
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File: 5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier: m2YKaRyKpqVbYQsVNWjMihUGcRvugNoj1dyV0fKX/2o=
Subject key identifier: D7:67:26:32:4F:9B:36:A3:D1:A3:67:2E:17:2A:69:07:75:E2:0C:B2
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer: /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial: 01988921B293793F93CCFC9EC9E3F9662DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number: 0E8A
Signing time: Fri 08 Aug 2025 10:02:23 +0000
Manifest this update: Fri 08 Aug 2025 10:02:23 +0000
Manifest next update: Sat 09 Aug 2025 10:02:23 +0000
Files and hashes: 1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: zms4rs1thdj7WE7xI2tNCYYEnwwYdEd5pfwjMfgefTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:b2:93:79:3f:93:cc:fc:9e:c9:e3:f9:66:2d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Validity
Not Before: Aug 8 10:02:23 2025 GMT
Not After : Aug 9 10:02:23 2025 GMT
Subject: CN=d76726324f9b36a3d1a3672e172a690775e20cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:32:96:0c:a6:46:cb:c6:42:3a:0f:ac:62:
59:cb:b3:79:3f:56:c3:89:e2:f9:97:31:29:41:d2:
42:4f:48:fd:bd:f4:3e:d6:27:06:90:8d:13:d5:75:
9e:31:56:1e:3c:ed:7d:ee:7b:a3:48:b3:03:0b:f6:
c3:70:3f:ff:f4:f3:e9:d0:bf:b5:f8:b1:ac:a8:99:
75:bc:12:d6:73:2c:f2:ea:9b:29:c1:30:bd:2f:b1:
d6:57:93:67:5b:81:21:bc:3f:14:6f:98:f6:ce:7a:
02:a4:81:d4:c0:ee:5d:f0:c7:60:e1:9b:91:70:59:
29:93:d0:84:09:8a:de:26:dd:a0:3a:e6:4e:ad:31:
a6:21:8c:88:40:bc:e4:4f:8d:2d:1a:61:1f:b7:1d:
5f:90:d3:d8:ad:00:10:61:84:6c:31:5c:95:c0:08:
a5:c4:14:92:f6:41:96:41:ab:cd:a3:0b:fa:87:0a:
70:67:df:b6:3a:45:2e:f1:67:54:b2:46:20:37:70:
f3:d8:6a:58:83:5b:3c:0e:17:de:c6:9e:65:df:9a:
f5:d9:e2:83:98:0e:f1:bb:dc:0a:9f:9d:f3:a5:58:
d8:e1:d6:86:6a:78:78:8c:5b:83:f8:14:71:00:0f:
c1:b6:4d:52:0f:9c:47:1a:52:33:3c:d5:8c:2b:c8:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:67:26:32:4F:9B:36:A3:D1:A3:67:2E:17:2A:69:07:75:E2:0C:B2
X509v3 Authority Key Identifier:
keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:95:bd:56:6f:2d:3d:c3:b6:9b:91:6e:5f:5e:e6:dc:a6:ef:
8d:9d:e9:9e:f3:d6:ae:04:6f:d9:3f:70:7a:63:b2:46:aa:43:
c4:b1:f4:b5:5f:de:2f:26:3c:f4:15:68:3d:10:1b:ac:e2:0f:
4f:20:c4:38:c6:28:1b:d7:0e:9f:af:54:d2:53:14:29:f9:68:
52:00:e0:d3:f3:1c:3f:28:d5:df:20:27:2f:1d:35:c5:d3:7f:
35:c7:f6:97:dd:8a:f9:f4:f9:20:fa:69:fa:6e:73:5c:dc:e2:
91:5d:d1:55:8a:68:1e:dd:d8:98:84:bd:45:33:ab:1a:07:54:
10:ac:5b:50:7d:83:65:ae:1e:bc:f9:54:eb:42:ea:db:06:f3:
08:8f:46:69:08:73:c8:08:fa:17:4a:8f:65:8c:e4:0a:4e:3c:
9d:08:29:a0:8e:22:92:7e:fd:a3:16:01:04:ac:63:75:30:be:
84:29:e4:ce:91:a0:da:02:11:bc:e3:97:9e:27:c9:d6:68:e3:
bc:c0:31:db:ba:8d:75:58:af:0b:62:a3:79:86:91:9d:bc:79:
a3:b8:2a:24:c1:b2:45:13:69:2e:74:ab:0f:de:22:37:58:2c:
de:06:df:5d:67:09:cc:ce:4f:3b:ce:e0:97:a1:9d:2b:14:d4:
0e:34:7e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIbKTeT+TzPyeyeP5Zi2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3N2Q3Y2E4MWVlNTlkNTM0NTAzYjJmN2I2M2RiNjJiNWQ0
NGM1NmUwHhcNMjUwODA4MTAwMjIzWhcNMjUwODA5MTAwMjIzWjAzMTEwLwYDVQQD
EyhkNzY3MjYzMjRmOWIzNmEzZDFhMzY3MmUxNzJhNjkwNzc1ZTIwY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj0ylgymRsvGQjoPrGJZy7N5P1bD
ieL5lzEpQdJCT0j9vfQ+1icGkI0T1XWeMVYePO197nujSLMDC/bDcD//9PPp0L+1
+LGsqJl1vBLWcyzy6pspwTC9L7HWV5NnW4EhvD8Ub5j2znoCpIHUwO5d8Mdg4ZuR
cFkpk9CECYreJt2gOuZOrTGmIYyIQLzkT40tGmEftx1fkNPYrQAQYYRsMVyVwAil
xBSS9kGWQavNowv6hwpwZ9+2OkUu8WdUskYgN3Dz2GpYg1s8Dhfexp5l35r12eKD
mA7xu9wKn53zpVjY4daGanh4jFuD+BRxAA/Btk1SD5xHGlIzPNWMK8gc1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdnJjJPmzaj0aNnLhcqaQd14gyyMB8GA1UdIwQY
MBaAFOd9fKge5Z1TRQOy97Y9titdRMVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTMxOHFCN2xuVk5GQTdMM3RqMjJLMTFFeFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zMGY2Y2YtZWY5Yi00OTNhLTgzOTQt
NWMyMDBjNmU3ZDM0LzEvNTMxOHFCN2xuVk5GQTdMM3RqMjJLMTFFeFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8zMGY2Y2YtZWY5Yi00OTNhLTgzOTQtNWMyMDBjNmU3ZDM0
LzEvNTMxOHFCN2xuVk5GQTdMM3RqMjJLMTFFeFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpW9Vm8t
PcO2m5FuX17m3KbvjZ3pnvPWrgRv2T9wemOyRqpDxLH0tV/eLyY89BVoPRAbrOIP
TyDEOMYoG9cOn69U0lMUKfloUgDg0/McPyjV3yAnLx01xdN/Ncf2l92K+fT5IPpp
+m5zXNzikV3RVYpoHt3YmIS9RTOrGgdUEKxbUH2DZa4evPlU60Lq2wbzCI9GaQhz
yAj6F0qPZYzkCk48nQgpoI4ikn79oxYBBKxjdTC+hCnkzpGg2gIRvOOXnifJ1mjj
vMAx27qNdVivC2KjeYaRnbx5o7gqJMGyRRNpLnSrD94iN1gs3gbfXWcJzM5PO87g
l6GdKxTUDjR+BA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:47 2025 by rpki-client