Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: ZqFSu7jfdQJGo5Zafqh944C3QCHzLdiCruRT/AX5TUU=
Subject key identifier: B5:EB:F7:0D:7C:FF:12:09:46:81:47:A0:55:F2:C4:33:0B:12:B9:E7
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 0198D4A83AEC301018C0A69C23E2732DB75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 056D
Signing time: Sat 23 Aug 2025 02:00:51 +0000
Manifest this update: Sat 23 Aug 2025 02:00:51 +0000
Manifest next update: Sun 24 Aug 2025 02:00:51 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: M5aTpX7yWx1ZFGDcT+nQhC9tLlIBJ9RTZf/XqitIy7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:3a:ec:30:10:18:c0:a6:9c:23:e2:73:2d:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: Aug 23 02:00:51 2025 GMT
Not After : Aug 24 02:00:51 2025 GMT
Subject: CN=b5ebf70d7cff1209468147a055f2c4330b12b9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:6f:86:c2:fd:2c:a2:54:10:d1:40:68:b7:
d0:5b:59:57:ab:30:80:1c:5b:c3:f0:34:00:1b:3d:
ec:2f:79:a7:c5:47:d0:fc:3a:fc:fe:82:ef:fc:a3:
80:65:a2:17:7b:51:50:fd:3a:9a:74:c7:b5:17:2c:
24:0c:89:66:a6:9c:b3:e1:39:12:cd:82:7e:15:be:
b5:1c:46:45:fe:19:43:7d:c1:64:c2:44:39:f0:ee:
84:99:99:e5:e3:d2:4b:3e:d7:82:93:03:a4:ca:dc:
65:04:3e:54:69:75:71:fe:cc:46:e2:95:91:ce:f9:
8d:d9:72:88:57:16:06:78:9c:50:ae:eb:02:6d:c1:
2d:b1:1b:7c:95:c1:68:fa:e8:c8:75:54:b8:e8:d2:
97:ea:97:24:15:94:ea:a4:2d:92:66:d2:12:1f:e5:
c2:2e:c0:ef:6a:ca:ae:18:b3:d4:92:e4:76:9f:32:
18:1e:61:a0:f8:d3:d3:0a:b7:0d:7a:9c:eb:33:4f:
6f:e7:2f:d0:0d:0f:e1:a1:77:aa:ab:20:7e:33:07:
2e:14:8b:98:db:df:a5:37:c7:80:aa:ba:cb:a1:6c:
6a:5e:f9:9e:fe:d8:f7:b8:0e:5a:46:9d:63:f9:99:
ed:39:9c:d3:b2:93:4d:fa:45:d6:65:ec:2d:d8:ab:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EB:F7:0D:7C:FF:12:09:46:81:47:A0:55:F2:C4:33:0B:12:B9:E7
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:81:8f:90:c4:ee:cd:a7:e7:dc:4f:40:5c:c5:21:3e:a5:18:
09:b5:5f:7d:fb:f6:64:e0:1c:5c:e2:d0:84:ee:6a:1e:64:e5:
b9:ad:90:7e:eb:01:43:8c:0c:ff:48:4e:93:51:16:65:13:9b:
89:c9:4d:b8:ba:8b:52:6f:61:f9:83:d1:30:2f:91:7f:9b:b7:
e3:bb:39:43:7d:6a:96:9a:74:d4:08:eb:67:27:d8:40:ee:f1:
f0:36:b8:e1:e7:dd:52:d8:8b:1a:52:2f:34:a9:51:8b:a5:38:
15:e2:a0:cc:19:c8:e7:fd:e4:65:5a:7d:d4:da:9d:a3:78:6a:
9f:19:3e:75:fd:21:ec:02:57:c7:89:5c:8e:a2:36:91:cb:bb:
86:34:f9:c9:f3:62:c0:7c:74:09:fb:c5:1f:11:86:70:cb:a5:
a5:47:f8:a9:a1:84:26:53:41:f3:04:33:53:de:77:52:fd:b0:
45:5d:c1:60:78:f9:b0:4b:c9:5e:50:74:b4:0f:d4:35:16:a1:
65:b0:7e:5b:5d:73:db:04:a1:60:c9:25:c7:5d:2c:11:22:3f:
90:21:6c:c1:f4:0a:56:80:7e:84:f1:5d:ca:81:56:51:e9:0f:
3f:be:16:9e:b3:ce:74:63:37:36:55:a7:c5:3a:77:f7:ff:11:
d0:ff:61:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqDrsMBAYwKacI+JzLbdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjEzNGIyNmE1ZjNmN2NjZDhjYWY1ZDJjNmJlNzBjYWMw
ZmEyNGIwHhcNMjUwODIzMDIwMDUxWhcNMjUwODI0MDIwMDUxWjAzMTEwLwYDVQQD
EyhiNWViZjcwZDdjZmYxMjA5NDY4MTQ3YTA1NWYyYzQzMzBiMTJiOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ZvhsL9LKJUENFAaLfQW1lXqzCA
HFvD8DQAGz3sL3mnxUfQ/Dr8/oLv/KOAZaIXe1FQ/TqadMe1FywkDIlmppyz4TkS
zYJ+Fb61HEZF/hlDfcFkwkQ58O6EmZnl49JLPteCkwOkytxlBD5UaXVx/sxG4pWR
zvmN2XKIVxYGeJxQrusCbcEtsRt8lcFo+ujIdVS46NKX6pckFZTqpC2SZtISH+XC
LsDvasquGLPUkuR2nzIYHmGg+NPTCrcNepzrM09v5y/QDQ/hoXeqqyB+MwcuFIuY
29+lN8eAqrrLoWxqXvme/tj3uA5aRp1j+ZntOZzTspNN+kXWZewt2KuvsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXr9w18/xIJRoFHoFXyxDMLErnnMB8GA1UdIwQY
MBaAFLvxNLJqXz98zYyvXSxr5wysD6JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQt
OTViYzY0MGUzYzU2LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQtOTViYzY0MGUzYzU2
LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIGPkMTu
zafn3E9AXMUhPqUYCbVfffv2ZOAcXOLQhO5qHmTlua2QfusBQ4wM/0hOk1EWZROb
iclNuLqLUm9h+YPRMC+Rf5u347s5Q31qlpp01AjrZyfYQO7x8Da44efdUtiLGlIv
NKlRi6U4FeKgzBnI5/3kZVp91Nqdo3hqnxk+df0h7AJXx4lcjqI2kcu7hjT5yfNi
wHx0CfvFHxGGcMulpUf4qaGEJlNB8wQzU953Uv2wRV3BYHj5sEvJXlB0tA/UNRah
ZbB+W11z2wShYMklx10sESI/kCFswfQKVoB+hPFdyoFWUekPP74WnrPOdGM3NlWn
xTp39/8R0P9hsQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:33 2025 by rpki-client