Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: Xqt4nvWbGLPPcVUoy08KoW7opCB/W+osxxlgAhqLtFM=
Subject key identifier: DA:91:64:FB:55:48:42:1D:A6:EE:F1:86:BA:4B:5C:87:70:0A:FF:C8
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019875D0E0CD841F36955A6F7075CAC7DC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 088B
Signing time: Mon 04 Aug 2025 16:01:19 +0000
Manifest this update: Mon 04 Aug 2025 16:01:19 +0000
Manifest next update: Tue 05 Aug 2025 16:01:19 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: Kdcwotp+l1pVp9CmzyL+SfrxGD18GBjZ9l/xuT6UVYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:e0:cd:84:1f:36:95:5a:6f:70:75:ca:c7:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Aug 4 16:01:19 2025 GMT
Not After : Aug 5 16:01:19 2025 GMT
Subject: CN=da9164fb5548421da6eef186ba4b5c87700affc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:62:a1:f8:77:0c:29:64:54:c7:31:0d:67:
da:52:4c:19:69:86:8e:51:7a:d1:6b:6a:6e:9b:b3:
0f:2b:ef:7e:c0:8c:34:45:59:ee:3d:39:c3:cc:07:
fa:fb:8a:71:89:bc:87:19:89:d2:32:2e:bc:7d:66:
d8:4f:3d:0b:40:4d:83:81:dc:08:c2:6b:42:fa:1c:
97:67:da:b8:73:75:e6:27:b0:d9:a0:94:3b:35:ee:
7f:56:4c:bd:f5:e4:a0:a3:ab:b1:b7:6a:3d:42:64:
c2:d8:a1:97:ce:c2:94:ac:12:aa:2b:a8:09:08:c2:
11:8d:76:e9:6f:b9:5c:40:15:70:1d:1c:33:3d:02:
b2:06:6e:f9:44:81:65:6e:9b:0d:ac:6e:cb:48:da:
39:da:75:ee:e1:e0:96:f8:b3:ca:a8:31:b7:82:bd:
d0:bc:b6:1d:38:e9:17:98:20:b9:e0:5d:a0:54:e5:
8b:df:ea:f7:8c:5e:2d:f8:1a:f3:42:16:27:6a:e6:
11:db:9f:fa:9d:df:78:d6:04:be:75:a3:e2:67:c1:
0d:6f:f7:06:25:8e:b7:e5:d0:07:e4:60:bc:58:d6:
d8:30:50:f9:2f:8a:d7:b6:c3:68:96:db:3c:0e:43:
42:d3:c7:03:18:c9:b3:38:4b:9a:87:cc:10:2e:24:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:91:64:FB:55:48:42:1D:A6:EE:F1:86:BA:4B:5C:87:70:0A:FF:C8
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6e:95:5f:b9:43:2c:9c:9d:54:c3:ef:80:81:0c:c7:21:ac:
b7:cf:da:8d:10:6f:6d:98:84:d9:58:56:69:6c:15:7a:3e:a8:
98:ac:a7:85:ff:36:ae:6b:96:da:20:8a:a8:e6:ed:b5:2e:45:
59:12:01:13:32:d7:52:e6:7b:5e:62:14:7a:6a:e7:51:e0:29:
9b:62:a1:b4:4a:7b:a8:48:51:b5:7c:16:2f:21:b3:48:1b:fa:
60:49:05:d2:52:3f:c7:9f:b0:bc:e0:d1:d1:47:0a:8d:c8:b6:
67:fb:d9:ae:be:0e:e9:d8:64:05:0c:3b:d0:90:47:29:11:cb:
47:4b:f1:ce:09:8d:b5:a9:c5:b7:4a:d1:77:02:49:3b:b9:a2:
9e:d3:9a:8c:28:a4:d0:8e:e9:e6:5d:81:2f:29:1a:e8:fb:e8:
e2:30:f7:b1:50:21:e8:b8:46:21:1c:79:e6:32:80:d6:ef:3f:
c3:72:10:77:1f:5b:27:3c:43:fc:e1:c3:b6:4a:06:f0:4d:7a:
13:2d:1c:01:a7:06:74:1f:81:f5:d7:20:5d:0f:57:79:f8:37:
97:1e:c8:53:39:cb:29:2c:d1:21:a9:93:b3:c6:77:0f:2d:54:
e4:db:14:81:99:c0:b4:e2:cd:e1:8d:51:77:ac:23:f2:77:eb:
d4:e5:47:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10ODNhB82lVpvcHXKx9wKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw
MjA0Y2IwHhcNMjUwODA0MTYwMTE5WhcNMjUwODA1MTYwMTE5WjAzMTEwLwYDVQQD
EyhkYTkxNjRmYjU1NDg0MjFkYTZlZWYxODZiYTRiNWM4NzcwMGFmZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV1iofh3DClkVMcxDWfaUkwZaYaO
UXrRa2pum7MPK+9+wIw0RVnuPTnDzAf6+4pxibyHGYnSMi68fWbYTz0LQE2DgdwI
wmtC+hyXZ9q4c3XmJ7DZoJQ7Ne5/Vky99eSgo6uxt2o9QmTC2KGXzsKUrBKqK6gJ
CMIRjXbpb7lcQBVwHRwzPQKyBm75RIFlbpsNrG7LSNo52nXu4eCW+LPKqDG3gr3Q
vLYdOOkXmCC54F2gVOWL3+r3jF4t+BrzQhYnauYR25/6nd941gS+daPiZ8ENb/cG
JY635dAH5GC8WNbYMFD5L4rXtsNolts8DkNC08cDGMmzOEuah8wQLiSoewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqRZPtVSEIdpu7xhrpLXIdwCv/IMB8GA1UdIwQY
MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt
NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj
LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASG6VX7lD
LJydVMPvgIEMxyGst8/ajRBvbZiE2VhWaWwVej6omKynhf82rmuW2iCKqObttS5F
WRIBEzLXUuZ7XmIUemrnUeApm2KhtEp7qEhRtXwWLyGzSBv6YEkF0lI/x5+wvODR
0UcKjci2Z/vZrr4O6dhkBQw70JBHKRHLR0vxzgmNtanFt0rRdwJJO7mintOajCik
0I7p5l2BLyka6Pvo4jD3sVAh6LhGIRx55jKA1u8/w3IQdx9bJzxD/OHDtkoG8E16
Ey0cAacGdB+B9dcgXQ9Xefg3lx7IUznLKSzRIamTs8Z3Dy1U5NsUgZnAtOLN4Y1R
d6wj8nfr1OVHTQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:30 2025 by rpki-client