Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File: EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier: yi/8ObM/DFKvXwmnsI/++lNQe1GYSWqoF8HXUuWS37k=
Subject key identifier: DB:F1:53:DD:F4:8A:8D:F8:FE:07:CC:EB:52:3E:7D:FD:E2:4E:86:7B
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 0198D4A7DE9D899157341841DEF9032A57C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number: 0844
Signing time: Sat 23 Aug 2025 02:00:27 +0000
Manifest this update: Sat 23 Aug 2025 02:00:27 +0000
Manifest next update: Sun 24 Aug 2025 02:00:27 +0000
Files and hashes: 1: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: 5pUC2/6KyamOBJJhSKtRi57LrGh9DY7cng6C9WgKfFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:de:9d:89:91:57:34:18:41:de:f9:03:2a:57:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Aug 23 02:00:27 2025 GMT
Not After : Aug 24 02:00:27 2025 GMT
Subject: CN=dbf153ddf48a8df8fe07cceb523e7dfde24e867b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:22:94:e7:a7:e0:65:cd:b6:e2:b8:84:f5:
63:e0:25:be:e8:74:db:b9:58:70:94:8d:30:85:f7:
cc:e1:21:a0:e6:6c:8b:6e:0e:cf:c1:7e:bd:fe:1f:
77:41:65:61:a1:77:dc:5d:f1:34:54:5e:65:47:d2:
aa:7b:7b:36:a1:ce:9e:78:11:80:4c:e2:f0:4e:9e:
2e:87:be:4a:d6:99:d0:ee:8f:2c:85:3d:47:56:07:
53:90:4a:83:4e:7c:4d:e3:32:3e:16:6d:a2:60:29:
b9:89:62:cd:39:35:df:d5:3e:49:9d:6a:77:f9:25:
9e:01:0c:ec:07:97:d9:42:22:98:f6:40:58:f4:6a:
3f:3b:65:07:5f:29:cd:b5:de:74:d7:b8:4e:8a:8f:
49:86:76:f3:40:7e:9b:46:4a:72:b4:0f:f0:ce:ba:
36:da:11:27:a1:f8:e1:4f:56:2e:a4:24:46:8e:63:
50:97:c3:de:52:45:31:73:46:64:c2:2a:4a:af:1a:
4e:9e:d1:ed:af:c5:9f:47:dd:06:5c:2c:66:a8:9e:
d9:b8:c2:a7:bd:28:93:0d:d2:06:5e:46:1d:90:df:
b5:32:dd:89:91:8a:12:75:e0:65:47:4f:32:8b:42:
c1:b1:1f:21:56:b6:4f:34:d5:ba:8f:32:d5:93:3b:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F1:53:DD:F4:8A:8D:F8:FE:07:CC:EB:52:3E:7D:FD:E2:4E:86:7B
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b8:46:28:a5:b7:a0:9a:1e:56:ad:ce:57:0e:e3:e1:55:d5:
df:84:ec:a6:f5:c2:b8:e2:92:ba:fe:1d:6f:e5:29:60:84:1b:
20:26:d9:59:83:bc:27:34:26:7c:c0:32:77:78:90:3e:ca:18:
b2:8d:9f:8f:98:f8:10:4b:2d:e4:0f:d2:c8:24:36:31:e5:50:
f4:45:c8:a8:34:26:db:66:08:cf:21:56:f8:a4:a0:03:73:74:
09:09:25:89:c5:d5:3e:c0:2a:93:f7:8c:f3:cd:b8:18:91:5e:
ec:3f:bf:3e:ad:b7:03:ba:7b:71:b1:d3:51:17:b6:80:0f:13:
b7:e4:41:ff:04:e7:e9:6f:50:ee:90:5d:ea:57:7f:38:55:61:
2a:11:ec:d2:9d:f0:24:3b:1e:6c:17:d1:ff:72:b1:0b:69:5d:
a5:a2:04:c0:e6:2a:54:77:fa:7d:94:93:01:4d:44:a4:b2:c4:
50:d6:b3:7e:a2:2d:bb:63:8d:69:fd:56:d1:44:12:a9:cc:6c:
a7:93:72:c7:a7:b7:02:8e:56:7e:16:16:17:70:0c:a7:90:c0:
a1:88:9c:70:18:c9:0b:4d:ea:34:bd:ea:d2:1a:8a:e9:9d:45:
ab:6d:48:ca:6f:12:01:09:55:74:ec:04:a1:de:6e:78:cb:48:
bf:8f:40:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp96diZFXNBhB3vkDKlfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOTQ2MmQ0NWI4YWI5NWQ0YzM1YzQwMjY1YjMxYjUyYmYx
ZThkYmQwHhcNMjUwODIzMDIwMDI3WhcNMjUwODI0MDIwMDI3WjAzMTEwLwYDVQQD
EyhkYmYxNTNkZGY0OGE4ZGY4ZmUwN2NjZWI1MjNlN2RmZGUyNGU4NjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3YilOen4GXNtuK4hPVj4CW+6HTb
uVhwlI0whffM4SGg5myLbg7PwX69/h93QWVhoXfcXfE0VF5lR9Kqe3s2oc6eeBGA
TOLwTp4uh75K1pnQ7o8shT1HVgdTkEqDTnxN4zI+Fm2iYCm5iWLNOTXf1T5JnWp3
+SWeAQzsB5fZQiKY9kBY9Go/O2UHXynNtd5017hOio9JhnbzQH6bRkpytA/wzro2
2hEnofjhT1YupCRGjmNQl8PeUkUxc0ZkwipKrxpOntHtr8WfR90GXCxmqJ7ZuMKn
vSiTDdIGXkYdkN+1Mt2JkYoSdeBlR08yi0LBsR8hVrZPNNW6jzLVkzssnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvxU930io34/gfM61I+ff3iToZ7MB8GA1UdIwQY
MBaAFBKUYtRbirldTDXEAmWzG1K/Ho29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQt
M2EzODkzMzJmNzlmLzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQtM2EzODkzMzJmNzlm
LzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrhGKKW3
oJoeVq3OVw7j4VXV34TspvXCuOKSuv4db+UpYIQbICbZWYO8JzQmfMAyd3iQPsoY
so2fj5j4EEst5A/SyCQ2MeVQ9EXIqDQm22YIzyFW+KSgA3N0CQklicXVPsAqk/eM
8824GJFe7D+/Pq23A7p7cbHTURe2gA8Tt+RB/wTn6W9Q7pBd6ld/OFVhKhHs0p3w
JDsebBfR/3KxC2ldpaIEwOYqVHf6fZSTAU1EpLLEUNazfqItu2ONaf1W0UQSqcxs
p5Nyx6e3Ao5WfhYWF3AMp5DAoYiccBjJC03qNL3q0hqK6Z1Fq21Iym8SAQlVdOwE
od5ueMtIv49AxA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:09 2025 by rpki-client