Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
File: pMqKz4g4TsU94Z4om10mQqEf9_0.mft (raw, json)
Hash identifier: lkqY2OlhUZR9eHgtX9MTIH8jGU7qlzr91PSSQXglglk=
Subject key identifier: 56:6F:B3:AB:B3:5C:EC:06:B2:C9:B3:F4:83:02:3D:56:9D:B2:37:D3
Authority key identifier: A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
Certificate issuer: /CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Certificate serial: 0198D54E03E499CAB354774BB8A62F2D1A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
Manifest number: 041B
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: pMqKz4g4TsU94Z4om10mQqEf9_0.crl (hash: INLaF/SAX6TaPYiRpRC95utNi6YFfegGuHoc4WFvN2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:03:e4:99:ca:b3:54:77:4b:b8:a6:2f:2d:1a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=566fb3abb35cec06b2c9b3f483023d569db237d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:10:84:b0:34:a5:71:2a:1c:93:45:da:75:
d5:d1:b4:c1:30:b7:5d:85:70:b1:2b:e1:e3:8c:77:
cd:7a:50:9b:13:40:6f:a8:71:7f:fd:97:0e:32:43:
dd:72:05:38:4a:2a:96:a0:a1:95:d2:79:2a:e5:da:
3e:35:ce:2c:53:04:7e:99:ea:6d:83:2a:c6:c5:1b:
2d:2a:e1:a1:4f:be:df:a4:7e:21:9e:33:d8:60:bc:
7e:e3:59:41:7c:6f:30:df:ad:75:e5:86:a5:23:1e:
62:5f:c5:7a:6a:8c:9b:6b:97:45:b3:c4:82:72:15:
15:e4:ca:6d:ad:46:6a:c0:f9:36:8e:5d:b8:5e:eb:
a1:a7:ef:f6:4c:75:79:55:60:c2:99:4b:f7:67:20:
8d:7b:d3:a9:4d:81:75:f7:ef:18:03:79:63:d2:12:
7e:43:bb:6e:19:e8:c5:80:5a:d1:c5:17:10:d6:d8:
8e:68:fd:d2:f6:4a:4a:a5:ba:37:d5:55:08:36:20:
eb:51:e7:aa:2c:d7:d5:68:73:5e:ad:43:66:84:c4:
c3:a8:1d:87:c1:28:ab:fc:d8:a8:4e:42:34:0b:26:
5a:9c:29:4b:6c:50:20:eb:3a:4b:ca:ce:19:07:94:
6d:b3:5c:b0:39:56:09:24:17:2b:93:bb:71:a3:7c:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6F:B3:AB:B3:5C:EC:06:B2:C9:B3:F4:83:02:3D:56:9D:B2:37:D3
X509v3 Authority Key Identifier:
keyid:A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5b:a0:20:ef:06:4b:ec:ee:2f:28:e9:93:38:57:86:ef:be:
70:81:15:cd:95:2a:53:a6:4c:ab:f1:04:ef:ea:46:ed:44:57:
d1:1c:33:a7:74:57:83:5c:20:e5:a0:ff:67:d6:73:c7:2c:63:
13:5c:55:6d:9a:29:bf:08:16:75:0b:c3:98:f3:01:66:7a:1f:
d9:44:a0:1d:7c:ab:16:91:a8:7a:15:3e:fe:5a:9f:de:1d:58:
86:87:d6:6f:66:5a:36:da:a3:91:eb:5a:17:c1:63:e8:df:1c:
71:3d:ee:2a:91:65:a7:a9:1d:d5:ed:c4:93:cf:53:c9:4f:22:
ca:99:fa:55:80:57:ec:0b:70:d4:f9:af:f8:a3:31:c1:40:b8:
4a:0d:84:ce:e3:d8:ee:a5:e7:ac:dc:4d:c2:ad:2c:3c:30:d3:
57:0b:ab:8a:68:76:c2:bd:e7:a6:27:ba:eb:a6:25:64:75:c1:
33:20:b8:3c:96:15:b0:10:2b:d2:d3:d5:ac:88:04:53:c5:8d:
5e:a0:76:f0:89:3e:43:a5:2b:79:6b:75:d9:db:4f:00:91:17:
55:82:90:80:33:f8:60:ef:4c:73:c5:e8:ed:7d:40:4b:26:0b:
55:96:ec:ed:29:35:db:9e:00:27:c7:ef:67:4c:4c:1e:4b:8d:
f3:a1:20:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTgPkmcqzVHdLuKYvLRppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Y2E4YWNmODgzODRlYzUzZGUxOWUyODliNWQyNjQyYTEx
ZmY3ZmQwHhcNMjUwODIzMDUwMTU2WhcNMjUwODI0MDUwMTU2WjAzMTEwLwYDVQQD
Eyg1NjZmYjNhYmIzNWNlYzA2YjJjOWIzZjQ4MzAyM2Q1NjlkYjIzN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHYQhLA0pXEqHJNF2nXV0bTBMLdd
hXCxK+HjjHfNelCbE0BvqHF//ZcOMkPdcgU4SiqWoKGV0nkq5do+Nc4sUwR+mept
gyrGxRstKuGhT77fpH4hnjPYYLx+41lBfG8w36115YalIx5iX8V6aoyba5dFs8SC
chUV5MptrUZqwPk2jl24Xuuhp+/2THV5VWDCmUv3ZyCNe9OpTYF19+8YA3lj0hJ+
Q7tuGejFgFrRxRcQ1tiOaP3S9kpKpbo31VUINiDrUeeqLNfVaHNerUNmhMTDqB2H
wSir/NioTkI0CyZanClLbFAg6zpLys4ZB5Rts1ywOVYJJBcrk7txo3z/DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZvs6uzXOwGssmz9IMCPVadsjfTMB8GA1UdIwQY
MBaAFKTKis+IOE7FPeGeKJtdJkKhH/f9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1xS3o0ZzRUc1U5NFo0b20xMG1RcUVmOV8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNGM4NzItZjQ2ZS00MzNkLTk3ODUt
ZWNkN2ZiYzg3NTgwLzEvcE1xS3o0ZzRUc1U5NFo0b20xMG1RcUVmOV8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jNGM4NzItZjQ2ZS00MzNkLTk3ODUtZWNkN2ZiYzg3NTgw
LzEvcE1xS3o0ZzRUc1U5NFo0b20xMG1RcUVmOV8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFugIO8G
S+zuLyjpkzhXhu++cIEVzZUqU6ZMq/EE7+pG7URX0Rwzp3RXg1wg5aD/Z9Zzxyxj
E1xVbZopvwgWdQvDmPMBZnof2USgHXyrFpGoehU+/lqf3h1YhofWb2ZaNtqjketa
F8Fj6N8ccT3uKpFlp6kd1e3Ek89TyU8iypn6VYBX7Atw1Pmv+KMxwUC4Sg2EzuPY
7qXnrNxNwq0sPDDTVwurimh2wr3npie666YlZHXBMyC4PJYVsBAr0tPVrIgEU8WN
XqB28Ik+Q6UreWt12dtPAJEXVYKQgDP4YO9Mc8Xo7X1ASyYLVZbs7Sk1254AJ8fv
Z0xMHkuN86Eg9Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:01:20 2025 by rpki-client