Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: ONK+GlBfU3eUq1KjWvxBHtjunuI9mVcHn21b+6qoYd0=
Subject key identifier: 79:92:89:80:B9:F8:59:03:35:44:79:19:11:29:E9:26:04:45:98:F1
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 0198D54E4215C72F07E4E5A8F9CBA9AE1FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: vRtEhWTfHFZHOpYDSRpXQI/oXORg55ZgfzjX8ZzYCBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:42:15:c7:2f:07:e4:e5:a8:f9:cb:a9:ae:1f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=79928980b9f85903354479191129e926044598f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b4:a0:66:50:02:7c:34:bc:9a:56:89:36:11:
7a:c2:2e:4e:72:69:bc:5b:e6:d4:88:2d:24:b6:20:
9f:29:cc:af:38:dd:a2:c6:50:73:02:68:19:f5:39:
6d:d0:17:1b:e4:34:9a:46:6d:9a:48:ef:c7:73:cf:
4b:45:ff:0b:61:d9:cc:df:c9:af:6d:ad:4a:f6:f5:
c0:16:4f:5b:f1:74:ac:41:97:ef:46:5a:c6:be:4c:
aa:28:4e:b2:f4:66:02:3d:de:a9:2a:9a:d6:03:df:
60:4b:f4:cf:d6:3e:d9:d1:d8:d7:a4:ad:b4:35:b3:
67:54:3a:72:57:bf:f5:52:53:bd:cc:42:09:a1:15:
36:b1:50:fc:91:1c:88:41:83:fe:c7:bc:83:3d:d2:
b9:51:a3:78:ea:a9:c0:d0:de:85:88:13:c3:e7:cb:
24:aa:0c:a8:73:93:25:3e:62:92:06:7a:91:d8:0f:
6e:a7:4b:bb:8b:96:12:5b:ef:50:22:f6:89:9c:51:
a6:d6:80:da:8b:15:47:81:da:16:14:d6:f7:ca:1b:
2e:51:ab:63:40:d5:a8:5f:59:7b:e4:57:3a:20:7f:
d0:7c:7e:cb:52:b3:57:33:76:fc:08:d5:a7:76:04:
9c:90:e8:60:b8:0f:0f:fc:f9:fe:a8:d2:16:d6:07:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:89:80:B9:F8:59:03:35:44:79:19:11:29:E9:26:04:45:98:F1
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:14:c9:00:8d:da:9a:97:dc:40:17:ef:18:1d:4e:54:fe:
8e:1d:11:c8:51:84:fc:85:5a:f4:64:2a:01:ce:79:8c:93:25:
aa:43:60:7f:e3:d3:21:f3:69:ed:42:67:d5:1b:b7:79:02:d2:
af:ce:6f:9e:f5:6f:27:c9:ed:d3:74:50:bb:f3:ed:22:7f:2a:
90:86:7a:b1:41:5e:ba:4f:b5:de:b1:49:11:43:3f:ea:f5:2e:
98:62:17:54:ea:d4:c7:de:03:d0:81:7b:43:d5:04:30:aa:04:
2a:6d:b9:f5:d3:ff:36:69:27:c5:36:45:b1:cb:fc:4c:fc:a9:
24:1d:a1:ca:0c:2b:72:74:fc:01:37:bd:88:e7:19:69:54:c9:
dd:b5:56:6a:3f:00:18:17:97:c7:ec:50:9a:8d:73:72:7a:f1:
48:3d:16:b6:e2:16:22:77:bb:62:2a:56:80:b4:95:bc:a0:f4:
bf:de:1f:9f:52:56:6d:30:25:73:5e:27:95:63:64:f8:82:c1:
d4:c8:81:5e:92:b3:b6:1a:9b:fa:39:41:28:80:84:88:4a:e8:
ef:06:d3:57:00:27:2c:00:40:8e:b1:9a:2e:0a:50:24:df:5c:
df:21:86:06:aa:ad:bf:41:b4:0f:7f:4b:aa:27:03:3f:94:ae:
a8:38:5f:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTkIVxy8H5OWo+cuprh/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOGI3OTgxMGNlYmM1YmEyYTUyZjdhMDhkNTE5NmQzM2U4
Y2RjZTcwHhcNMjUwODIzMDUwMjEyWhcNMjUwODI0MDUwMjEyWjAzMTEwLwYDVQQD
Eyg3OTkyODk4MGI5Zjg1OTAzMzU0NDc5MTkxMTI5ZTkyNjA0NDU5OGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bSgZlACfDS8mlaJNhF6wi5Ocmm8
W+bUiC0ktiCfKcyvON2ixlBzAmgZ9Tlt0Bcb5DSaRm2aSO/Hc89LRf8LYdnM38mv
ba1K9vXAFk9b8XSsQZfvRlrGvkyqKE6y9GYCPd6pKprWA99gS/TP1j7Z0djXpK20
NbNnVDpyV7/1UlO9zEIJoRU2sVD8kRyIQYP+x7yDPdK5UaN46qnA0N6FiBPD58sk
qgyoc5MlPmKSBnqR2A9up0u7i5YSW+9QIvaJnFGm1oDaixVHgdoWFNb3yhsuUatj
QNWoX1l75Fc6IH/QfH7LUrNXM3b8CNWndgSckOhguA8P/Pn+qNIW1ge1CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmSiYC5+FkDNUR5GREp6SYERZjxMB8GA1UdIwQY
MBaAFG+LeYEM68W6KlL3oI1RltM+jNznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kZTY3NTktMDkxOS00ZTVjLThhY2Et
NDQzNTUzMjhiN2IwLzEvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kZTY3NTktMDkxOS00ZTVjLThhY2EtNDQzNTUzMjhiN2Iw
LzEvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfC4UyQCN
2pqX3EAX7xgdTlT+jh0RyFGE/IVa9GQqAc55jJMlqkNgf+PTIfNp7UJn1Ru3eQLS
r85vnvVvJ8nt03RQu/PtIn8qkIZ6sUFeuk+13rFJEUM/6vUumGIXVOrUx94D0IF7
Q9UEMKoEKm259dP/NmknxTZFscv8TPypJB2hygwrcnT8ATe9iOcZaVTJ3bVWaj8A
GBeXx+xQmo1zcnrxSD0WtuIWIne7YipWgLSVvKD0v94fn1JWbTAlc14nlWNk+ILB
1MiBXpKzthqb+jlBKICEiEro7wbTVwAnLABAjrGaLgpQJN9c3yGGBqqtv0G0D39L
qicDP5SuqDhfNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:53 2025 by rpki-client