Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
File: Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json)
Hash identifier: WTSSAyoyIpcei+L/mp16NFvSbKnaUO6ykN176wwKclE=
Subject key identifier: AE:C9:30:67:74:7A:53:CA:41:C7:B5:E3:86:83:24:CE:3E:6E:57:E7
Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
Certificate issuer: /CN=471d7371241346c6ea9a476946802172ca07566b
Certificate serial: 0198D65F4E720EA52117276C05625F098760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
Manifest number: 097F
Signing time: Sat 23 Aug 2025 10:00:26 +0000
Manifest this update: Sat 23 Aug 2025 10:00:26 +0000
Manifest next update: Sun 24 Aug 2025 10:00:26 +0000
Files and hashes: 1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: WYt10uIuYA0PMxxPd9KNnxryRkRG3xygTN+uESEnJV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4e:72:0e:a5:21:17:27:6c:05:62:5f:09:87:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471d7371241346c6ea9a476946802172ca07566b
Validity
Not Before: Aug 23 10:00:26 2025 GMT
Not After : Aug 24 10:00:26 2025 GMT
Subject: CN=aec93067747a53ca41c7b5e3868324ce3e6e57e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:00:84:ae:3a:2c:c4:40:f1:63:6e:e0:77:de:
44:7d:6a:b2:af:82:c0:c5:53:c9:64:17:94:e9:3e:
52:2f:14:52:52:13:e1:c6:10:b1:1d:08:41:26:68:
16:70:df:b1:0a:44:f5:ae:71:ff:81:fa:b6:3c:1a:
79:11:33:07:be:09:c9:ba:01:50:f3:16:dc:01:22:
67:c4:a7:da:54:dc:4f:6e:43:64:96:04:fe:b7:ad:
3d:3a:53:e7:74:70:eb:1f:07:50:4b:ef:3b:4b:76:
d4:c4:10:47:05:73:25:39:d0:d6:72:0a:1c:05:65:
79:6b:32:a4:8f:da:96:7a:de:23:93:84:62:19:ac:
3e:a4:c3:9d:ca:93:db:40:e8:57:2e:ee:68:fc:7d:
59:a4:81:00:33:e7:7a:b5:af:00:76:51:72:42:f8:
c6:82:dc:ba:5e:f5:51:ce:12:b9:80:cc:af:19:f9:
02:d6:62:9f:88:59:72:23:b5:9c:02:f1:c3:ca:e8:
39:ce:7b:22:c9:11:cd:6c:7b:9a:bf:61:da:0f:fe:
8a:ca:da:c7:eb:2a:02:c2:13:07:12:e8:61:54:ca:
ea:59:d6:57:dd:d7:7b:b7:8e:c5:ac:06:7a:fb:98:
bd:d0:f1:88:23:9c:18:21:4b:d1:d5:3a:07:ef:79:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:30:67:74:7A:53:CA:41:C7:B5:E3:86:83:24:CE:3E:6E:57:E7
X509v3 Authority Key Identifier:
keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:49:0a:7b:43:ae:45:56:11:e7:ea:ba:1f:4c:73:ea:6e:3e:
5e:f7:da:47:52:81:38:50:2d:6b:69:9c:d4:7b:22:9c:33:c0:
6c:8e:e6:c0:da:8b:5e:9d:21:e4:83:f3:73:d9:24:b0:b4:0e:
10:f2:77:78:ed:b4:88:07:1e:33:ea:b4:6a:f3:7d:77:f7:19:
98:3f:0e:80:c5:11:f7:a3:f3:c8:31:de:ab:7a:b4:6d:19:84:
17:92:1c:f7:45:50:71:b1:2f:49:ad:4f:ce:70:93:02:fc:aa:
ed:dc:3b:d1:18:a2:6f:cd:a0:1e:2a:e7:e1:27:70:75:65:78:
26:a9:99:65:f8:0b:d3:c3:b3:78:e5:c0:cf:a0:1c:cf:b2:4d:
98:b0:15:d3:9d:d1:bf:2d:2c:ea:48:3f:65:72:7b:7f:b2:fa:
96:25:bc:cc:b4:3f:10:24:50:72:59:b3:39:5b:f6:a9:d0:9d:
ec:ef:99:3e:b6:d2:2c:ac:c6:e8:cf:c3:7c:29:d1:5a:ef:f3:
ab:96:b3:0c:bb:96:df:d0:27:2f:f0:dc:95:ea:05:08:62:d8:
dc:24:5a:00:f4:8d:e6:18:38:34:5e:58:b1:2d:21:f5:62:9e:
90:a5:17:61:ae:e3:d3:fc:97:65:10:77:11:74:5e:6b:49:2d:
aa:27:30:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX05yDqUhFydsBWJfCYdgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MWQ3MzcxMjQxMzQ2YzZlYTlhNDc2OTQ2ODAyMTcyY2Ew
NzU2NmIwHhcNMjUwODIzMTAwMDI2WhcNMjUwODI0MTAwMDI2WjAzMTEwLwYDVQQD
EyhhZWM5MzA2Nzc0N2E1M2NhNDFjN2I1ZTM4NjgzMjRjZTNlNmU1N2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ACErjosxEDxY27gd95EfWqyr4LA
xVPJZBeU6T5SLxRSUhPhxhCxHQhBJmgWcN+xCkT1rnH/gfq2PBp5ETMHvgnJugFQ
8xbcASJnxKfaVNxPbkNklgT+t609OlPndHDrHwdQS+87S3bUxBBHBXMlOdDWcgoc
BWV5azKkj9qWet4jk4RiGaw+pMOdypPbQOhXLu5o/H1ZpIEAM+d6ta8AdlFyQvjG
gty6XvVRzhK5gMyvGfkC1mKfiFlyI7WcAvHDyug5znsiyRHNbHuav2HaD/6KytrH
6yoCwhMHEuhhVMrqWdZX3dd7t47FrAZ6+5i90PGII5wYIUvR1ToH73kfgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7JMGd0elPKQce144aDJM4+blfnMB8GA1UdIwQY
MBaAFEcdc3EkE0bG6ppHaUaAIXLKB1ZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUngxemNTUVRSc2JxbWtkcFJvQWhjc29IVm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kMDgxNWMtNWIyNi00MzE3LThlNzUt
NTY5MWYxNzM4YWJhLzEvUngxemNTUVRSc2JxbWtkcFJvQWhjc29IVm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kMDgxNWMtNWIyNi00MzE3LThlNzUtNTY5MWYxNzM4YWJh
LzEvUngxemNTUVRSc2JxbWtkcFJvQWhjc29IVm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEkKe0Ou
RVYR5+q6H0xz6m4+XvfaR1KBOFAta2mc1HsinDPAbI7mwNqLXp0h5IPzc9kksLQO
EPJ3eO20iAceM+q0avN9d/cZmD8OgMUR96PzyDHeq3q0bRmEF5Ic90VQcbEvSa1P
znCTAvyq7dw70Riib82gHirn4SdwdWV4JqmZZfgL08OzeOXAz6Acz7JNmLAV053R
vy0s6kg/ZXJ7f7L6liW8zLQ/ECRQclmzOVv2qdCd7O+ZPrbSLKzG6M/DfCnRWu/z
q5azDLuW39AnL/DcleoFCGLY3CRaAPSN5hg4NF5YsS0h9WKekKUXYa7j0/yXZRB3
EXRea0ktqicwLg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:59:51 2025 by rpki-client