Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File: MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier: qnMI0r95nZWGPrRriDZtYE5QW0nt5X8jvA28oSSjhpY=
Subject key identifier: 19:B8:B5:C5:FC:BD:30:B3:4C:D8:D7:36:BF:FB:59:A2:DB:1B:85:F2
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer: /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial: 0198D5160500AD07DF96F01156B4FD793C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number: 0526
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: u8QQsjpTzoCCYRijZY9ZGciIXqG7bfWlKplfIWFl3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:05:00:ad:07:df:96:f0:11:56:b4:fd:79:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=19b8b5c5fcbd30b34cd8d736bffb59a2db1b85f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:e8:f2:ac:69:9e:67:f1:bb:d3:ee:3a:2e:
86:37:f5:cc:88:cb:a3:4a:e5:d3:5a:c8:16:3d:b8:
1e:a0:84:5f:26:66:cb:d7:34:64:bb:c4:c0:66:9b:
57:15:dd:43:96:7e:90:78:74:15:b8:29:ba:5f:24:
13:51:ee:04:14:47:e3:6f:f0:4f:91:2e:c3:1f:27:
69:16:35:f4:d9:48:80:94:7e:42:5d:aa:07:73:ea:
0a:a5:9e:6b:2e:78:b3:4b:f9:a9:6d:08:46:4f:43:
86:99:06:3f:fc:cb:d9:9a:3c:68:1b:1a:bd:de:f0:
0c:14:03:ce:1b:41:3e:c2:5b:ad:ed:f6:60:a6:fb:
1f:62:a4:cd:89:e6:86:53:ab:6c:20:8a:c3:cb:b1:
41:8e:95:5d:0d:95:7b:88:da:2c:9c:78:c6:41:0a:
0d:12:59:ce:3e:41:df:06:6d:76:f6:82:56:d8:20:
a3:ca:f1:f2:f5:33:56:cd:34:21:73:b3:33:a1:f0:
0f:66:8d:09:e0:f7:6c:df:07:ab:6e:7d:d9:8c:cd:
59:79:62:91:0e:3a:7e:fa:1d:f2:19:a2:5a:cc:a8:
15:56:a9:55:4d:93:e3:70:cf:9b:c7:9b:77:1f:85:
94:15:ea:1e:d5:86:13:0e:f4:30:11:73:db:03:f2:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:B5:C5:FC:BD:30:B3:4C:D8:D7:36:BF:FB:59:A2:DB:1B:85:F2
X509v3 Authority Key Identifier:
keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bd:dd:cf:bf:c5:03:b8:e4:97:94:99:21:a1:c3:77:83:21:
45:8a:a5:38:70:35:27:d5:9f:83:36:2b:36:7c:22:87:fd:ad:
fb:24:a8:d7:44:b5:38:7b:e1:ae:5f:6d:50:3f:59:30:44:1e:
88:7b:3b:be:b3:87:86:35:29:9a:60:a6:08:04:c9:55:b0:34:
c3:fc:c2:c1:bc:51:b9:dc:d4:d6:26:7e:c9:ca:28:68:d0:ab:
c4:38:eb:be:3d:2d:aa:b2:83:0e:db:cf:8b:1c:4b:30:fa:f1:
13:f1:24:fa:20:16:ca:35:80:3f:76:e6:ad:ce:92:49:4d:6d:
9f:e4:5e:5e:d0:1b:14:7d:60:60:e8:b7:fc:d9:02:e8:c8:a4:
86:cb:54:9c:de:32:c3:a6:24:eb:c5:42:c3:0b:82:21:06:e0:
91:f0:d8:4c:c4:28:4c:a0:2a:0d:dd:73:4e:d1:58:0d:46:78:
ee:a6:22:70:d1:08:cf:20:d6:5e:67:7a:55:54:5c:e5:c2:c5:
6f:4d:68:a1:f0:8f:8b:c7:bb:51:af:f9:d2:3d:26:3f:84:42:
81:72:aa:a0:47:96:11:5a:05:d6:93:50:ec:ca:a6:4a:3b:76:
45:a4:a4:2a:08:75:52:45:81:c9:3f:a8:2b:0e:ed:7a:dd:a8:
32:d1:03:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFgUArQfflvARVrT9eTxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYjdhOTUzMjgwYjZmOTk4ZmMxMWM0N2NiZTkxYjgyNjMz
NjRlYjAwHhcNMjUwODIzMDQwMDQ2WhcNMjUwODI0MDQwMDQ2WjAzMTEwLwYDVQQD
EygxOWI4YjVjNWZjYmQzMGIzNGNkOGQ3MzZiZmZiNTlhMmRiMWI4NWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaLo8qxpnmfxu9PuOi6GN/XMiMuj
SuXTWsgWPbgeoIRfJmbL1zRku8TAZptXFd1Dln6QeHQVuCm6XyQTUe4EFEfjb/BP
kS7DHydpFjX02UiAlH5CXaoHc+oKpZ5rLnizS/mpbQhGT0OGmQY//MvZmjxoGxq9
3vAMFAPOG0E+wlut7fZgpvsfYqTNieaGU6tsIIrDy7FBjpVdDZV7iNosnHjGQQoN
ElnOPkHfBm129oJW2CCjyvHy9TNWzTQhc7MzofAPZo0J4Pds3werbn3ZjM1ZeWKR
Djp++h3yGaJazKgVVqlVTZPjcM+bx5t3H4WUFeoe1YYTDvQwEXPbA/J1VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBm4tcX8vTCzTNjXNr/7WaLbG4XyMB8GA1UdIwQY
MBaAFDC3qVMoC2+Zj8EcR8vpG4JjNk6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgt
OWM3MTY5YjdhMmU0LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgtOWM3MTY5YjdhMmU0
LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG73dz7/F
A7jkl5SZIaHDd4MhRYqlOHA1J9WfgzYrNnwih/2t+ySo10S1OHvhrl9tUD9ZMEQe
iHs7vrOHhjUpmmCmCATJVbA0w/zCwbxRudzU1iZ+ycooaNCrxDjrvj0tqrKDDtvP
ixxLMPrxE/Ek+iAWyjWAP3bmrc6SSU1tn+ReXtAbFH1gYOi3/NkC6MikhstUnN4y
w6Yk68VCwwuCIQbgkfDYTMQoTKAqDd1zTtFYDUZ47qYicNEIzyDWXmd6VVRc5cLF
b01oofCPi8e7Ua/50j0mP4RCgXKqoEeWEVoF1pNQ7MqmSjt2RaSkKgh1UkWByT+o
Kw7tet2oMtEDrA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:41 2025 by rpki-client