Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: hMt7OkymGdSnt4i+uLb1++y3gUwyG1aDDmHL6Sv5dQo=
Subject key identifier: 64:6D:E0:98:2F:CD:B4:5F:1A:31:1D:23:D6:FB:FC:80:79:1D:D7:4B
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 0198D515EFA1C0C7B9EFB7893CB4E8CB3CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 11D8
Signing time: Sat 23 Aug 2025 04:00:41 +0000
Manifest this update: Sat 23 Aug 2025 04:00:41 +0000
Manifest next update: Sun 24 Aug 2025 04:00:41 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: vqdFyvbz9+W0ecl92UWnRMu0iWZwNAl91hJ3wrerN7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ef:a1:c0:c7:b9:ef:b7:89:3c:b4:e8:cb:3c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Aug 23 04:00:41 2025 GMT
Not After : Aug 24 04:00:41 2025 GMT
Subject: CN=646de0982fcdb45f1a311d23d6fbfc80791dd74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:bb:54:09:af:6d:5e:28:e1:c2:5c:c2:22:
41:42:3f:95:3b:34:df:5c:1c:f7:1b:d9:ac:4d:3d:
ec:f5:09:7e:1f:69:be:78:3e:9e:92:92:0b:b6:fa:
66:cc:aa:95:6f:43:22:21:dc:9a:5c:4d:42:8f:d6:
b1:bb:fc:f5:0a:24:4e:15:6f:ec:5f:a9:ec:54:69:
b4:cb:b7:b9:db:67:63:16:8c:c1:dd:35:1a:0d:c6:
b0:d6:7f:82:3c:e4:d7:27:d6:0e:e4:fd:46:ed:7e:
b4:79:37:8b:b9:8a:c7:53:e5:c7:08:dc:cb:4a:c0:
39:6a:fd:99:83:d6:00:0d:19:99:f0:b7:64:99:e6:
70:25:b9:23:0e:3c:e5:c0:33:bd:63:e4:34:fc:e5:
63:7a:ac:7f:22:13:88:09:e2:50:d1:43:5d:53:e0:
b1:cf:19:41:d9:27:6e:f4:cf:7c:a5:58:11:8a:a5:
82:c9:7b:d1:1e:3f:8b:0a:aa:54:5c:d7:90:d0:fc:
e9:d8:8c:79:d0:fb:c7:90:a8:88:d9:00:b6:09:43:
52:53:1f:f7:f0:51:04:0c:53:db:14:16:ef:1a:98:
7e:d6:56:20:01:4a:c0:c5:be:f6:79:5a:bb:01:8e:
2a:fc:c0:73:4e:37:fd:87:8a:da:8b:b0:22:9b:0e:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6D:E0:98:2F:CD:B4:5F:1A:31:1D:23:D6:FB:FC:80:79:1D:D7:4B
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2d:59:7f:14:2b:96:3d:5a:64:db:79:c8:b8:d7:6f:42:4f:
0e:f9:9c:fd:02:eb:3e:6f:68:51:5e:55:ae:23:3d:45:2f:92:
87:9f:b5:92:bc:2d:d4:e0:0e:72:d5:30:db:15:7c:5b:a4:64:
79:20:ff:ea:cc:e9:85:59:69:db:14:1c:2c:53:68:02:b0:a2:
12:34:2c:12:41:4e:2a:cc:ef:28:d0:e5:20:4f:e9:36:6d:a2:
bb:44:55:b3:08:90:bb:1e:c9:c1:22:fc:fe:76:4d:54:42:84:
df:5f:4d:6f:e8:99:17:c6:06:13:db:4a:c8:84:c6:0e:90:74:
32:76:65:0d:a4:b1:f4:23:25:49:90:94:c3:ec:d1:19:8b:20:
0e:65:2e:9f:6a:39:47:68:95:ff:ce:69:5c:1f:73:75:06:7a:
e1:1d:9e:09:b1:93:08:5b:d6:bc:40:26:09:97:e8:60:80:b4:
5a:bd:06:14:9b:df:5e:96:79:b5:61:29:bb:62:8e:bf:a7:63:
7a:e0:ab:6a:a5:ee:5a:c5:ab:6b:28:24:1b:53:b2:e2:22:cd:
12:21:fe:52:2d:46:2d:98:86:a7:9d:2f:5e:44:ff:42:b2:6c:
0d:56:69:27:95:6f:f5:2a:28:e8:47:44:0d:d0:71:a7:ca:23:
63:24:92:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFe+hwMe577eJPLToyzzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNDJhOTUyYWY2Zjg0ZjI5ZjFkMWIxZWU5NzQxYjA1NzI4
Njg3ODQwHhcNMjUwODIzMDQwMDQxWhcNMjUwODI0MDQwMDQxWjAzMTEwLwYDVQQD
Eyg2NDZkZTA5ODJmY2RiNDVmMWEzMTFkMjNkNmZiZmM4MDc5MWRkNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ+7VAmvbV4o4cJcwiJBQj+VOzTf
XBz3G9msTT3s9Ql+H2m+eD6ekpILtvpmzKqVb0MiIdyaXE1Cj9axu/z1CiROFW/s
X6nsVGm0y7e522djFozB3TUaDcaw1n+CPOTXJ9YO5P1G7X60eTeLuYrHU+XHCNzL
SsA5av2Zg9YADRmZ8LdkmeZwJbkjDjzlwDO9Y+Q0/OVjeqx/IhOICeJQ0UNdU+Cx
zxlB2Sdu9M98pVgRiqWCyXvRHj+LCqpUXNeQ0Pzp2Ix50PvHkKiI2QC2CUNSUx/3
8FEEDFPbFBbvGph+1lYgAUrAxb72eVq7AY4q/MBzTjf9h4rai7Aimw6flwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRt4JgvzbRfGjEdI9b7/IB5HddLMB8GA1UdIwQY
MBaAFN9CqVKvb4Tynx0bHul0GwVyhoeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYt
ZDIyODg1MjViMDg3LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYtZDIyODg1MjViMDg3
LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi1ZfxQr
lj1aZNt5yLjXb0JPDvmc/QLrPm9oUV5VriM9RS+Sh5+1krwt1OAOctUw2xV8W6Rk
eSD/6szphVlp2xQcLFNoArCiEjQsEkFOKszvKNDlIE/pNm2iu0RVswiQux7JwSL8
/nZNVEKE319Nb+iZF8YGE9tKyITGDpB0MnZlDaSx9CMlSZCUw+zRGYsgDmUun2o5
R2iV/85pXB9zdQZ64R2eCbGTCFvWvEAmCZfoYIC0Wr0GFJvfXpZ5tWEpu2KOv6dj
euCraqXuWsWraygkG1Oy4iLNEiH+Ui1GLZiGp50vXkT/QrJsDVZpJ5Vv9Soo6EdE
DdBxp8ojYySSuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:26 2025 by rpki-client