Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: Kgj6CxQQwow2vginsd1cjIXmt23gHS6SVENboiti8g4=
Subject key identifier: 22:35:E0:B5:A5:C8:26:53:5B:7E:4A:FA:45:D4:3C:01:CC:C2:3C:1F
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 0198D65F0F19B3000A28DF7BD479216ACDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: lZWJuW20+YqMVeuKRT7ObJk075UchVh7aAylaj0wTZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0f:19:b3:00:0a:28:df:7b:d4:79:21:6a:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=2235e0b5a5c826535b7e4afa45d43c01ccc23c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:8d:27:73:8a:61:56:a8:ab:1e:ec:43:2f:
74:b4:36:c5:3f:9a:65:3a:fb:92:e7:e2:15:4f:2f:
d9:70:16:33:9e:50:6f:7e:6f:0c:81:f1:32:1c:1f:
e4:22:4e:1b:8b:aa:da:08:ae:43:11:ab:e7:7a:a1:
e8:34:90:55:22:ce:62:71:46:47:36:33:cb:5b:45:
d5:f0:b2:40:88:85:ce:6b:bb:79:18:4f:8a:a3:30:
77:1d:29:42:27:fb:1e:03:4e:7d:00:aa:dd:3a:56:
c1:d1:2a:2b:90:7f:81:98:a9:d2:f5:c5:88:3d:7e:
d0:dc:86:20:0c:c9:84:88:0d:ca:23:ef:71:1b:2d:
81:79:0a:b5:8e:05:b0:3a:2e:e9:cd:ec:72:cb:74:
fe:e6:bd:e1:a3:49:e5:a9:ce:ae:01:54:4d:cb:82:
7c:1a:38:f1:b1:10:d7:44:f3:10:d9:c2:67:80:d7:
43:cd:00:14:3c:08:89:a2:88:bc:93:2b:6e:f9:11:
27:3f:7d:91:53:72:ba:88:43:0f:4b:2d:8b:17:5f:
88:eb:c4:27:23:0d:00:39:35:4b:ab:1c:4c:49:7f:
07:a4:2b:e4:90:25:2d:70:e5:3e:55:42:74:89:26:
31:e6:ce:62:51:83:2f:4a:a7:d4:5a:56:9c:bf:09:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:35:E0:B5:A5:C8:26:53:5B:7E:4A:FA:45:D4:3C:01:CC:C2:3C:1F
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:96:6d:cf:0f:c5:6a:76:39:c2:60:0f:5b:e8:dd:82:84:41:
9e:c6:1b:bb:15:aa:67:a5:e8:bd:9e:b5:7f:20:dc:c8:91:4b:
02:f1:44:c4:1b:df:e1:ed:71:cf:bb:08:bc:ec:14:bd:3f:03:
fc:f7:a7:33:01:83:af:f0:f3:67:94:ce:18:51:58:fc:34:95:
68:02:27:0d:60:fa:b9:2c:86:74:82:38:cc:e7:a9:6e:6c:53:
09:d4:4a:7b:21:3f:a6:95:d1:10:2c:66:e6:ed:f7:c3:d0:cc:
63:07:02:41:ef:13:a5:5f:31:0c:94:ad:da:28:79:d5:ae:cc:
cc:51:54:16:e9:c5:bb:42:ac:7d:d4:21:6c:91:e6:e7:0c:e4:
5c:80:33:d7:c1:8e:20:1e:21:5f:68:21:39:84:1a:56:ed:6c:
f6:cf:4c:5e:aa:d1:a2:9f:b1:70:5a:40:90:8d:aa:e7:ba:3d:
d1:aa:ac:fd:eb:b3:21:b7:e4:b1:71:53:3f:e5:07:62:41:cd:
9a:05:55:2a:68:e1:dd:8c:da:cd:b0:84:48:bc:cc:62:a7:be:
78:58:99:fe:85:7d:c9:ae:7b:e4:b4:c8:59:50:dc:7f:36:ff:
46:5f:10:42:c6:52:87:af:20:45:10:e9:9d:68:ab:34:97:bb:
7a:78:3d:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXw8ZswAKKN971Hkhas3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYmNhYmYwN2MxOWM4YTIwYTc2OWFhODI5MDcxYWIzMzgy
ZjU4OGEwHhcNMjUwODIzMTAwMDEwWhcNMjUwODI0MTAwMDEwWjAzMTEwLwYDVQQD
EygyMjM1ZTBiNWE1YzgyNjUzNWI3ZTRhZmE0NWQ0M2MwMWNjYzIzYzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqCNJ3OKYVaoqx7sQy90tDbFP5pl
OvuS5+IVTy/ZcBYznlBvfm8MgfEyHB/kIk4bi6raCK5DEavneqHoNJBVIs5icUZH
NjPLW0XV8LJAiIXOa7t5GE+KozB3HSlCJ/seA059AKrdOlbB0SorkH+BmKnS9cWI
PX7Q3IYgDMmEiA3KI+9xGy2BeQq1jgWwOi7pzexyy3T+5r3ho0nlqc6uAVRNy4J8
GjjxsRDXRPMQ2cJngNdDzQAUPAiJooi8kytu+REnP32RU3K6iEMPSy2LF1+I68Qn
Iw0AOTVLqxxMSX8HpCvkkCUtcOU+VUJ0iSYx5s5iUYMvSqfUWlacvwkreQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI14LWlyCZTW35K+kXUPAHMwjwfMB8GA1UdIwQY
MBaAFG+8q/B8GciiCnaaqCkHGrM4L1iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjd5cjhId1p5S0lLZHBxb0tRY2Fzemd2V0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zNjRkM2UtYTQ0ZC00NDZhLTgyZWUt
NjVkOWU0NjExMjcwLzEvYjd5cjhId1p5S0lLZHBxb0tRY2Fzemd2V0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zNjRkM2UtYTQ0ZC00NDZhLTgyZWUtNjVkOWU0NjExMjcw
LzEvYjd5cjhId1p5S0lLZHBxb0tRY2Fzemd2V0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZZtzw/F
anY5wmAPW+jdgoRBnsYbuxWqZ6XovZ61fyDcyJFLAvFExBvf4e1xz7sIvOwUvT8D
/PenMwGDr/DzZ5TOGFFY/DSVaAInDWD6uSyGdII4zOepbmxTCdRKeyE/ppXRECxm
5u33w9DMYwcCQe8TpV8xDJSt2ih51a7MzFFUFunFu0KsfdQhbJHm5wzkXIAz18GO
IB4hX2ghOYQaVu1s9s9MXqrRop+xcFpAkI2q57o90aqs/euzIbfksXFTP+UHYkHN
mgVVKmjh3YzazbCESLzMYqe+eFiZ/oV9ya575LTIWVDcfzb/Rl8QQsZSh68gRRDp
nWirNJe7eng9eA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:31 2025 by rpki-client