Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier: tFj+8CIi/iGg5QNPS423IEnEpnUnsfWdgYmGYCdDAaY=
Subject key identifier: 6E:E0:B6:0D:55:C1:F5:4D:B4:99:5F:DB:84:DA:25:BC:EC:15:07:9D
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial: 0198A04E329A322B24324C15A789BBFA42D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number: 10EC
Signing time: Tue 12 Aug 2025 22:02:15 +0000
Manifest this update: Tue 12 Aug 2025 22:02:15 +0000
Manifest next update: Wed 13 Aug 2025 22:02:15 +0000
Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: UbMB6TmXPekEBc1244p9TPZDSqNpItnmdv52s+Kx5CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:32:9a:32:2b:24:32:4c:15:a7:89:bb:fa:42:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Validity
Not Before: Aug 12 22:02:15 2025 GMT
Not After : Aug 13 22:02:15 2025 GMT
Subject: CN=6ee0b60d55c1f54db4995fdb84da25bcec15079d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:aa:9e:24:53:4d:14:51:77:bc:b8:2f:81:
b1:3c:dd:10:c4:ed:99:77:e8:64:7e:7f:d5:a9:2e:
c5:44:2c:27:0c:d2:fc:a7:ba:58:9a:e7:58:ba:fd:
7d:af:b3:76:4d:a7:93:21:f5:a2:69:5b:79:80:54:
4a:b6:bb:b6:70:32:17:47:08:b7:10:db:c2:72:bb:
b3:94:cc:c7:19:d8:52:c0:8d:e1:51:0a:1b:fa:00:
8b:a9:9b:8d:7c:6e:ed:46:a7:16:35:cf:fa:ec:7c:
b1:91:dc:9e:df:53:95:25:f8:50:55:45:ac:c5:c1:
0a:71:b0:36:7a:9a:9d:af:4b:bc:00:91:08:df:66:
94:de:fd:83:23:98:31:9e:a3:ca:e0:27:46:ea:0b:
16:45:bd:58:6b:3f:0d:50:29:74:0e:09:f5:96:48:
a7:12:83:da:2d:14:14:8a:ba:c1:8a:e9:ae:73:ff:
bd:55:df:ee:e2:14:ca:8f:d6:8f:d5:aa:9a:b4:ed:
d6:87:f0:59:29:e2:55:19:5c:12:da:1e:45:fb:a9:
4b:2e:2b:62:2c:7b:02:a6:40:ba:3c:92:7d:90:e4:
48:fc:19:e9:30:79:af:a9:f5:d3:c5:4b:27:75:79:
fc:76:8f:3d:07:b4:15:1e:1c:53:da:5f:19:d8:a5:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E0:B6:0D:55:C1:F5:4D:B4:99:5F:DB:84:DA:25:BC:EC:15:07:9D
X509v3 Authority Key Identifier:
keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a1:97:6c:ee:ee:0d:ee:f5:db:ca:ea:37:25:65:e1:16:a4:
71:ff:d2:b6:f4:03:ac:26:4b:ac:86:b7:e8:54:a4:c7:66:b3:
c0:24:eb:40:5c:cb:3c:ae:d0:b0:7f:0c:90:34:e5:08:12:8b:
50:3c:79:9e:10:d8:f9:37:57:9e:a5:46:4d:3a:2a:d1:66:cf:
fe:36:4a:9f:8d:80:2f:b3:a5:72:09:b9:2b:10:57:a1:5d:d0:
7e:2d:cf:d5:0d:39:c0:c2:c2:ce:ff:44:6b:f3:0d:ce:95:c2:
6f:5b:95:92:79:1c:7b:03:7a:e1:7f:6e:49:d3:43:4e:90:f6:
22:4d:b1:90:37:e9:35:80:2c:23:f1:ab:6a:88:fd:1e:f4:6c:
33:26:24:68:38:d9:37:a6:4b:eb:8e:ed:a9:eb:93:c6:21:b0:
c5:d3:7f:bb:76:44:ff:f0:c0:02:f0:52:23:28:02:1f:b6:41:
53:41:6e:12:2e:20:0b:18:ea:ea:b6:c6:07:4b:f4:cd:2a:a7:
93:5f:10:e2:c7:64:3c:55:0e:2a:56:8e:8e:9a:49:dc:ef:24:
5a:f0:fe:04:87:7d:b2:b2:73:4d:df:af:01:9d:b2:93:e9:5b:
f8:73:ad:b7:f0:7d:f1:a6:97:ec:b9:c5:7c:14:73:1a:09:7f:
63:37:ce:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTjKaMiskMkwVp4m7+kLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NjQ2MDVlYWYxNGI4YjVkMjhlZThkMDc2YzFlMzczOGY3
NTgyNTMwHhcNMjUwODEyMjIwMjE1WhcNMjUwODEzMjIwMjE1WjAzMTEwLwYDVQQD
Eyg2ZWUwYjYwZDU1YzFmNTRkYjQ5OTVmZGI4NGRhMjViY2VjMTUwNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlCqniRTTRRRd7y4L4GxPN0QxO2Z
d+hkfn/VqS7FRCwnDNL8p7pYmudYuv19r7N2TaeTIfWiaVt5gFRKtru2cDIXRwi3
ENvCcruzlMzHGdhSwI3hUQob+gCLqZuNfG7tRqcWNc/67Hyxkdye31OVJfhQVUWs
xcEKcbA2epqdr0u8AJEI32aU3v2DI5gxnqPK4CdG6gsWRb1Yaz8NUCl0Dgn1lkin
EoPaLRQUirrBiumuc/+9Vd/u4hTKj9aP1aqatO3Wh/BZKeJVGVwS2h5F+6lLLiti
LHsCpkC6PJJ9kORI/BnpMHmvqfXTxUsndXn8do89B7QVHhxT2l8Z2KX44wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7gtg1VwfVNtJlf24TaJbzsFQedMB8GA1UdIwQY
MBaAFPRkYF6vFLi10o7o0HbB43OPdYJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMt
ZTJkODY0N2ZlNWRkLzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMtZTJkODY0N2ZlNWRk
LzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKGXbO7u
De7128rqNyVl4Rakcf/StvQDrCZLrIa36FSkx2azwCTrQFzLPK7QsH8MkDTlCBKL
UDx5nhDY+TdXnqVGTToq0WbP/jZKn42AL7Olcgm5KxBXoV3Qfi3P1Q05wMLCzv9E
a/MNzpXCb1uVknkcewN64X9uSdNDTpD2Ik2xkDfpNYAsI/Graoj9HvRsMyYkaDjZ
N6ZL647tqeuTxiGwxdN/u3ZE//DAAvBSIygCH7ZBU0FuEi4gCxjq6rbGB0v0zSqn
k18Q4sdkPFUOKlaOjppJ3O8kWvD+BId9srJzTd+vAZ2yk+lb+HOtt/B98aaX7LnF
fBRzGgl/YzfOPw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:20 2025 by rpki-client