Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File: RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier: W2hYHXTXaGQCuM7iZHqCOc2kBQ4ZfTx7Xqpk4q3dx7U=
Subject key identifier: AD:60:2C:93:C0:E0:5A:6A:6A:4E:D2:E5:3D:E7:9B:D4:23:26:77:83
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer: /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial: 0198D7E1374ED630003F67E126916BAB0B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number: 0522
Signing time: Sat 23 Aug 2025 17:01:57 +0000
Manifest this update: Sat 23 Aug 2025 17:01:57 +0000
Manifest next update: Sun 24 Aug 2025 17:01:57 +0000
Files and hashes: 1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: oMcLAlKnv5ytTH/Dwl6z9qSOLyIZcC6gSbIFnb2DQfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:37:4e:d6:30:00:3f:67:e1:26:91:6b:ab:0b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Validity
Not Before: Aug 23 17:01:57 2025 GMT
Not After : Aug 24 17:01:57 2025 GMT
Subject: CN=ad602c93c0e05a6a6a4ed2e53de79bd423267783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:bb:be:9d:a3:67:80:70:35:8d:1f:a5:00:
b7:32:6a:a5:17:78:4d:97:96:d2:3d:89:81:a1:bb:
89:77:e8:5d:96:ed:41:88:c4:23:98:85:17:cd:62:
e7:64:64:35:fc:b2:29:8f:7b:51:7e:c2:74:ff:75:
77:f4:a8:52:7d:17:0d:06:26:05:60:d2:9f:b5:1e:
b7:40:40:e8:cd:52:c0:43:5b:6c:b8:96:42:47:15:
02:d6:61:0d:f8:2c:6a:84:ca:5e:7d:62:7d:31:41:
16:38:6c:60:e0:e5:9e:3a:7a:52:eb:a1:85:50:fd:
df:a0:87:f4:2e:03:58:23:fc:9a:d0:b5:67:03:76:
3c:db:96:8d:4e:fb:59:18:46:b5:42:c8:3a:0a:2e:
11:6f:8c:19:a2:21:8d:6f:7c:5b:f3:89:d1:5e:29:
1d:73:05:fb:b0:d1:b6:27:90:ba:b5:62:8a:29:bc:
44:7d:95:10:2a:22:80:12:53:15:1a:b8:9a:68:1d:
d6:4d:26:30:0b:23:a9:cc:e1:e4:0b:a2:87:56:ca:
dd:17:5b:8d:ff:00:31:1c:f3:f4:d4:b3:10:e7:ee:
88:63:7c:e2:09:52:17:f6:8c:0b:15:d3:93:83:4e:
7f:0a:e4:c9:a6:9c:a1:f1:ff:90:48:72:9b:f6:ab:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:60:2C:93:C0:E0:5A:6A:6A:4E:D2:E5:3D:E7:9B:D4:23:26:77:83
X509v3 Authority Key Identifier:
keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:77:07:bf:3b:3f:b6:5f:ad:a2:d4:b4:e5:c7:61:ea:df:
d7:66:00:ed:ed:b9:f6:dc:be:d4:53:85:53:ab:dc:81:cd:fc:
f7:0d:f7:d1:12:d6:b6:2f:fa:cb:2d:22:cc:95:23:d2:d1:18:
37:5a:cb:1c:41:20:55:ff:1a:47:40:5f:50:b0:63:b9:72:b8:
27:a2:c3:e7:43:78:8e:4e:fa:fb:e1:7e:0f:4e:a2:7c:31:e9:
c0:ab:7b:df:40:23:ee:7c:61:33:25:d1:b5:d4:50:01:91:03:
d2:4d:79:e5:cd:6b:54:52:a1:ec:f9:cc:a2:82:df:b1:6c:ff:
6e:1d:75:ea:cd:32:8a:b5:02:3a:cc:b0:d5:06:9c:a6:bc:dc:
40:7b:a1:2b:63:f7:8e:30:5b:e4:d3:27:88:11:f8:38:3e:81:
d8:e1:ac:c4:88:ab:77:a7:b3:6a:d1:1d:ef:7a:ba:93:d3:92:
4c:13:6e:e8:d1:dd:ef:f4:b1:65:c6:90:34:f1:0b:e4:3a:37:
f4:bb:25:a2:51:d8:a4:c9:a7:b3:17:cc:16:00:0a:4e:e1:e8:
f0:66:e2:bc:c6:1c:e3:30:f7:ba:3f:ac:9b:05:8c:45:cf:e7:
0f:25:1d:f7:28:fd:03:db:2d:e0:df:39:ef:16:3a:07:78:c4:
1b:1c:6b:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4TdO1jAAP2fhJpFrqwsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YjljNDg5YjRiYmM4NWRlNzM0NDE3ZWJiYTRlMTM3YjE3
YzA3OWQwHhcNMjUwODIzMTcwMTU3WhcNMjUwODI0MTcwMTU3WjAzMTEwLwYDVQQD
EyhhZDYwMmM5M2MwZTA1YTZhNmE0ZWQyZTUzZGU3OWJkNDIzMjY3NzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwim7vp2jZ4BwNY0fpQC3MmqlF3hN
l5bSPYmBobuJd+hdlu1BiMQjmIUXzWLnZGQ1/LIpj3tRfsJ0/3V39KhSfRcNBiYF
YNKftR63QEDozVLAQ1tsuJZCRxUC1mEN+CxqhMpefWJ9MUEWOGxg4OWeOnpS66GF
UP3foIf0LgNYI/ya0LVnA3Y825aNTvtZGEa1Qsg6Ci4Rb4wZoiGNb3xb84nRXikd
cwX7sNG2J5C6tWKKKbxEfZUQKiKAElMVGriaaB3WTSYwCyOpzOHkC6KHVsrdF1uN
/wAxHPP01LMQ5+6IY3ziCVIX9owLFdOTg05/CuTJppyh8f+QSHKb9qvcGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1gLJPA4Fpqak7S5T3nm9QjJneDMB8GA1UdIwQY
MBaAFES5xIm0u8hd5zRBfruk4TexfAedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkxuRWliUzd5RjNuTkVGLXU2VGhON0Y4QjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82Njk1NTQtMzY5Ny00ZDI5LThmYTMt
NGViOTZlOWFjYjE2LzEvUkxuRWliUzd5RjNuTkVGLXU2VGhON0Y4QjUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS82Njk1NTQtMzY5Ny00ZDI5LThmYTMtNGViOTZlOWFjYjE2
LzEvUkxuRWliUzd5RjNuTkVGLXU2VGhON0Y4QjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchl3B787
P7ZfraLUtOXHYerf12YA7e259ty+1FOFU6vcgc389w330RLWti/6yy0izJUj0tEY
N1rLHEEgVf8aR0BfULBjuXK4J6LD50N4jk76++F+D06ifDHpwKt730Aj7nxhMyXR
tdRQAZED0k155c1rVFKh7PnMooLfsWz/bh116s0yirUCOsyw1QacprzcQHuhK2P3
jjBb5NMniBH4OD6B2OGsxIird6ezatEd73q6k9OSTBNu6NHd7/SxZcaQNPEL5Do3
9LslolHYpMmnsxfMFgAKTuHo8GbivMYc4zD3uj+smwWMRc/nDyUd9yj9A9st4N85
7xY6B3jEGxxrwA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:33 2025 by rpki-client