Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: 6zs+suGbI4eQ7RMic2IFH+CI4adgKwSm5Xk1Hm+dUDU=
Subject key identifier: 57:D5:01:9B:61:5F:E7:07:B8:D0:D6:3E:6D:6A:7C:7D:6F:7C:58:36
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 0198D6612FB828F3C26AD88C95B63C6D2C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 09CE
Signing time: Sat 23 Aug 2025 10:02:30 +0000
Manifest this update: Sat 23 Aug 2025 10:02:30 +0000
Manifest next update: Sun 24 Aug 2025 10:02:30 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: XiSxwRDs8yvbONS3if7ipyl5JxW5YLKeylA7BJgkh+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2f:b8:28:f3:c2:6a:d8:8c:95:b6:3c:6d:2c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Aug 23 10:02:30 2025 GMT
Not After : Aug 24 10:02:30 2025 GMT
Subject: CN=57d5019b615fe707b8d0d63e6d6a7c7d6f7c5836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:bf:dd:be:20:63:dd:b7:54:ed:b6:49:b8:
78:63:f3:4f:55:aa:a1:b4:85:83:83:3b:b9:4f:13:
4f:ff:69:9d:5b:fe:f3:84:da:f7:75:e3:16:85:99:
64:41:a3:4f:11:ec:ca:b1:b2:0b:6c:e7:2e:9a:10:
2c:92:ae:d6:f1:57:ae:06:d3:b5:f5:be:44:7d:43:
54:f0:56:c3:c3:26:e0:05:a3:81:1f:16:4e:62:d7:
ff:ff:64:d1:b6:9c:45:53:85:81:3c:64:ce:b8:ba:
1a:46:19:61:43:dd:d5:bf:b9:7d:66:a5:d2:58:2b:
31:a1:81:21:18:ec:e4:e1:29:40:11:7c:21:a2:12:
18:bb:41:a9:0d:eb:30:97:23:41:28:11:2d:7c:a4:
af:1a:c9:73:dd:cb:4a:60:f8:ff:db:45:60:b3:ae:
99:2c:ad:b1:50:38:79:60:d0:ac:72:15:30:b8:61:
b5:27:ce:83:0d:01:cf:4b:94:83:e5:e2:84:dd:a5:
f8:36:d5:43:3d:f4:a2:af:e4:d4:43:00:c5:07:12:
2f:ce:82:ab:a9:52:33:e7:c0:a1:7f:26:ec:7a:a3:
08:79:eb:52:a0:b2:bc:66:6a:41:43:49:5b:c1:b7:
9e:6c:6e:eb:49:0b:6e:08:3d:9a:98:b5:eb:8f:a2:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:01:9B:61:5F:E7:07:B8:D0:D6:3E:6D:6A:7C:7D:6F:7C:58:36
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:91:05:d6:e0:88:b1:ae:8f:2e:31:25:d2:48:82:b6:ef:f8:
4a:a5:1d:8a:d2:8b:c2:32:a2:56:c0:ac:51:f6:8c:9f:e8:7e:
00:09:dc:93:31:54:a6:9b:b1:c0:14:cb:53:08:ef:9f:88:ca:
c5:49:ca:10:18:f4:28:38:e6:60:43:d6:f2:3c:7e:b1:93:c1:
ae:e0:ae:dc:42:43:53:17:c4:f5:e9:cf:18:c6:75:00:d4:8c:
c9:25:02:5e:de:77:b0:48:fa:be:40:a3:a7:57:dc:7d:09:63:
8b:db:f1:75:b8:c4:c7:01:5a:0d:62:c2:5f:44:38:db:ef:e1:
5d:e0:49:43:dd:1a:4f:3a:d7:0d:c5:5c:0b:ad:11:dc:81:e7:
81:51:e4:52:58:9b:a1:16:f9:13:67:c4:d2:42:9b:48:c3:cd:
2a:ff:1f:01:ff:55:7a:79:49:32:b6:6a:62:aa:cf:35:9d:50:
02:13:67:04:e4:04:9d:bd:7d:aa:db:a6:d4:ba:c5:a4:cb:15:
7e:ad:b8:2e:49:a9:f3:bd:63:75:ab:cc:a1:37:dd:c5:3f:a5:
60:ba:a3:74:6e:17:8e:40:c0:f7:de:c7:89:e3:cd:35:a2:f4:
54:89:68:63:27:74:2f:8c:3e:19:23:5c:41:af:42:a7:90:bb:
72:94:70:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYS+4KPPCatiMlbY8bSwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOThkYzI1YWJkN2FiNjNlMzViNjI4ZWFhYzJhNTRkOTQ5
YTlmNDYwHhcNMjUwODIzMTAwMjMwWhcNMjUwODI0MTAwMjMwWjAzMTEwLwYDVQQD
Eyg1N2Q1MDE5YjYxNWZlNzA3YjhkMGQ2M2U2ZDZhN2M3ZDZmN2M1ODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEa/3b4gY923VO22Sbh4Y/NPVaqh
tIWDgzu5TxNP/2mdW/7zhNr3deMWhZlkQaNPEezKsbILbOcumhAskq7W8VeuBtO1
9b5EfUNU8FbDwybgBaOBHxZOYtf//2TRtpxFU4WBPGTOuLoaRhlhQ93Vv7l9ZqXS
WCsxoYEhGOzk4SlAEXwhohIYu0GpDeswlyNBKBEtfKSvGslz3ctKYPj/20Vgs66Z
LK2xUDh5YNCschUwuGG1J86DDQHPS5SD5eKE3aX4NtVDPfSir+TUQwDFBxIvzoKr
qVIz58ChfybseqMIeetSoLK8ZmpBQ0lbwbeebG7rSQtuCD2amLXrj6I3DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfVAZthX+cHuNDWPm1qfH1vfFg2MB8GA1UdIwQY
MBaAFOyY3CWr16tj41tijqrCpU2Ump9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mMWY2MmQtMDg5ZC00YWVhLTkyMjEt
ZDViM2Q3ZmNjZmU0LzEvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mMWY2MmQtMDg5ZC00YWVhLTkyMjEtZDViM2Q3ZmNjZmU0
LzEvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopEF1uCI
sa6PLjEl0kiCtu/4SqUditKLwjKiVsCsUfaMn+h+AAnckzFUppuxwBTLUwjvn4jK
xUnKEBj0KDjmYEPW8jx+sZPBruCu3EJDUxfE9enPGMZ1ANSMySUCXt53sEj6vkCj
p1fcfQlji9vxdbjExwFaDWLCX0Q42+/hXeBJQ90aTzrXDcVcC60R3IHngVHkUlib
oRb5E2fE0kKbSMPNKv8fAf9VenlJMrZqYqrPNZ1QAhNnBOQEnb19qtum1LrFpMsV
fq24Lkmp871jdavMoTfdxT+lYLqjdG4XjkDA997HiePNNaL0VIloYyd0L4w+GSNc
Qa9Cp5C7cpRwWg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:18 2025 by rpki-client