Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: xVr4WGmZkGHeRrArq7nANJJp6i44nDoGAfmP5Omgr6Y=
Subject key identifier: 9F:21:D2:6A:E9:C6:E6:72:7B:F8:EE:91:8E:8B:03:BE:06:EE:0D:86
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 0198D4E02F66F6A74D79B9BCEEE7BD27535E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: Xqe5QJLkzTGd74FTX+v7EH/leEFMnkkur3krU0c2AL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2f:66:f6:a7:4d:79:b9:bc:ee:e7:bd:27:53:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=9f21d26ae9c6e6727bf8ee918e8b03be06ee0d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:33:23:58:c0:b7:27:aa:c5:fb:b9:7b:fb:
e6:9a:f1:4d:f0:62:64:20:b5:68:d7:e5:fd:4b:c4:
22:89:49:fb:04:a8:8a:a4:fd:f8:43:0d:33:f4:69:
2e:18:9e:99:84:08:43:f1:f0:b8:ab:3f:ae:25:c5:
01:bf:4d:67:a8:3c:7e:3a:9d:a9:b4:7e:61:31:6f:
5c:47:59:56:94:7b:e1:f3:2e:05:ba:b7:a6:43:50:
d8:42:b2:9a:60:88:a4:6b:1a:4d:12:2a:e5:a4:cf:
81:3f:2a:7c:ef:50:1c:66:71:dd:85:b6:dc:dd:81:
23:72:ac:fc:98:1b:bd:26:21:22:fa:f1:1b:a4:ec:
36:c2:84:d4:88:09:da:c6:87:cc:be:89:8d:50:bc:
84:04:bc:f8:73:b3:df:a2:f2:59:c4:74:7c:8e:cd:
b9:67:d4:dc:c0:1f:ec:fd:0b:51:cd:8f:75:ee:08:
34:9b:45:34:00:1e:08:ef:a6:9c:bc:12:83:44:fb:
34:5b:ca:1c:11:1b:c6:e3:71:f3:99:00:17:f8:a3:
15:1f:59:52:4b:3a:eb:3b:e7:44:5b:15:fb:c1:71:
a7:a1:0c:2c:7f:42:cf:98:8b:2f:8b:3e:5d:7f:39:
bd:c3:66:e7:00:15:82:20:2e:19:19:2a:e4:e6:32:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:D2:6A:E9:C6:E6:72:7B:F8:EE:91:8E:8B:03:BE:06:EE:0D:86
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:30:cb:d4:81:03:89:8c:3e:90:b6:b2:ff:09:17:6e:fc:cd:
e0:6a:cb:3c:b3:23:8e:92:9c:e8:f0:07:c7:8b:9c:9c:02:70:
fa:a3:f3:c1:c1:53:67:3b:c4:c1:ad:57:2a:20:65:34:de:97:
49:07:16:f2:38:1e:77:7b:94:73:ac:c5:a9:0f:b6:36:0e:28:
fb:d4:33:fe:52:b2:c8:25:49:4f:04:6a:06:9f:21:d3:c8:4d:
7d:b8:9f:d8:55:d3:fb:f1:4b:52:c0:cb:a2:52:47:20:50:eb:
67:90:ff:9d:e6:98:0b:89:fd:3b:eb:ec:20:c3:95:20:07:96:
0c:c6:69:f9:bb:e9:98:ed:f8:18:25:c0:d4:1f:14:22:b9:4e:
45:94:85:95:2a:3d:9a:f3:23:77:ba:71:07:98:e2:22:01:0b:
cd:9c:fe:fe:42:dd:06:82:d5:1a:90:9a:e2:36:dd:7b:0d:ce:
43:35:4f:2b:a7:20:d4:6e:76:2f:b7:84:f4:f2:b6:8f:46:24:
b6:cc:23:c2:1a:de:ef:33:8a:4f:06:01:e9:22:0a:73:4a:e3:
8b:17:99:fd:a4:67:7d:d9:03:72:68:77:81:81:ce:e6:71:c1:
6d:6c:a4:09:60:77:01:61:01:46:9c:02:9f:f7:96:8e:29:ed:
2d:c9:14:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4C9m9qdNebm87ue9J1NeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzk3NjA1MjBiN2MxNWMyZTQyNjAzMDgyNzJiODQ5Zjg4
ZWQ2NzcwHhcNMjUwODIzMDMwMTU4WhcNMjUwODI0MDMwMTU4WjAzMTEwLwYDVQQD
Eyg5ZjIxZDI2YWU5YzZlNjcyN2JmOGVlOTE4ZThiMDNiZTA2ZWUwZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn98zI1jAtyeqxfu5e/vmmvFN8GJk
ILVo1+X9S8QiiUn7BKiKpP34Qw0z9GkuGJ6ZhAhD8fC4qz+uJcUBv01nqDx+Op2p
tH5hMW9cR1lWlHvh8y4FuremQ1DYQrKaYIikaxpNEirlpM+BPyp871AcZnHdhbbc
3YEjcqz8mBu9JiEi+vEbpOw2woTUiAnaxofMvomNULyEBLz4c7PfovJZxHR8js25
Z9TcwB/s/QtRzY917gg0m0U0AB4I76acvBKDRPs0W8ocERvG43HzmQAX+KMVH1lS
SzrrO+dEWxX7wXGnoQwsf0LPmIsviz5dfzm9w2bnABWCIC4ZGSrk5jKZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8h0mrpxuZye/jukY6LA74G7g2GMB8GA1UdIwQY
MBaAFA95dgUgt8FcLkJgMIJyuEn4jtZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUt
MDA0MjQyNWJhYjFhLzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUtMDA0MjQyNWJhYjFh
LzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTDL1IED
iYw+kLay/wkXbvzN4GrLPLMjjpKc6PAHx4ucnAJw+qPzwcFTZzvEwa1XKiBlNN6X
SQcW8jged3uUc6zFqQ+2Ng4o+9Qz/lKyyCVJTwRqBp8h08hNfbif2FXT+/FLUsDL
olJHIFDrZ5D/neaYC4n9O+vsIMOVIAeWDMZp+bvpmO34GCXA1B8UIrlORZSFlSo9
mvMjd7pxB5jiIgELzZz+/kLdBoLVGpCa4jbdew3OQzVPK6cg1G52L7eE9PK2j0Yk
tswjwhre7zOKTwYB6SIKc0rjixeZ/aRnfdkDcmh3gYHO5nHBbWykCWB3AWEBRpwC
n/eWjintLckU3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:27 2025 by rpki-client