Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
File: d11030Q8uAUXzkFQ3OImYpQPHXw.mft (raw, json)
Hash identifier: vmIyOefgTidBAlxcqGi+tv3Hk1K3oNfAkMV56Cv9CnY=
Subject key identifier: 20:CF:44:63:AE:42:4E:22:13:48:2C:7B:A7:34:B3:4F:CF:3E:09:C3
Authority key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
Certificate issuer: /CN=775d74df443cb80517ce4150dce22662940f1d7c
Certificate serial: 0198D6CD2D0B114A6C91D0C09630C0F48580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
Manifest number: 0A85
Signing time: Sat 23 Aug 2025 12:00:27 +0000
Manifest this update: Sat 23 Aug 2025 12:00:27 +0000
Manifest next update: Sun 24 Aug 2025 12:00:27 +0000
Files and hashes: 1: d11030Q8uAUXzkFQ3OImYpQPHXw.crl (hash: uwan2i3mxuWIPSjU9FUrZStSU5A7eeXrBxghzAI8Yko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:2d:0b:11:4a:6c:91:d0:c0:96:30:c0:f4:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775d74df443cb80517ce4150dce22662940f1d7c
Validity
Not Before: Aug 23 12:00:27 2025 GMT
Not After : Aug 24 12:00:27 2025 GMT
Subject: CN=20cf4463ae424e2213482c7ba734b34fcf3e09c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:a9:60:93:01:a9:24:3d:69:4e:90:6b:f9:
a2:9e:80:12:42:5f:9a:5b:ee:c0:90:fd:15:5e:d4:
c9:ac:be:10:47:7a:4b:6a:19:94:b6:a7:53:78:cf:
7a:2a:bb:24:ea:e1:10:2e:61:cd:6a:e5:48:42:f3:
6e:8d:4e:12:ee:39:03:3e:2e:be:41:74:f1:ba:12:
c0:bb:4f:20:1d:0e:c9:21:00:fd:51:cb:a1:bc:52:
b4:ea:ba:f8:5f:9c:75:54:45:1a:d0:f7:42:a6:67:
bb:37:75:7b:27:31:05:bb:ed:db:12:dc:e4:75:b8:
6a:ea:4f:e6:91:2e:4e:fe:bd:45:4c:a9:e3:30:a0:
c5:11:2d:26:22:7e:c7:3d:30:9d:00:e0:7e:60:ba:
76:98:df:60:1b:3b:68:84:84:99:9c:53:2f:b6:c9:
70:8f:d8:72:b3:7f:8c:ac:69:47:e4:05:2c:9c:b4:
4a:66:b8:59:1a:e8:b9:8d:ad:45:e4:6c:7e:8b:8f:
ce:17:d1:46:ad:d0:0a:ad:20:96:46:76:f6:b3:55:
47:6e:6d:cb:01:97:14:f0:7f:77:10:cb:da:c5:3f:
f1:96:24:a0:8c:e2:0f:57:f9:d3:23:e5:9d:8b:3a:
10:61:ec:53:1a:88:b9:9f:32:48:7d:4b:74:2e:53:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CF:44:63:AE:42:4E:22:13:48:2C:7B:A7:34:B3:4F:CF:3E:09:C3
X509v3 Authority Key Identifier:
keyid:77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:62:4b:26:99:7a:ca:14:7a:66:70:44:53:0d:58:68:47:46:
e7:c0:41:77:4d:4e:63:09:b1:d9:f7:c0:4c:f8:0d:aa:65:ef:
7d:f3:e3:52:16:7c:ba:55:31:de:43:1a:6c:a1:b5:87:05:f5:
e2:63:34:3c:df:9f:4b:15:09:02:7d:40:98:ac:4d:25:12:0a:
a6:53:07:a2:b3:86:e6:a3:b8:23:54:79:f7:22:38:fa:e0:78:
42:26:fe:69:c8:9e:ed:e3:14:fc:7d:3b:4e:03:5f:7b:54:e6:
46:65:e2:16:0d:02:9b:98:05:06:75:c5:d0:cd:25:87:c9:bc:
0c:91:d7:9b:7c:4c:0c:69:0d:8c:ce:01:a6:b8:17:18:e3:b6:
ea:95:cf:9e:a0:7d:ae:39:ec:ce:2e:dc:e6:26:42:7f:67:88:
ec:52:34:5e:06:58:c7:e4:14:65:cb:57:ad:08:f6:b5:c5:ee:
2e:3b:37:64:eb:76:f7:24:2e:dc:46:e2:8e:f5:52:4c:91:88:
2f:91:da:a2:2d:46:a9:61:ee:6c:66:7f:c0:1f:ec:9b:a8:6e:
4e:55:07:1b:94:3d:b4:07:c4:39:a4:33:1d:a7:16:0c:c7:ba:
fe:dd:3f:fc:cc:fb:94:86:ea:e9:ec:7f:4e:77:14:e6:1e:e3:
11:bd:1e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzS0LEUpskdDAljDA9IWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWQ3NGRmNDQzY2I4MDUxN2NlNDE1MGRjZTIyNjYyOTQw
ZjFkN2MwHhcNMjUwODIzMTIwMDI3WhcNMjUwODI0MTIwMDI3WjAzMTEwLwYDVQQD
EygyMGNmNDQ2M2FlNDI0ZTIyMTM0ODJjN2JhNzM0YjM0ZmNmM2UwOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFCpYJMBqSQ9aU6Qa/minoASQl+a
W+7AkP0VXtTJrL4QR3pLahmUtqdTeM96Krsk6uEQLmHNauVIQvNujU4S7jkDPi6+
QXTxuhLAu08gHQ7JIQD9UcuhvFK06rr4X5x1VEUa0PdCpme7N3V7JzEFu+3bEtzk
dbhq6k/mkS5O/r1FTKnjMKDFES0mIn7HPTCdAOB+YLp2mN9gGztohISZnFMvtslw
j9hys3+MrGlH5AUsnLRKZrhZGui5ja1F5Gx+i4/OF9FGrdAKrSCWRnb2s1VHbm3L
AZcU8H93EMvaxT/xliSgjOIPV/nTI+WdizoQYexTGoi5nzJIfUt0LlOJwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDPRGOuQk4iE0gse6c0s0/PPgnDMB8GA1UdIwQY
MBaAFHdddN9EPLgFF85BUNziJmKUDx18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xYzc3YjctYjgyYS00ZGZkLWI2YjUt
NmY3NTg2MTk4MzdmLzEvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xYzc3YjctYjgyYS00ZGZkLWI2YjUtNmY3NTg2MTk4Mzdm
LzEvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmJLJpl6
yhR6ZnBEUw1YaEdG58BBd01OYwmx2ffATPgNqmXvffPjUhZ8ulUx3kMabKG1hwX1
4mM0PN+fSxUJAn1AmKxNJRIKplMHorOG5qO4I1R59yI4+uB4Qib+acie7eMU/H07
TgNfe1TmRmXiFg0Cm5gFBnXF0M0lh8m8DJHXm3xMDGkNjM4BprgXGOO26pXPnqB9
rjnszi7c5iZCf2eI7FI0XgZYx+QUZctXrQj2tcXuLjs3ZOt29yQu3EbijvVSTJGI
L5Haoi1GqWHubGZ/wB/sm6huTlUHG5Q9tAfEOaQzHacWDMe6/t0//Mz7lIbq6ex/
TncU5h7jEb0eGw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:25 2025 by rpki-client