Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
File: RjED8MVPLKupUVZ61E0zwvv58gY.mft (raw, json)
Hash identifier: LnnUtiBGh4kO8VWlxgD/65JzH7PAdOtQl/KFO/E3Zw4=
Subject key identifier: CA:AE:7B:18:81:35:4D:4A:63:14:F8:E0:1A:97:02:32:76:7B:EE:5D
Authority key identifier: 46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06
Certificate issuer: /CN=463103f0c54f2caba951567ad44d33c2fbf9f206
Certificate serial: 0198D5BBE2D1FE8B5E6E6FF3EB74CD44B0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
Manifest number: 0818
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: RjED8MVPLKupUVZ61E0zwvv58gY.crl (hash: aCmijW+UqtG4+PEnpdsbZkSsPbFzmCbF/77cAcIpm4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e2:d1:fe:8b:5e:6e:6f:f3:eb:74:cd:44:b0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463103f0c54f2caba951567ad44d33c2fbf9f206
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=caae7b1881354d4a6314f8e01a970232767bee5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:fc:81:c0:68:a3:e4:5b:ad:41:9e:c3:a4:
33:6f:94:3b:3a:63:5b:79:73:42:aa:16:c3:96:11:
73:7f:70:00:9b:ab:b2:72:c5:e9:3d:32:1a:96:00:
b6:5f:13:29:ed:96:a6:50:75:2c:cd:ac:4e:7d:f0:
60:ea:7d:e8:c2:6d:36:5f:7d:70:67:ac:d8:75:5c:
f4:a5:45:1d:ce:d9:a7:be:d7:5e:d8:70:9c:d4:f9:
f6:f4:01:84:8f:1a:9a:35:02:2e:23:f2:4e:bc:84:
fa:f3:57:04:1d:aa:4d:e3:d8:3c:74:35:9f:2a:1f:
5f:70:f1:ec:52:b1:21:35:a7:82:54:ab:a4:ed:d3:
88:3c:94:55:6e:de:5f:8f:19:42:c7:6b:03:1a:a4:
8b:bf:98:87:50:c8:a1:b3:16:56:be:a2:ca:69:a9:
cd:4d:05:32:ee:fc:57:0c:f3:e9:de:42:79:e0:b1:
3b:ab:e5:fb:35:0c:9c:0d:30:3f:1b:95:a7:59:fe:
16:98:b1:bd:7c:27:80:48:02:b6:b3:94:1c:96:c2:
4c:28:55:3f:15:57:26:cd:22:70:03:81:2a:f8:20:
bb:cd:89:af:20:b9:b6:eb:83:6b:d7:be:ed:c4:45:
ce:72:ad:24:84:4f:0a:5c:b1:fd:a0:f7:91:4c:63:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AE:7B:18:81:35:4D:4A:63:14:F8:E0:1A:97:02:32:76:7B:EE:5D
X509v3 Authority Key Identifier:
keyid:46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:13:09:a3:0d:21:c4:2a:ba:07:a4:87:03:38:b5:39:52:00:
b6:09:e2:28:5a:20:a5:9d:43:ca:e6:a3:60:51:6d:eb:4f:8f:
4b:92:cf:35:8f:a7:58:ca:1a:4a:52:a9:75:6d:ba:ba:ef:e4:
38:de:82:02:6f:d7:06:89:98:44:93:3b:77:22:2f:d5:37:df:
e6:cb:a0:59:3c:80:b1:54:6d:de:c0:29:5c:bd:9f:33:07:96:
8e:39:59:71:22:cf:cb:4b:c2:f8:b0:92:93:af:bf:2b:e9:a0:
95:4f:6a:2b:e7:c3:c1:9f:14:04:d6:43:db:4a:ae:3c:84:62:
93:eb:14:db:83:b1:19:71:ec:62:b5:91:d8:01:53:de:7a:11:
6d:e3:3b:0d:70:a5:72:38:33:18:2a:84:c4:d1:21:22:fd:36:
a2:93:5b:b3:2e:7e:cf:70:de:84:51:72:8e:a7:f6:0c:29:6b:
45:84:0e:f1:0a:aa:d0:38:93:fd:e6:b3:f0:42:d6:80:58:db:
34:25:0d:8b:55:69:7d:21:e3:22:0f:ae:f1:d1:b4:48:ed:e2:
d9:7f:61:89:0f:46:47:aa:fd:da:31:ad:ae:af:5c:7f:81:08:
e5:2c:9f:0c:b8:62:ce:6f:63:f0:ed:0c:97:ed:d2:fe:5d:e3:
cf:17:f2:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+LR/otebm/z63TNRLDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzEwM2YwYzU0ZjJjYWJhOTUxNTY3YWQ0NGQzM2MyZmJm
OWYyMDYwHhcNMjUwODIzMDcwMTU2WhcNMjUwODI0MDcwMTU2WjAzMTEwLwYDVQQD
EyhjYWFlN2IxODgxMzU0ZDRhNjMxNGY4ZTAxYTk3MDIzMjc2N2JlZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1r8gcBoo+RbrUGew6Qzb5Q7OmNb
eXNCqhbDlhFzf3AAm6uycsXpPTIalgC2XxMp7ZamUHUszaxOffBg6n3owm02X31w
Z6zYdVz0pUUdztmnvtde2HCc1Pn29AGEjxqaNQIuI/JOvIT681cEHapN49g8dDWf
Kh9fcPHsUrEhNaeCVKuk7dOIPJRVbt5fjxlCx2sDGqSLv5iHUMihsxZWvqLKaanN
TQUy7vxXDPPp3kJ54LE7q+X7NQycDTA/G5WnWf4WmLG9fCeASAK2s5QclsJMKFU/
FVcmzSJwA4Eq+CC7zYmvILm264Nr177txEXOcq0khE8KXLH9oPeRTGOGKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMquexiBNU1KYxT44BqXAjJ2e+5dMB8GA1UdIwQY
MBaAFEYxA/DFTyyrqVFWetRNM8L7+fIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpFRDhNVlBMS3VwVVZaNjFFMHp3dnY1OGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mODBhMmEtNTY4ZC00YTM4LTkwYzQt
NmVmMDJkMjE0N2NiLzEvUmpFRDhNVlBMS3VwVVZaNjFFMHp3dnY1OGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mODBhMmEtNTY4ZC00YTM4LTkwYzQtNmVmMDJkMjE0N2Ni
LzEvUmpFRDhNVlBMS3VwVVZaNjFFMHp3dnY1OGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhMJow0h
xCq6B6SHAzi1OVIAtgniKFogpZ1DyuajYFFt60+PS5LPNY+nWMoaSlKpdW26uu/k
ON6CAm/XBomYRJM7dyIv1Tff5sugWTyAsVRt3sApXL2fMweWjjlZcSLPy0vC+LCS
k6+/K+mglU9qK+fDwZ8UBNZD20quPIRik+sU24OxGXHsYrWR2AFT3noRbeM7DXCl
cjgzGCqExNEhIv02opNbsy5+z3DehFFyjqf2DClrRYQO8Qqq0DiT/eaz8ELWgFjb
NCUNi1VpfSHjIg+u8dG0SO3i2X9hiQ9GR6r92jGtrq9cf4EI5SyfDLhizm9j8O0M
l+3S/l3jzxfy5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:49 2025 by rpki-client