Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: /O7NTKsHzq3baP5X+deGsPDUhXEhfTOL5jUYtyY9PLg=
Subject key identifier: E1:7F:55:41:90:10:9F:24:B7:91:88:70:C4:9E:93:0C:3A:95:11:FA
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 0198D5BBB5A3A16F4CC203852FCDF586BACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: ZV0qSGhEEkP4JYz+NNTa02i9/Gl7TC3WzRtMyYuK+Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b5:a3:a1:6f:4c:c2:03:85:2f:cd:f5:86:ba:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=e17f554190109f24b7918870c49e930c3a9511fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:57:54:3e:73:36:30:62:1e:45:97:d0:29:ba:
85:d1:a0:1a:d0:40:88:72:8e:34:da:39:fd:02:ac:
4b:fc:6b:a2:e3:5f:a8:40:d6:44:fc:c5:43:75:61:
87:15:18:1e:4d:46:3c:b4:b6:52:ce:5c:88:a8:96:
c5:39:60:cb:f5:2f:e7:9b:6c:18:4a:70:93:90:9b:
bc:4c:a3:ca:ca:be:cf:ae:40:f2:e2:f4:4c:21:b0:
2c:68:a4:72:ed:e7:d4:d1:81:80:b3:0d:fd:4d:7f:
5b:2c:3c:00:52:72:78:81:0d:2c:11:e3:09:ff:e7:
67:36:2e:70:d2:b9:56:5e:66:c5:6b:ac:f6:05:a2:
18:bc:e0:f5:c3:a0:03:be:60:a6:8b:53:86:47:27:
22:d6:77:fe:b3:b2:77:37:83:2b:84:77:c4:4f:ca:
2d:b5:08:61:61:29:48:25:6c:75:3a:e5:dd:94:5c:
8e:74:cb:90:70:51:55:0b:1c:04:3d:5a:ec:d9:1f:
fa:f5:be:5e:8e:db:40:24:80:22:dd:b4:87:ee:bd:
a3:ff:5e:17:3d:09:7f:61:04:41:65:3a:5e:6d:63:
99:d0:e7:85:0b:42:ed:5d:20:16:89:25:3a:ef:67:
8c:d2:f2:69:ea:60:ec:a9:56:38:ca:c6:e6:7e:ea:
78:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7F:55:41:90:10:9F:24:B7:91:88:70:C4:9E:93:0C:3A:95:11:FA
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e4:79:02:9b:6d:cf:4d:da:41:9f:a4:96:ab:25:1e:86:cd:
97:fa:eb:44:88:39:d4:4c:75:c5:de:41:a4:e4:5f:d5:d7:bf:
d2:5e:33:46:2d:aa:01:05:63:c5:33:79:82:7f:c4:e2:db:4c:
2c:db:d4:82:91:46:ad:98:2d:6b:fe:7e:af:30:ee:02:b4:3c:
d3:c7:4c:0b:c4:b8:9f:93:f1:a3:0e:69:36:54:ed:49:41:cd:
4c:50:ee:35:0a:3e:01:8b:d9:18:af:f1:3f:27:13:c5:be:07:
07:df:86:af:ad:33:40:0e:0b:02:e1:c2:4c:17:dc:24:a3:de:
6c:15:b4:10:e2:a1:a0:54:eb:e4:69:3b:2c:28:92:1b:08:c9:
9c:a1:58:42:2a:eb:4b:81:2e:6f:63:f1:2b:4d:a8:9e:77:c6:
c1:1d:6d:10:9a:36:9a:37:05:fc:21:8b:72:f4:9f:80:18:d1:
fc:d9:f2:ec:f7:ef:cd:07:c6:70:63:51:cc:6e:28:aa:37:e0:
47:20:14:e2:ee:c6:79:4f:86:a4:92:ee:1c:bf:61:ef:e1:be:
7c:3a:3f:f1:2e:42:5e:5d:41:a2:47:b6:04:3a:73:31:32:de:
73:b1:0c:3e:f7:48:5c:9b:71:49:80:01:cb:3d:38:88:65:9f:
de:a2:26:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7WjoW9MwgOFL831hrrLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NTc3NTJhMDgxYTc3OGZjMWQyY2VlMWIwZDZhYTQ1ZDUx
YTJjNDkwHhcNMjUwODIzMDcwMTQ1WhcNMjUwODI0MDcwMTQ1WjAzMTEwLwYDVQQD
EyhlMTdmNTU0MTkwMTA5ZjI0Yjc5MTg4NzBjNDllOTMwYzNhOTUxMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ldUPnM2MGIeRZfQKbqF0aAa0ECI
co402jn9AqxL/Gui41+oQNZE/MVDdWGHFRgeTUY8tLZSzlyIqJbFOWDL9S/nm2wY
SnCTkJu8TKPKyr7PrkDy4vRMIbAsaKRy7efU0YGAsw39TX9bLDwAUnJ4gQ0sEeMJ
/+dnNi5w0rlWXmbFa6z2BaIYvOD1w6ADvmCmi1OGRyci1nf+s7J3N4MrhHfET8ot
tQhhYSlIJWx1OuXdlFyOdMuQcFFVCxwEPVrs2R/69b5ejttAJIAi3bSH7r2j/14X
PQl/YQRBZTpebWOZ0OeFC0LtXSAWiSU672eM0vJp6mDsqVY4ysbmfup4iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF/VUGQEJ8kt5GIcMSekww6lRH6MB8GA1UdIwQY
MBaAFNdXdSoIGnePwdLO4bDWqkXVGixJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMt
YjQxYWQxMDY5YTNjLzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMtYjQxYWQxMDY5YTNj
LzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeR5Aptt
z03aQZ+klqslHobNl/rrRIg51Ex1xd5BpORf1de/0l4zRi2qAQVjxTN5gn/E4ttM
LNvUgpFGrZgta/5+rzDuArQ808dMC8S4n5Pxow5pNlTtSUHNTFDuNQo+AYvZGK/x
PycTxb4HB9+Gr60zQA4LAuHCTBfcJKPebBW0EOKhoFTr5Gk7LCiSGwjJnKFYQirr
S4Eub2PxK02onnfGwR1tEJo2mjcF/CGLcvSfgBjR/Nny7PfvzQfGcGNRzG4oqjfg
RyAU4u7GeU+GpJLuHL9h7+G+fDo/8S5CXl1Boke2BDpzMTLec7EMPvdIXJtxSYAB
yz04iGWf3qImiQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:30 2025 by rpki-client