Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: Kr5TT6aCZQPGAKAK5RVeuScMwrZG5LTvYHcLngc7baI=
Subject key identifier: E6:4A:FE:91:80:DD:29:F9:78:F8:C5:DD:FC:6A:CA:A2:78:4B:E9:40
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 0198D515A5C235C59AB910220EF54D692C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 09C8
Signing time: Sat 23 Aug 2025 04:00:22 +0000
Manifest this update: Sat 23 Aug 2025 04:00:22 +0000
Manifest next update: Sun 24 Aug 2025 04:00:22 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: ClxKtDjisoLqAA9xJaNyn3jNyin7hxhHIGt4BO/v7v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a5:c2:35:c5:9a:b9:10:22:0e:f5:4d:69:2c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Aug 23 04:00:22 2025 GMT
Not After : Aug 24 04:00:22 2025 GMT
Subject: CN=e64afe9180dd29f978f8c5ddfc6acaa2784be940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:77:2f:ba:18:00:32:13:38:e1:00:aa:e8:
10:2b:fb:eb:22:ed:b1:5b:e9:42:43:b1:4c:c3:d4:
4b:3c:3f:a1:7d:61:ed:32:b8:61:ae:70:63:86:7c:
b5:53:87:8c:63:91:1c:1c:1e:60:82:4b:68:94:78:
29:04:b5:54:b0:56:2e:81:81:1f:3e:30:34:10:22:
e0:12:0c:fa:72:23:a6:c1:e2:88:4e:24:92:54:45:
5f:ef:b4:13:34:11:91:d1:29:c3:83:8a:e5:53:aa:
ad:47:33:d5:22:67:66:9c:15:24:4c:d2:e7:aa:29:
93:d6:31:cb:d2:10:65:dd:5b:1d:84:3e:f8:46:d1:
a0:40:67:7d:cf:58:56:ba:13:f8:73:c5:6f:f4:c0:
57:15:3f:4d:3d:98:c3:3d:0f:f5:e1:9e:c7:9a:32:
46:9a:e5:a6:2e:6c:f6:35:b9:e1:04:4c:6c:93:e6:
32:b1:72:fd:2b:86:c8:39:3f:89:77:04:39:8a:fc:
a0:72:7a:42:ac:60:f2:67:6a:83:78:13:49:ff:71:
f7:53:b8:2a:dd:f9:38:38:a9:c1:32:0e:dc:20:20:
ab:c1:ed:b1:5f:46:86:66:9e:36:f1:d3:e1:7d:9a:
c2:b6:c5:f6:12:eb:60:df:87:5e:3b:fb:80:aa:83:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:FE:91:80:DD:29:F9:78:F8:C5:DD:FC:6A:CA:A2:78:4B:E9:40
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2f:21:28:31:15:62:4d:5a:08:c0:73:25:c8:90:d2:d9:a5:
36:a9:b5:d7:66:ff:89:d3:a6:e0:5c:6b:c7:69:fd:35:80:e4:
a1:6d:f1:fd:75:43:27:bf:36:78:8c:e6:ea:41:ea:bf:39:6c:
07:58:cd:d0:6d:98:05:58:4c:06:4d:79:0d:90:8f:bc:64:7e:
64:e6:bd:84:aa:62:f9:e9:2d:ca:2d:30:bc:f0:2c:5c:1b:f3:
0c:08:72:72:52:b8:94:ba:f4:e2:ae:f0:38:50:64:c5:85:1f:
88:b2:1f:fe:30:d3:23:ad:66:71:94:88:3f:31:01:26:10:05:
42:c5:bb:11:00:32:fb:3a:e4:f8:23:eb:32:98:f4:68:6f:73:
9e:30:b4:32:10:f8:97:07:ef:5d:49:99:5a:eb:be:19:53:64:
6e:ad:e7:6b:62:6d:e5:3e:ce:f5:06:64:a5:93:dc:96:3c:8c:
bd:30:35:93:1f:16:36:20:4c:ff:66:65:fc:f1:70:e7:8d:d8:
35:cb:33:30:03:4c:2d:79:da:30:91:7f:b0:d5:c8:3e:3b:e2:
d3:0f:3e:50:91:29:db:2f:1f:6e:b9:d8:6e:3d:93:c0:e6:fb:
c3:06:3a:8f:69:78:b9:6b:bd:18:6c:4e:6e:a5:85:71:62:90:
90:f1:75:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFaXCNcWauRAiDvVNaSyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWI3ZDBkYzhiY2E0ZmY0ZTc1MzZiZDM4MDM0MDI0MjJl
OGUyNmMwHhcNMjUwODIzMDQwMDIyWhcNMjUwODI0MDQwMDIyWjAzMTEwLwYDVQQD
EyhlNjRhZmU5MTgwZGQyOWY5NzhmOGM1ZGRmYzZhY2FhMjc4NGJlOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI93L7oYADITOOEAqugQK/vrIu2x
W+lCQ7FMw9RLPD+hfWHtMrhhrnBjhny1U4eMY5EcHB5ggktolHgpBLVUsFYugYEf
PjA0ECLgEgz6ciOmweKITiSSVEVf77QTNBGR0SnDg4rlU6qtRzPVImdmnBUkTNLn
qimT1jHL0hBl3VsdhD74RtGgQGd9z1hWuhP4c8Vv9MBXFT9NPZjDPQ/14Z7HmjJG
muWmLmz2NbnhBExsk+YysXL9K4bIOT+JdwQ5ivygcnpCrGDyZ2qDeBNJ/3H3U7gq
3fk4OKnBMg7cICCrwe2xX0aGZp428dPhfZrCtsX2Eutg34deO/uAqoNO9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZK/pGA3Sn5ePjF3fxqyqJ4S+lAMB8GA1UdIwQY
MBaAFBIbfQ3IvKT/TnU2vTgDQCQi6OJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZGI5YjctOTViYS00YzEzLWIzOTYt
OGRiYzc0NjZhZmUzLzEvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mZGI5YjctOTViYS00YzEzLWIzOTYtOGRiYzc0NjZhZmUz
LzEvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC8hKDEV
Yk1aCMBzJciQ0tmlNqm112b/idOm4Fxrx2n9NYDkoW3x/XVDJ782eIzm6kHqvzls
B1jN0G2YBVhMBk15DZCPvGR+ZOa9hKpi+ektyi0wvPAsXBvzDAhyclK4lLr04q7w
OFBkxYUfiLIf/jDTI61mcZSIPzEBJhAFQsW7EQAy+zrk+CPrMpj0aG9znjC0MhD4
lwfvXUmZWuu+GVNkbq3na2Jt5T7O9QZkpZPcljyMvTA1kx8WNiBM/2Zl/PFw543Y
NcszMANMLXnaMJF/sNXIPjvi0w8+UJEp2y8fbrnYbj2TwOb7wwY6j2l4uWu9GGxO
bqWFcWKQkPF1aQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:10 2025 by rpki-client