Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: P8ghSeGxWjqSQgnfBX3Oa2UhlT/qkv3n1I3M/mfFHGg=
Subject key identifier: D5:B5:13:9C:04:2F:E7:64:66:A3:44:0B:1D:CA:82:68:FE:17:61:B4
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 019896006BECBBE547320B650D639AE7E994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0BE7
Signing time: Sun 10 Aug 2025 22:01:06 +0000
Manifest this update: Sun 10 Aug 2025 22:01:06 +0000
Manifest next update: Mon 11 Aug 2025 22:01:06 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: U/EsgxS3V+5EXGVMaxghWAI9wcfJSujoOoAMM6xm20Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:6b:ec:bb:e5:47:32:0b:65:0d:63:9a:e7:e9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Aug 10 22:01:06 2025 GMT
Not After : Aug 11 22:01:06 2025 GMT
Subject: CN=d5b5139c042fe76466a3440b1dca8268fe1761b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:d9:97:3c:2c:a1:5e:6f:f2:cd:6f:92:90:
35:75:ac:79:6c:73:a5:27:03:06:08:ca:4a:d5:9f:
e1:0f:24:95:b3:aa:cc:89:8e:88:4d:41:d1:6e:11:
67:8c:c4:4b:aa:4b:0e:35:de:d8:18:9b:18:53:9a:
7b:d0:b9:b4:dc:d0:98:d6:05:e6:7d:23:96:98:42:
1a:59:10:27:fb:69:f6:5c:8f:ba:2e:eb:7f:d1:1d:
60:1f:ec:e9:27:b9:b4:92:55:13:0d:8f:85:4c:8e:
87:9c:3f:68:55:52:92:5f:18:2e:e7:64:d4:97:d0:
f6:43:05:b7:cb:22:86:74:5d:95:b5:57:80:f1:fd:
e0:7f:9f:45:d4:ef:a1:39:6f:6b:d5:5a:b7:fd:be:
f0:e8:2b:75:df:c6:70:c1:a4:8b:c9:bc:ea:67:8f:
e6:81:4d:0f:34:4d:e4:19:b4:e8:50:d8:24:3b:47:
51:37:75:89:bf:d0:2b:6f:e7:33:5d:4b:4c:96:13:
42:91:59:1d:59:26:43:a4:6d:61:ed:d4:24:33:1e:
0d:ec:e2:e8:11:78:96:36:21:59:d6:30:99:a2:ed:
87:10:c6:ef:23:ec:3c:d2:06:16:4f:64:3c:ef:13:
0e:80:84:ad:63:52:d0:42:ed:14:0d:11:54:c7:e7:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B5:13:9C:04:2F:E7:64:66:A3:44:0B:1D:CA:82:68:FE:17:61:B4
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:00:a8:01:02:c1:60:71:dc:a8:f7:c3:80:49:d3:78:94:3c:
f2:ba:46:22:ea:1e:d0:51:a1:d8:72:8c:02:1f:19:9d:cb:a6:
e8:ed:22:4a:50:23:3c:aa:5d:f3:b8:5b:56:e4:9d:4d:1d:75:
c3:46:bb:2a:14:38:51:bc:d7:08:99:e2:c5:d7:45:67:46:89:
d4:c0:ae:bd:e2:e2:36:a3:d4:f9:19:09:71:a4:19:18:25:43:
d0:9c:ef:f7:22:1a:42:70:80:4b:18:92:48:5f:cc:0c:f1:75:
8b:ab:c5:cf:09:6c:56:da:88:68:8c:81:5b:e8:9b:a1:db:4d:
e7:ba:10:3b:a5:4a:10:30:b7:b8:7e:59:b9:89:f8:75:aa:cf:
7c:1e:4e:45:72:01:03:45:3d:de:eb:54:a5:d5:12:12:0e:b3:
4c:22:f2:62:c5:dd:69:30:f8:fb:55:3f:e9:92:15:65:64:7e:
93:ab:23:cc:fb:66:63:2d:e6:8d:b0:ec:8d:d9:fd:32:85:43:
8f:84:06:6c:2f:f8:76:32:81:e9:b0:c1:46:87:26:b6:99:73:
5d:f9:ae:0d:50:0e:2b:73:38:c4:57:e7:39:5f:68:ae:ff:3b:
97:11:46:67:57:1e:25:41:a0:d2:51:bc:ff:4b:c3:de:6d:31:
b0:bc:a2:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWAGvsu+VHMgtlDWOa5+mUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OGM0ZjVmNDRhNjYwNmE3NjE3YTk2Y2VjMTg0OTAwYWNh
NmY4MGUwHhcNMjUwODEwMjIwMTA2WhcNMjUwODExMjIwMTA2WjAzMTEwLwYDVQQD
EyhkNWI1MTM5YzA0MmZlNzY0NjZhMzQ0MGIxZGNhODI2OGZlMTc2MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0efZlzwsoV5v8s1vkpA1dax5bHOl
JwMGCMpK1Z/hDySVs6rMiY6ITUHRbhFnjMRLqksONd7YGJsYU5p70Lm03NCY1gXm
fSOWmEIaWRAn+2n2XI+6Lut/0R1gH+zpJ7m0klUTDY+FTI6HnD9oVVKSXxgu52TU
l9D2QwW3yyKGdF2VtVeA8f3gf59F1O+hOW9r1Vq3/b7w6Ct138ZwwaSLybzqZ4/m
gU0PNE3kGbToUNgkO0dRN3WJv9Arb+czXUtMlhNCkVkdWSZDpG1h7dQkMx4N7OLo
EXiWNiFZ1jCZou2HEMbvI+w80gYWT2Q87xMOgIStY1LQQu0UDRFUx+dbKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNW1E5wEL+dkZqNECx3Kgmj+F2G0MB8GA1UdIwQY
MBaAFHiMT19EpmBqdhepbOwYSQCspvgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82MmE3M2QtZDM1NC00ODUzLWI0MmUt
YzY2ZTA4NzhkZDI3LzEvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82MmE3M2QtZDM1NC00ODUzLWI0MmUtYzY2ZTA4NzhkZDI3
LzEvZUl4UFgwU21ZR3AyRjZsczdCaEpBS3ltLUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQCoAQLB
YHHcqPfDgEnTeJQ88rpGIuoe0FGh2HKMAh8Zncum6O0iSlAjPKpd87hbVuSdTR11
w0a7KhQ4UbzXCJnixddFZ0aJ1MCuveLiNqPU+RkJcaQZGCVD0Jzv9yIaQnCASxiS
SF/MDPF1i6vFzwlsVtqIaIyBW+ibodtN57oQO6VKEDC3uH5ZuYn4darPfB5ORXIB
A0U93utUpdUSEg6zTCLyYsXdaTD4+1U/6ZIVZWR+k6sjzPtmYy3mjbDsjdn9MoVD
j4QGbC/4djKB6bDBRocmtplzXfmuDVAOK3M4xFfnOV9orv87lxFGZ1ceJUGg0lG8
/0vD3m0xsLyi1A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:26 2025 by rpki-client