Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: n5xDUxN1HfoJjX/RGT/wf8lkyB7y8769EtAzr+ApCzI=
Subject key identifier: 4E:8A:6C:63:17:B7:7E:D2:F8:B7:1F:4A:B7:A9:BB:19:EF:4D:32:41
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 0197B9A156BD7D2FCF434608F1BDA787696D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 0538
Signing time: Sun 29 Jun 2025 03:00:47 +0000
Manifest this update: Sun 29 Jun 2025 03:00:47 +0000
Manifest next update: Mon 30 Jun 2025 03:00:47 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: JLTnGl7UgKCClB/BOFfovL4q3yEepovQJTxUyXoOjpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:56:bd:7d:2f:cf:43:46:08:f1:bd:a7:87:69:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: Jun 29 03:00:47 2025 GMT
Not After : Jun 30 03:00:47 2025 GMT
Subject: CN=4e8a6c6317b77ed2f8b71f4ab7a9bb19ef4d3241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:ed:c7:0d:f3:1d:b0:0a:bd:7e:b7:e8:4c:
44:e4:05:64:f4:d5:4b:36:fc:00:cc:76:da:25:a8:
d7:2b:57:d6:9e:1e:ba:b1:b0:25:15:7e:6f:08:23:
a4:76:df:98:b4:3a:7d:ac:df:bb:d8:57:c1:08:53:
28:2f:74:91:1c:2a:c4:e7:13:17:f9:39:dd:06:fc:
ac:0b:15:fd:e3:29:89:e0:f9:90:ce:96:73:ae:61:
3b:9a:09:56:6f:7b:48:24:03:a5:5b:8c:e2:d5:84:
e9:34:bb:50:da:6d:8b:79:1b:d8:6b:b4:85:7e:7b:
bd:ee:21:cc:d3:9f:56:39:e1:4f:fa:eb:99:16:87:
86:2d:cf:bc:d5:50:5c:a5:fb:17:dd:c4:db:eb:6f:
f8:a0:a5:15:50:08:72:ec:d3:4f:40:6f:7d:5a:cb:
be:45:2c:f1:d4:0b:85:5d:31:58:d9:5a:62:11:79:
4c:a7:38:18:b7:92:43:8a:e6:26:83:53:8b:86:df:
20:47:b1:a7:88:43:3f:65:7b:82:9e:48:ee:e5:b9:
37:72:31:08:1b:70:02:62:72:58:e3:ac:a2:2c:d7:
92:15:76:3f:54:f8:5c:5a:3a:43:ed:d8:a0:4d:c7:
57:b7:65:73:f1:f1:ab:9b:ed:93:25:ba:79:cb:f4:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8A:6C:63:17:B7:7E:D2:F8:B7:1F:4A:B7:A9:BB:19:EF:4D:32:41
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d6:73:62:d1:4b:9e:37:2c:67:1b:99:01:eb:83:9e:e2:f3:
99:73:2c:a4:44:77:c6:d6:5a:2b:63:ac:cf:44:c5:e7:e7:5e:
e7:fe:a1:e3:4c:76:2e:95:9c:ca:d7:fa:2f:d6:ba:fe:22:55:
e3:c3:af:fe:8d:f2:a8:9d:94:3f:4a:ec:c3:69:e0:94:60:2d:
1c:b1:05:dc:c7:54:c8:17:7e:c1:ee:d0:91:09:fd:f1:f9:a4:
f5:7e:04:9b:c0:3d:02:b3:2e:e8:cd:ae:ac:64:ac:a1:09:99:
68:9b:48:1f:72:ba:77:78:20:cb:82:f7:bb:9e:72:2b:06:8f:
d5:88:bf:52:b9:12:1b:a2:87:a2:76:50:7b:96:78:f5:25:d0:
af:c4:67:62:78:37:de:34:84:94:e1:91:ae:e5:4c:20:2a:4c:
ec:ba:b8:5b:f8:f9:be:e9:b0:f0:9b:c1:ae:ed:e4:02:3f:45:
5b:d6:60:c5:5d:5f:5f:67:09:82:00:97:08:02:69:1e:fa:37:
1d:de:21:38:e1:b1:48:36:2e:39:7a:67:51:b5:01:7e:95:41:
38:8f:bc:f6:04:39:e0:9d:21:a1:50:22:b3:25:60:65:dd:8d:
25:54:0a:58:67:9d:7e:9e:db:9a:52:ec:c1:09:c1:05:54:b9:
ff:7d:b3:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oVa9fS/PQ0YI8b2nh2ltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NGYyYjYyZmQ4NDVjOTE0OGUwZTIyNjQyNTc0OGMzYzZl
OTc1MzkwHhcNMjUwNjI5MDMwMDQ3WhcNMjUwNjMwMDMwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZThhNmM2MzE3Yjc3ZWQyZjhiNzFmNGFiN2E5YmIxOWVmNGQzMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtntxw3zHbAKvX636ExE5AVk9NVL
NvwAzHbaJajXK1fWnh66sbAlFX5vCCOkdt+YtDp9rN+72FfBCFMoL3SRHCrE5xMX
+TndBvysCxX94ymJ4PmQzpZzrmE7mglWb3tIJAOlW4zi1YTpNLtQ2m2LeRvYa7SF
fnu97iHM059WOeFP+uuZFoeGLc+81VBcpfsX3cTb62/4oKUVUAhy7NNPQG99Wsu+
RSzx1AuFXTFY2VpiEXlMpzgYt5JDiuYmg1OLht8gR7GniEM/ZXuCnkju5bk3cjEI
G3ACYnJY46yiLNeSFXY/VPhcWjpD7digTcdXt2Vz8fGrm+2TJbp5y/QDBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6KbGMXt37S+LcfSrepuxnvTTJBMB8GA1UdIwQY
MBaAFPRPK2L9hFyRSODiJkJXSMPG6XU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8xNDlhZDQtZTRhNi00YmRjLWE0ZDAt
NzdhNTQ3N2ZiYWJmLzEvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8xNDlhZDQtZTRhNi00YmRjLWE0ZDAtNzdhNTQ3N2ZiYWJm
LzEvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNZzYtFL
njcsZxuZAeuDnuLzmXMspER3xtZaK2Osz0TF5+de5/6h40x2LpWcytf6L9a6/iJV
48Ov/o3yqJ2UP0rsw2nglGAtHLEF3MdUyBd+we7QkQn98fmk9X4Em8A9ArMu6M2u
rGSsoQmZaJtIH3K6d3ggy4L3u55yKwaP1Yi/UrkSG6KHonZQe5Z49SXQr8RnYng3
3jSElOGRruVMICpM7Lq4W/j5vumw8JvBru3kAj9FW9ZgxV1fX2cJggCXCAJpHvo3
Hd4hOOGxSDYuOXpnUbUBfpVBOI+89gQ54J0hoVAisyVgZd2NJVQKWGedfp7bmlLs
wQnBBVS5/32z8w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:59:55 2025 by rpki-client