Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: mHvQxsR4Drb8UD9VXqJC5ut9Udhnz3+nSInXIlJZI8E=
Subject key identifier: 38:C5:5E:97:BC:5A:2C:1E:4A:F7:00:6A:2F:52:43:CB:41:07:04:62
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 0198A04EC5A63130E6EBDC6C43E2AC055FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0A3A
Signing time: Tue 12 Aug 2025 22:02:53 +0000
Manifest this update: Tue 12 Aug 2025 22:02:53 +0000
Manifest next update: Wed 13 Aug 2025 22:02:53 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: ZJsi4OWCfzUKiFXEDWKe1LC2Wl3ao3vcz1B3Wi3p6WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:c5:a6:31:30:e6:eb:dc:6c:43:e2:ac:05:5f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Aug 12 22:02:53 2025 GMT
Not After : Aug 13 22:02:53 2025 GMT
Subject: CN=38c55e97bc5a2c1e4af7006a2f5243cb41070462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:2c:88:a8:79:ce:3f:09:38:2b:ab:c6:a6:
8f:be:ea:5c:86:5a:51:50:dd:84:c5:1e:ac:50:bc:
fe:65:e6:a9:ac:db:f5:8a:20:e0:94:40:28:9e:1c:
ef:ad:36:e8:f1:c3:ed:6c:7d:62:59:d4:75:0d:db:
68:37:6c:24:41:be:e4:a9:6c:2e:ad:a7:b4:2f:dd:
47:b4:1a:91:f4:35:98:ca:ad:15:c8:9a:0d:9f:09:
45:a0:3b:6a:43:b0:3b:16:54:e1:73:3e:d4:38:07:
54:c5:eb:c1:c3:f1:01:6f:fc:c6:67:e9:bf:4d:34:
14:af:5d:19:d4:bd:29:28:aa:eb:d4:44:1e:00:4b:
02:b7:80:8a:e5:b3:50:e3:d0:ed:28:10:60:3d:86:
17:b4:47:67:66:c3:94:03:7e:f2:74:f6:87:68:fe:
ef:6f:61:89:aa:c0:18:2f:d5:c5:46:b6:06:0b:7c:
c9:bc:db:8b:a9:e2:6c:84:8b:90:91:35:b4:1c:84:
43:9d:8e:ad:e1:54:43:2a:33:68:92:6a:52:05:ca:
f9:4b:4a:a8:e3:e0:32:b3:33:67:b7:6f:d7:28:b5:
a0:3c:1c:63:6d:da:3a:d2:38:6d:d0:13:5c:19:84:
74:c0:69:3d:72:72:cd:83:b5:c5:91:08:33:d9:dd:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C5:5E:97:BC:5A:2C:1E:4A:F7:00:6A:2F:52:43:CB:41:07:04:62
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a7:d9:05:53:15:82:1f:fe:87:a6:dd:ab:c4:d0:4c:63:0c:
76:c0:7f:47:9b:fb:43:50:c6:bd:6b:11:63:f8:c3:dd:d4:88:
33:fa:f0:11:57:5c:8d:42:5c:be:9b:15:a7:84:00:b5:73:b6:
76:93:4c:48:29:68:08:8c:76:e0:b8:16:84:c2:dd:88:bd:a6:
33:d2:78:d2:4a:50:d2:d6:21:6d:db:67:85:f0:2a:f5:9c:3f:
76:52:1d:45:c7:d1:d3:13:6a:08:1c:c3:b6:e2:b1:8f:d8:ab:
39:d4:d0:43:96:e1:e3:e1:2c:30:3a:a7:08:3a:17:fd:1a:15:
8d:7b:8b:92:82:bf:d9:4b:ab:20:c0:d4:d7:00:d7:78:98:77:
ec:7f:9e:3c:7e:57:b8:32:6e:a9:5d:55:61:69:3f:ff:8f:39:
20:08:16:67:a9:27:a1:71:3c:7d:00:40:92:9d:dd:3c:15:67:
d7:16:05:7e:58:e4:c7:ee:56:8c:dd:7b:8b:bf:c3:cd:58:1e:
2c:99:79:64:69:3a:52:91:a7:20:39:ec:e1:04:6e:2d:74:89:
e7:01:08:00:08:44:8c:20:7e:f6:84:75:f0:1a:a7:8a:16:c9:
7b:e4:62:3b:58:9c:ac:65:8e:a8:3a:1e:dd:b1:e3:c2:1a:1e:
f6:94:d2:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTsWmMTDm69xsQ+KsBV+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODRhNDE5OTdlZWVhNGQwNWZjYzdjZDQwYjEyMTEzYTVi
YjY5ZTgwHhcNMjUwODEyMjIwMjUzWhcNMjUwODEzMjIwMjUzWjAzMTEwLwYDVQQD
EygzOGM1NWU5N2JjNWEyYzFlNGFmNzAwNmEyZjUyNDNjYjQxMDcwNDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr98siKh5zj8JOCurxqaPvupchlpR
UN2ExR6sULz+ZeaprNv1iiDglEAonhzvrTbo8cPtbH1iWdR1DdtoN2wkQb7kqWwu
rae0L91HtBqR9DWYyq0VyJoNnwlFoDtqQ7A7FlThcz7UOAdUxevBw/EBb/zGZ+m/
TTQUr10Z1L0pKKrr1EQeAEsCt4CK5bNQ49DtKBBgPYYXtEdnZsOUA37ydPaHaP7v
b2GJqsAYL9XFRrYGC3zJvNuLqeJshIuQkTW0HIRDnY6t4VRDKjNokmpSBcr5S0qo
4+AyszNnt2/XKLWgPBxjbdo60jht0BNcGYR0wGk9cnLNg7XFkQgz2d2FuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjFXpe8WiweSvcAai9SQ8tBBwRiMB8GA1UdIwQY
MBaAFNOEpBmX7upNBfzHzUCxIROlu2noMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUt
ZjZkMGZmNDU4NjQ4LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUtZjZkMGZmNDU4NjQ4
LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABafZBVMV
gh/+h6bdq8TQTGMMdsB/R5v7Q1DGvWsRY/jD3dSIM/rwEVdcjUJcvpsVp4QAtXO2
dpNMSCloCIx24LgWhMLdiL2mM9J40kpQ0tYhbdtnhfAq9Zw/dlIdRcfR0xNqCBzD
tuKxj9irOdTQQ5bh4+EsMDqnCDoX/RoVjXuLkoK/2UurIMDU1wDXeJh37H+ePH5X
uDJuqV1VYWk//485IAgWZ6knoXE8fQBAkp3dPBVn1xYFfljkx+5WjN17i7/DzVge
LJl5ZGk6UpGnIDns4QRuLXSJ5wEIAAhEjCB+9oR18BqnihbJe+RiO1icrGWOqDoe
3bHjwhoe9pTS7A==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:36 2025 by rpki-client