Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: H7bhsyf+HoA06RT11HIz2wJONSlFj3DvgJTkcL/RKew=
Subject key identifier: CD:53:33:FE:FC:BF:CD:36:98:04:DD:EF:32:8C:C0:FF:CC:15:04:A2
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 019890DB6F6F8266E5E1DDECA1CB14156F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 0702
Signing time: Sat 09 Aug 2025 22:02:36 +0000
Manifest this update: Sat 09 Aug 2025 22:02:36 +0000
Manifest next update: Sun 10 Aug 2025 22:02:36 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: wjW+2Ey25T8m1K3v6cZW7oSP1JQvzoidZxqVpBMfqIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:6f:6f:82:66:e5:e1:dd:ec:a1:cb:14:15:6f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Aug 9 22:02:36 2025 GMT
Not After : Aug 10 22:02:36 2025 GMT
Subject: CN=cd5333fefcbfcd369804ddef328cc0ffcc1504a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:1f:a8:cb:12:71:06:97:24:05:13:a0:d2:
81:c0:8a:ad:f3:bd:25:ee:0f:88:d6:40:3b:e1:81:
4e:67:10:aa:b5:0a:69:1f:c3:4a:50:3f:a0:a3:32:
3d:52:5f:a7:36:1c:7b:b8:8c:7e:11:72:12:1e:cd:
b9:13:dc:71:fd:af:bb:9e:09:ec:e6:10:5b:14:43:
f7:65:cb:92:48:27:04:eb:ed:01:0c:df:ef:60:61:
0f:22:4f:62:66:8d:60:47:b6:c4:9f:27:74:59:5f:
b2:16:2c:a5:43:65:e6:8f:0e:5a:4a:28:d4:f8:49:
43:0a:05:80:b5:a4:4c:1f:cd:62:57:d3:41:07:d5:
6f:33:ee:34:93:50:9a:65:d3:13:c1:ed:a7:5a:19:
ec:d8:09:85:c8:3f:95:4a:8f:18:db:f3:c8:07:62:
c4:ae:04:49:c9:3d:cd:aa:36:b9:e0:79:c2:f3:27:
18:5b:8c:31:9e:d6:6e:4b:b2:65:e9:8c:45:7d:0f:
f9:56:62:66:16:57:5e:5f:98:60:ab:fb:d3:ea:b4:
e5:3c:e0:7f:dd:73:95:b4:ee:d3:c1:7e:f6:47:cc:
ec:15:32:46:b5:b2:16:bf:3b:02:c1:ca:c8:46:84:
32:10:03:6a:09:b0:50:ba:40:ee:df:38:bb:fa:07:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:33:FE:FC:BF:CD:36:98:04:DD:EF:32:8C:C0:FF:CC:15:04:A2
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a1:8d:66:88:b9:ba:28:5f:e2:5e:d4:1d:97:2f:e6:3b:40:
b6:86:22:83:67:bd:c7:20:66:08:7f:72:bb:38:50:96:ba:94:
cb:fd:8e:e2:d1:df:53:80:be:90:16:2e:96:8b:5c:50:ee:7a:
03:75:30:5d:62:3f:bd:ce:f3:86:3f:ec:6c:c9:a9:7b:a6:2c:
15:a5:a2:25:a0:2d:dd:14:49:fc:21:77:0b:17:16:a8:a5:58:
29:27:38:36:39:04:3c:1d:14:96:1f:59:22:b2:59:40:97:7d:
3b:55:43:a4:77:03:19:27:d3:d2:80:68:08:8d:c1:f1:47:1b:
a3:ab:62:f8:27:4d:13:fe:80:43:a3:81:ff:78:06:4f:48:d7:
1b:d3:48:67:71:bb:e8:e7:70:8e:ac:7c:62:b1:45:8b:4d:3f:
da:ed:74:a0:28:a1:48:be:db:0b:1b:a3:2c:f2:27:8e:91:5a:
41:9b:71:83:54:68:6d:19:74:a4:13:45:82:b7:93:97:3c:e6:
73:a7:e0:c8:99:61:ba:7e:7c:ae:4e:49:02:3f:e1:b6:27:41:
f1:75:13:42:d9:41:0b:59:0a:a4:03:d4:89:69:0d:78:1b:31:
9f:79:9d:92:66:da:ba:77:30:47:1e:93:71:99:7b:1f:a8:15:
bd:f1:85:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQ229vgmbl4d3socsUFW9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwY2M5MjQxMzY2NWJkNmIwZGRlNTFhOWE2YjU2NWU3MmMz
MjFlNTIwHhcNMjUwODA5MjIwMjM2WhcNMjUwODEwMjIwMjM2WjAzMTEwLwYDVQQD
EyhjZDUzMzNmZWZjYmZjZDM2OTgwNGRkZWYzMjhjYzBmZmNjMTUwNGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AMfqMsScQaXJAUToNKBwIqt870l
7g+I1kA74YFOZxCqtQppH8NKUD+gozI9Ul+nNhx7uIx+EXISHs25E9xx/a+7ngns
5hBbFEP3ZcuSSCcE6+0BDN/vYGEPIk9iZo1gR7bEnyd0WV+yFiylQ2Xmjw5aSijU
+ElDCgWAtaRMH81iV9NBB9VvM+40k1CaZdMTwe2nWhns2AmFyD+VSo8Y2/PIB2LE
rgRJyT3Nqja54HnC8ycYW4wxntZuS7Jl6YxFfQ/5VmJmFldeX5hgq/vT6rTlPOB/
3XOVtO7TwX72R8zsFTJGtbIWvzsCwcrIRoQyEANqCbBQukDu3zi7+ge3PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1TM/78v802mATd7zKMwP/MFQSiMB8GA1UdIwQY
MBaAFHDMkkE2Zb1rDd5Rqaa1ZecsMh5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWIt
YmExNzdjMTk3OTY1LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWItYmExNzdjMTk3OTY1
LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaGNZoi5
uihf4l7UHZcv5jtAtoYig2e9xyBmCH9yuzhQlrqUy/2O4tHfU4C+kBYulotcUO56
A3UwXWI/vc7zhj/sbMmpe6YsFaWiJaAt3RRJ/CF3CxcWqKVYKSc4NjkEPB0Ulh9Z
IrJZQJd9O1VDpHcDGSfT0oBoCI3B8Ucbo6ti+CdNE/6AQ6OB/3gGT0jXG9NIZ3G7
6Odwjqx8YrFFi00/2u10oCihSL7bCxujLPInjpFaQZtxg1RobRl0pBNFgreTlzzm
c6fgyJlhun58rk5JAj/htidB8XUTQtlBC1kKpAPUiWkNeBsxn3mdkmbauncwRx6T
cZl7H6gVvfGFbw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:21:43 2025 by rpki-client