Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
File: E7ur4fopzNr8vU-Utcfk0NH4lH0.mft (raw, json)
Hash identifier: m9dqb9WxGSYWq3MT34BhQKjISuGmoIRxwEPv0+2V7rY=
Subject key identifier: 8A:92:0C:DB:40:EF:F1:2B:F3:E2:25:AF:CB:56:7E:20:73:C8:73:D5
Authority key identifier: 13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
Certificate issuer: /CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Certificate serial: 019873069FF7424F2F394208C3BBFF854803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
Manifest number: 01A2
Signing time: Mon 04 Aug 2025 03:01:10 +0000
Manifest this update: Mon 04 Aug 2025 03:01:10 +0000
Manifest next update: Tue 05 Aug 2025 03:01:10 +0000
Files and hashes: 1: E7ur4fopzNr8vU-Utcfk0NH4lH0.crl (hash: QCZYNDBwrFQ181q2IAl/NHOlT4KdCmYoWFQgB4QA/ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:9f:f7:42:4f:2f:39:42:08:c3:bb:ff:85:48:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Validity
Not Before: Aug 4 03:01:10 2025 GMT
Not After : Aug 5 03:01:10 2025 GMT
Subject: CN=8a920cdb40eff12bf3e225afcb567e2073c873d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:99:90:af:75:93:95:04:d8:2e:d6:c7:ba:
ea:cd:d3:be:ce:7c:ef:0e:ac:09:5a:df:d8:1e:e1:
32:90:47:fa:2f:fb:c0:bc:0e:1a:3f:85:09:c5:a6:
5b:76:73:30:55:ae:45:55:fd:f3:4e:20:48:fc:1e:
52:f9:79:28:d4:f5:64:fa:f8:ab:99:89:d7:91:76:
08:d8:31:2f:7c:d1:71:c1:a9:42:8f:7f:26:d9:4e:
2a:a5:29:d6:6e:01:04:12:50:42:f9:d4:ca:59:c2:
c4:ea:a3:cb:ff:d1:68:15:4c:7d:fc:9b:cd:93:f6:
a8:81:b7:42:e8:ae:47:cd:35:9a:21:55:6f:25:bf:
14:87:18:92:5e:16:cf:40:f0:1c:79:22:9e:cf:08:
d1:fa:5c:df:49:c2:b7:72:a3:a5:50:db:73:87:0b:
b5:fa:6e:4a:d8:09:96:42:ba:de:f4:3b:81:81:13:
a9:03:ae:78:f4:80:92:11:4b:df:9b:8d:9e:7b:30:
e9:05:dd:cd:0a:3b:c4:58:03:34:a2:e1:39:5c:17:
0e:4f:24:ab:47:18:5d:d7:23:5b:ff:fc:5b:93:97:
22:a2:62:0a:f0:8d:76:49:99:7d:ac:bd:f4:65:a4:
17:2f:8f:f0:1d:11:c7:6e:43:02:30:2f:35:9f:4e:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:0C:DB:40:EF:F1:2B:F3:E2:25:AF:CB:56:7E:20:73:C8:73:D5
X509v3 Authority Key Identifier:
keyid:13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8e:d0:e4:08:ed:80:8b:fe:6c:79:87:d5:e3:af:40:87:04:
ab:8d:12:e4:0a:1c:48:4d:2d:1a:c2:f6:ad:a6:62:54:a1:9d:
c2:58:2e:b8:46:a4:94:2f:f1:a3:aa:67:30:c0:87:82:53:d6:
f0:ff:77:23:b0:e6:97:46:62:b4:7d:1d:4c:1f:06:77:e6:1a:
65:c2:50:ee:68:b4:e7:a2:8e:9f:99:47:b2:1e:7c:ef:e6:8d:
93:ba:62:e8:81:12:0b:72:73:56:68:af:18:cb:15:0b:0c:90:
1a:c6:62:a2:b9:45:41:6e:e7:a7:cf:05:34:7d:96:81:65:a3:
e4:c3:31:3a:17:db:2d:d8:6e:e4:b4:87:cb:d0:92:fa:fe:34:
2f:cc:a5:e2:12:7a:06:54:1b:ac:10:37:d0:5b:56:b7:05:fe:
b2:36:dc:14:4c:b2:18:bc:dd:a1:5b:5c:38:de:c7:d6:d3:c1:
a1:79:12:56:5a:ac:3b:a5:d2:3a:b9:ef:e5:27:07:24:ff:30:
32:3e:29:cf:35:90:d9:ad:62:95:cc:85:f9:93:52:80:84:fe:
ea:dd:6a:a3:c4:c3:fd:94:dc:9a:75:3a:66:5f:59:6f:5a:99:
08:33:fa:fd:01:d2:b2:0b:94:d5:97:95:44:23:8b:6c:f1:e8:
d6:41:6b:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBp/3Qk8vOUIIw7v/hUgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYmJhYmUxZmEyOWNjZGFmY2JkNGY5NGI1YzdlNGQwZDFm
ODk0N2QwHhcNMjUwODA0MDMwMTEwWhcNMjUwODA1MDMwMTEwWjAzMTEwLwYDVQQD
Eyg4YTkyMGNkYjQwZWZmMTJiZjNlMjI1YWZjYjU2N2UyMDczYzg3M2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv6ZkK91k5UE2C7Wx7rqzdO+znzv
DqwJWt/YHuEykEf6L/vAvA4aP4UJxaZbdnMwVa5FVf3zTiBI/B5S+Xko1PVk+vir
mYnXkXYI2DEvfNFxwalCj38m2U4qpSnWbgEEElBC+dTKWcLE6qPL/9FoFUx9/JvN
k/aogbdC6K5HzTWaIVVvJb8UhxiSXhbPQPAceSKezwjR+lzfScK3cqOlUNtzhwu1
+m5K2AmWQrre9DuBgROpA6549ICSEUvfm42eezDpBd3NCjvEWAM0ouE5XBcOTySr
Rxhd1yNb//xbk5ciomIK8I12SZl9rL30ZaQXL4/wHRHHbkMCMC81n04G0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqSDNtA7/Er8+Ilr8tWfiBzyHPVMB8GA1UdIwQY
MBaAFBO7q+H6Kcza/L1PlLXH5NDR+JR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTd1cjRmb3B6TnI4dlUtVXRjZmswTkg0bEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNjBjNzQtZjI5ZC00MTM2LWI0MDAt
NDA3MThlMGUzMjhkLzEvRTd1cjRmb3B6TnI4dlUtVXRjZmswTkg0bEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNjBjNzQtZjI5ZC00MTM2LWI0MDAtNDA3MThlMGUzMjhk
LzEvRTd1cjRmb3B6TnI4dlUtVXRjZmswTkg0bEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXI7Q5Ajt
gIv+bHmH1eOvQIcEq40S5AocSE0tGsL2raZiVKGdwlguuEaklC/xo6pnMMCHglPW
8P93I7Dml0ZitH0dTB8Gd+YaZcJQ7mi056KOn5lHsh587+aNk7pi6IESC3JzVmiv
GMsVCwyQGsZiorlFQW7np88FNH2WgWWj5MMxOhfbLdhu5LSHy9CS+v40L8yl4hJ6
BlQbrBA30FtWtwX+sjbcFEyyGLzdoVtcON7H1tPBoXkSVlqsO6XSOrnv5ScHJP8w
Mj4pzzWQ2a1ilcyF+ZNSgIT+6t1qo8TD/ZTcmnU6Zl9Zb1qZCDP6/QHSsguU1ZeV
RCOLbPHo1kFrzg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:45 2025 by rpki-client