Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: XaIAmPMQhrdyC0A4Yu97RW3uCXrNABCGs5BAea8/80A=
Subject key identifier: 34:58:95:55:78:8A:CF:CA:F2:19:59:30:8E:04:4F:32:C7:A0:DB:84
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 0198D54DC63BAE2F4CDB10FEEBEECE550D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 05:01:40 +0000
Manifest this update: Sat 23 Aug 2025 05:01:40 +0000
Manifest next update: Sun 24 Aug 2025 05:01:40 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: 1/lvcH5A9TElpZBVtyJDIZ1P5MClBpyEe4TXXQT5TOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c6:3b:ae:2f:4c:db:10:fe:eb:ee:ce:55:0d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Aug 23 05:01:40 2025 GMT
Not After : Aug 24 05:01:40 2025 GMT
Subject: CN=34589555788acfcaf21959308e044f32c7a0db84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:ff:ea:d7:f7:08:14:49:05:a4:1e:f8:14:
52:aa:07:1d:6c:96:f3:0d:1c:98:b9:57:94:8f:aa:
f1:f0:c7:37:24:2f:ab:54:c7:2f:61:31:d7:17:f4:
31:ff:ed:5f:20:c2:26:0a:47:2b:f1:f1:42:0c:5e:
17:e4:d8:fd:56:39:e0:b9:ea:da:f9:43:ab:3c:60:
0f:c3:8c:fd:5a:97:81:50:2e:22:39:32:0a:fb:56:
96:d1:61:00:85:5b:b9:7b:81:75:e3:27:b9:3b:48:
2e:34:91:65:83:45:86:be:9d:6d:1e:f9:9d:d3:56:
67:e4:2f:eb:94:0b:8d:fe:67:93:b8:7f:33:aa:94:
a7:d1:68:ea:d8:00:0b:18:b5:50:67:bc:4c:68:12:
3f:70:19:b8:1c:ba:8b:7f:3e:5a:b5:99:52:8b:e9:
d8:27:ac:d4:6d:05:90:14:b4:7e:65:bb:9c:d4:74:
0b:30:d7:13:ce:e4:36:c6:97:96:fd:f6:58:17:e4:
fd:82:85:71:89:0d:c2:c7:7a:23:e0:37:0f:6e:c3:
6a:f9:e7:55:21:5e:6f:bd:08:c9:b4:a5:bb:b5:f5:
a3:25:83:27:85:14:d3:b7:83:d4:b6:b2:dd:07:bf:
87:af:2a:e3:16:b6:00:02:6c:5c:36:9b:b4:b1:ca:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:58:95:55:78:8A:CF:CA:F2:19:59:30:8E:04:4F:32:C7:A0:DB:84
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:15:32:ac:78:87:b5:26:2b:9d:e1:5f:12:b5:32:5e:ec:7a:
8f:3d:30:71:3f:86:6b:f9:ef:95:64:15:d1:b3:b7:b5:99:7e:
db:07:7a:92:cc:8b:99:c3:f4:85:f9:11:15:40:fc:d0:41:01:
0e:80:e0:21:ae:32:2f:25:d8:8a:f5:95:c4:bf:63:68:33:ce:
96:a8:cb:05:0f:df:c2:b6:e8:71:44:c2:d5:c0:0a:82:03:8d:
7d:19:f2:82:db:d8:2a:6f:00:8f:0b:c2:fd:31:13:c2:b4:6b:
db:89:2f:84:2a:56:81:04:ea:db:7d:27:92:f4:2a:c9:ee:7a:
de:be:e2:4a:d0:18:fc:eb:22:f3:69:e4:bf:54:7b:b3:51:1c:
7a:20:24:03:7a:46:93:dc:ba:a0:ef:b3:25:63:8e:da:0f:ea:
59:c0:24:4d:a5:4d:7a:06:09:45:79:83:20:ed:80:18:f4:7f:
f9:eb:3b:f2:8a:f3:de:45:12:01:50:f9:6d:d3:eb:dc:b7:6b:
9c:27:b2:1d:5e:78:cd:f1:be:25:7b:a6:84:00:ee:80:71:52:
c1:d2:24:3c:70:31:eb:75:49:48:33:31:b0:39:9e:bf:80:8c:
1b:15:bb:b3:0b:bb:7b:fb:e1:9b:75:c9:17:76:18:f8:72:ab:
15:56:c6:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcY7ri9M2xD+6+7OVQ2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMmM3NDU5OTNjYzRiNmYxNDcwYWVhYjQ2MTRmMDg1ZDRh
ZTQwYTkwHhcNMjUwODIzMDUwMTQwWhcNMjUwODI0MDUwMTQwWjAzMTEwLwYDVQQD
EygzNDU4OTU1NTc4OGFjZmNhZjIxOTU5MzA4ZTA0NGYzMmM3YTBkYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16X/6tf3CBRJBaQe+BRSqgcdbJbz
DRyYuVeUj6rx8Mc3JC+rVMcvYTHXF/Qx/+1fIMImCkcr8fFCDF4X5Nj9Vjnguera
+UOrPGAPw4z9WpeBUC4iOTIK+1aW0WEAhVu5e4F14ye5O0guNJFlg0WGvp1tHvmd
01Zn5C/rlAuN/meTuH8zqpSn0Wjq2AALGLVQZ7xMaBI/cBm4HLqLfz5atZlSi+nY
J6zUbQWQFLR+Zbuc1HQLMNcTzuQ2xpeW/fZYF+T9goVxiQ3Cx3oj4DcPbsNq+edV
IV5vvQjJtKW7tfWjJYMnhRTTt4PUtrLdB7+HryrjFrYAAmxcNpu0scpXUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRYlVV4is/K8hlZMI4ETzLHoNuEMB8GA1UdIwQY
MBaAFO4sdFmTzEtvFHCuq0YU8IXUrkCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1Nzgt
NzcyYzkxNzdkNTI5LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1NzgtNzcyYzkxNzdkNTI5
LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyBUyrHiH
tSYrneFfErUyXux6jz0wcT+Ga/nvlWQV0bO3tZl+2wd6ksyLmcP0hfkRFUD80EEB
DoDgIa4yLyXYivWVxL9jaDPOlqjLBQ/fwrbocUTC1cAKggONfRnygtvYKm8AjwvC
/TETwrRr24kvhCpWgQTq230nkvQqye563r7iStAY/Osi82nkv1R7s1EceiAkA3pG
k9y6oO+zJWOO2g/qWcAkTaVNegYJRXmDIO2AGPR/+es78orz3kUSAVD5bdPr3Ldr
nCeyHV54zfG+JXumhADugHFSwdIkPHAx63VJSDMxsDmev4CMGxW7swu7e/vhm3XJ
F3YY+HKrFVbGig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:50 2025 by rpki-client