Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
File: rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json)
Hash identifier: T8EJP/0yXRCY1g+x3eKszomts3ngrhiHVaLCD4ulaXg=
Subject key identifier: EC:8D:65:E5:DB:E9:4E:5D:E2:A9:D1:7E:FB:35:E7:CA:06:7E:AD:E2
Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
Certificate issuer: /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Certificate serial: 0198D473F14D895DB6E410F97EE5EDE4320E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
Manifest number: 0A40
Signing time: Sat 23 Aug 2025 01:03:44 +0000
Manifest this update: Sat 23 Aug 2025 01:03:44 +0000
Manifest next update: Sun 24 Aug 2025 01:03:44 +0000
Files and hashes: 1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: qZL2Q3v8blRu+Tc9WN3wYVCmnElsdCGHJMWJz5z9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f1:4d:89:5d:b6:e4:10:f9:7e:e5:ed:e4:32:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Validity
Not Before: Aug 23 01:03:44 2025 GMT
Not After : Aug 24 01:03:44 2025 GMT
Subject: CN=ec8d65e5dbe94e5de2a9d17efb35e7ca067eade2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:24:e9:04:64:3e:32:12:1a:43:2a:bb:13:9f:
6e:4a:0e:07:14:65:b0:46:59:ea:8e:22:8d:e3:8e:
78:4d:39:b7:7b:6c:2a:2d:71:43:63:e6:5c:47:10:
ff:98:b7:28:6d:5a:4f:37:ad:37:ac:8d:27:c5:98:
9a:b6:7f:0e:6a:0e:82:21:56:72:cb:9b:1b:36:b0:
ac:f5:8a:a4:84:1a:77:e7:db:42:44:67:9e:d5:37:
d4:9f:5b:33:9d:92:95:30:83:0e:c5:fb:a7:ea:16:
e5:6e:4c:f3:57:98:12:89:dd:57:05:65:73:63:95:
61:4a:3f:df:5a:28:53:a8:43:68:16:b6:87:78:07:
68:ed:1a:bf:2f:84:d6:ed:17:fd:61:95:60:2a:be:
a6:65:78:59:1a:db:0a:25:1a:5e:66:db:4f:00:be:
2c:45:eb:82:0c:52:7f:fb:7b:ed:54:98:0e:fa:4f:
74:d7:e3:ba:75:19:7a:50:13:1e:e7:bd:1b:ad:af:
ed:e0:d0:12:eb:ef:26:fd:1d:bf:14:21:4b:b7:56:
97:6d:34:4d:54:9c:37:fb:5c:76:97:9b:12:c8:e6:
e9:9a:77:5f:13:4a:6a:4b:ac:dd:70:84:de:90:a5:
96:55:d3:7d:fd:14:78:2c:c9:2e:78:11:c0:55:ca:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8D:65:E5:DB:E9:4E:5D:E2:A9:D1:7E:FB:35:E7:CA:06:7E:AD:E2
X509v3 Authority Key Identifier:
keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fb:07:a0:b0:64:36:96:f2:35:62:bd:ff:f7:a7:34:62:9b:
a7:9b:8a:1b:53:ba:ea:15:21:5d:f8:7d:f3:2c:a3:0e:14:21:
c3:78:99:fd:b9:4c:c8:50:00:ca:b0:f5:f1:17:17:1a:8e:1a:
55:75:51:04:10:0c:26:40:fe:19:c5:9a:08:b7:70:7d:15:07:
44:90:83:8a:d6:c0:4e:f8:c4:0f:ee:7a:3f:3d:65:55:6d:86:
8a:63:96:6f:f8:01:51:76:7a:9a:f9:cf:5c:0a:1a:55:4d:aa:
ed:5a:c4:35:c2:d5:24:00:7a:d9:d3:0c:bd:1c:7f:cd:02:ff:
9f:52:45:ea:60:c1:1d:45:86:10:d2:3d:54:3c:f1:58:e8:a0:
d7:75:a5:1f:1d:a4:de:40:16:aa:cc:ac:35:f0:7e:43:f1:e4:
b3:13:83:18:f7:94:b7:f6:41:6b:ef:2c:38:40:b6:59:26:8a:
fc:42:3e:c4:93:ce:20:1e:7e:c2:d5:1e:0c:c7:44:69:86:87:
c7:65:99:4b:89:8b:e8:e6:cf:eb:3a:de:57:df:3b:3b:27:f9:
8b:5d:0c:0d:54:ea:9f:df:ea:39:98:a0:81:bf:3c:77:3d:fd:
64:96:e9:de:af:94:af:f1:dd:51:79:7c:1b:f3:aa:ec:f7:25:
e0:62:1d:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc/FNiV225BD5fuXt5DIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNWYzNWE2ZThmYjUzOWIxOTU0Y2I0M2E2Y2U3NWU5N2Zh
YWUxNzUwHhcNMjUwODIzMDEwMzQ0WhcNMjUwODI0MDEwMzQ0WjAzMTEwLwYDVQQD
EyhlYzhkNjVlNWRiZTk0ZTVkZTJhOWQxN2VmYjM1ZTdjYTA2N2VhZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6STpBGQ+MhIaQyq7E59uSg4HFGWw
RlnqjiKN4454TTm3e2wqLXFDY+ZcRxD/mLcobVpPN603rI0nxZiatn8Oag6CIVZy
y5sbNrCs9YqkhBp359tCRGee1TfUn1sznZKVMIMOxfun6hblbkzzV5gSid1XBWVz
Y5VhSj/fWihTqENoFraHeAdo7Rq/L4TW7Rf9YZVgKr6mZXhZGtsKJRpeZttPAL4s
ReuCDFJ/+3vtVJgO+k901+O6dRl6UBMe570bra/t4NAS6+8m/R2/FCFLt1aXbTRN
VJw3+1x2l5sSyObpmndfE0pqS6zdcITekKWWVdN9/RR4LMkueBHAVcpDdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyNZeXb6U5d4qnRfvs158oGfq3iMB8GA1UdIwQY
MBaAFK5fNabo+1ObGVTLQ6bOdel/quF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzct
MjA5MWNjYThiYzQ4LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzctMjA5MWNjYThiYzQ4
LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfsHoLBk
NpbyNWK9//enNGKbp5uKG1O66hUhXfh98yyjDhQhw3iZ/blMyFAAyrD18RcXGo4a
VXVRBBAMJkD+GcWaCLdwfRUHRJCDitbATvjED+56Pz1lVW2GimOWb/gBUXZ6mvnP
XAoaVU2q7VrENcLVJAB62dMMvRx/zQL/n1JF6mDBHUWGENI9VDzxWOig13WlHx2k
3kAWqsysNfB+Q/HksxODGPeUt/ZBa+8sOEC2WSaK/EI+xJPOIB5+wtUeDMdEaYaH
x2WZS4mL6ObP6zreV987Oyf5i10MDVTqn9/qOZiggb88dz39ZJbp3q+Ur/HdUXl8
G/Oq7Pcl4GIdjQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:35 2025 by rpki-client