Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
File: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft (raw, json)
Hash identifier: yL8P20CNZXu/s9Lj6tJkDqKluC3ZdqMIeVKe7MqWcw8=
Subject key identifier: E5:56:B0:F9:80:40:FD:EC:12:CB:C8:AE:BC:77:1C:5D:48:BE:ED:BC
Authority key identifier: E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
Certificate issuer: /CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Certificate serial: 0198D65F41395C39E555C5139EBE97E1C21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
Manifest number: 03AB
Signing time: Sat 23 Aug 2025 10:00:23 +0000
Manifest this update: Sat 23 Aug 2025 10:00:23 +0000
Manifest next update: Sun 24 Aug 2025 10:00:23 +0000
Files and hashes: 1: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl (hash: X3Z00iba3rFof6T/C+WK05RbCnw7z597w3ctB/gmhWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:41:39:5c:39:e5:55:c5:13:9e:be:97:e1:c2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Validity
Not Before: Aug 23 10:00:23 2025 GMT
Not After : Aug 24 10:00:23 2025 GMT
Subject: CN=e556b0f98040fdec12cbc8aebc771c5d48beedbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:9d:b1:61:11:88:11:3d:5f:b1:75:5e:bc:
2e:8c:23:a9:f6:1f:af:dd:8e:aa:40:db:9c:7a:3f:
e9:f6:f3:91:84:2c:ae:6c:66:7a:0f:b0:ef:5a:75:
3f:6c:71:02:ef:6c:22:ed:bf:b9:b2:aa:c7:50:49:
64:30:94:ab:6d:7c:34:b7:bb:9c:cf:79:7e:25:9a:
8a:a2:9d:95:2d:45:24:c7:54:25:50:98:41:48:c7:
07:bc:b0:76:60:64:8f:cd:be:28:07:79:53:e0:ac:
e2:e3:2c:67:6b:1c:cf:00:d6:42:40:52:f9:b0:57:
43:f1:43:c4:ca:c0:76:c1:13:fa:14:b9:2b:b5:07:
b8:ef:ce:99:da:c9:14:11:49:84:53:c9:9c:d1:a5:
ae:e5:0c:4d:e3:11:7d:7c:3d:4f:96:e0:75:bc:7e:
07:62:77:ad:7e:c8:16:2b:86:de:35:44:25:de:17:
c8:0d:fd:73:6a:ba:e7:f6:46:82:6d:b3:9a:f1:91:
c6:10:0e:95:a7:45:bb:a5:1b:d4:3b:c4:6f:d9:7a:
d3:27:d7:b0:2c:a6:df:d9:50:b7:0e:63:20:28:2e:
bb:04:6b:99:f9:f6:8f:6c:a7:c3:2c:85:5f:8d:18:
58:1b:02:4a:ec:af:88:98:19:cd:7d:56:b7:4c:bb:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:56:B0:F9:80:40:FD:EC:12:CB:C8:AE:BC:77:1C:5D:48:BE:ED:BC
X509v3 Authority Key Identifier:
keyid:E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cd:88:68:cf:0a:67:71:76:59:f5:e1:ff:da:e9:0b:9f:d9:
17:fa:06:73:89:0a:ef:14:37:36:26:ba:ce:d1:14:25:84:61:
45:e6:bd:43:ec:f3:0c:bf:ce:d6:5d:8d:d9:69:42:10:bf:96:
6a:8e:38:d0:53:7d:b2:7d:3b:68:13:77:7b:f1:a3:e8:97:8a:
22:95:8b:3b:3a:56:28:59:cc:a8:14:a9:c6:33:41:10:2a:a1:
84:b2:1d:cd:15:53:19:0d:e7:7b:6e:8a:0b:ce:22:9f:be:b9:
22:73:f4:88:07:91:1d:75:f8:cb:8b:a2:ae:bd:87:17:3d:4a:
f5:2f:d9:2e:a6:fa:0b:ba:47:f5:cd:38:51:43:37:87:cb:ff:
72:49:39:0d:2e:bb:e5:15:7a:02:84:c1:ce:82:ea:a9:94:0f:
10:b0:95:ce:43:f7:17:5f:30:aa:dc:42:48:c5:50:66:8e:e7:
ca:3a:da:21:d0:3f:53:58:f8:de:c4:60:80:1d:e2:95:41:e8:
a9:c1:97:c9:70:61:09:0d:53:a6:6f:a5:a5:e5:46:f1:35:ec:
99:70:ff:fc:ee:80:b5:67:b0:98:5e:5b:5f:56:a8:88:b4:08:
d0:17:01:15:ac:ac:21:82:31:fb:2d:92:a3:cf:68:6d:5d:06:
8e:70:90:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX0E5XDnlVcUTnr6X4cIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMjY4MWNmZDk3YzE2NDRlZmY3NTFlMGYxZTBhYTA1M2Mw
NWMwMGYwHhcNMjUwODIzMTAwMDIzWhcNMjUwODI0MTAwMDIzWjAzMTEwLwYDVQQD
EyhlNTU2YjBmOTgwNDBmZGVjMTJjYmM4YWViYzc3MWM1ZDQ4YmVlZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu46dsWERiBE9X7F1XrwujCOp9h+v
3Y6qQNucej/p9vORhCyubGZ6D7DvWnU/bHEC72wi7b+5sqrHUElkMJSrbXw0t7uc
z3l+JZqKop2VLUUkx1QlUJhBSMcHvLB2YGSPzb4oB3lT4Kzi4yxnaxzPANZCQFL5
sFdD8UPEysB2wRP6FLkrtQe4786Z2skUEUmEU8mc0aWu5QxN4xF9fD1PluB1vH4H
YnetfsgWK4beNUQl3hfIDf1zarrn9kaCbbOa8ZHGEA6Vp0W7pRvUO8Rv2XrTJ9ew
LKbf2VC3DmMgKC67BGuZ+faPbKfDLIVfjRhYGwJK7K+ImBnNfVa3TLuD3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVWsPmAQP3sEsvIrrx3HF1Ivu28MB8GA1UdIwQY
MBaAFOMmgc/ZfBZE7/dR4PHgqgU8BcAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jY2Y2M2YtZGU1Yi00OGNhLWFmMTUt
ZGMwZmU5ZDllMDk5LzEvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jY2Y2M2YtZGU1Yi00OGNhLWFmMTUtZGMwZmU5ZDllMDk5
LzEvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU82IaM8K
Z3F2WfXh/9rpC5/ZF/oGc4kK7xQ3Nia6ztEUJYRhRea9Q+zzDL/O1l2N2WlCEL+W
ao440FN9sn07aBN3e/Gj6JeKIpWLOzpWKFnMqBSpxjNBECqhhLIdzRVTGQ3ne26K
C84in765InP0iAeRHXX4y4uirr2HFz1K9S/ZLqb6C7pH9c04UUM3h8v/ckk5DS67
5RV6AoTBzoLqqZQPELCVzkP3F18wqtxCSMVQZo7nyjraIdA/U1j43sRggB3ilUHo
qcGXyXBhCQ1Tpm+lpeVG8TXsmXD//O6AtWewmF5bX1aoiLQI0BcBFaysIYIx+y2S
o89obV0GjnCQ/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:32:55 2025 by rpki-client