5b24
Validity
Not Before: Aug 23 13:01:57 2025 GMT
Not After : Aug 24 13:01:57 2025 GMT
Subject: CN=8d88258c5a449a70540ab823362a45420c2f1b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:86:1f:e4:05:12:4a:5d:6f:96:6d:ba:f9:
d0:ce:87:cf:a2:33:16:62:38:9f:05:07:1b:81:44:
74:6b:b4:b7:08:d6:3a:f8:84:dd:05:07:62:29:dc:
64:7f:a5:e1:37:dc:6a:ba:2f:e9:24:98:5c:1b:8c:
a3:7d:61:01:3d:92:bb:80:38:b5:bc:04:62:52:2f:
c9:8f:f8:f7:4c:17:2f:ee:e1:37:fe:cb:1e:1d:0d:
91:d4:cc:c5:13:16:32:e5:0d:88:72:64:7f:23:bb:
5d:3f:4e:63:b6:86:73:bd:c9:4a:5b:50:b2:9b:7f:
85:26:64:3e:65:04:b9:72:fd:22:16:ef:49:7e:5f:
12:a9:08:4b:5c:04:c0:67:ec:77:cc:db:c5:b5:77:
1b:17:85:84:c4:ae:ed:b5:c7:b7:4a:2d:9d:43:f1:
25:5d:fe:83:c8:d6:18:5c:54:f3:1e:1f:77:3e:8a:
c0:ea:4c:1d:c5:fc:df:ac:f0:f8:a6:55:d3:c7:05:
5e:eb:03:ac:69:7a:b9:9b:d0:45:21:10:bb:b5:98:
5e:77:cd:ee:0f:70:2b:0c:3d:58:7a:5b:1c:74:4e:
83:5d:b0:12:e7:07:30:86:1f:8a:93:33:97:61:3c:
9a:d6:d4:64:33:7c:f8:ba:a5:72:3f:21:6d:75:8e:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:25:8C:5A:44:9A:70:54:0A:B8:23:36:2A:45:42:0C:2F:1B:66
X509v3 Authority Key Identifier:
keyid:75:64:0B:6A:95:72:3D:1B:A9:76:A1:FB:10:92:83:9E:94:6B:5B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:68:83:bd:13:f2:94:4c:3a:3e:ce:02:37:76:0d:3b:9c:
c2:84:b8:cf:ae:99:0d:39:bc:a3:9e:2a:69:f8:c0:9e:d3:bd:
21:ef:6f:07:a1:2c:d3:ed:39:57:3d:9b:87:0a:8f:13:ad:ec:
31:67:91:94:30:ce:9f:8d:75:65:81:1f:0a:8e:35:be:e1:56:
0c:b8:5a:80:57:b7:e1:96:3c:19:fb:38:78:c3:73:cd:3e:bd:
47:aa:1e:2a:d5:d9:89:21:9c:4a:7e:87:b8:92:cd:db:9c:eb:
2e:1c:28:92:02:8e:ef:2d:fd:78:8e:02:c1:38:22:a4:2e:96:
b1:73:66:34:3d:ec:19:47:2a:27:5a:e6:a8:b5:8a:5e:ef:df:
7b:00:f0:2d:bd:5f:bc:2e:e5:7c:67:bb:f9:ee:16:3f:d9:e1:
93:a9:1b:61:89:5b:0e:60:cf:da:38:86:ed:8d:24:fd:e8:41:
04:d4:0b:b8:cc:f5:39:88:7d:52:a2:75:ec:a5:ac:88:4e:ea:
c6:73:06:47:13:83:42:34:17:ed:0f:44:92:b8:81:fe:22:53:
2c:59:b0:47:2f:fa:36:f0:6a:e4:08:d4:a0:06:49:3a:f0:45:
ba:83:03:26:fe:5e:ee:0d:bb:d2:f0:7a:16:6d:d7:8c:f1:44:
f9:3c:8c:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBXqbhK+x3sQJhbHvuVR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjQwYjZhOTU3MjNkMWJhOTc2YTFmYjEwOTI4MzllOTQ2
YjViMjQwHhcNMjUwODIzMTMwMTU3WhcNMjUwODI0MTMwMTU3WjAzMTEwLwYDVQQD
Eyg4ZDg4MjU4YzVhNDQ5YTcwNTQwYWI4MjMzNjJhNDU0MjBjMmYxYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ciGH+QFEkpdb5ZtuvnQzofPojMW
YjifBQcbgUR0a7S3CNY6+ITdBQdiKdxkf6XhN9xqui/pJJhcG4yjfWEBPZK7gDi1
vARiUi/Jj/j3TBcv7uE3/sseHQ2R1MzFExYy5Q2IcmR/I7tdP05jtoZzvclKW1Cy
m3+FJmQ+ZQS5cv0iFu9Jfl8SqQhLXATAZ+x3zNvFtXcbF4WExK7ttce3Si2dQ/El
Xf6DyNYYXFTzHh93PorA6kwdxfzfrPD4plXTxwVe6wOsaXq5m9BFIRC7tZhed83u
D3ArDD1YelscdE6DXbAS5wcwhh+KkzOXYTya1tRkM3z4uqVyPyFtdY68aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2IJYxaRJpwVAq4IzYqRUIMLxtmMB8GA1UdIwQY
MBaAFHVkC2qVcj0bqXah+xCSg56Ua1skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdRTGFwVnlQUnVwZHFIN0VKS0RucFJyV3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mMjdlNTYtMzA1Yi00ZTc4LWFhNWEt
ZmQwMmU4YmI5MTk2LzEvZFdRTGFwVnlQUnVwZHFIN0VKS0RucFJyV3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mMjdlNTYtMzA1Yi00ZTc4LWFhNWEtZmQwMmU4YmI5MTk2
LzEvZFdRTGFwVnlQUnVwZHFIN0VKS0RucFJyV3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMJog70T
8pRMOj7OAjd2DTucwoS4z66ZDTm8o54qafjAntO9Ie9vB6Es0+05Vz2bhwqPE63s
MWeRlDDOn411ZYEfCo41vuFWDLhagFe34ZY8Gfs4eMNzzT69R6oeKtXZiSGcSn6H
uJLN25zrLhwokgKO7y39eI4CwTgipC6WsXNmND3sGUcqJ1rmqLWKXu/fewDwLb1f
vC7lfGe7+e4WP9nhk6kbYYlbDmDP2jiG7Y0k/ehBBNQLuMz1OYh9UqJ17KWsiE7q
xnMGRxODQjQX7Q9EkriB/iJTLFmwRy/6NvBq5AjUoAZJOvBFuoMDJv5e7g270vB6
Fm3XjPFE+TyM1g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:46 2025 by rpki-client