Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File: RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier: F9MN3M4SjJWNumSCjBJz+NWyds8FxWZvvoZ6H2de3wI=
Subject key identifier: 45:71:DA:B5:43:AB:5E:8C:58:9D:A8:AC:F0:7F:A1:FF:87:21:BB:B9
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer: /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial: 0198D660C458C8B5627DC1082EE683E9BE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:02:02 +0000
Manifest this update: Sat 23 Aug 2025 10:02:02 +0000
Manifest next update: Sun 24 Aug 2025 10:02:02 +0000
Files and hashes: 1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: hR3jJbu5OhX9xfPu62iiHSv4PbjrV18NKALbflC72xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c4:58:c8:b5:62:7d:c1:08:2e:e6:83:e9:be:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Validity
Not Before: Aug 23 10:02:02 2025 GMT
Not After : Aug 24 10:02:02 2025 GMT
Subject: CN=4571dab543ab5e8c589da8acf07fa1ff8721bbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:31:a2:11:7c:2e:f2:66:d3:e5:c4:c6:81:85:
3e:b7:15:60:c9:26:25:ca:b4:1d:fc:32:f1:77:26:
2d:3d:13:5d:56:fd:62:cf:34:c0:86:9f:3d:3a:57:
d3:22:9c:14:69:88:bc:35:6e:b9:5c:95:81:8f:1a:
73:5e:33:67:b8:7a:bb:6f:5a:4d:a1:c2:04:68:d1:
38:da:e4:79:f1:e3:9e:33:67:2c:5a:90:09:01:95:
c5:db:ca:f7:5b:47:05:6a:82:5e:de:b5:1a:f9:48:
e7:be:e7:d6:e5:09:8e:00:e5:15:ad:3c:b1:02:d3:
c8:ce:37:15:c2:ba:e0:54:f1:9d:d3:75:2b:68:13:
68:9e:9b:fd:fc:fe:46:b3:e1:cd:60:ab:27:b0:41:
3e:18:9d:3d:c1:e1:d2:9d:d4:76:4c:d5:6d:14:e3:
a6:4f:41:a4:d7:64:a1:a3:7b:65:ea:de:80:9e:9d:
ac:78:62:7b:65:2b:78:b7:d9:a2:ca:e2:8d:e9:58:
cc:55:0c:d9:74:70:9a:1d:38:b5:9f:8e:ee:4c:72:
83:4e:b1:b0:74:b8:29:a7:f7:b0:97:79:b9:ee:b5:
85:27:de:8d:c9:cd:cb:8e:ef:ca:65:ee:41:df:42:
3c:2d:dc:d6:72:89:58:fc:94:79:f7:f0:57:87:0d:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:71:DA:B5:43:AB:5E:8C:58:9D:A8:AC:F0:7F:A1:FF:87:21:BB:B9
X509v3 Authority Key Identifier:
keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5f:6d:78:b8:bc:56:65:23:b5:d3:49:c6:3c:e3:0b:b1:bc:
fa:fa:6b:77:f4:4b:0c:d4:ba:96:e3:2d:ed:3a:09:26:10:49:
1b:e6:d9:94:98:29:d9:d7:b8:b1:f2:36:0e:7a:3a:a9:a7:75:
c4:80:e0:95:64:85:5a:1f:0d:c0:1e:c4:8f:71:f8:3b:c7:3f:
83:46:be:d7:6e:eb:b8:e6:cb:71:6d:84:df:72:0e:fe:4c:d9:
1e:ba:4e:be:52:82:2a:22:b4:e1:7f:7f:61:80:ec:c4:8f:e5:
9d:ec:d6:67:a3:ae:a6:9d:57:73:4a:ba:9e:38:9c:8e:3a:7c:
62:16:47:70:2f:72:aa:79:e8:32:01:f7:96:de:60:72:e0:3b:
01:86:af:5d:47:30:91:ee:44:ff:42:4d:3c:08:6d:e8:70:ea:
00:65:05:6b:d0:27:95:92:80:01:ed:99:6e:38:e4:c6:c6:91:
54:da:fe:0c:0b:7a:ed:d7:17:60:d5:63:44:21:80:ab:77:f2:
44:72:ca:71:d1:b4:5f:65:4f:85:7d:2a:cb:7d:96:b4:5b:58:
42:e4:e3:07:06:63:db:ec:35:ad:cc:d4:f5:f5:f6:47:06:c0:
1d:00:35:4b:4a:d1:25:35:6e:b2:d4:b5:33:f7:50:db:c2:14:
ae:81:34:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMRYyLVifcEILuaD6b6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzI2MGU0NWVlMTUyMWM2YWFiODNmMjFkNWI2OWU4MTBj
MWUwNzMwHhcNMjUwODIzMTAwMjAyWhcNMjUwODI0MTAwMjAyWjAzMTEwLwYDVQQD
Eyg0NTcxZGFiNTQzYWI1ZThjNTg5ZGE4YWNmMDdmYTFmZjg3MjFiYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jGiEXwu8mbT5cTGgYU+txVgySYl
yrQd/DLxdyYtPRNdVv1izzTAhp89OlfTIpwUaYi8NW65XJWBjxpzXjNnuHq7b1pN
ocIEaNE42uR58eOeM2csWpAJAZXF28r3W0cFaoJe3rUa+UjnvufW5QmOAOUVrTyx
AtPIzjcVwrrgVPGd03UraBNonpv9/P5Gs+HNYKsnsEE+GJ09weHSndR2TNVtFOOm
T0Gk12Sho3tl6t6Anp2seGJ7ZSt4t9miyuKN6VjMVQzZdHCaHTi1n47uTHKDTrGw
dLgpp/ewl3m57rWFJ96Nyc3Lju/KZe5B30I8LdzWcolY/JR59/BXhw1V+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVx2rVDq16MWJ2orPB/of+HIbu5MB8GA1UdIwQY
MBaAFEYyYORe4VIcaquD8h1baegQweBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAt
OGZkNDVjZDUxMzhhLzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAtOGZkNDVjZDUxMzhh
LzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGV9teLi8
VmUjtdNJxjzjC7G8+vprd/RLDNS6luMt7ToJJhBJG+bZlJgp2de4sfI2Dno6qad1
xIDglWSFWh8NwB7Ej3H4O8c/g0a+127ruObLcW2E33IO/kzZHrpOvlKCKiK04X9/
YYDsxI/lnezWZ6Oupp1Xc0q6njicjjp8YhZHcC9yqnnoMgH3lt5gcuA7AYavXUcw
ke5E/0JNPAht6HDqAGUFa9AnlZKAAe2ZbjjkxsaRVNr+DAt67dcXYNVjRCGAq3fy
RHLKcdG0X2VPhX0qy32WtFtYQuTjBwZj2+w1rczU9fX2RwbAHQA1S0rRJTVustS1
M/dQ28IUroE0cw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:02 2025 by rpki-client