Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
File: 71j4Vyvdd9mBQRGA4u-aioAsdqw.mft (raw, json)
Hash identifier: /WTA2IHxhXnQk/fiGBAQy6srJtyVfqt5pIxcdfPdIKg=
Subject key identifier: C8:22:26:EE:A6:5F:F4:8A:7E:52:DE:CD:90:F7:8F:EC:EA:45:0B:3D
Authority key identifier: EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
Certificate issuer: /CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Certificate serial: 01987ED3A0861DF7E21549CE445A6D8A7A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
Manifest number: 0198
Signing time: Wed 06 Aug 2025 10:00:55 +0000
Manifest this update: Wed 06 Aug 2025 10:00:55 +0000
Manifest next update: Thu 07 Aug 2025 10:00:55 +0000
Files and hashes: 1: 71j4Vyvdd9mBQRGA4u-aioAsdqw.crl (hash: RQgr5Jmd8YLMhYeuhz3bW45Yf4PZJGZP3/gx5tuj92w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:a0:86:1d:f7:e2:15:49:ce:44:5a:6d:8a:7a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Validity
Not Before: Aug 6 10:00:55 2025 GMT
Not After : Aug 7 10:00:55 2025 GMT
Subject: CN=c82226eea65ff48a7e52decd90f78fecea450b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:7b:c8:19:52:ca:4d:12:d8:a0:cc:d0:71:
39:c2:25:a6:0a:62:9f:70:32:58:28:27:eb:31:c8:
34:6b:78:85:54:3e:e3:90:51:63:fc:40:b9:a2:fb:
ff:6b:5d:29:4b:d5:70:a2:57:c9:84:f5:f2:a7:41:
b2:5f:6f:83:e2:74:72:1a:a9:8b:40:a7:5d:92:bc:
8b:6a:c6:e8:b0:bc:d4:c2:6f:86:c0:71:b5:03:28:
78:86:41:a7:9c:b5:71:cf:ee:ee:77:0e:cd:08:fa:
1e:b0:64:e3:e1:a9:eb:21:f7:4d:74:55:94:68:98:
b3:47:f1:d2:ca:54:c4:46:3e:72:37:bf:ca:59:f8:
90:b5:6d:a5:bf:cc:9c:75:dd:66:1a:f7:6c:53:8a:
d5:7b:16:93:63:4a:49:20:59:64:6b:e9:51:95:73:
59:42:7f:0b:26:05:de:d0:df:f8:3d:44:80:3d:70:
ef:b9:0e:c4:d2:97:a5:6a:c9:67:c0:a2:24:76:53:
30:b3:cf:42:9d:aa:f9:fe:be:65:3b:2b:d9:1d:0a:
64:3a:f9:30:d3:74:fa:61:73:cb:0f:34:ea:b1:f6:
ed:4c:77:61:be:85:43:de:79:17:f0:3a:1f:46:15:
82:47:3b:99:8f:c7:11:2b:ba:9a:75:d8:1a:1c:be:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:26:EE:A6:5F:F4:8A:7E:52:DE:CD:90:F7:8F:EC:EA:45:0B:3D
X509v3 Authority Key Identifier:
keyid:EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a8:ea:0e:78:95:98:60:1d:4e:23:a2:e5:68:ea:d9:17:d9:
be:75:6d:19:ff:d2:30:ba:36:06:aa:c8:c1:c1:ae:df:cd:28:
5c:2d:ac:d6:02:4b:47:fa:a5:18:92:a6:2b:73:a6:d9:05:19:
9f:d1:9b:d2:9a:ff:5f:18:23:1a:82:ac:ab:00:eb:ba:72:b1:
13:da:bb:63:3c:9a:73:b2:25:b6:e8:4f:8d:d1:51:96:d8:e7:
93:a7:06:88:7c:d3:86:85:a4:a1:e6:13:32:64:be:5c:2c:3e:
36:6b:b0:75:55:fa:ce:47:41:50:15:e0:1f:2e:39:73:42:c9:
f6:97:e6:a9:1a:1e:86:c2:43:80:5d:a6:ac:4b:95:56:fc:d1:
28:7d:ce:05:58:58:94:f9:01:6a:f8:40:0c:ec:f2:d8:d2:ad:
e0:d8:bb:4f:0e:8b:17:41:c4:1d:f2:aa:ae:3d:db:e4:1b:2c:
03:39:ba:14:dd:f1:79:28:e7:1d:51:d6:6c:dd:eb:e2:82:58:
54:74:15:fb:cc:f3:60:ad:d1:30:83:eb:33:da:0e:eb:21:79:
d3:20:7a:25:70:59:44:96:92:bb:38:37:c7:02:59:61:90:3f:
b0:0e:a2:a0:3b:ab:a0:97:c5:bd:66:f8:70:e0:37:e6:14:27:
6d:5e:7d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+06CGHffiFUnORFptinp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNThmODU3MmJkZDc3ZDk4MTQxMTE4MGUyZWY5YThhODAy
Yzc2YWMwHhcNMjUwODA2MTAwMDU1WhcNMjUwODA3MTAwMDU1WjAzMTEwLwYDVQQD
EyhjODIyMjZlZWE2NWZmNDhhN2U1MmRlY2Q5MGY3OGZlY2VhNDUwYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIt7yBlSyk0S2KDM0HE5wiWmCmKf
cDJYKCfrMcg0a3iFVD7jkFFj/EC5ovv/a10pS9VwolfJhPXyp0GyX2+D4nRyGqmL
QKddkryLasbosLzUwm+GwHG1Ayh4hkGnnLVxz+7udw7NCPoesGTj4anrIfdNdFWU
aJizR/HSylTERj5yN7/KWfiQtW2lv8ycdd1mGvdsU4rVexaTY0pJIFlka+lRlXNZ
Qn8LJgXe0N/4PUSAPXDvuQ7E0pelaslnwKIkdlMws89Cnar5/r5lOyvZHQpkOvkw
03T6YXPLDzTqsfbtTHdhvoVD3nkX8DofRhWCRzuZj8cRK7qaddgaHL4ENQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgiJu6mX/SKflLezZD3j+zqRQs9MB8GA1UdIwQY
MBaAFO9Y+Fcr3XfZgUERgOLvmoqALHasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85YjcxMDgtZTEyZi00ZjhhLWE1ZTAt
MzhlODA1ZmY0YzczLzEvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85YjcxMDgtZTEyZi00ZjhhLWE1ZTAtMzhlODA1ZmY0Yzcz
LzEvNzFqNFZ5dmRkOW1CUVJHQTR1LWFpb0FzZHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6jqDniV
mGAdTiOi5Wjq2RfZvnVtGf/SMLo2BqrIwcGu380oXC2s1gJLR/qlGJKmK3Om2QUZ
n9Gb0pr/XxgjGoKsqwDrunKxE9q7Yzyac7IltuhPjdFRltjnk6cGiHzThoWkoeYT
MmS+XCw+NmuwdVX6zkdBUBXgHy45c0LJ9pfmqRoehsJDgF2mrEuVVvzRKH3OBVhY
lPkBavhADOzy2NKt4Ni7Tw6LF0HEHfKqrj3b5BssAzm6FN3xeSjnHVHWbN3r4oJY
VHQV+8zzYK3RMIPrM9oO6yF50yB6JXBZRJaSuzg3xwJZYZA/sA6ioDuroJfFvWb4
cOA35hQnbV59EQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:54 2025 by rpki-client