Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json)
Hash identifier: wQnXQTPo4/YoQsbcAMJvKz2JJcWQJtfYqhSiw8+qJcQ=
Subject key identifier: 14:27:18:19:49:ED:38:ED:0D:3A:61:01:8E:70:B6:6B:94:A1:72:AA
Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62
Certificate serial: 0198D65FEFC3593320979C976088D773FDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:08 +0000
Manifest this update: Sat 23 Aug 2025 10:01:08 +0000
Manifest next update: Sun 24 Aug 2025 10:01:08 +0000
Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: 1Cqe2UQU/9l609N8cJsiSK3ucWC7W/qJ/oTUDltv5sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ef:c3:59:33:20:97:9c:97:60:88:d7:73:fd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62
Validity
Not Before: Aug 23 10:01:08 2025 GMT
Not After : Aug 24 10:01:08 2025 GMT
Subject: CN=1427181949ed38ed0d3a61018e70b66b94a172aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:8e:a9:af:b0:95:75:91:da:8e:8a:21:17:
41:6d:b9:f9:27:ac:75:ed:71:16:ff:c7:97:fc:3d:
ee:5b:51:c0:ca:f1:3b:11:9b:60:59:47:ac:5e:7d:
19:fd:5b:01:7a:c1:60:48:e5:b4:d8:a2:f2:bf:6a:
0d:ab:cc:3d:24:25:3f:80:c0:0d:b9:ad:09:ef:31:
cb:cb:28:0f:41:00:a9:14:ad:53:05:8e:ae:5d:1a:
f5:bf:4e:66:68:60:a2:ca:72:b4:0e:86:14:ef:15:
87:db:22:54:36:d0:75:d7:af:84:18:b9:f6:a7:6d:
22:3b:75:3d:40:28:28:57:06:e6:0b:40:0a:ec:36:
1f:f4:7f:d3:e6:95:69:a5:af:9b:23:52:46:dd:69:
ca:9e:c8:c7:0f:4b:bd:a4:4b:1a:fd:d1:64:03:38:
88:61:6e:b5:59:44:69:66:57:2d:e6:3b:63:1f:d7:
8b:6f:44:86:34:2f:71:3f:45:00:b1:29:c4:66:78:
db:14:b4:36:1e:eb:f8:9e:b3:7e:a9:3d:e0:65:9f:
41:52:fa:ea:77:24:1e:0b:58:7c:72:71:01:31:ec:
4a:89:38:33:cd:29:ea:13:f3:69:25:fc:f7:eb:62:
15:6a:4c:43:62:c0:ff:ab:d7:82:4f:9d:66:79:0a:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:27:18:19:49:ED:38:ED:0D:3A:61:01:8E:70:B6:6B:94:A1:72:AA
X509v3 Authority Key Identifier:
keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ce:c4:46:4d:71:ef:bb:31:02:65:05:c8:82:8a:86:86:04:
5a:41:19:ad:01:96:10:5e:fc:32:12:52:a2:21:64:56:33:3e:
a0:43:f2:0f:78:0e:17:d1:98:7d:fb:e4:8b:40:84:6a:19:d2:
de:25:f3:44:a4:fa:aa:8d:02:5b:47:dd:06:63:18:bd:e7:9e:
c7:6b:fc:75:3e:79:a5:1b:0b:a3:bd:a1:17:7e:88:b2:94:0b:
af:77:41:c3:8b:9a:46:42:7b:62:1e:99:72:ab:37:8e:2b:20:
ea:0a:04:ae:45:ad:58:30:cd:89:2e:f5:a1:72:d9:03:95:db:
ff:1d:7d:b6:9d:22:d8:10:3e:92:8f:77:44:b1:73:7e:43:d2:
6b:e3:e5:a0:8b:d4:9d:9b:52:ba:7d:b7:f6:c3:13:11:72:31:
a0:70:3c:48:23:7e:7a:55:18:3b:83:e4:22:b7:51:a2:b4:be:
c1:c4:07:80:db:eb:39:d7:3f:f5:4d:49:18:d9:32:67:36:8d:
ed:07:da:d2:d3:5c:13:2a:de:71:41:8b:e6:90:8c:3e:97:3e:
e2:33:0c:42:85:54:6e:ec:d7:86:7e:79:13:81:63:9c:de:f2:
6c:5a:02:d6:ff:9d:81:7e:ab:d7:36:70:62:0e:d2:11:3c:7a:
cc:4e:71:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX+/DWTMgl5yXYIjXc/25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWRkZWI2ZWExMzk1ZjY5OGY0MmU3NTQxYWVmNDkyNDI2
MjVmNjIwHhcNMjUwODIzMTAwMTA4WhcNMjUwODI0MTAwMTA4WjAzMTEwLwYDVQQD
EygxNDI3MTgxOTQ5ZWQzOGVkMGQzYTYxMDE4ZTcwYjY2Yjk0YTE3MmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kWOqa+wlXWR2o6KIRdBbbn5J6x1
7XEW/8eX/D3uW1HAyvE7EZtgWUesXn0Z/VsBesFgSOW02KLyv2oNq8w9JCU/gMAN
ua0J7zHLyygPQQCpFK1TBY6uXRr1v05maGCiynK0DoYU7xWH2yJUNtB116+EGLn2
p20iO3U9QCgoVwbmC0AK7DYf9H/T5pVppa+bI1JG3WnKnsjHD0u9pEsa/dFkAziI
YW61WURpZlct5jtjH9eLb0SGNC9xP0UAsSnEZnjbFLQ2Huv4nrN+qT3gZZ9BUvrq
dyQeC1h8cnEBMexKiTgzzSnqE/NpJfz362IVakxDYsD/q9eCT51meQo3nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQnGBlJ7TjtDTphAY5wtmuUoXKqMB8GA1UdIwQY
MBaAFESt3rbqE5X2mPQudUGu9JJCYl9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80YTZlZjEtYjRlZS00YTE0LTkzODQt
NDcxNGY5NzFiNzhiLzEvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC80YTZlZjEtYjRlZS00YTE0LTkzODQtNDcxNGY5NzFiNzhi
LzEvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjc7ERk1x
77sxAmUFyIKKhoYEWkEZrQGWEF78MhJSoiFkVjM+oEPyD3gOF9GYffvki0CEahnS
3iXzRKT6qo0CW0fdBmMYveeex2v8dT55pRsLo72hF36IspQLr3dBw4uaRkJ7Yh6Z
cqs3jisg6goErkWtWDDNiS71oXLZA5Xb/x19tp0i2BA+ko93RLFzfkPSa+PloIvU
nZtSun239sMTEXIxoHA8SCN+elUYO4PkIrdRorS+wcQHgNvrOdc/9U1JGNkyZzaN
7Qfa0tNcEyrecUGL5pCMPpc+4jMMQoVUbuzXhn55E4FjnN7ybFoC1v+dgX6r1zZw
Yg7SETx6zE5x9w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:07 2025 by rpki-client