Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: +fdfg7vFY5CJIfQjG4eClJKugfzDXVqkoTAgzZeJaYY=
Subject key identifier: 53:5C:58:E3:9B:34:E8:B1:84:2A:E6:E2:CE:35:5C:73:28:53:F2:E5
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 0198D4E05854CC063067DBB6B665AA471F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:02:09 +0000
Manifest this update: Sat 23 Aug 2025 03:02:09 +0000
Manifest next update: Sun 24 Aug 2025 03:02:09 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: I+IIJEF3V3uudz9ubvJeY7BwX5VkPsv4Q4k9b+tlxao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:58:54:cc:06:30:67:db:b6:b6:65:aa:47:1f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Aug 23 03:02:09 2025 GMT
Not After : Aug 24 03:02:09 2025 GMT
Subject: CN=535c58e39b34e8b1842ae6e2ce355c732853f2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:db:24:3e:73:9f:d6:45:80:8b:6f:90:41:
1f:2c:18:99:e7:08:03:59:34:ad:ed:0d:7d:02:86:
87:bf:f5:6d:40:e9:f1:45:80:bb:5f:08:6a:33:f1:
fe:67:1c:d6:6f:ca:9d:02:b0:b8:62:18:8a:e4:de:
5a:40:a6:01:77:91:c8:85:d8:8a:3f:d0:f5:17:05:
35:aa:41:10:f2:d9:33:cb:5f:04:4f:c3:8d:2a:5d:
e3:c5:46:3d:83:22:fa:1d:1f:9f:7d:d0:cc:3d:8a:
86:1b:33:7f:98:f4:c5:c6:b7:5b:32:22:54:3c:df:
b3:8f:f1:96:f6:4b:99:8f:12:7f:8c:56:f9:73:ef:
3f:dc:a3:39:2f:d5:b5:0b:f8:d1:0e:3f:74:32:01:
b3:b8:94:2b:6f:19:eb:46:7a:dd:9c:2c:27:58:b0:
d4:af:e2:24:fd:4f:44:ef:15:a3:80:6b:b0:fd:ce:
32:41:76:da:1d:d2:ea:51:3e:e5:8d:e3:f9:24:3e:
eb:95:b8:ee:96:f6:7c:1d:3c:48:c6:57:3d:36:47:
60:02:c7:64:84:5c:c9:1f:99:12:dc:14:df:a0:82:
75:64:ac:88:75:bb:98:4f:4b:3b:ce:5e:b1:98:2f:
10:cb:4e:08:72:85:fb:4d:a9:21:8a:fb:35:78:c4:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:58:E3:9B:34:E8:B1:84:2A:E6:E2:CE:35:5C:73:28:53:F2:E5
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:24:f9:72:6b:bf:ec:3f:27:10:6b:c8:d8:2e:9f:11:de:68:
91:2a:8c:90:3e:2f:32:aa:3d:67:ad:a5:f7:78:9e:63:f7:28:
fe:f5:6a:ae:3f:2d:15:2d:15:a4:8a:12:20:2c:a5:a1:90:44:
6b:8f:b9:18:13:e5:dc:33:d0:0c:f7:45:92:de:5e:2a:9a:c1:
bf:21:3f:85:35:4b:92:b3:34:2e:cb:69:ce:96:04:26:99:8e:
6a:4d:03:f6:ff:83:a9:9f:49:af:0f:5b:ba:cc:98:80:2d:8e:
68:da:6a:54:ed:e2:a5:49:8c:a8:36:ca:40:cb:a7:0f:41:90:
24:50:02:12:e0:3c:c0:41:73:30:c2:57:b9:76:9e:96:39:96:
15:cc:9a:b8:e0:4e:4d:14:1d:ae:c8:07:32:f4:62:f2:ae:fd:
4f:d1:8e:77:40:5f:17:a1:7e:fa:bf:e1:dd:58:a3:4a:d1:fa:
55:bf:20:7f:ae:0e:c7:57:a1:7b:44:c7:f1:c9:c7:72:e9:58:
9a:94:49:d6:ea:14:d2:cd:d2:79:a7:14:44:bd:44:3c:a9:f7:
f5:70:1b:63:5d:4e:e2:80:50:a4:5d:18:12:6b:d9:91:4d:d9:
ff:04:18:21:d4:92:1f:cf:10:eb:89:e0:16:1e:5d:82:49:96:
d4:07:37:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4FhUzAYwZ9u2tmWqRx9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODJjOGFlNzk2NzBiZmFmM2FjOGRhODg3NDg1ODFlMzk5
NzJiZWIwHhcNMjUwODIzMDMwMjA5WhcNMjUwODI0MDMwMjA5WjAzMTEwLwYDVQQD
Eyg1MzVjNThlMzliMzRlOGIxODQyYWU2ZTJjZTM1NWM3MzI4NTNmMmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotfbJD5zn9ZFgItvkEEfLBiZ5wgD
WTSt7Q19AoaHv/VtQOnxRYC7XwhqM/H+ZxzWb8qdArC4YhiK5N5aQKYBd5HIhdiK
P9D1FwU1qkEQ8tkzy18ET8ONKl3jxUY9gyL6HR+ffdDMPYqGGzN/mPTFxrdbMiJU
PN+zj/GW9kuZjxJ/jFb5c+8/3KM5L9W1C/jRDj90MgGzuJQrbxnrRnrdnCwnWLDU
r+Ik/U9E7xWjgGuw/c4yQXbaHdLqUT7ljeP5JD7rlbjulvZ8HTxIxlc9NkdgAsdk
hFzJH5kS3BTfoIJ1ZKyIdbuYT0s7zl6xmC8Qy04IcoX7Takhivs1eMTGHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNcWOObNOixhCrm4s41XHMoU/LlMB8GA1UdIwQY
MBaAFG+CyK55Zwv686yNqIdIWB45lyvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYt
YTM4NjdkNTM5MDBjLzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYtYTM4NjdkNTM5MDBj
LzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACST5cmu/
7D8nEGvI2C6fEd5okSqMkD4vMqo9Z62l93ieY/co/vVqrj8tFS0VpIoSICyloZBE
a4+5GBPl3DPQDPdFkt5eKprBvyE/hTVLkrM0LstpzpYEJpmOak0D9v+DqZ9Jrw9b
usyYgC2OaNpqVO3ipUmMqDbKQMunD0GQJFACEuA8wEFzMMJXuXaeljmWFcyauOBO
TRQdrsgHMvRi8q79T9GOd0BfF6F++r/h3VijStH6Vb8gf64Ox1ehe0TH8cnHculY
mpRJ1uoU0s3SeacURL1EPKn39XAbY11O4oBQpF0YEmvZkU3Z/wQYIdSSH88Q64ng
Fh5dgkmW1Ac3cQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:59 2025 by rpki-client