Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json)
Hash identifier: Eu/6f9Im21TQOIYb4xLEHjEyW8c6d5ixACHg3WaqvXs=
Subject key identifier: 90:12:D1:E5:97:68:16:43:FF:A3:52:31:98:E5:A5:EE:E0:C2:77:C5
Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Certificate serial: 0198D8167CF714C40D2610C33ACC7458546A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
Manifest number: 1C
Signing time: Sat 23 Aug 2025 18:00:08 +0000
Manifest this update: Sat 23 Aug 2025 18:00:08 +0000
Manifest next update: Sun 24 Aug 2025 18:00:08 +0000
Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: IHmlBvuUqCa9OOimjJv1bIe1fiFg+vbYan6jmHzRXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:16:7c:f7:14:c4:0d:26:10:c3:3a:cc:74:58:54:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Validity
Not Before: Aug 23 18:00:08 2025 GMT
Not After : Aug 24 18:00:08 2025 GMT
Subject: CN=9012d1e597681643ffa3523198e5a5eee0c277c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:8a:9e:ba:41:a8:63:a4:fa:0d:d5:aa:9d:
55:3e:8b:12:3b:d3:9a:13:b6:d3:98:38:05:42:ec:
bf:23:f9:15:71:6c:e6:4d:4e:fd:ef:a7:83:fe:1f:
a3:c5:fc:c0:cc:77:c6:4b:9c:79:e0:e0:4e:b9:b0:
18:8a:09:19:f7:60:fb:1b:4d:e0:04:50:69:43:f3:
6f:fd:c5:13:28:b8:e8:e2:cf:64:51:bd:f7:67:e8:
3d:81:14:06:fa:76:74:68:78:a9:28:bc:33:b0:fe:
f8:e9:19:f4:c1:68:36:d4:8a:86:11:29:da:f4:f7:
ff:fd:aa:92:ed:49:5c:e7:15:ca:00:a3:8e:32:db:
4c:d1:94:35:d7:f4:7c:74:ed:74:e5:e3:a8:80:67:
5f:bc:82:7c:79:d9:37:da:fe:57:bb:7b:90:98:78:
f9:52:ac:5f:85:b0:c2:aa:03:88:59:d6:c7:78:4c:
2c:b1:42:36:1d:38:72:77:5b:b6:e7:55:f3:d5:b5:
0d:ed:2f:58:8b:66:7e:6f:ac:97:12:0e:f6:fc:f9:
fc:c7:5d:15:3b:60:7e:32:bd:6c:b1:ef:7d:6d:2a:
c1:e3:78:7d:a2:48:71:e7:ff:76:c9:a8:c2:dc:c5:
16:0d:a4:b1:36:3c:fc:1b:82:1c:bd:e2:be:1e:9c:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:12:D1:E5:97:68:16:43:FF:A3:52:31:98:E5:A5:EE:E0:C2:77:C5
X509v3 Authority Key Identifier:
keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:99:57:65:33:c2:df:51:7d:0c:7b:45:69:82:c5:85:2f:c1:
2d:50:b9:80:d0:28:1e:36:e0:43:f8:9f:e9:e0:2d:a3:d1:b9:
3b:59:fa:54:50:9e:d1:c3:a2:73:0b:49:93:6e:cd:c7:00:99:
a4:1b:f3:15:de:32:ed:0a:bf:6a:fe:2a:b2:17:26:bb:25:dc:
40:e7:b5:a9:58:57:a6:7d:fd:4c:02:ec:25:4c:ef:93:0f:e6:
89:2c:9d:03:2a:54:92:6b:79:52:11:8e:ae:42:13:66:b9:b8:
11:c4:d8:62:21:cc:e2:38:b8:27:d0:7e:ed:a0:f8:ac:b0:79:
0f:d8:1e:30:83:60:3d:29:94:cf:9b:96:b6:96:45:21:64:c9:
48:f1:7e:3c:03:a6:3c:fe:b9:71:3e:81:95:8f:16:83:eb:42:
fb:5e:8b:7a:ae:29:64:00:eb:25:f1:b8:2c:fa:cb:70:da:6c:
d4:0f:71:92:fd:6a:d7:ab:c4:36:39:13:54:65:bd:99:17:e3:
13:4b:5a:9a:e9:8c:4a:7e:85:26:65:04:85:32:12:b5:5e:88:
d5:47:0a:32:31:bd:ec:99:c6:36:9d:8a:fe:72:5b:a8:57:1e:
cf:47:a6:54:b2:8f:04:2d:a6:20:ac:56:9a:9a:70:c4:35:04:
38:15:10:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYFnz3FMQNJhDDOsx0WFRqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NmE4N2JiZjkxYWU2OGRmOTJlOGQ1ZDJmNGE4NDlhYjhj
MmVkNTkwHhcNMjUwODIzMTgwMDA4WhcNMjUwODI0MTgwMDA4WjAzMTEwLwYDVQQD
Eyg5MDEyZDFlNTk3NjgxNjQzZmZhMzUyMzE5OGU1YTVlZWUwYzI3N2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tCKnrpBqGOk+g3Vqp1VPosSO9Oa
E7bTmDgFQuy/I/kVcWzmTU7976eD/h+jxfzAzHfGS5x54OBOubAYigkZ92D7G03g
BFBpQ/Nv/cUTKLjo4s9kUb33Z+g9gRQG+nZ0aHipKLwzsP746Rn0wWg21IqGESna
9Pf//aqS7Ulc5xXKAKOOMttM0ZQ11/R8dO105eOogGdfvIJ8edk32v5Xu3uQmHj5
UqxfhbDCqgOIWdbHeEwssUI2HThyd1u251Xz1bUN7S9Yi2Z+b6yXEg72/Pn8x10V
O2B+Mr1sse99bSrB43h9okhx5/92yajC3MUWDaSxNjz8G4IcveK+HpwYXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAS0eWXaBZD/6NSMZjlpe7gwnfFMB8GA1UdIwQY
MBaAFAhqh7v5GuaN+S6NXS9KhJq4wu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dxSHVfa2E1bzM1TG8xZEwwcUVtcmpDN1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hN2MxNTEtNzRmOS00MWRhLThmNzIt
MWE4NWE2OGQxYTc3LzEvQ0dxSHVfa2E1bzM1TG8xZEwwcUVtcmpDN1ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hN2MxNTEtNzRmOS00MWRhLThmNzItMWE4NWE2OGQxYTc3
LzEvQ0dxSHVfa2E1bzM1TG8xZEwwcUVtcmpDN1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJlXZTPC
31F9DHtFaYLFhS/BLVC5gNAoHjbgQ/if6eAto9G5O1n6VFCe0cOicwtJk27NxwCZ
pBvzFd4y7Qq/av4qshcmuyXcQOe1qVhXpn39TALsJUzvkw/miSydAypUkmt5UhGO
rkITZrm4EcTYYiHM4ji4J9B+7aD4rLB5D9geMINgPSmUz5uWtpZFIWTJSPF+PAOm
PP65cT6BlY8Wg+tC+16Leq4pZADrJfG4LPrLcNps1A9xkv1q16vENjkTVGW9mRfj
E0tamumMSn6FJmUEhTIStV6I1UcKMjG97JnGNp2K/nJbqFcez0emVLKPBC2mIKxW
mppwxDUEOBUQ2A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:06:16 2025 by rpki-client