Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File: mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier: QE+oK031BsbJ77DgUL+Ux3L6Chi3eEbCXWEhKJHw4xA=
Subject key identifier: 2B:03:21:52:72:79:F4:6E:8B:49:69:0D:E1:B4:B6:9B:B2:C5:86:A4
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer: /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial: 0197B6A14C88DCAE61F078AE9CE400B6E7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number: 0789
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: R45RegOhKtwijhDd9EZTWV9pFb/jG0ZTEIEL6Yansks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4c:88:dc:ae:61:f0:78:ae:9c:e4:00:b6:e7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=2b0321527279f46e8b49690de1b4b69bb2c586a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:fa:48:3f:08:61:95:72:e3:e0:15:76:b7:
94:f7:65:30:8e:95:42:77:68:26:50:0b:b2:57:9b:
55:ad:d8:ed:af:60:25:5c:94:98:bf:82:ca:b0:2a:
f9:13:6e:29:3d:31:80:5b:1e:de:f6:1d:0c:7c:01:
ec:b3:bd:8a:ba:3b:b8:75:32:c1:78:e5:dc:a5:0d:
b0:4a:79:35:64:87:8b:55:50:1a:7a:ea:83:a5:cc:
34:a0:39:c5:cb:9d:13:d9:70:e8:d6:34:82:cc:2f:
85:1e:c9:91:b7:9b:7f:4d:95:fe:08:01:b4:f2:d3:
11:b2:25:f7:fe:2c:21:02:0f:19:d2:0e:a1:1b:ca:
a7:aa:b7:39:4e:35:1c:67:b6:3f:79:71:af:0c:9d:
c8:36:67:34:be:36:d0:f3:88:c6:dc:f9:08:bb:ee:
32:6b:f4:0f:26:8b:14:57:10:e3:4e:d7:ae:8a:4f:
5b:bc:3a:97:81:b2:14:f7:3b:76:43:96:f5:fc:cd:
d6:a8:1c:77:19:98:7a:63:a9:90:25:0a:60:7c:22:
d3:6e:04:e5:75:8d:ff:70:b0:48:6d:9a:c8:c2:57:
08:fc:d1:74:3b:2c:d8:f7:08:ee:c0:5c:55:ca:ef:
dd:7d:78:8b:76:2d:2b:7c:8a:78:29:6a:cb:38:67:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:03:21:52:72:79:F4:6E:8B:49:69:0D:E1:B4:B6:9B:B2:C5:86:A4
X509v3 Authority Key Identifier:
keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b0:60:1c:ae:5f:ca:6c:e3:74:04:c5:43:c5:71:81:1f:07:
42:70:e3:5e:55:cf:12:41:4a:9b:ce:bc:2d:7e:bc:52:81:67:
93:ff:90:75:61:a6:27:9c:24:45:c8:3c:31:54:93:b1:eb:87:
75:84:72:44:be:3e:60:3c:e8:2a:cf:63:a0:a2:b0:b8:58:8d:
32:aa:f3:a2:39:d7:26:66:93:9a:d5:d4:6a:6d:d1:30:40:7e:
fd:3f:af:90:f4:ee:87:81:7e:c2:f1:d9:27:a9:5e:16:e3:9a:
e6:2f:fc:19:4d:9c:d8:e7:a7:f3:78:23:4f:36:2d:7c:28:e0:
17:d0:8f:64:b8:41:f3:2a:08:3d:d8:c5:3e:af:55:e7:59:07:
f3:18:65:fc:00:c9:de:0b:c4:82:22:db:82:85:57:82:94:7d:
13:b0:d5:54:84:b6:9f:21:a8:d3:6a:0c:54:37:8e:99:51:c1:
23:59:52:ee:e8:fc:21:38:c8:db:cb:f7:96:b1:82:6f:bf:a0:
b7:b7:74:45:1c:01:a4:fb:6a:ab:a4:8f:9b:68:15:5b:54:04:
7d:31:a2:c6:5f:c4:6d:e1:2d:80:cd:e1:37:50:b3:3b:3f:3e:
b2:e2:57:d3:8c:59:78:34:b8:2e:fe:e9:06:d9:09:6f:73:c7:
ad:4d:ec:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUyI3K5h8HiunOQAtue0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2E5OGExMmJiNmQ4ZGFiODJmMzc0Y2YwYTI3OGE1YTYx
Yjc4ZTcwHhcNMjUwNjI4MTMwMTUzWhcNMjUwNjI5MTMwMTUzWjAzMTEwLwYDVQQD
EygyYjAzMjE1MjcyNzlmNDZlOGI0OTY5MGRlMWI0YjY5YmIyYzU4NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfH6SD8IYZVy4+AVdreU92UwjpVC
d2gmUAuyV5tVrdjtr2AlXJSYv4LKsCr5E24pPTGAWx7e9h0MfAHss72Kuju4dTLB
eOXcpQ2wSnk1ZIeLVVAaeuqDpcw0oDnFy50T2XDo1jSCzC+FHsmRt5t/TZX+CAG0
8tMRsiX3/iwhAg8Z0g6hG8qnqrc5TjUcZ7Y/eXGvDJ3INmc0vjbQ84jG3PkIu+4y
a/QPJosUVxDjTteuik9bvDqXgbIU9zt2Q5b1/M3WqBx3GZh6Y6mQJQpgfCLTbgTl
dY3/cLBIbZrIwlcI/NF0OyzY9wjuwFxVyu/dfXiLdi0rfIp4KWrLOGffiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsDIVJyefRui0lpDeG0tpuyxYakMB8GA1UdIwQY
MBaAFJnKmKErttjauC83TPCieKWmG3jnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEt
MjhjM2MxZTJhMzcwLzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEtMjhjM2MxZTJhMzcw
LzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbBgHK5f
ymzjdATFQ8VxgR8HQnDjXlXPEkFKm868LX68UoFnk/+QdWGmJ5wkRcg8MVSTseuH
dYRyRL4+YDzoKs9joKKwuFiNMqrzojnXJmaTmtXUam3RMEB+/T+vkPTuh4F+wvHZ
J6leFuOa5i/8GU2c2Oen83gjTzYtfCjgF9CPZLhB8yoIPdjFPq9V51kH8xhl/ADJ
3gvEgiLbgoVXgpR9E7DVVIS2nyGo02oMVDeOmVHBI1lS7uj8ITjI28v3lrGCb7+g
t7d0RRwBpPtqq6SPm2gVW1QEfTGixl/EbeEtgM3hN1CzOz8+suJX04xZeDS4Lv7p
BtkJb3PHrU3s5w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:28 2025 by rpki-client