Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: ea7yRiexpSjwu/Bl+CE3b26NpwSly9hHb2mIIFFuXWs=
Subject key identifier: 22:FF:9B:1C:14:24:B4:58:65:B5:B5:C5:8E:85:9C:70:98:80:74:D1
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 0198D583ED21EB4848C50397050BCE396FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 05CB
Signing time: Sat 23 Aug 2025 06:00:49 +0000
Manifest this update: Sat 23 Aug 2025 06:00:49 +0000
Manifest next update: Sun 24 Aug 2025 06:00:49 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: uboRy8MKb/QaWoKpA5QKwmi/Mpib3kxHplf0OvwfNmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ed:21:eb:48:48:c5:03:97:05:0b:ce:39:6f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: Aug 23 06:00:49 2025 GMT
Not After : Aug 24 06:00:49 2025 GMT
Subject: CN=22ff9b1c1424b45865b5b5c58e859c70988074d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:e5:85:47:02:32:cc:77:bc:b6:a3:78:3f:
1c:0d:74:a1:18:8b:b9:02:07:7f:c8:6d:c3:7f:f0:
ef:80:f9:93:0d:55:e0:c6:dc:c4:01:e4:bc:6b:56:
c2:47:84:e4:83:b9:58:7e:0a:ca:8e:db:a2:25:f2:
1c:19:be:49:10:ef:b4:29:ac:96:81:cb:d6:64:d2:
4f:ec:13:20:18:d6:99:69:cf:47:38:74:f9:24:94:
15:28:7b:e4:ed:5c:c4:f5:c4:0d:a3:08:6a:70:08:
eb:1a:75:5d:b7:e1:2f:77:80:8f:9e:16:33:25:b9:
8b:d0:52:47:e6:b9:04:95:fd:51:19:60:0a:35:a4:
35:57:b4:97:91:86:2d:49:79:79:1c:2a:fc:f6:b5:
db:23:75:bd:1a:e8:e4:2a:8d:fc:67:05:7b:a9:ad:
ce:3a:87:98:b2:6f:ec:f5:98:6b:2e:a6:9b:5f:52:
1c:f5:e1:1c:76:95:59:b3:1d:17:40:b1:46:5f:90:
15:a3:4d:9d:94:88:b7:66:76:19:9a:ae:63:06:c4:
ab:3a:09:b3:1c:14:c1:9d:0b:36:b1:cf:4d:28:83:
3f:30:42:dc:fd:a4:01:de:ce:e4:40:cb:e4:d8:3f:
69:b7:75:c9:cd:f2:67:08:b7:fe:6d:4a:b9:65:44:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FF:9B:1C:14:24:B4:58:65:B5:B5:C5:8E:85:9C:70:98:80:74:D1
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:aa:2a:a0:cc:d8:31:c0:24:d4:01:db:d8:a2:36:98:40:0a:
01:57:f6:2f:17:da:a4:8b:7f:a3:b1:41:fe:e5:a9:42:03:da:
f0:7a:23:f0:74:8f:48:3c:1e:2f:1f:72:27:15:4c:d4:10:03:
98:06:68:6b:86:43:ee:56:23:1d:d6:90:ea:9f:ad:fb:e6:96:
99:f1:9f:14:73:88:5c:57:3c:9f:a8:8d:b6:46:e6:c0:37:4e:
65:01:3d:ff:ab:5b:ed:7f:fb:27:d3:67:cc:5f:ff:3d:ca:7a:
e4:e8:91:ef:5c:5d:fb:00:a8:5a:96:96:ba:d8:70:a5:e2:10:
9d:d8:dc:b4:eb:8e:f5:e8:16:de:81:20:3e:a0:6e:84:66:ca:
5a:55:93:ae:4b:7e:f0:8c:ba:88:d9:1d:ac:2e:5f:d4:93:05:
45:f8:a3:3b:c1:9d:f9:5a:e4:f6:97:57:91:1b:88:ea:89:ee:
cf:70:0c:9e:fa:39:37:26:63:76:87:fc:bd:9c:90:7e:9d:21:
f7:d5:55:92:04:64:ba:7d:89:be:55:80:24:70:ab:ed:14:dc:
fe:c3:fb:94:b5:f8:98:f5:4c:2d:8c:6b:37:9b:34:08:e4:d4:
5e:51:83:fb:f0:2e:f1:1d:c4:39:d3:3c:eb:03:62:1a:ad:1e:
25:dd:a9:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+0h60hIxQOXBQvOOW+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NGYyYjYyZmQ4NDVjOTE0OGUwZTIyNjQyNTc0OGMzYzZl
OTc1MzkwHhcNMjUwODIzMDYwMDQ5WhcNMjUwODI0MDYwMDQ5WjAzMTEwLwYDVQQD
EygyMmZmOWIxYzE0MjRiNDU4NjViNWI1YzU4ZTg1OWM3MDk4ODA3NGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmHlhUcCMsx3vLajeD8cDXShGIu5
Agd/yG3Df/DvgPmTDVXgxtzEAeS8a1bCR4Tkg7lYfgrKjtuiJfIcGb5JEO+0KayW
gcvWZNJP7BMgGNaZac9HOHT5JJQVKHvk7VzE9cQNowhqcAjrGnVdt+Evd4CPnhYz
JbmL0FJH5rkElf1RGWAKNaQ1V7SXkYYtSXl5HCr89rXbI3W9GujkKo38ZwV7qa3O
OoeYsm/s9ZhrLqabX1Ic9eEcdpVZsx0XQLFGX5AVo02dlIi3ZnYZmq5jBsSrOgmz
HBTBnQs2sc9NKIM/MELc/aQB3s7kQMvk2D9pt3XJzfJnCLf+bUq5ZUQ1FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCL/mxwUJLRYZbW1xY6FnHCYgHTRMB8GA1UdIwQY
MBaAFPRPK2L9hFyRSODiJkJXSMPG6XU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8xNDlhZDQtZTRhNi00YmRjLWE0ZDAt
NzdhNTQ3N2ZiYWJmLzEvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8xNDlhZDQtZTRhNi00YmRjLWE0ZDAtNzdhNTQ3N2ZiYWJm
LzEvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6oqoMzY
McAk1AHb2KI2mEAKAVf2LxfapIt/o7FB/uWpQgPa8Hoj8HSPSDweLx9yJxVM1BAD
mAZoa4ZD7lYjHdaQ6p+t++aWmfGfFHOIXFc8n6iNtkbmwDdOZQE9/6tb7X/7J9Nn
zF//Pcp65OiR71xd+wCoWpaWuthwpeIQndjctOuO9egW3oEgPqBuhGbKWlWTrkt+
8Iy6iNkdrC5f1JMFRfijO8Gd+Vrk9pdXkRuI6onuz3AMnvo5NyZjdof8vZyQfp0h
99VVkgRkun2JvlWAJHCr7RTc/sP7lLX4mPVMLYxrN5s0COTUXlGD+/Au8R3EOdM8
6wNiGq0eJd2pJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:23 2025 by rpki-client