Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
File: MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft (raw, json)
Hash identifier: l038cdp5RohiG1wDUw8rqHCqTFLsWRX893/+rqItoyY=
Subject key identifier: 32:2B:7B:BD:E0:42:3A:33:62:64:54:11:80:9B:40:5B:D2:A6:90:4B
Authority key identifier: 30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
Certificate issuer: /CN=30aab02b654e915cadca339292e28c15c47df858
Certificate serial: 0198D705FD5FC51CB73A3E94DB74B5BAAC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
Manifest number: 04AC
Signing time: Sat 23 Aug 2025 13:02:30 +0000
Manifest this update: Sat 23 Aug 2025 13:02:30 +0000
Manifest next update: Sun 24 Aug 2025 13:02:30 +0000
Files and hashes: 1: MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl (hash: MWz7SZjKkdx9QVmH48Ww1oHxcr1+/UoJ3Ez6H5PN0HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:fd:5f:c5:1c:b7:3a:3e:94:db:74:b5:ba:ac:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aab02b654e915cadca339292e28c15c47df858
Validity
Not Before: Aug 23 13:02:30 2025 GMT
Not After : Aug 24 13:02:30 2025 GMT
Subject: CN=322b7bbde0423a3362645411809b405bd2a6904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:74:5f:cf:df:30:f2:6c:1b:c1:72:56:de:
8a:c2:60:5f:85:bb:89:2b:99:25:ef:06:b5:c9:f9:
11:e8:df:e8:b7:40:8d:84:f2:6a:94:12:a1:8b:2d:
68:c0:ed:40:19:25:6a:68:e6:2b:36:4d:e0:66:24:
f8:4d:cb:58:da:5c:e4:9e:a7:39:68:d9:14:62:82:
4c:67:d8:bb:4b:23:e6:02:01:40:df:3b:af:42:03:
eb:b6:a9:50:38:46:f5:59:76:ff:ca:19:49:c9:1b:
11:cf:22:bd:2a:44:11:7a:3a:a2:14:00:1e:a5:cd:
de:d4:57:35:5f:d2:33:74:e2:c0:05:14:c9:fc:5b:
d6:66:e1:01:7b:40:a9:99:f5:c2:cb:53:bc:a4:e8:
e9:df:4c:76:36:c0:4e:e4:55:a7:a6:5e:13:ea:32:
09:a0:f1:8f:08:bb:81:63:74:57:21:ff:fa:ab:48:
54:6e:ce:37:02:2e:d1:02:14:ed:36:08:85:ca:2e:
f2:7f:ff:1f:72:13:f3:83:7b:6b:b1:74:58:50:fb:
2f:cd:a7:17:32:50:d1:74:50:04:68:2f:6e:af:60:
9b:a7:27:dc:26:7e:15:ad:fe:a4:f6:af:df:49:44:
db:4b:be:5d:af:2a:1d:1d:98:fa:cf:32:6c:f4:94:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:7B:BD:E0:42:3A:33:62:64:54:11:80:9B:40:5B:D2:A6:90:4B
X509v3 Authority Key Identifier:
keyid:30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0b:33:17:54:a0:ef:84:0d:f4:a1:71:5a:ff:bb:21:fe:8b:
5a:8a:22:98:77:b8:8b:6a:d5:50:6e:99:4e:ec:7f:8a:9b:94:
59:af:18:c6:ef:56:97:51:6c:7c:72:0b:8b:f7:6b:fe:32:55:
32:f9:5a:d0:73:0a:b6:fa:df:54:76:a1:dd:22:e2:c0:e2:fb:
33:d5:20:ba:a1:d4:17:98:03:ed:c6:8e:c4:af:31:08:dc:ff:
d5:2b:55:79:c1:fd:96:b1:00:15:0c:1d:9b:7f:40:25:56:4b:
80:b6:ed:d8:48:70:f5:2c:77:00:44:e4:6a:86:6c:95:0c:69:
1a:f7:1c:7d:28:c8:49:3f:63:6f:74:0e:d6:1e:d7:9b:05:be:
6b:36:99:6e:7e:36:24:4c:3c:97:30:49:0f:af:8f:d1:99:0b:
ec:08:b8:8e:6b:f1:33:ed:83:72:72:71:c5:2b:9a:0a:77:38:
93:c5:31:07:72:d4:95:aa:06:6c:2b:f7:6d:61:47:13:b0:b2:
da:63:b0:ae:ac:55:ab:43:25:e5:41:61:b5:41:fa:a0:be:dc:
f6:dd:2e:96:f0:82:54:33:77:a8:4f:20:0b:fd:a9:8b:f7:ea:
d9:b4:af:da:d5:8e:1a:2b:4b:91:37:a1:75:74:af:d3:42:a1:
a8:5e:84:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBf1fxRy3Oj6U23S1uqwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWFiMDJiNjU0ZTkxNWNhZGNhMzM5MjkyZTI4YzE1YzQ3
ZGY4NTgwHhcNMjUwODIzMTMwMjMwWhcNMjUwODI0MTMwMjMwWjAzMTEwLwYDVQQD
EygzMjJiN2JiZGUwNDIzYTMzNjI2NDU0MTE4MDliNDA1YmQyYTY5MDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvp0X8/fMPJsG8FyVt6KwmBfhbuJ
K5kl7wa1yfkR6N/ot0CNhPJqlBKhiy1owO1AGSVqaOYrNk3gZiT4TctY2lzknqc5
aNkUYoJMZ9i7SyPmAgFA3zuvQgPrtqlQOEb1WXb/yhlJyRsRzyK9KkQRejqiFAAe
pc3e1Fc1X9IzdOLABRTJ/FvWZuEBe0CpmfXCy1O8pOjp30x2NsBO5FWnpl4T6jIJ
oPGPCLuBY3RXIf/6q0hUbs43Ai7RAhTtNgiFyi7yf/8fchPzg3trsXRYUPsvzacX
MlDRdFAEaC9ur2CbpyfcJn4Vrf6k9q/fSUTbS75dryodHZj6zzJs9JQeNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIre73gQjozYmRUEYCbQFvSppBLMB8GA1UdIwQY
MBaAFDCqsCtlTpFcrcozkpLijBXEffhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85YWZmNTQtNTk3MS00MDJmLWFiNjkt
YTQxOTY3MGQxN2UxLzEvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85YWZmNTQtNTk3MS00MDJmLWFiNjktYTQxOTY3MGQxN2Ux
LzEvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgszF1Sg
74QN9KFxWv+7If6LWooimHe4i2rVUG6ZTux/ipuUWa8Yxu9Wl1FsfHILi/dr/jJV
Mvla0HMKtvrfVHah3SLiwOL7M9UguqHUF5gD7caOxK8xCNz/1StVecH9lrEAFQwd
m39AJVZLgLbt2Ehw9Sx3AETkaoZslQxpGvccfSjIST9jb3QO1h7XmwW+azaZbn42
JEw8lzBJD6+P0ZkL7Ai4jmvxM+2DcnJxxSuaCnc4k8UxB3LUlaoGbCv3bWFHE7Cy
2mOwrqxVq0Ml5UFhtUH6oL7c9t0ulvCCVDN3qE8gC/2pi/fq2bSv2tWOGitLkTeh
dXSv00KhqF6E3A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:11 2025 by rpki-client