Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json)
Hash identifier: erzxmoA0YhZcJg5x3KyqoiLcHOj0y2oJ1n8m2amU0Qw=
Subject key identifier: 50:4A:B5:BB:A9:FD:90:41:35:64:2A:4E:68:D8:09:BF:CD:C1:59:B8
Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Certificate serial: 0198D4739EDE145EEFBC61433D2DA62C8B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
Manifest number: 0BC9
Signing time: Sat 23 Aug 2025 01:03:23 +0000
Manifest this update: Sat 23 Aug 2025 01:03:23 +0000
Manifest next update: Sun 24 Aug 2025 01:03:23 +0000
Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: ICJ8x2Nh3RwCBQZ77KvuOkioso9aNfOOs6U/UZFXO3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:9e:de:14:5e:ef:bc:61:43:3d:2d:a6:2c:8b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Validity
Not Before: Aug 23 01:03:23 2025 GMT
Not After : Aug 24 01:03:23 2025 GMT
Subject: CN=504ab5bba9fd904135642a4e68d809bfcdc159b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:59:d5:e9:b3:19:58:0b:69:e9:c6:36:f0:
81:17:b4:2d:61:df:3b:07:41:36:44:c1:cd:be:87:
3e:28:99:f7:b9:c3:43:43:56:55:24:1c:55:96:b4:
7a:e5:43:96:a3:f6:84:83:fc:0d:c7:80:fb:83:df:
f8:35:17:58:5b:06:33:0c:a0:85:72:16:99:f5:8a:
43:d1:61:ac:5f:c2:f7:77:a8:ed:14:55:7b:0e:9e:
ca:31:96:b6:56:75:0b:3e:c1:da:74:3b:2e:54:56:
2b:d0:dc:ec:d4:b1:29:6a:e8:41:aa:56:5c:21:fc:
c4:62:ea:42:84:b6:d2:30:48:9f:1a:43:c7:5c:9d:
7d:b2:b1:f4:d3:4c:13:c1:c7:8b:4b:5a:e9:7f:8f:
11:8c:d0:24:31:e5:5e:72:4c:7d:31:1e:bb:5a:1f:
18:ad:d6:2e:69:98:f2:d3:db:b2:ec:1a:48:f1:bb:
f4:0e:48:03:5d:84:d1:5c:db:35:6e:70:b8:ed:6f:
53:72:83:75:e4:27:e4:2c:6f:43:34:34:19:54:9c:
23:ac:20:93:92:a9:a7:e8:af:0c:8c:48:3f:69:c9:
10:d4:5c:1e:cf:86:8d:73:64:70:87:68:41:89:65:
1b:d0:59:db:6f:17:b2:2a:fc:2f:d1:c3:99:e6:1e:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4A:B5:BB:A9:FD:90:41:35:64:2A:4E:68:D8:09:BF:CD:C1:59:B8
X509v3 Authority Key Identifier:
keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f8:08:0e:ee:5b:0d:17:68:3f:e8:fe:9d:f9:cd:cc:56:9f:
b8:9d:97:ff:f3:e0:25:8d:d7:e7:47:3f:58:97:f8:d0:af:47:
7b:2c:28:cd:49:d0:84:8e:56:a2:be:2e:72:80:c0:6d:7c:e3:
38:f8:cf:08:60:00:26:94:fb:c4:92:5d:9f:9f:da:64:95:f9:
25:53:81:9e:a5:dd:8f:d5:4d:33:73:d2:62:55:97:77:b6:89:
00:42:83:03:9e:0a:ae:7f:e4:89:7b:0a:43:ab:c9:fd:36:6d:
34:83:39:11:08:57:d6:e5:22:b6:78:fc:af:43:83:6d:ee:35:
dd:d2:ba:d9:0e:f6:8e:3a:57:00:5c:c3:51:64:90:5e:90:2c:
ab:8d:a0:71:73:af:98:04:6c:7a:5a:6b:43:ed:ee:c3:3d:42:
d6:16:03:1b:a7:8f:9f:89:33:4f:7b:b2:45:16:9f:c3:4b:83:
9e:a4:bf:fb:06:45:2f:19:e1:18:72:4d:ed:10:89:62:4c:9d:
4b:26:62:66:43:f3:0b:e0:c5:a4:eb:f1:32:04:bd:1a:a0:c1:
3d:50:c8:6a:9c:cb:fb:1c:ea:58:74:e6:cd:a5:dd:68:e3:69:
dd:b7:7c:0e:63:dc:ef:e8:73:da:d0:c1:82:c1:a0:45:01:a6:
eb:25:35:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc57eFF7vvGFDPS2mLIt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNjE3MGE4MmQ1N2ZjYjllNDQwYWFiYzNiZTllYzQwYmQw
MzljNGUwHhcNMjUwODIzMDEwMzIzWhcNMjUwODI0MDEwMzIzWjAzMTEwLwYDVQQD
Eyg1MDRhYjViYmE5ZmQ5MDQxMzU2NDJhNGU2OGQ4MDliZmNkYzE1OWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IZZ1emzGVgLaenGNvCBF7QtYd87
B0E2RMHNvoc+KJn3ucNDQ1ZVJBxVlrR65UOWo/aEg/wNx4D7g9/4NRdYWwYzDKCF
chaZ9YpD0WGsX8L3d6jtFFV7Dp7KMZa2VnULPsHadDsuVFYr0Nzs1LEpauhBqlZc
IfzEYupChLbSMEifGkPHXJ19srH000wTwceLS1rpf48RjNAkMeVeckx9MR67Wh8Y
rdYuaZjy09uy7BpI8bv0DkgDXYTRXNs1bnC47W9TcoN15CfkLG9DNDQZVJwjrCCT
kqmn6K8MjEg/ackQ1Fwez4aNc2Rwh2hBiWUb0FnbbxeyKvwv0cOZ5h4m4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBKtbup/ZBBNWQqTmjYCb/NwVm4MB8GA1UdIwQY
MBaAFDNhcKgtV/y55ECqvDvp7EC9A5xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjct
NzRiNmYwMDVkMTdiLzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjctNzRiNmYwMDVkMTdi
LzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvgIDu5b
DRdoP+j+nfnNzFafuJ2X//PgJY3X50c/WJf40K9HeywozUnQhI5Wor4ucoDAbXzj
OPjPCGAAJpT7xJJdn5/aZJX5JVOBnqXdj9VNM3PSYlWXd7aJAEKDA54Krn/kiXsK
Q6vJ/TZtNIM5EQhX1uUitnj8r0ODbe413dK62Q72jjpXAFzDUWSQXpAsq42gcXOv
mARselprQ+3uwz1C1hYDG6ePn4kzT3uyRRafw0uDnqS/+wZFLxnhGHJN7RCJYkyd
SyZiZkPzC+DFpOvxMgS9GqDBPVDIapzL+xzqWHTmzaXdaONp3bd8DmPc7+hz2tDB
gsGgRQGm6yU1xQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:03 2025 by rpki-client