Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: hUobZFmJqH2BHQdddzTOyOZFcNO0dEYT/u4CjBO/2f0=
Subject key identifier: FB:9F:64:5E:9C:29:8D:ED:5B:DD:AE:2F:B6:70:C3:3B:AB:38:85:F6
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 0198D8BDC8D8C0945846AAECB5D45DB60225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 0259
Signing time: Sat 23 Aug 2025 21:02:52 +0000
Manifest this update: Sat 23 Aug 2025 21:02:52 +0000
Manifest next update: Sun 24 Aug 2025 21:02:52 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: bs1biFbhWm2hbckWFHXv/m4At17QOhw9Khuz71B7cY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:c8:d8:c0:94:58:46:aa:ec:b5:d4:5d:b6:02:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Aug 23 21:02:52 2025 GMT
Not After : Aug 24 21:02:52 2025 GMT
Subject: CN=fb9f645e9c298ded5bddae2fb670c33bab3885f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:2b:a1:cf:b2:08:ee:aa:be:fc:84:7c:a7:
91:35:1b:9d:5e:04:fd:66:62:0c:7a:6a:1d:66:35:
fd:2b:b6:67:18:bc:55:75:ce:ad:64:65:ec:00:c3:
0e:f2:c0:e0:ea:62:19:b7:15:57:6d:99:64:b0:0b:
9d:9b:dd:3a:71:a1:c0:54:62:7b:71:8a:2a:47:1b:
1a:bd:b0:24:be:82:89:dd:a7:e9:2b:6f:38:df:e9:
84:39:11:7e:c7:6d:d1:34:ad:7c:a1:23:66:8f:78:
fd:53:31:1f:d4:1a:7a:3b:5e:1c:e2:6a:0a:6b:8c:
6a:bd:10:e6:8f:29:51:bf:d7:4b:c1:70:6c:05:2e:
3e:52:db:52:74:88:cc:c4:74:0c:ee:92:68:95:e3:
94:75:26:b6:aa:6e:a5:91:ce:7e:7e:bf:01:1a:c6:
15:44:14:84:76:d5:7c:fa:4f:e9:dd:ba:84:55:a1:
ca:fc:6f:59:28:67:ca:29:82:7c:c6:36:97:59:43:
f8:be:79:03:12:27:07:80:98:23:36:09:c8:25:d1:
15:10:16:d2:21:d3:a7:98:e2:32:7d:09:0d:4b:6f:
e8:0e:ba:5e:ba:13:a5:de:f8:b6:a4:ed:90:ca:ac:
1b:a7:b4:06:50:15:71:90:c6:23:81:1d:e8:08:bd:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9F:64:5E:9C:29:8D:ED:5B:DD:AE:2F:B6:70:C3:3B:AB:38:85:F6
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ee:67:b1:49:30:9b:5a:06:97:ea:03:4b:de:43:ad:69:0d:
9b:db:a8:eb:55:b1:11:51:db:89:a0:cc:a2:6d:cf:0a:e1:8c:
07:89:8d:7a:55:eb:a4:41:9b:98:91:3b:b5:57:b9:dc:c8:a5:
2a:e9:f6:ae:76:fd:18:8e:2d:03:fc:87:d2:64:d0:aa:09:4c:
e7:bf:52:f6:12:86:72:df:d0:5d:f5:a0:db:8a:8b:eb:77:d2:
0b:4d:a0:a0:53:a9:8a:bd:49:b4:dd:d5:c8:69:1e:2f:c8:91:
19:f4:28:a5:3f:32:2c:0c:08:24:74:4b:e6:f4:5e:d3:7d:ab:
8b:91:86:98:30:ec:56:47:06:5c:bf:43:c8:4c:89:51:b1:b0:
d6:c3:9b:9a:93:fe:74:cf:5d:53:15:73:f4:93:16:14:1d:86:
e2:ff:33:4b:ae:d3:cc:bc:a1:71:ab:06:83:ec:a8:83:fb:83:
df:a5:33:43:81:47:8a:b0:e1:2a:14:3a:ba:e7:7e:39:00:62:
7a:be:d3:fb:c2:27:73:c8:2c:e5:e9:1b:a3:49:c6:54:f9:af:
f2:90:d0:8d:77:55:2c:94:d6:cd:6d:7b:0f:b9:78:af:e0:da:
b3:f3:7a:4f:72:7a:e3:64:f6:03:36:79:22:05:23:83:a5:4b:
5e:2d:5a:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvcjYwJRYRqrstdRdtgIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZTlkYjQyMmI2MzczMzI1MjhhZTYyOGQ5ZGE1MGU0MDM5
N2ZiNjQwHhcNMjUwODIzMjEwMjUyWhcNMjUwODI0MjEwMjUyWjAzMTEwLwYDVQQD
EyhmYjlmNjQ1ZTljMjk4ZGVkNWJkZGFlMmZiNjcwYzMzYmFiMzg4NWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpMroc+yCO6qvvyEfKeRNRudXgT9
ZmIMemodZjX9K7ZnGLxVdc6tZGXsAMMO8sDg6mIZtxVXbZlksAudm906caHAVGJ7
cYoqRxsavbAkvoKJ3afpK2843+mEORF+x23RNK18oSNmj3j9UzEf1Bp6O14c4moK
a4xqvRDmjylRv9dLwXBsBS4+UttSdIjMxHQM7pJoleOUdSa2qm6lkc5+fr8BGsYV
RBSEdtV8+k/p3bqEVaHK/G9ZKGfKKYJ8xjaXWUP4vnkDEicHgJgjNgnIJdEVEBbS
IdOnmOIyfQkNS2/oDrpeuhOl3vi2pO2Qyqwbp7QGUBVxkMYjgR3oCL3O1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPufZF6cKY3tW92uL7ZwwzurOIX2MB8GA1UdIwQY
MBaAFDHp20IrY3MyUormKNnaUOQDl/tkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjIt
MjAwMTc3OTkyNmNmLzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjItMjAwMTc3OTkyNmNm
LzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAau5nsUkw
m1oGl+oDS95DrWkNm9uo61WxEVHbiaDMom3PCuGMB4mNelXrpEGbmJE7tVe53Mil
Kun2rnb9GI4tA/yH0mTQqglM579S9hKGct/QXfWg24qL63fSC02goFOpir1JtN3V
yGkeL8iRGfQopT8yLAwIJHRL5vRe032ri5GGmDDsVkcGXL9DyEyJUbGw1sObmpP+
dM9dUxVz9JMWFB2G4v8zS67TzLyhcasGg+yog/uD36UzQ4FHirDhKhQ6uud+OQBi
er7T+8Inc8gs5ekbo0nGVPmv8pDQjXdVLJTWzW17D7l4r+Das/N6T3J642T2AzZ5
IgUjg6VLXi1aCg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:23:03 2025 by rpki-client