Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
File: w49sR0pKRBSpySd75Naqrivt6ks.mft (raw, json)
Hash identifier: oClif+TYyaJCOTY9O4ekIUxfCy8AwbANbpQJTflHjpk=
Subject key identifier: 9B:E8:08:34:C9:D6:1F:1A:3B:B5:4A:6E:74:9D:5C:51:F7:5A:49:9F
Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Certificate serial: 01989ECCC55577D1FABEA96795176AF93368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
Manifest number: 3A
Signing time: Tue 12 Aug 2025 15:01:16 +0000
Manifest this update: Tue 12 Aug 2025 15:01:16 +0000
Manifest next update: Wed 13 Aug 2025 15:01:16 +0000
Files and hashes: 1: w49sR0pKRBSpySd75Naqrivt6ks.crl (hash: 71Fpch9MnHrRJJtkQMZ9WTpzJivMLniWXjazOkMb+d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:c5:55:77:d1:fa:be:a9:67:95:17:6a:f9:33:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Validity
Not Before: Aug 12 15:01:16 2025 GMT
Not After : Aug 13 15:01:16 2025 GMT
Subject: CN=9be80834c9d61f1a3bb54a6e749d5c51f75a499f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:90:fa:95:33:21:b9:61:a2:5e:d0:34:96:
c1:c4:c0:34:91:5a:27:48:89:8f:43:df:ec:92:90:
38:cd:d6:80:1c:ec:ef:56:ff:37:69:52:0e:b8:a8:
9a:77:a4:e7:4f:76:ee:30:35:4f:a6:21:7c:97:38:
c1:3e:6e:b2:7e:b8:1f:07:31:e5:c5:2b:1a:2e:3a:
2e:a0:56:26:a8:47:c2:8a:d5:a9:64:a1:fc:18:4e:
9a:90:17:22:60:34:f9:09:e5:80:38:d5:f5:80:a2:
a6:21:6b:da:c7:f5:37:a8:1c:06:fd:a5:8d:01:4c:
2e:dd:d2:85:b8:4a:60:73:20:ab:33:78:b4:d6:87:
31:c6:c7:c9:57:3c:e0:83:8e:e7:b6:0e:9c:8b:86:
b8:2e:84:a7:4d:78:32:26:03:19:0a:47:6d:24:e5:
98:f3:5f:24:d5:13:b3:31:78:97:c8:6b:10:dd:1c:
e6:9f:b5:18:51:f7:56:18:e5:75:be:94:c3:56:ec:
98:d3:fb:f7:df:b8:4f:bf:09:20:d1:b8:ad:6a:f5:
a8:ee:5c:c3:56:ba:64:90:3f:85:0b:c5:dc:f5:fb:
2d:2f:60:db:34:73:29:ce:ca:90:56:8a:e4:60:50:
a6:e7:da:7c:85:a1:4b:47:2f:f9:51:56:46:03:27:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E8:08:34:C9:D6:1F:1A:3B:B5:4A:6E:74:9D:5C:51:F7:5A:49:9F
X509v3 Authority Key Identifier:
keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:23:cf:6e:75:10:04:46:1b:b9:dc:4d:e9:4f:29:15:2b:17:
98:83:95:98:3c:79:42:28:9e:08:f6:c5:47:e2:16:d1:5e:5d:
46:de:80:42:d7:06:c6:4b:76:68:db:ba:8a:0d:06:36:a9:fc:
6b:51:ea:28:29:11:28:2c:28:5a:dc:f3:9c:23:eb:65:13:0c:
a2:09:17:c3:7a:c6:b5:9b:cf:90:9c:00:5b:a7:60:1c:72:72:
db:29:16:37:f0:66:f6:39:1a:12:73:b3:c6:86:8b:c6:ba:e2:
25:35:60:05:9c:a9:d9:46:d4:60:f4:a2:40:a0:b2:f8:4a:4d:
29:4b:b5:18:c3:61:20:b4:27:61:27:42:da:16:5b:69:7a:f2:
e1:59:17:97:8a:0c:2c:44:31:1e:8d:5a:bf:79:fd:3e:c9:d7:
91:35:cb:81:74:31:eb:8f:46:54:ed:c5:e0:73:51:69:28:10:
8f:2a:3b:20:57:34:ee:7e:34:d0:e7:b6:21:45:03:87:7c:55:
56:7e:86:20:51:22:d6:82:50:e1:10:c0:76:ec:db:cd:8c:33:
ec:a7:e7:63:b8:b5:d5:39:8e:59:d7:30:13:eb:d1:5e:48:c0:
cc:44:6a:12:d3:da:7f:ad:11:ed:e9:f8:ee:f1:dc:b6:ed:f4:
3e:37:7e:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiezMVVd9H6vqlnlRdq+TNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOGY2YzQ3NGE0YTQ0MTRhOWM5Mjc3YmU0ZDZhYWFlMmJl
ZGVhNGIwHhcNMjUwODEyMTUwMTE2WhcNMjUwODEzMTUwMTE2WjAzMTEwLwYDVQQD
Eyg5YmU4MDgzNGM5ZDYxZjFhM2JiNTRhNmU3NDlkNWM1MWY3NWE0OTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3iQ+pUzIblhol7QNJbBxMA0kVon
SImPQ9/skpA4zdaAHOzvVv83aVIOuKiad6TnT3buMDVPpiF8lzjBPm6yfrgfBzHl
xSsaLjouoFYmqEfCitWpZKH8GE6akBciYDT5CeWAONX1gKKmIWvax/U3qBwG/aWN
AUwu3dKFuEpgcyCrM3i01ocxxsfJVzzgg47ntg6ci4a4LoSnTXgyJgMZCkdtJOWY
818k1ROzMXiXyGsQ3Rzmn7UYUfdWGOV1vpTDVuyY0/v337hPvwkg0bitavWo7lzD
VrpkkD+FC8Xc9fstL2DbNHMpzsqQVorkYFCm59p8haFLRy/5UVZGAyc6/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvoCDTJ1h8aO7VKbnSdXFH3WkmfMB8GA1UdIwQY
MBaAFMOPbEdKSkQUqckne+TWqq4r7epLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84ZDk5YzUtYjdjOC00ODk1LWFmMTgt
YWU4NDAwMjhmNmIxLzEvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84ZDk5YzUtYjdjOC00ODk1LWFmMTgtYWU4NDAwMjhmNmIx
LzEvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESPPbnUQ
BEYbudxN6U8pFSsXmIOVmDx5QiieCPbFR+IW0V5dRt6AQtcGxkt2aNu6ig0GNqn8
a1HqKCkRKCwoWtzznCPrZRMMogkXw3rGtZvPkJwAW6dgHHJy2ykWN/Bm9jkaEnOz
xoaLxrriJTVgBZyp2UbUYPSiQKCy+EpNKUu1GMNhILQnYSdC2hZbaXry4VkXl4oM
LEQxHo1av3n9PsnXkTXLgXQx649GVO3F4HNRaSgQjyo7IFc07n400Oe2IUUDh3xV
Vn6GIFEi1oJQ4RDAduzbzYwz7KfnY7i11TmOWdcwE+vRXkjAzERqEtPaf60R7en4
7vHctu30Pjd+Fg==
-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:04 2025 by rpki-client