Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File: c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier: JuBL2wL5TLiVsKasSUUxCpxXLy+u4RHqYoZH/sXeUrw=
Subject key identifier: 4F:C9:22:EA:8E:11:E2:D8:45:88:79:2B:6C:70:94:C7:AA:AC:1C:34
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer: /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial: 0198D473CC240AA7D5E3FB91E617CDF77A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number: 06FA
Signing time: Sat 23 Aug 2025 01:03:35 +0000
Manifest this update: Sat 23 Aug 2025 01:03:35 +0000
Manifest next update: Sun 24 Aug 2025 01:03:35 +0000
Files and hashes: 1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: C0JEPXzCx3a7fyX3GjYx+fYt4/fPAJfCC1RW4kZ9QHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:cc:24:0a:a7:d5:e3:fb:91:e6:17:cd:f7:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Validity
Not Before: Aug 23 01:03:35 2025 GMT
Not After : Aug 24 01:03:35 2025 GMT
Subject: CN=4fc922ea8e11e2d84588792b6c7094c7aaac1c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:25:25:2d:4a:d5:4a:5a:f0:92:77:f4:a6:
f4:b9:33:d2:25:26:58:a3:87:61:6a:59:a3:c3:86:
40:8e:4f:ac:51:3e:f2:a7:67:cc:4f:e6:12:b1:57:
e3:a3:58:f9:b9:2e:54:eb:8b:94:68:42:34:7b:cf:
f7:69:21:ec:1c:25:27:7c:37:67:35:06:07:ce:21:
f9:ef:65:ae:09:d8:3a:93:6e:47:0c:f1:95:77:ad:
08:e1:78:d3:aa:ef:ee:8b:cd:53:02:52:a0:88:72:
9e:60:dc:65:28:c8:3e:0b:79:10:3e:8b:11:8d:ba:
03:46:89:70:93:7a:33:1c:a2:72:a0:e3:c2:68:bb:
e7:90:3f:ff:c5:e1:7e:e6:7d:ad:0a:2a:a5:48:73:
64:99:f0:1f:8d:f7:be:1a:da:79:df:ae:c6:d8:3c:
2f:41:4f:2e:05:57:a0:81:aa:ca:e6:43:9b:e0:63:
8d:98:8e:8f:ea:61:89:08:73:18:88:b6:b2:70:5f:
4b:76:5a:1b:b4:60:8a:77:7d:e6:06:78:83:31:98:
e4:31:38:26:ff:73:cd:4c:61:2d:5c:14:0a:1c:ba:
65:92:69:e4:05:5a:e4:cc:4c:1f:d8:ec:ad:c0:a4:
d1:1f:24:f8:05:2a:b8:2f:54:c8:40:8c:62:27:88:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C9:22:EA:8E:11:E2:D8:45:88:79:2B:6C:70:94:C7:AA:AC:1C:34
X509v3 Authority Key Identifier:
keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bf:d4:40:b0:76:e5:b3:72:5b:ce:c7:4d:03:6a:5f:88:55:
28:cb:d1:fb:59:fb:f3:f1:4a:ff:67:6a:3a:4d:46:0e:95:cf:
6c:f2:87:b7:ac:35:12:e2:76:2d:e4:ef:d4:a6:2c:df:6a:79:
42:c8:0a:09:af:43:00:cb:04:8d:4e:57:32:8e:fe:12:d0:09:
b7:b7:f9:ea:17:e6:23:35:0a:62:e2:e5:b5:04:3d:7a:4e:e4:
49:b5:2d:fd:04:a9:f8:55:a8:8f:88:71:19:b1:eb:0a:69:92:
bb:b3:9b:14:87:80:6c:e1:f8:64:6e:4c:f6:a3:78:80:e8:3c:
29:77:31:5f:98:22:f3:a6:fe:7c:19:35:75:cc:f1:09:4d:de:
97:91:83:f3:ec:bf:93:7b:61:73:08:3d:c7:01:60:ef:e9:c5:
94:aa:eb:27:68:9e:74:25:c7:1f:07:8b:5f:a7:fd:ec:63:af:
0d:56:c0:81:f5:ff:b8:42:55:0d:d2:d7:38:b8:eb:da:0e:21:
10:60:a1:48:f5:1b:32:7e:46:fa:4c:b9:eb:f1:2e:4d:64:bc:
e5:36:6d:26:23:80:b0:c0:7d:4c:26:c7:37:dc:4c:d8:13:af:
4d:ca:bc:26:38:0c:dd:b4:05:ac:54:92:a4:4c:c6:18:d8:c1:
2f:a3:39:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc8wkCqfV4/uR5hfN93pAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYjk2NDlmNmE2ZmI2MmM2ZGNkMGNlOGMwZGYxNjU1YzEy
MzY0MzQwHhcNMjUwODIzMDEwMzM1WhcNMjUwODI0MDEwMzM1WjAzMTEwLwYDVQQD
Eyg0ZmM5MjJlYThlMTFlMmQ4NDU4ODc5MmI2YzcwOTRjN2FhYWMxYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl0lJS1K1Upa8JJ39Kb0uTPSJSZY
o4dhalmjw4ZAjk+sUT7yp2fMT+YSsVfjo1j5uS5U64uUaEI0e8/3aSHsHCUnfDdn
NQYHziH572WuCdg6k25HDPGVd60I4XjTqu/ui81TAlKgiHKeYNxlKMg+C3kQPosR
jboDRolwk3ozHKJyoOPCaLvnkD//xeF+5n2tCiqlSHNkmfAfjfe+Gtp5367G2Dwv
QU8uBVeggarK5kOb4GONmI6P6mGJCHMYiLaycF9LdlobtGCKd33mBniDMZjkMTgm
/3PNTGEtXBQKHLplkmnkBVrkzEwf2OytwKTRHyT4BSq4L1TIQIxiJ4j6KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/JIuqOEeLYRYh5K2xwlMeqrBw0MB8GA1UdIwQY
MBaAFHO5ZJ9qb7Ysbc0M6MDfFlXBI2Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWIt
N2UxMzhkZjYxMDU3LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWItN2UxMzhkZjYxMDU3
LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbL/UQLB2
5bNyW87HTQNqX4hVKMvR+1n78/FK/2dqOk1GDpXPbPKHt6w1EuJ2LeTv1KYs32p5
QsgKCa9DAMsEjU5XMo7+EtAJt7f56hfmIzUKYuLltQQ9ek7kSbUt/QSp+FWoj4hx
GbHrCmmSu7ObFIeAbOH4ZG5M9qN4gOg8KXcxX5gi86b+fBk1dczxCU3el5GD8+y/
k3thcwg9xwFg7+nFlKrrJ2iedCXHHweLX6f97GOvDVbAgfX/uEJVDdLXOLjr2g4h
EGChSPUbMn5G+ky56/EuTWS85TZtJiOAsMB9TCbHN9xM2BOvTcq8JjgM3bQFrFSS
pEzGGNjBL6M5Ug==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:46 2025 by rpki-client