Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File: 12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier: Zu4g+cp6Zp+jw1BDEzHk859TWGfr0ZRVHUvTEGH3VRQ=
Subject key identifier: 46:D4:77:BA:09:54:2A:E0:5C:16:B3:06:8C:CA:1D:87:3A:70:93:64
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer: /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial: 0198D515623EF6DF0B741010999BC96E469A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number: 0649
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: qZn7rcLUajw2TJlc4waMPYGZCw5xPr27dO0gr+7S9eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:62:3e:f6:df:0b:74:10:10:99:9b:c9:6e:46:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=46d477ba09542ae05c16b3068cca1d873a709364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:b3:26:9e:7a:2b:58:3c:06:c7:75:23:1c:
25:bc:87:d7:3a:6e:6f:a4:d2:f2:c1:ab:52:ba:44:
93:09:01:3a:17:4e:3e:7b:89:5d:74:df:6e:b3:84:
f4:76:f1:90:a0:6e:20:d5:94:cb:a6:1c:c1:bc:f7:
bc:45:99:2b:bc:55:0c:35:b3:5a:b4:95:a8:1c:63:
22:e9:3d:d5:89:70:31:c7:0e:e7:47:0a:78:b2:3f:
8c:18:80:02:d3:f1:2d:b6:ca:70:da:dd:2d:37:8b:
50:a5:c8:03:60:a0:88:73:ac:d8:79:0c:16:27:8a:
67:d0:38:15:26:ab:fc:97:d6:c9:9d:11:41:bc:ce:
e9:ef:be:66:88:40:b4:fd:50:ed:4b:ae:fb:05:bf:
b2:c5:8e:2c:c3:91:ae:1d:a9:08:cb:22:d6:e6:49:
e8:09:47:05:5f:2d:08:f0:4c:d9:58:69:87:be:d0:
0a:a6:54:49:1e:26:c0:f1:98:a4:d3:a9:59:78:ba:
2a:d0:9c:c9:66:4f:2d:c8:58:f3:c3:b2:22:47:54:
b7:6b:13:3a:69:e2:c9:9b:2e:9e:d4:2d:ba:78:f4:
55:34:7c:2f:a4:14:37:24:e7:b5:3b:4e:b7:ff:ba:
f5:2f:1d:ca:c1:0b:2b:61:81:45:de:ce:a8:f0:56:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D4:77:BA:09:54:2A:E0:5C:16:B3:06:8C:CA:1D:87:3A:70:93:64
X509v3 Authority Key Identifier:
keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e8:c5:62:99:1e:93:1f:8c:f1:3f:2d:85:57:db:83:7a:08:
60:bb:4d:24:cc:fa:44:34:d3:68:fa:c9:e0:69:f4:85:3a:a9:
f9:ca:9a:e1:04:9f:3f:96:d7:78:2e:bf:fb:1d:95:70:fe:c0:
92:2b:49:5f:30:74:b8:e6:bb:f6:f8:f1:da:32:54:3d:66:79:
0e:08:e3:2b:6a:bf:66:a4:ac:f4:73:f0:c6:62:39:70:36:ab:
dd:ad:dc:f5:3f:ff:97:af:f8:27:14:42:30:c6:6a:c3:c9:a6:
44:ed:99:40:21:59:78:e5:a6:94:17:b5:a2:09:07:7d:84:e4:
23:fd:7d:8b:df:45:24:86:69:12:26:ca:82:ad:73:2a:1a:dd:
6c:00:0b:d6:7d:e3:e8:ce:ca:57:cd:ba:f7:92:c7:b0:48:1f:
00:30:f5:9e:50:ac:f1:3a:6c:a4:a2:7b:6a:96:19:8d:ec:5a:
63:17:26:2f:53:5a:cf:04:77:70:17:3b:1a:05:ca:55:27:39:
56:1a:c7:6b:24:3b:af:23:ed:a8:70:78:44:8f:f8:ba:a7:f3:
13:c2:22:f4:3e:e4:1b:2f:46:89:39:ca:28:28:b5:c7:47:30:
27:cc:28:c6:37:cc:e1:f9:96:82:6b:25:e1:21:47:fc:e5:f5:
93:8f:6d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFWI+9t8LdBAQmZvJbkaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjRjN2YzZjc4Yjg3NmQ2YjA0M2MxNmNkZGJkZGViMWU3
OTViOWMwHhcNMjUwODIzMDQwMDA1WhcNMjUwODI0MDQwMDA1WjAzMTEwLwYDVQQD
Eyg0NmQ0NzdiYTA5NTQyYWUwNWMxNmIzMDY4Y2NhMWQ4NzNhNzA5MzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP+zJp56K1g8Bsd1IxwlvIfXOm5v
pNLywatSukSTCQE6F04+e4lddN9us4T0dvGQoG4g1ZTLphzBvPe8RZkrvFUMNbNa
tJWoHGMi6T3ViXAxxw7nRwp4sj+MGIAC0/Ettspw2t0tN4tQpcgDYKCIc6zYeQwW
J4pn0DgVJqv8l9bJnRFBvM7p775miEC0/VDtS677Bb+yxY4sw5GuHakIyyLW5kno
CUcFXy0I8EzZWGmHvtAKplRJHibA8Zik06lZeLoq0JzJZk8tyFjzw7IiR1S3axM6
aeLJmy6e1C26ePRVNHwvpBQ3JOe1O063/7r1Lx3KwQsrYYFF3s6o8FYVEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbUd7oJVCrgXBazBozKHYc6cJNkMB8GA1UdIwQY
MBaAFNdkx/P3i4dtawQ8Fs3b3eseeVucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDIt
NWUyY2JmOTQyNDA1LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDItNWUyY2JmOTQyNDA1
LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXujFYpke
kx+M8T8thVfbg3oIYLtNJMz6RDTTaPrJ4Gn0hTqp+cqa4QSfP5bXeC6/+x2VcP7A
kitJXzB0uOa79vjx2jJUPWZ5DgjjK2q/ZqSs9HPwxmI5cDar3a3c9T//l6/4JxRC
MMZqw8mmRO2ZQCFZeOWmlBe1ogkHfYTkI/19i99FJIZpEibKgq1zKhrdbAAL1n3j
6M7KV82695LHsEgfADD1nlCs8TpspKJ7apYZjexaYxcmL1NazwR3cBc7GgXKVSc5
VhrHayQ7ryPtqHB4RI/4uqfzE8Ii9D7kGy9GiTnKKCi1x0cwJ8woxjfM4fmWgmsl
4SFH/OX1k49t5g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:48 2025 by rpki-client