Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json)
Hash identifier: zMGJsPSfIm+QVhMb8jBurEmpYfm0fa5rSoXL3GLT6bM=
Subject key identifier: 4F:58:69:5F:A8:BE:A3:D8:B3:12:49:C6:19:C0:27:49:92:E9:DF:F9
Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Certificate serial: 0198D51565861969F4380562EF20753B60DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: s5CTPEfgyO+YjSmIkP77TMcjmcFI6bYXOsKwgKyeaTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:65:86:19:69:f4:38:05:62:ef:20:75:3b:60:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=4f58695fa8bea3d8b31249c619c0274992e9dff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:a5:ab:fe:ec:af:9d:d2:80:02:5d:48:de:
b2:2e:4d:c4:39:75:5c:54:81:92:4a:fa:9b:6a:49:
f3:18:26:a4:3d:66:83:b3:0f:81:cf:69:97:02:1b:
88:8a:0f:61:65:09:65:61:80:8b:28:c3:26:49:58:
d1:af:21:62:a9:ab:77:cb:12:3c:38:9f:2e:29:13:
d1:8d:9a:6a:a2:f6:07:e1:9f:c0:4a:70:be:d0:20:
4c:4c:ce:3b:87:7b:fd:a6:a9:d1:f9:94:5b:17:2e:
3b:0d:6f:df:e1:5f:96:e5:d0:eb:67:09:24:e4:c0:
6b:11:01:7b:3a:80:14:ec:29:15:13:72:9c:29:60:
ee:d7:db:49:1f:f7:6c:da:9e:a4:ac:36:69:1b:c8:
14:95:cb:2f:65:da:a3:bf:06:79:fa:ca:a3:f5:98:
c9:e5:64:a3:ff:1f:7a:e2:aa:d9:a4:70:53:5c:f2:
db:bb:83:5f:3a:a6:8b:1b:4f:64:65:1c:63:c6:ab:
07:79:bc:e7:24:48:d9:85:9d:5e:e9:37:02:89:fe:
8c:5b:83:36:90:58:30:ef:54:89:95:84:a3:75:2b:
10:14:17:c3:11:4b:65:ac:4c:fa:42:0d:bb:8c:a3:
be:37:1b:87:60:f7:cb:f9:ad:ca:0a:6c:1f:cd:d1:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:69:5F:A8:BE:A3:D8:B3:12:49:C6:19:C0:27:49:92:E9:DF:F9
X509v3 Authority Key Identifier:
keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:86:47:30:a5:47:1a:36:3a:91:44:42:fb:bd:7e:9c:bc:fd:
8e:5c:55:c8:f1:d6:f3:d6:34:97:3a:f4:b0:7e:40:95:e8:cf:
a0:72:82:4d:36:1a:6c:15:dd:61:9f:32:4b:cb:89:29:fd:7a:
92:fe:1f:0b:6c:7c:eb:cd:d1:e0:d8:4e:95:80:1d:c9:d1:99:
25:7e:61:a0:c4:99:8b:aa:97:c4:3b:e6:78:c4:14:78:17:d1:
b8:25:07:04:83:ae:7f:89:80:90:7b:9a:9d:76:4d:36:a7:aa:
cd:b8:cb:bd:e5:55:49:c5:ca:ae:21:4a:91:68:58:b8:2f:9b:
b1:59:e4:b5:70:37:17:a5:2d:dd:d2:78:26:be:dd:79:6d:4e:
7e:55:9d:5b:35:81:9d:1a:32:ec:c1:91:27:36:e7:53:16:12:
b7:ac:fd:5b:9e:5e:82:57:ec:e9:97:19:ad:b8:1d:44:d7:f3:
3a:41:63:9b:ae:71:ac:9e:14:29:39:49:62:2c:b2:c7:68:79:
cc:83:49:e6:2a:e6:e0:9b:b2:8a:7f:b8:28:86:9b:c1:a6:49:
19:8d:fd:58:1c:74:5f:22:13:9b:59:5a:db:0d:a9:ed:f9:38:
5c:d5:e5:39:05:e3:48:66:83:0c:c9:a1:4a:2b:fb:af:4b:25:
10:39:a2:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFWWGGWn0OAVi7yB1O2DbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDQyYmQ3ODMyYTZhYmUxNmUxNTIyYTJkN2U0ZTQwZDNl
YmEwYTIwHhcNMjUwODIzMDQwMDA1WhcNMjUwODI0MDQwMDA1WjAzMTEwLwYDVQQD
Eyg0ZjU4Njk1ZmE4YmVhM2Q4YjMxMjQ5YzYxOWMwMjc0OTkyZTlkZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEqlq/7sr53SgAJdSN6yLk3EOXVc
VIGSSvqbaknzGCakPWaDsw+Bz2mXAhuIig9hZQllYYCLKMMmSVjRryFiqat3yxI8
OJ8uKRPRjZpqovYH4Z/ASnC+0CBMTM47h3v9pqnR+ZRbFy47DW/f4V+W5dDrZwkk
5MBrEQF7OoAU7CkVE3KcKWDu19tJH/ds2p6krDZpG8gUlcsvZdqjvwZ5+sqj9ZjJ
5WSj/x964qrZpHBTXPLbu4NfOqaLG09kZRxjxqsHebznJEjZhZ1e6TcCif6MW4M2
kFgw71SJlYSjdSsQFBfDEUtlrEz6Qg27jKO+NxuHYPfL+a3KCmwfzdEOowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9YaV+ovqPYsxJJxhnAJ0mS6d/5MB8GA1UdIwQY
MBaAFLvUK9eDKmq+FuFSKi1+TkDT66CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYt
ODBjOGE4NjdkNzcxLzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYtODBjOGE4NjdkNzcx
LzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYZHMKVH
GjY6kURC+71+nLz9jlxVyPHW89Y0lzr0sH5AlejPoHKCTTYabBXdYZ8yS8uJKf16
kv4fC2x8683R4NhOlYAdydGZJX5hoMSZi6qXxDvmeMQUeBfRuCUHBIOuf4mAkHua
nXZNNqeqzbjLveVVScXKriFKkWhYuC+bsVnktXA3F6Ut3dJ4Jr7deW1OflWdWzWB
nRoy7MGRJzbnUxYSt6z9W55eglfs6ZcZrbgdRNfzOkFjm65xrJ4UKTlJYiyyx2h5
zINJ5irm4Juyin+4KIabwaZJGY39WBx0XyITm1la2w2p7fk4XNXlOQXjSGaDDMmh
Siv7r0slEDmisw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:04 2025 by rpki-client