Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
File: eO-oRu6OjAecoehyv-BfngT3_-8.mft (raw, json)
Hash identifier: QG9udiU3uNhUxruf9xUSOY2FUGz7t+zGJBbJFeGu3B0=
Subject key identifier: C1:F7:5F:55:47:ED:2A:82:2E:3D:22:78:C7:30:D6:F6:FB:14:54:23
Authority key identifier: 78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF
Certificate issuer: /CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
Certificate serial: 0198D65F0DDE138D6CC642168EF70EE51B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
Manifest number: 11D7
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: eO-oRu6OjAecoehyv-BfngT3_-8.crl (hash: xRChApa5JHvUq9vKOSPj5ZDfHHsYjEvHcX5U53XGMQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0d:de:13:8d:6c:c6:42:16:8e:f7:0e:e5:1b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=c1f75f5547ed2a822e3d2278c730d6f6fb145423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:52:d0:16:59:5b:15:6e:b9:85:ec:aa:cb:
e4:90:02:59:18:4e:c5:92:bf:c6:82:a4:1b:6a:01:
d9:25:d0:3a:41:d1:9a:c0:d3:8c:bc:d3:24:9b:8d:
c8:6a:a4:eb:ff:ef:31:79:aa:70:8c:44:4b:2b:2a:
8e:64:54:e2:09:2f:e3:ee:19:81:88:77:74:5c:3b:
38:38:37:04:a8:be:3c:5d:a3:bc:2b:52:4b:27:8d:
7d:a4:92:ad:8b:21:a4:64:ae:06:f1:9e:d3:f6:d7:
15:dd:25:9c:55:2a:fe:ad:3b:8b:4e:6f:24:2f:41:
d0:55:53:4e:48:ab:48:b2:98:07:78:7d:81:91:bd:
c4:22:4e:f0:af:a4:cb:41:56:01:17:8f:c6:19:55:
04:84:9a:7e:cd:ce:4f:14:2d:77:7a:57:67:06:16:
3c:a1:7a:c8:db:3c:31:49:27:5f:d1:0f:75:3a:9b:
04:d9:2d:54:09:40:e2:6d:df:00:16:e7:93:24:68:
fa:c3:c0:08:c8:2b:a6:04:76:14:7c:ac:04:e0:f4:
27:ce:94:c6:d7:17:42:a5:d2:06:f2:7f:7c:ff:83:
be:b2:fb:1e:65:45:1f:a7:6c:44:52:40:41:41:04:
cc:0c:1a:7d:f7:0d:96:d3:1a:84:d3:ff:b4:89:ea:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:5F:55:47:ED:2A:82:2E:3D:22:78:C7:30:D6:F6:FB:14:54:23
X509v3 Authority Key Identifier:
keyid:78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:b4:ce:1d:31:44:63:c0:4a:57:52:83:c2:17:69:4f:81:
01:f1:c6:9b:15:1f:63:96:47:6f:7e:50:3c:3c:28:a2:e5:7f:
a0:1a:63:0c:29:30:00:ec:4a:22:8f:f3:8c:6e:fe:81:02:09:
3e:ab:07:f0:d7:25:26:ba:f5:2e:3a:55:d4:a0:43:35:7d:bc:
5e:bf:02:7d:ca:d3:a6:bd:1b:2d:47:11:c7:fd:73:a0:fc:5d:
10:be:c1:58:08:66:a1:28:a4:e5:c8:2c:2b:73:b4:8e:04:bd:
22:37:5a:9f:17:0a:bf:ea:a4:25:f0:fa:84:e6:a8:80:94:68:
c3:cb:23:31:08:a8:a3:bc:7c:b6:d5:2a:4c:09:aa:e0:b7:2d:
b3:09:ba:30:89:1a:19:18:b3:04:07:dd:74:df:9b:f1:b2:53:
5f:ce:14:ef:a5:f2:5a:e3:bd:f6:17:e5:78:80:c5:b6:0a:d0:
e3:32:da:6f:33:9e:ab:05:7a:cb:bc:ea:fb:0b:27:30:f1:ba:
f8:30:79:b4:5f:d5:0b:cb:4d:c9:a2:f3:6c:b4:e0:39:6b:85:
48:26:ba:23:b2:75:49:5f:8f:93:9f:bf:4f:da:54:3d:7a:a6:
49:07:32:0f:a3:26:65:15:b6:8a:d8:0a:f3:27:f2:4e:e6:9b:
21:de:ba:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXw3eE41sxkIWjvcO5Rs0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZWZhODQ2ZWU4ZThjMDc5Y2ExZTg3MmJmZTA1ZjllMDRm
N2ZmZWYwHhcNMjUwODIzMTAwMDEwWhcNMjUwODI0MTAwMDEwWjAzMTEwLwYDVQQD
EyhjMWY3NWY1NTQ3ZWQyYTgyMmUzZDIyNzhjNzMwZDZmNmZiMTQ1NDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgBS0BZZWxVuuYXsqsvkkAJZGE7F
kr/GgqQbagHZJdA6QdGawNOMvNMkm43IaqTr/+8xeapwjERLKyqOZFTiCS/j7hmB
iHd0XDs4ODcEqL48XaO8K1JLJ419pJKtiyGkZK4G8Z7T9tcV3SWcVSr+rTuLTm8k
L0HQVVNOSKtIspgHeH2Bkb3EIk7wr6TLQVYBF4/GGVUEhJp+zc5PFC13eldnBhY8
oXrI2zwxSSdf0Q91OpsE2S1UCUDibd8AFueTJGj6w8AIyCumBHYUfKwE4PQnzpTG
1xdCpdIG8n98/4O+svseZUUfp2xEUkBBQQTMDBp99w2W0xqE0/+0ier++QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH3X1VH7SqCLj0ieMcw1vb7FFQjMB8GA1UdIwQY
MBaAFHjvqEbujowHnKHocr/gX54E9//vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU8tb1J1Nk9qQWVjb2VoeXYtQmZuZ1QzXy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zYzg3YjgtYTg0MC00MDkwLTk0NjUt
NjNjZWYyM2Y4ZDMxLzEvZU8tb1J1Nk9qQWVjb2VoeXYtQmZuZ1QzXy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zYzg3YjgtYTg0MC00MDkwLTk0NjUtNjNjZWYyM2Y4ZDMx
LzEvZU8tb1J1Nk9qQWVjb2VoeXYtQmZuZ1QzXy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk20zh0x
RGPASldSg8IXaU+BAfHGmxUfY5ZHb35QPDwoouV/oBpjDCkwAOxKIo/zjG7+gQIJ
PqsH8NclJrr1LjpV1KBDNX28Xr8CfcrTpr0bLUcRx/1zoPxdEL7BWAhmoSik5cgs
K3O0jgS9IjdanxcKv+qkJfD6hOaogJRow8sjMQioo7x8ttUqTAmq4Lctswm6MIka
GRizBAfddN+b8bJTX84U76XyWuO99hfleIDFtgrQ4zLabzOeqwV6y7zq+wsnMPG6
+DB5tF/VC8tNyaLzbLTgOWuFSCa6I7J1SV+Pk5+/T9pUPXqmSQcyD6MmZRW2itgK
8yfyTuabId66KQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:09 2025 by rpki-client