Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: 5wdg3t6S4ZiSa3+ankrovjfHcM1qMvh2WVef7MDr/Ho=
Subject key identifier: EC:EB:1C:01:4B:40:49:BC:0D:C8:67:48:1B:2E:95:3E:53:87:E5:06
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 0198D629841C4CB39406CC591725A0D6E3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 0CED
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: o+sAg6+nu6Bf+mjV+n352XRFwumgES/+C/+YTqOO2+Q=)
2: negj_8qldSprHD3F1eQcTwkIJOc.roa (hash: 5inaQlsg7taDD/vUiufDsWArj6aKqWfm3/zGXBynHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:84:1c:4c:b3:94:06:cc:59:17:25:a0:d6:e3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=eceb1c014b4049bc0dc867481b2e953e5387e506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:15:f4:bc:2a:3f:ca:29:58:7e:97:d4:07:
b7:d2:42:6e:da:76:eb:88:ae:ae:a1:da:89:4d:a4:
0e:2a:1a:9b:b0:4e:05:16:a4:7d:16:9d:71:25:9d:
1f:28:ef:95:68:8a:1d:51:c7:8f:08:23:d6:c4:b7:
e5:06:4f:b1:79:65:df:c0:c8:66:04:39:e1:b3:ee:
32:53:f0:ca:d5:c9:47:89:0e:ac:7a:d1:cb:69:72:
55:a2:f9:82:e1:fe:3a:61:43:3f:85:c3:92:30:a0:
71:9c:ec:67:42:2e:e6:bf:d6:e5:a8:9a:cd:ce:4e:
d5:64:15:be:d2:bb:fa:6e:aa:aa:2a:bd:71:dc:4f:
f2:b9:c7:1c:2d:36:9c:19:3e:0f:d6:90:4a:e0:cb:
05:cb:6b:c9:97:1a:a7:3c:18:52:4f:78:83:e2:c2:
02:0d:4b:67:d4:d4:ad:21:bc:32:9f:c8:8f:ef:56:
fb:c5:0d:d7:af:38:5f:de:dd:1f:1b:7b:27:41:4f:
e9:94:4f:e1:78:4b:52:e9:ee:4b:58:c7:cf:49:7e:
88:22:a4:f8:11:2e:25:70:1d:30:61:fd:db:cd:e0:
49:81:38:80:c6:c2:4d:59:4e:93:1e:9c:36:56:ab:
38:30:69:16:6c:29:77:36:93:91:16:b2:86:de:5c:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:1C:01:4B:40:49:BC:0D:C8:67:48:1B:2E:95:3E:53:87:E5:06
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e0:22:3c:56:99:c5:46:9c:c7:07:4e:a7:2c:13:91:2f:4e:
44:96:23:d6:5c:ce:ff:cb:35:a4:58:8f:e4:80:72:f7:e7:65:
c0:76:24:a4:da:27:58:80:15:47:27:50:da:fa:7f:47:dd:09:
3f:89:22:5a:d2:3b:86:a7:97:fa:2c:ae:6a:e8:cb:16:3d:84:
20:9a:fb:e7:32:f5:44:ac:cc:28:0f:16:0b:33:98:14:96:9f:
93:bc:ae:8b:fb:50:6a:52:64:43:a7:19:3d:30:26:4c:11:e1:
c5:9f:9b:6e:f1:8f:24:4f:4f:14:88:8e:5e:b3:e9:00:24:7a:
68:81:bf:b8:ad:3d:69:36:c9:bb:9f:46:6e:99:86:55:dc:54:
26:2e:0c:b2:6f:53:eb:b4:a4:5c:b6:ff:37:fc:4d:1b:28:5b:
f2:10:39:ad:2a:3d:bc:35:76:13:bd:0e:fd:f1:d0:15:af:4a:
8c:1e:ea:af:63:c6:87:95:c4:11:12:eb:ec:1d:82:ed:89:ee:
e5:e1:c7:31:1e:9b:b7:a8:c3:b6:d6:3e:fc:57:bc:39:9d:41:
20:de:af:6d:9c:98:c3:94:18:40:0f:dd:b9:af:1a:a8:66:bc:
50:6d:9e:12:fd:22:ae:05:6a:ab:7f:8b:56:1c:1c:de:01:ca:
be:8f:24:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKYQcTLOUBsxZFyWg1uO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTZjZGQ1YTQ5Y2U2YzQyYTlhMzVmYTc3Yjk3Mjc4MTk2
ODg4OTYwHhcNMjUwODIzMDkwMTQxWhcNMjUwODI0MDkwMTQxWjAzMTEwLwYDVQQD
EyhlY2ViMWMwMTRiNDA0OWJjMGRjODY3NDgxYjJlOTUzZTUzODdlNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArigV9LwqP8opWH6X1Ae30kJu2nbr
iK6uodqJTaQOKhqbsE4FFqR9Fp1xJZ0fKO+VaIodUcePCCPWxLflBk+xeWXfwMhm
BDnhs+4yU/DK1clHiQ6setHLaXJVovmC4f46YUM/hcOSMKBxnOxnQi7mv9blqJrN
zk7VZBW+0rv6bqqqKr1x3E/yucccLTacGT4P1pBK4MsFy2vJlxqnPBhST3iD4sIC
DUtn1NStIbwyn8iP71b7xQ3Xrzhf3t0fG3snQU/plE/heEtS6e5LWMfPSX6IIqT4
ES4lcB0wYf3bzeBJgTiAxsJNWU6THpw2Vqs4MGkWbCl3NpORFrKG3lyFNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzrHAFLQEm8DchnSBsulT5Th+UGMB8GA1UdIwQY
MBaAFPNWzdWknObEKpo1+ne5cngZaIiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMt
NTc2OGQzN2Y3YmI1LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMtNTc2OGQzN2Y3YmI1
LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+AiPFaZ
xUacxwdOpywTkS9ORJYj1lzO/8s1pFiP5IBy9+dlwHYkpNonWIAVRydQ2vp/R90J
P4kiWtI7hqeX+iyuaujLFj2EIJr75zL1RKzMKA8WCzOYFJafk7yui/tQalJkQ6cZ
PTAmTBHhxZ+bbvGPJE9PFIiOXrPpACR6aIG/uK09aTbJu59GbpmGVdxUJi4Msm9T
67SkXLb/N/xNGyhb8hA5rSo9vDV2E70O/fHQFa9KjB7qr2PGh5XEERLr7B2C7Ynu
5eHHMR6bt6jDttY+/Fe8OZ1BIN6vbZyYw5QYQA/dua8aqGa8UG2eEv0irgVqq3+L
Vhwc3gHKvo8kNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:32 2025 by rpki-client