Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: K3Un+VeJz+JibgS9XiXq0AYg8ZpZ8Wqh89wRuFD5aW8=
Subject key identifier: 69:D9:28:64:70:E3:9E:A3:AD:AB:A9:D8:25:53:09:C5:BA:DA:9E:61
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 0198D66104CB483A54CE89737468F21C8403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 0845
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: ePZtsyfmK5EZkCMPDIwVu5OZ9kjyRQJ8LuFxAyqWWPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:04:cb:48:3a:54:ce:89:73:74:68:f2:1c:84:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=69d9286470e39ea3adaba9d8255309c5bada9e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:89:73:91:11:91:7d:ef:95:30:99:8d:95:
28:cc:bb:a5:0c:96:ca:c3:72:8b:e9:e2:8d:83:6b:
fb:37:59:ac:5a:0f:1d:a3:7d:79:cf:44:64:b0:b5:
35:49:0f:07:11:44:2a:b4:4c:aa:ef:95:ea:e3:51:
92:bb:ca:17:2b:f1:ff:d0:43:c3:fe:17:77:9d:b0:
3b:86:77:9d:78:b1:21:4c:7c:6c:cc:0f:0f:b4:de:
8c:f8:b5:ad:c0:e9:17:15:7a:e8:cf:1e:12:72:a5:
76:dc:d0:4c:42:c6:14:96:97:6a:48:43:e6:56:cb:
70:86:b9:69:69:d7:2e:8b:0f:93:1e:be:19:c2:4e:
18:8d:f8:c0:8c:48:3a:b8:c5:9b:c2:bc:b0:65:47:
5a:e2:05:04:6d:a2:48:2f:35:06:70:6a:26:10:d5:
e0:f5:16:03:98:ea:73:6a:95:bc:29:47:25:16:e7:
c4:89:73:ac:c3:23:3d:fc:b8:60:5f:5a:ed:2a:19:
9b:d1:f1:70:84:ff:6b:55:da:9d:f9:07:f0:53:00:
71:04:df:5d:fc:e6:7e:8e:7b:f5:99:5f:cd:a7:b3:
c0:5a:1f:aa:b6:ba:1b:71:16:f2:91:38:7b:41:54:
64:4e:0c:8e:4c:f7:a8:7a:48:e5:22:0f:b8:2e:67:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D9:28:64:70:E3:9E:A3:AD:AB:A9:D8:25:53:09:C5:BA:DA:9E:61
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cd:d8:dd:5a:3d:8e:95:3c:f6:5a:24:4e:74:98:61:d6:5e:
96:82:ec:5d:74:fb:dd:cb:29:6b:60:91:16:95:1c:fe:b5:09:
35:9a:c4:69:cf:ea:84:1c:d3:6c:1c:5e:36:cf:e8:3c:dd:2f:
10:15:5f:0e:17:67:06:81:c8:fb:c8:9d:4d:76:b3:22:f4:6e:
f9:db:68:ef:13:a3:6d:71:bd:1c:31:71:8d:43:90:34:1a:7d:
38:68:7e:f0:b2:e6:9b:d0:b1:e2:21:d3:8a:e0:e4:b9:ed:7b:
71:91:d3:9c:a7:42:15:96:53:b5:ef:7d:ca:84:bc:15:f6:e0:
fc:15:4a:2b:ba:71:9f:2e:b4:13:c6:f6:07:5d:e1:f1:26:6a:
3f:82:b7:71:c5:37:a6:2c:82:87:57:90:b3:83:65:09:8e:24:
84:30:23:6e:fb:db:e6:24:ac:cf:bf:f9:37:7d:28:fb:70:22:
34:e4:ec:50:29:e5:92:81:44:6c:47:5e:d7:f0:97:8b:43:87:
c6:cc:a4:55:65:d6:8a:ce:46:37:6f:04:8d:dd:5d:1a:ff:b9:
60:77:b4:8e:b4:01:62:56:8a:7f:fd:85:8b:24:23:70:59:c7:
06:3c:5b:23:46:06:8e:5a:60:c9:3b:84:bc:a3:81:a0:74:e5:
f4:b2:d1:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYQTLSDpUzolzdGjyHIQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGE5MjAzMjFjNmM4MmNlZTY5MjllNzk4ZmM5MzcyYmFj
Y2I5MjUwHhcNMjUwODIzMTAwMjE5WhcNMjUwODI0MTAwMjE5WjAzMTEwLwYDVQQD
Eyg2OWQ5Mjg2NDcwZTM5ZWEzYWRhYmE5ZDgyNTUzMDljNWJhZGE5ZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssOJc5ERkX3vlTCZjZUozLulDJbK
w3KL6eKNg2v7N1msWg8do315z0RksLU1SQ8HEUQqtEyq75Xq41GSu8oXK/H/0EPD
/hd3nbA7hnedeLEhTHxszA8PtN6M+LWtwOkXFXrozx4ScqV23NBMQsYUlpdqSEPm
Vstwhrlpadcuiw+THr4Zwk4YjfjAjEg6uMWbwrywZUda4gUEbaJILzUGcGomENXg
9RYDmOpzapW8KUclFufEiXOswyM9/LhgX1rtKhmb0fFwhP9rVdqd+QfwUwBxBN9d
/OZ+jnv1mV/Np7PAWh+qtrobcRbykTh7QVRkTgyOTPeoekjlIg+4LmdF9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnZKGRw456jraup2CVTCcW62p5hMB8GA1UdIwQY
MBaAFDHakgMhxsgs7mkp55j8k3K6zLklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTct
YTU4OTc4N2JmZjkwLzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTctYTU4OTc4N2JmZjkw
LzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc3Y3Vo9
jpU89lokTnSYYdZeloLsXXT73cspa2CRFpUc/rUJNZrEac/qhBzTbBxeNs/oPN0v
EBVfDhdnBoHI+8idTXazIvRu+dto7xOjbXG9HDFxjUOQNBp9OGh+8LLmm9Cx4iHT
iuDkue17cZHTnKdCFZZTte99yoS8Ffbg/BVKK7pxny60E8b2B13h8SZqP4K3ccU3
piyCh1eQs4NlCY4khDAjbvvb5iSsz7/5N30o+3AiNOTsUCnlkoFEbEde1/CXi0OH
xsykVWXWis5GN28Ejd1dGv+5YHe0jrQBYlaKf/2FiyQjcFnHBjxbI0YGjlpgyTuE
vKOBoHTl9LLRFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:34 2025 by rpki-client