Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
File: rl8yMzCqPoI4TGOgFadR5U7chVI.mft (raw, json)
Hash identifier: p2jt/8jVYJ3Bah4KdlR4XQes67GmZELCzWz5xUlVMY0=
Subject key identifier: 4A:D8:55:49:03:86:F7:F9:96:07:56:D3:B6:BB:05:1D:43:F5:FB:D6
Authority key identifier: AE:5F:32:33:30:AA:3E:82:38:4C:63:A0:15:A7:51:E5:4E:DC:85:52
Certificate issuer: /CN=ae5f323330aa3e82384c63a015a751e54edc8552
Certificate serial: 0198D65F79015A4C741AED2C26504C0F521C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
Manifest number: 2E
Signing time: Sat 23 Aug 2025 10:00:37 +0000
Manifest this update: Sat 23 Aug 2025 10:00:37 +0000
Manifest next update: Sun 24 Aug 2025 10:00:37 +0000
Files and hashes: 1: rl8yMzCqPoI4TGOgFadR5U7chVI.crl (hash: t2+iA0/ObdKuXchxhOthADUODb9UmAZjfThE/hWPoCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:79:01:5a:4c:74:1a:ed:2c:26:50:4c:0f:52:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f323330aa3e82384c63a015a751e54edc8552
Validity
Not Before: Aug 23 10:00:37 2025 GMT
Not After : Aug 24 10:00:37 2025 GMT
Subject: CN=4ad855490386f7f9960756d3b6bb051d43f5fbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:3a:5f:4d:c7:45:09:81:46:5f:45:38:6c:
e9:be:14:87:97:23:ef:a1:61:32:d8:55:48:5c:33:
09:28:ed:b4:bf:70:04:a7:b9:38:ea:34:da:f4:6d:
2f:c1:aa:85:9d:c5:f3:bb:a1:85:71:64:99:b0:8e:
ec:f3:f1:1e:ca:bf:66:6d:a6:b4:01:1c:33:f6:b0:
79:ea:32:90:91:40:9b:3d:31:52:4f:13:ca:c5:a3:
a8:41:62:ba:6b:ae:96:15:c2:ea:f4:55:9d:f1:df:
23:e8:38:9e:7b:a0:ac:4f:69:15:8f:5b:d6:7e:90:
dc:37:35:83:02:2a:cb:65:92:63:0a:c2:cd:66:5a:
73:5a:c0:e6:1d:18:5c:45:17:3b:cf:0c:c0:bc:f3:
33:34:b9:cb:0e:3b:80:49:28:1b:49:45:bf:4f:3c:
c8:a5:b5:ec:e9:2b:3c:ae:fc:18:21:e3:6f:b2:29:
3c:b8:58:68:7e:b9:ae:03:f2:42:78:71:66:4c:6a:
bc:da:7a:d9:fd:22:a5:a3:63:d2:14:db:21:1b:2b:
5d:d1:0b:d8:5f:10:85:37:3c:46:68:66:5c:7f:fa:
8e:94:de:20:db:cf:28:ef:bf:49:a3:d8:76:d3:5c:
0d:70:4b:9e:32:cf:9b:dd:8f:b5:5a:9c:08:a7:d1:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:55:49:03:86:F7:F9:96:07:56:D3:B6:BB:05:1D:43:F5:FB:D6
X509v3 Authority Key Identifier:
keyid:AE:5F:32:33:30:AA:3E:82:38:4C:63:A0:15:A7:51:E5:4E:DC:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0d:1f:9e:b7:ca:5c:e4:41:7d:a1:d0:80:42:3a:d9:0f:7f:
a0:5e:87:9a:4d:99:91:15:7d:d4:23:8f:c5:d3:6a:9d:ab:d9:
10:95:77:ba:a2:6a:93:54:30:f8:c7:74:1e:d8:31:0f:a3:ad:
55:35:ed:d2:c6:3d:7b:67:23:c9:69:cc:36:fb:03:28:5b:17:
5f:57:67:a0:83:a6:6b:07:26:68:4a:78:41:de:5a:aa:b5:4e:
e2:ea:7a:18:21:24:bf:52:20:21:09:f0:68:3d:84:56:95:0f:
82:7a:bb:c7:a7:99:24:ac:5c:b8:d2:c0:dd:25:c4:d2:26:1a:
f0:79:29:de:43:1f:86:b3:75:61:06:20:3b:2e:4e:48:26:36:
51:a1:95:a3:bd:25:30:95:03:ca:c3:e4:3b:b3:c1:a5:89:80:
5b:2f:ba:a4:89:12:55:f5:5f:cf:d0:9d:1e:89:04:a0:d6:75:
b0:d3:44:1d:85:e1:9e:56:0e:6e:04:07:35:94:4a:d2:4a:08:
52:0b:e1:30:3e:0e:0e:2a:66:5f:47:11:29:25:24:66:3b:8a:
02:ed:37:3b:2a:f5:8a:8b:e0:09:ef:f1:15:59:1d:25:4b:f6:
c3:66:40:eb:df:9f:7f:9f:22:7e:5f:1c:c9:ff:43:7d:af:e6:
05:d1:dd:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX3kBWkx0Gu0sJlBMD1IcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNWYzMjMzMzBhYTNlODIzODRjNjNhMDE1YTc1MWU1NGVk
Yzg1NTIwHhcNMjUwODIzMTAwMDM3WhcNMjUwODI0MTAwMDM3WjAzMTEwLwYDVQQD
Eyg0YWQ4NTU0OTAzODZmN2Y5OTYwNzU2ZDNiNmJiMDUxZDQzZjVmYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/M6X03HRQmBRl9FOGzpvhSHlyPv
oWEy2FVIXDMJKO20v3AEp7k46jTa9G0vwaqFncXzu6GFcWSZsI7s8/Eeyr9mbaa0
ARwz9rB56jKQkUCbPTFSTxPKxaOoQWK6a66WFcLq9FWd8d8j6Diee6CsT2kVj1vW
fpDcNzWDAirLZZJjCsLNZlpzWsDmHRhcRRc7zwzAvPMzNLnLDjuASSgbSUW/TzzI
pbXs6Ss8rvwYIeNvsik8uFhofrmuA/JCeHFmTGq82nrZ/SKlo2PSFNshGytd0QvY
XxCFNzxGaGZcf/qOlN4g288o779Jo9h201wNcEueMs+b3Y+1WpwIp9E1zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErYVUkDhvf5lgdW07a7BR1D9fvWMB8GA1UdIwQY
MBaAFK5fMjMwqj6COExjoBWnUeVO3IVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmw4eU16Q3FQb0k0VEdPZ0ZhZFI1VTdjaFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMTY3NDAtYTJhNS00YjJjLWIyZGYt
MDc4NjcyZGEyNzk0LzEvcmw4eU16Q3FQb0k0VEdPZ0ZhZFI1VTdjaFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mMTY3NDAtYTJhNS00YjJjLWIyZGYtMDc4NjcyZGEyNzk0
LzEvcmw4eU16Q3FQb0k0VEdPZ0ZhZFI1VTdjaFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATg0fnrfK
XORBfaHQgEI62Q9/oF6Hmk2ZkRV91COPxdNqnavZEJV3uqJqk1Qw+Md0HtgxD6Ot
VTXt0sY9e2cjyWnMNvsDKFsXX1dnoIOmawcmaEp4Qd5aqrVO4up6GCEkv1IgIQnw
aD2EVpUPgnq7x6eZJKxcuNLA3SXE0iYa8Hkp3kMfhrN1YQYgOy5OSCY2UaGVo70l
MJUDysPkO7PBpYmAWy+6pIkSVfVfz9CdHokEoNZ1sNNEHYXhnlYObgQHNZRK0koI
UgvhMD4ODipmX0cRKSUkZjuKAu03Oyr1iovgCe/xFVkdJUv2w2ZA69+ff58ifl8c
yf9Dfa/mBdHdnw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:29 2025 by rpki-client