Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
File: v74mhOFXoAYDw7KrDcUlKF6_64k.mft (raw, json)
Hash identifier: C3az3V8Zwoqk27IUw8+BpKZ1nrmfmu0Fnn9QWBP9tGo=
Subject key identifier: 8E:37:00:1A:F5:C1:87:78:3E:4A:2E:A6:CE:9A:FE:B5:36:A0:D4:91
Authority key identifier: BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
Certificate issuer: /CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Certificate serial: 0198D65FE8863DAAB2D62B685CE2710775AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
Manifest number: 0323
Signing time: Sat 23 Aug 2025 10:01:06 +0000
Manifest this update: Sat 23 Aug 2025 10:01:06 +0000
Manifest next update: Sun 24 Aug 2025 10:01:06 +0000
Files and hashes: 1: v74mhOFXoAYDw7KrDcUlKF6_64k.crl (hash: VoAeuQ11Kfz/HQ2bHwHSGE/GlQDv4Yfqms6H9CTSwXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e8:86:3d:aa:b2:d6:2b:68:5c:e2:71:07:75:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Validity
Not Before: Aug 23 10:01:06 2025 GMT
Not After : Aug 24 10:01:06 2025 GMT
Subject: CN=8e37001af5c187783e4a2ea6ce9afeb536a0d491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:d2:d7:6c:ec:87:96:c4:95:4a:ab:91:4a:
ac:bb:b6:1c:39:1c:7b:66:c1:e9:67:1d:a4:48:0b:
4d:79:03:9d:1a:01:84:bd:f3:af:c8:fe:b8:7b:67:
a5:56:a1:86:25:6e:53:05:07:6f:26:b8:98:6b:a2:
f3:45:d4:d3:0c:71:9c:fb:98:07:fe:21:c9:cd:ef:
23:e5:20:8c:c8:68:77:6a:fb:c8:7f:20:2e:93:35:
54:66:99:f1:d8:bb:87:bd:66:2e:b0:69:99:bb:85:
27:6a:b7:02:06:f2:64:40:ba:85:4e:5b:36:2d:7f:
0a:59:35:45:e7:43:13:38:e8:8b:f6:1f:b1:df:62:
a7:23:51:45:96:44:0c:eb:55:c3:a5:04:c7:62:aa:
7e:25:42:cf:ca:79:2a:01:a0:1e:71:b0:2a:4c:0a:
c6:b9:ad:43:01:6a:68:42:eb:95:bc:d0:a3:87:1c:
e3:51:ee:19:38:35:7e:b7:94:c3:38:b7:8e:8f:a5:
a4:2b:cd:ad:30:14:95:cb:8b:86:c0:65:0a:93:f5:
40:87:cf:4c:1c:ae:73:2b:5b:9a:7e:2f:b5:d2:05:
b3:5d:bb:79:1f:42:07:44:f9:e1:5d:69:ee:3f:96:
f1:18:ab:20:c6:14:49:5f:f5:13:11:36:68:d1:c3:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:00:1A:F5:C1:87:78:3E:4A:2E:A6:CE:9A:FE:B5:36:A0:D4:91
X509v3 Authority Key Identifier:
keyid:BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:31:e8:83:b5:b2:51:06:48:b5:67:1a:fd:02:4e:af:43:2a:
9d:35:01:8f:2f:ff:9f:1c:34:a2:7a:70:77:bd:b6:0f:64:22:
f8:84:c4:7b:48:6b:b0:29:e5:35:ac:4c:ea:57:de:b2:75:b3:
70:18:cc:4e:8a:dd:60:67:1f:8c:ba:50:28:59:ea:3a:a1:7b:
eb:61:2e:9e:23:c6:ca:aa:e9:1a:6f:6f:80:df:4a:d9:c6:84:
12:90:98:0a:b0:49:cd:24:a4:d3:3d:2d:27:30:49:f6:ea:0e:
cd:49:67:1f:bc:fa:f6:cc:c3:e5:41:5f:e7:79:63:a2:7b:8f:
c7:71:63:c8:7b:0e:1a:75:34:9a:a7:48:42:d0:39:e1:3b:37:
62:02:c2:a8:7a:56:66:0e:d5:76:37:42:6d:9e:30:42:7e:c1:
a3:2c:65:32:54:48:ca:fe:aa:6b:e9:7e:9c:b0:b1:68:68:a8:
54:f3:61:cd:76:f9:2f:c2:09:50:59:cb:ca:b9:cb:4b:74:17:
bf:ae:d4:b0:3b:33:6f:6f:5f:79:9d:39:0f:a1:fd:8a:6e:ab:
54:a4:8d:3f:f8:93:ab:81:3b:91:51:a1:15:37:65:bb:42:90:
7d:36:eb:bc:b1:24:9c:a5:e4:8f:bb:5d:6c:b9:a5:4c:3a:24:
68:02:84:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX+iGPaqy1itoXOJxB3WqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmUyNjg0ZTE1N2EwMDYwM2MzYjJhYjBkYzUyNTI4NWVi
ZmViODkwHhcNMjUwODIzMTAwMTA2WhcNMjUwODI0MTAwMTA2WjAzMTEwLwYDVQQD
Eyg4ZTM3MDAxYWY1YzE4Nzc4M2U0YTJlYTZjZTlhZmViNTM2YTBkNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF/S12zsh5bElUqrkUqsu7YcORx7
ZsHpZx2kSAtNeQOdGgGEvfOvyP64e2elVqGGJW5TBQdvJriYa6LzRdTTDHGc+5gH
/iHJze8j5SCMyGh3avvIfyAukzVUZpnx2LuHvWYusGmZu4UnarcCBvJkQLqFTls2
LX8KWTVF50MTOOiL9h+x32KnI1FFlkQM61XDpQTHYqp+JULPynkqAaAecbAqTArG
ua1DAWpoQuuVvNCjhxzjUe4ZODV+t5TDOLeOj6WkK82tMBSVy4uGwGUKk/VAh89M
HK5zK1uafi+10gWzXbt5H0IHRPnhXWnuP5bxGKsgxhRJX/UTETZo0cOozQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI43ABr1wYd4Pkoups6a/rU2oNSRMB8GA1UdIwQY
MBaAFL++JoThV6AGA8Oyqw3FJShev+uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZDM2MDQtMWI5NC00MjAwLWFlYTQt
ZDhkNDJiOGIzYmEyLzEvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80ZDM2MDQtMWI5NC00MjAwLWFlYTQtZDhkNDJiOGIzYmEy
LzEvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTHog7Wy
UQZItWca/QJOr0MqnTUBjy//nxw0onpwd722D2Qi+ITEe0hrsCnlNaxM6lfesnWz
cBjMTordYGcfjLpQKFnqOqF762EuniPGyqrpGm9vgN9K2caEEpCYCrBJzSSk0z0t
JzBJ9uoOzUlnH7z69szD5UFf53ljonuPx3FjyHsOGnU0mqdIQtA54Ts3YgLCqHpW
Zg7VdjdCbZ4wQn7BoyxlMlRIyv6qa+l+nLCxaGioVPNhzXb5L8IJUFnLyrnLS3QX
v67UsDszb29feZ05D6H9im6rVKSNP/iTq4E7kVGhFTdlu0KQfTbrvLEknKXkj7td
bLmlTDokaAKEtA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:53 2025 by rpki-client