Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: ubfmdztdEQN2t2DXFCZLkNUO65jwzLqpkfYMClUrafQ=
Subject key identifier: 6F:A8:B6:E8:C2:7B:A7:00:33:CD:3B:CC:2B:8B:43:38:4D:C1:94:44
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 0198D6613AFDD4EBE5040E312EB1C29F28B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:02:32 +0000
Manifest this update: Sat 23 Aug 2025 10:02:32 +0000
Manifest next update: Sun 24 Aug 2025 10:02:32 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: HYo4GNcuiElIYO3lfa6Ih7AF8bGFRcgo3EbsfJKS+6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3a:fd:d4:eb:e5:04:0e:31:2e:b1:c2:9f:28:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Aug 23 10:02:32 2025 GMT
Not After : Aug 24 10:02:32 2025 GMT
Subject: CN=6fa8b6e8c27ba70033cd3bcc2b8b43384dc19444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:fe:8b:c0:a5:81:2a:58:45:6d:6f:80:30:
c4:f2:4e:08:db:5b:78:2f:ac:83:c6:f2:90:ef:54:
f2:41:d7:58:a7:4c:4f:d3:9e:97:23:1d:4c:52:28:
35:89:9e:cd:b3:8c:0c:40:f2:39:f0:31:0a:bc:0c:
02:e2:13:f1:d6:c1:ae:d3:ed:12:d0:e3:b4:ba:16:
c0:9f:1d:15:a9:e9:70:68:2f:26:c2:83:d2:09:e3:
b0:ad:06:27:d5:92:1e:be:81:f1:0d:fe:94:9d:1a:
4f:b5:c1:28:ec:3f:7f:02:c1:42:ed:ac:37:a9:2d:
82:30:2a:35:d5:1f:51:0d:0d:6b:37:67:09:73:4d:
24:de:a2:c1:3e:18:93:99:6e:7f:2a:71:b3:5e:23:
6c:e1:51:93:77:60:cd:03:aa:b6:cf:50:57:73:01:
61:c2:25:b6:c0:55:7c:2e:f7:76:f4:62:03:15:72:
d3:a4:e2:e1:d3:63:a3:64:bb:d7:bf:16:7c:96:ff:
bc:82:68:5c:d3:a8:dd:93:96:3e:ed:c3:e5:9d:54:
c0:5c:61:dd:51:92:3d:21:11:de:62:8a:e0:0a:b2:
6b:90:ec:2d:57:64:f5:de:a0:7a:05:d9:23:a6:a2:
e7:bc:9a:1a:72:da:f6:b8:1f:bd:d6:46:5d:99:3e:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A8:B6:E8:C2:7B:A7:00:33:CD:3B:CC:2B:8B:43:38:4D:C1:94:44
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7f:84:de:1c:5c:b7:1e:1c:b8:bd:d1:c6:13:80:6c:15:a4:
59:97:66:0b:64:f5:2d:47:77:3c:ce:4c:a9:f3:f2:ee:69:7d:
73:e8:23:e1:fa:67:33:60:e0:89:4d:f3:55:75:f1:96:3a:a2:
62:f6:d9:91:c1:0b:50:6c:87:de:de:22:b1:0f:95:6e:1a:32:
b5:88:f2:30:5b:53:78:d4:49:17:3b:3f:6e:b8:bd:75:29:d3:
07:b2:95:ad:93:b1:8a:b0:c4:e5:91:c6:ae:c4:1a:f6:f4:e9:
42:05:f7:dc:05:e0:76:df:7d:b8:6e:f7:cc:bf:64:97:6a:73:
f5:cd:7c:7b:05:a2:88:9c:43:89:d8:ef:39:73:d5:fd:8f:9e:
f1:0c:b5:7d:53:cc:c3:69:c1:1d:01:44:04:42:9e:66:e7:81:
e1:69:ae:f3:aa:22:38:10:4b:7d:16:ec:d4:11:2f:7a:c9:5b:
15:0c:e0:c6:48:1d:21:93:13:b1:d8:7e:6f:04:34:92:4b:ff:
12:35:d4:7d:50:e8:b5:0d:b3:b3:b1:d0:3d:fc:c3:9c:d7:3b:
2c:35:1b:55:df:4c:50:48:84:a9:41:7b:18:d9:b2:ce:b4:94:
6e:75:d0:8e:73:78:38:b5:7d:04:ef:94:8c:85:99:11:fe:4d:
c8:d0:52:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYTr91OvlBA4xLrHCnyi2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDUxYmYxZTJhNTMwMDBiYzIzMDYwNTYwZjJjYzBiMzlk
NDk2ZWYwHhcNMjUwODIzMTAwMjMyWhcNMjUwODI0MTAwMjMyWjAzMTEwLwYDVQQD
Eyg2ZmE4YjZlOGMyN2JhNzAwMzNjZDNiY2MyYjhiNDMzODRkYzE5NDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm93+i8ClgSpYRW1vgDDE8k4I21t4
L6yDxvKQ71TyQddYp0xP056XIx1MUig1iZ7Ns4wMQPI58DEKvAwC4hPx1sGu0+0S
0OO0uhbAnx0VqelwaC8mwoPSCeOwrQYn1ZIevoHxDf6UnRpPtcEo7D9/AsFC7aw3
qS2CMCo11R9RDQ1rN2cJc00k3qLBPhiTmW5/KnGzXiNs4VGTd2DNA6q2z1BXcwFh
wiW2wFV8Lvd29GIDFXLTpOLh02OjZLvXvxZ8lv+8gmhc06jdk5Y+7cPlnVTAXGHd
UZI9IRHeYorgCrJrkOwtV2T13qB6BdkjpqLnvJoactr2uB+91kZdmT5vGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+otujCe6cAM807zCuLQzhNwZREMB8GA1UdIwQY
MBaAFO3VG/HipTAAvCMGBWDyzAs51JbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEt
Yzc1N2IxNWYxY2NmLzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEtYzc1N2IxNWYxY2Nm
LzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAH+E3hxc
tx4cuL3RxhOAbBWkWZdmC2T1LUd3PM5MqfPy7ml9c+gj4fpnM2DgiU3zVXXxljqi
YvbZkcELUGyH3t4isQ+VbhoytYjyMFtTeNRJFzs/bri9dSnTB7KVrZOxirDE5ZHG
rsQa9vTpQgX33AXgdt99uG73zL9kl2pz9c18ewWiiJxDidjvOXPV/Y+e8Qy1fVPM
w2nBHQFEBEKeZueB4Wmu86oiOBBLfRbs1BEveslbFQzgxkgdIZMTsdh+bwQ0kkv/
EjXUfVDotQ2zs7HQPfzDnNc7LDUbVd9MUEiEqUF7GNmyzrSUbnXQjnN4OLV9BO+U
jIWZEf5NyNBSdw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:42 2025 by rpki-client