Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json)
Hash identifier: WWwefYlQC5bogsns+6cKHbwxqA4UiTBjcOcqjjZhVh0=
Subject key identifier: 64:4E:E9:00:E0:0C:15:D3:CF:58:CC:0C:E6:8F:65:A1:D0:8A:4D:9E
Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02
Certificate serial: 0198D4733EE710F49E6439760CBC7EEB9AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
Manifest number: 0153
Signing time: Sat 23 Aug 2025 01:02:59 +0000
Manifest this update: Sat 23 Aug 2025 01:02:59 +0000
Manifest next update: Sun 24 Aug 2025 01:02:59 +0000
Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: wiNDLQr4IvsJxnHBld2DYnkzeqJgIPBWsWCbHwN4Yjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3e:e7:10:f4:9e:64:39:76:0c:bc:7e:eb:9a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02
Validity
Not Before: Aug 23 01:02:59 2025 GMT
Not After : Aug 24 01:02:59 2025 GMT
Subject: CN=644ee900e00c15d3cf58cc0ce68f65a1d08a4d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:68:af:2b:d8:24:cc:fc:21:27:67:85:5c:
d2:0e:82:3c:1b:f7:b2:5f:ca:d6:03:17:0f:65:da:
52:cc:3e:bc:86:37:9f:bc:08:8a:82:cc:eb:6f:33:
e3:a2:4d:e4:ec:dd:90:c2:52:4e:46:4c:fa:97:91:
3f:8b:13:4d:60:b8:46:33:93:2f:77:bb:8c:29:29:
4e:e5:31:b6:99:69:88:52:90:58:06:4f:90:09:94:
78:24:c7:3a:3b:a3:c4:5c:b6:2d:56:1d:6e:a4:02:
8a:2f:d0:2b:78:5d:6f:aa:93:63:0b:35:fd:95:0a:
37:ea:8c:70:2a:1a:16:97:56:0e:03:ff:10:32:f3:
13:cf:37:61:26:41:f7:88:da:e7:3d:c3:02:8c:68:
a9:4e:cb:e2:1d:39:75:16:27:71:a6:ef:f8:f2:14:
78:c9:a9:7f:f5:4d:57:0f:22:0d:6f:ec:ab:c3:a7:
87:32:3e:a8:75:9e:eb:04:ac:4f:e5:d7:55:97:0d:
dc:9c:1b:ca:ab:29:7f:c5:0e:c6:e0:5c:db:69:61:
56:e2:92:c5:b9:6b:a0:a7:15:35:d4:1a:c8:38:85:
9a:aa:a1:a0:ab:0c:14:e2:16:cf:70:01:16:86:25:
60:23:0a:0b:1e:6f:a2:fa:8c:08:ab:e2:4b:43:35:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:E9:00:E0:0C:15:D3:CF:58:CC:0C:E6:8F:65:A1:D0:8A:4D:9E
X509v3 Authority Key Identifier:
keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:16:eb:c5:fc:14:c6:1d:cd:8f:02:e9:59:59:e1:99:54:90:
f3:01:cf:dd:1d:dc:83:a1:e1:67:3e:78:f6:49:be:71:37:73:
42:dc:8d:cd:69:c4:8b:b1:38:e7:fd:c2:de:13:57:25:6d:80:
8f:f2:2e:5f:d2:8b:41:c2:9d:cd:b6:23:57:36:72:de:91:22:
49:8e:2b:ee:e1:b1:17:7c:58:60:6a:d6:2d:aa:be:fe:62:0b:
eb:a1:a4:a8:34:be:06:a3:dc:70:d1:1c:54:1a:f7:66:6f:8f:
6d:02:37:c1:12:ff:e2:c7:7a:c7:5c:7f:4b:c6:b6:fe:d2:8e:
25:01:bd:5c:64:58:8c:ed:38:79:86:6e:92:80:41:e5:db:ef:
9f:fb:11:34:2b:1f:db:fd:a2:3e:07:9b:c8:69:cc:9c:bd:15:
0d:27:5e:23:f5:88:32:01:9d:ff:b4:48:09:71:10:7d:36:e4:
37:de:4d:7a:58:58:6d:1d:44:3d:84:80:61:58:ac:5a:8f:69:
6e:ea:86:0e:bf:13:92:91:05:33:a5:a6:0d:2a:05:63:e8:58:
d2:b9:a5:30:86:da:8d:b2:35:e4:09:d3:fb:90:14:39:a5:8d:
0d:18:54:1f:8f:e3:02:0d:a7:d7:7c:33:2b:1f:5b:6c:c5:e5:
01:b3:52:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcz7nEPSeZDl2DLx+65qrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGU0OTBlMTBlYTM3YmQ4MzQ5NjI4NjMzYjU4ODU2NjFl
NjdhMDIwHhcNMjUwODIzMDEwMjU5WhcNMjUwODI0MDEwMjU5WjAzMTEwLwYDVQQD
Eyg2NDRlZTkwMGUwMGMxNWQzY2Y1OGNjMGNlNjhmNjVhMWQwOGE0ZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueJoryvYJMz8ISdnhVzSDoI8G/ey
X8rWAxcPZdpSzD68hjefvAiKgszrbzPjok3k7N2QwlJORkz6l5E/ixNNYLhGM5Mv
d7uMKSlO5TG2mWmIUpBYBk+QCZR4JMc6O6PEXLYtVh1upAKKL9AreF1vqpNjCzX9
lQo36oxwKhoWl1YOA/8QMvMTzzdhJkH3iNrnPcMCjGipTsviHTl1Fidxpu/48hR4
yal/9U1XDyINb+yrw6eHMj6odZ7rBKxP5ddVlw3cnBvKqyl/xQ7G4FzbaWFW4pLF
uWugpxU11BrIOIWaqqGgqwwU4hbPcAEWhiVgIwoLHm+i+owIq+JLQzXBMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRO6QDgDBXTz1jMDOaPZaHQik2eMB8GA1UdIwQY
MBaAFHAOSQ4Q6je9g0lihjO1iFZh5noCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2Yt
ZWE2YjBiZTVjYWVlLzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2YtZWE2YjBiZTVjYWVl
LzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRbrxfwU
xh3NjwLpWVnhmVSQ8wHP3R3cg6HhZz549km+cTdzQtyNzWnEi7E45/3C3hNXJW2A
j/IuX9KLQcKdzbYjVzZy3pEiSY4r7uGxF3xYYGrWLaq+/mIL66GkqDS+BqPccNEc
VBr3Zm+PbQI3wRL/4sd6x1x/S8a2/tKOJQG9XGRYjO04eYZukoBB5dvvn/sRNCsf
2/2iPgebyGnMnL0VDSdeI/WIMgGd/7RICXEQfTbkN95NelhYbR1EPYSAYVisWo9p
buqGDr8TkpEFM6WmDSoFY+hY0rmlMIbajbI15AnT+5AUOaWNDRhUH4/jAg2n13wz
Kx9bbMXlAbNSYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:41 2025 by rpki-client