Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
File: SRHEgJhyKUvlgXsVnlnynlBgljY.mft (raw, json)
Hash identifier: rAvTD3GC8Z+QUEy6kluoEtbZ1HYl0dArz/ca2Teydu8=
Subject key identifier: FF:91:6D:5A:26:2D:D4:C4:A2:F8:2C:0D:9B:CA:E0:7E:AC:58:FA:73
Authority key identifier: 49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
Certificate issuer: /CN=4911c4809872294be5817b159e59f29e50609636
Certificate serial: 0198D4DFF9E52D88280C080BBBA7B1DA1D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
Manifest number: 9A
Signing time: Sat 23 Aug 2025 03:01:44 +0000
Manifest this update: Sat 23 Aug 2025 03:01:44 +0000
Manifest next update: Sun 24 Aug 2025 03:01:44 +0000
Files and hashes: 1: SRHEgJhyKUvlgXsVnlnynlBgljY.crl (hash: aECiVhHt6pfBoMs79kIQKA6d19ogZmes/k7YrGbgNmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f9:e5:2d:88:28:0c:08:0b:bb:a7:b1:da:1d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911c4809872294be5817b159e59f29e50609636
Validity
Not Before: Aug 23 03:01:44 2025 GMT
Not After : Aug 24 03:01:44 2025 GMT
Subject: CN=ff916d5a262dd4c4a2f82c0d9bcae07eac58fa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:b9:30:90:13:be:b4:27:b6:11:e1:15:e6:
0e:20:92:23:16:b8:23:53:36:a4:d1:8b:69:4d:73:
1d:c1:af:33:2a:f4:78:57:4b:f3:c7:1c:22:4e:85:
ee:b0:a1:db:7c:1a:a3:3a:1e:21:da:bc:3a:c2:87:
62:f6:30:de:c0:09:fa:fa:d8:65:0c:65:a9:ab:48:
43:2f:e5:bd:34:35:1d:75:5d:83:e1:86:b5:05:bd:
a7:ca:ec:f6:e2:d8:44:21:9d:25:db:38:fb:0c:dc:
62:4d:5a:39:94:41:2c:16:95:35:1f:c9:b1:0b:ed:
35:f3:69:5e:d0:1c:c6:e5:cd:45:d3:4a:54:28:91:
b1:f8:4f:c7:4b:73:03:be:52:f9:d4:03:e7:bf:40:
f8:c7:98:0b:d1:c7:73:2d:a3:3f:bf:66:6b:0c:b9:
bd:eb:2f:bd:af:c9:c9:99:01:fa:86:1d:d8:a1:77:
8f:99:5a:cc:46:ac:96:ab:87:30:12:50:d9:f0:93:
35:12:35:e4:d1:13:aa:35:e5:1c:4b:7b:28:72:02:
71:57:15:87:b6:94:f9:c1:f1:0e:2f:20:99:b9:b4:
31:9b:1e:b1:1b:37:fd:e3:9c:69:a7:82:18:a1:3b:
e3:4b:e5:56:41:54:73:f6:71:66:ac:d8:5c:c7:d1:
83:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:91:6D:5A:26:2D:D4:C4:A2:F8:2C:0D:9B:CA:E0:7E:AC:58:FA:73
X509v3 Authority Key Identifier:
keyid:49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:86:8e:71:64:ad:0e:ac:fe:16:7d:c2:09:2b:30:77:ef:59:
9e:83:d1:03:ee:88:5a:ea:55:1b:43:2e:c3:ca:bf:12:2a:92:
15:60:07:24:2e:bb:19:ef:21:76:9c:49:a4:bc:70:96:3d:09:
be:2a:fe:1e:89:dd:a3:fa:a8:d9:fc:d7:1a:74:9e:35:31:a5:
a0:49:88:20:fe:fe:32:e2:02:35:2c:30:29:c4:1f:73:4a:8c:
4b:63:a0:df:a7:60:48:f7:21:88:0f:20:6b:ea:5d:81:c4:72:
d8:74:50:ba:48:72:35:c1:3b:8d:4f:5f:0b:07:40:7e:93:da:
74:e4:fe:48:29:35:91:51:58:5d:c4:8c:24:62:62:3f:5e:4f:
e7:39:a2:8f:dd:27:f2:80:d1:20:f5:25:b9:f2:fb:59:c8:dc:
94:04:ce:1f:f6:1d:fa:8d:48:ba:06:75:91:d6:ab:59:51:2c:
b5:c0:f3:cc:cb:b3:ff:7d:21:f8:82:b4:d7:9a:6b:56:03:e6:
c7:08:76:42:8d:9b:75:32:2b:3f:d7:e4:49:72:07:76:e1:4c:
af:dc:e8:b7:9d:61:9a:ab:ec:af:19:77:f3:8f:62:db:d5:72:
de:48:97:38:83:a7:c1:1c:c0:34:4f:2e:6e:61:2d:cb:59:e6:
cf:dd:5f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/nlLYgoDAgLu6ex2h1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTFjNDgwOTg3MjI5NGJlNTgxN2IxNTllNTlmMjllNTA2
MDk2MzYwHhcNMjUwODIzMDMwMTQ0WhcNMjUwODI0MDMwMTQ0WjAzMTEwLwYDVQQD
EyhmZjkxNmQ1YTI2MmRkNGM0YTJmODJjMGQ5YmNhZTA3ZWFjNThmYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjq5MJATvrQnthHhFeYOIJIjFrgj
Uzak0YtpTXMdwa8zKvR4V0vzxxwiToXusKHbfBqjOh4h2rw6wodi9jDewAn6+thl
DGWpq0hDL+W9NDUddV2D4Ya1Bb2nyuz24thEIZ0l2zj7DNxiTVo5lEEsFpU1H8mx
C+0182le0BzG5c1F00pUKJGx+E/HS3MDvlL51APnv0D4x5gL0cdzLaM/v2ZrDLm9
6y+9r8nJmQH6hh3YoXePmVrMRqyWq4cwElDZ8JM1EjXk0ROqNeUcS3socgJxVxWH
tpT5wfEOLyCZubQxmx6xGzf945xpp4IYoTvjS+VWQVRz9nFmrNhcx9GDvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+RbVomLdTEovgsDZvK4H6sWPpzMB8GA1UdIwQY
MBaAFEkRxICYcilL5YF7FZ5Z8p5QYJY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JIRWdKaHlLVXZsZ1hzVm5sbnlubEJnbGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS83OWI3OTctMDkyMi00ZGY2LTgyN2Qt
MzY4MWY1YjdmODZiLzEvU1JIRWdKaHlLVXZsZ1hzVm5sbnlubEJnbGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS83OWI3OTctMDkyMi00ZGY2LTgyN2QtMzY4MWY1YjdmODZi
LzEvU1JIRWdKaHlLVXZsZ1hzVm5sbnlubEJnbGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYaOcWSt
Dqz+Fn3CCSswd+9ZnoPRA+6IWupVG0Muw8q/EiqSFWAHJC67Ge8hdpxJpLxwlj0J
vir+Hondo/qo2fzXGnSeNTGloEmIIP7+MuICNSwwKcQfc0qMS2Og36dgSPchiA8g
a+pdgcRy2HRQukhyNcE7jU9fCwdAfpPadOT+SCk1kVFYXcSMJGJiP15P5zmij90n
8oDRIPUlufL7WcjclATOH/Yd+o1IugZ1kdarWVEstcDzzMuz/30h+IK015prVgPm
xwh2Qo2bdTIrP9fkSXIHduFMr9zot51hmqvsrxl3849i29Vy3kiXOIOnwRzANE8u
bmEty1nmz91fUA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:33 2025 by rpki-client