Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
File: g502OyjxyQhOHBmGh2u0CbeaE4w.mft (raw, json)
Hash identifier: xJBGYM3m+0LE+Op4ntZr8bJY7g13tuVI9CvLfdfEhiM=
Subject key identifier: D8:7A:1A:EF:9F:F7:F3:2F:87:3D:11:9F:AE:5D:34:AA:33:CE:C3:9C
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Certificate issuer: /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial: 0198989329E3E71E06815D9EB085FEFC31A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
Manifest number: 0E15
Signing time: Mon 11 Aug 2025 10:00:38 +0000
Manifest this update: Mon 11 Aug 2025 10:00:38 +0000
Manifest next update: Tue 12 Aug 2025 10:00:38 +0000
Files and hashes: 1: g502OyjxyQhOHBmGh2u0CbeaE4w.crl (hash: w9ci1zcTSeTPNMOZYOrN//S2S/mphvyjW5ZPZ23bgMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:93:29:e3:e7:1e:06:81:5d:9e:b0:85:fe:fc:31:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
Validity
Not Before: Aug 11 10:00:38 2025 GMT
Not After : Aug 12 10:00:38 2025 GMT
Subject: CN=d87a1aef9ff7f32f873d119fae5d34aa33cec39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:dc:d5:04:47:04:8b:c7:fe:2d:4d:7b:31:
56:e4:43:6c:ab:02:e9:ca:67:d0:ba:c1:43:72:4e:
00:60:3b:04:25:20:d5:13:11:26:01:dc:c9:0a:57:
ff:89:33:7a:1b:1d:fd:7d:1e:f7:22:38:0c:90:4e:
8a:39:81:ec:84:98:a5:e2:21:0a:a8:f2:bc:05:e8:
12:76:5c:a0:08:8f:8e:68:8c:2b:20:ac:41:50:2a:
92:a3:eb:6d:7d:d3:24:34:c1:01:d2:15:4b:03:4f:
2d:94:dc:4b:44:a9:60:cc:e9:83:b7:e0:73:86:96:
3c:99:1a:62:c3:2e:9f:be:30:7e:91:d8:ca:81:84:
f8:40:a0:24:63:92:16:ee:7e:0d:ce:0f:e9:8f:ae:
96:85:09:25:58:dd:5d:50:29:cf:4b:ee:40:b3:3f:
61:7c:20:58:2c:9f:0f:5e:f6:2b:c6:1e:2f:01:7d:
27:47:29:fe:52:61:0d:0d:30:6d:1b:e1:35:7d:c6:
b9:40:f6:b7:f4:55:21:68:c5:b6:15:8e:aa:6a:65:
de:27:bf:ba:b7:9f:96:83:d0:90:c5:04:e1:43:72:
60:6a:47:6d:29:17:93:7c:45:36:01:9a:a2:e7:1d:
7e:dc:32:9b:a5:c0:7a:8b:eb:de:ff:38:50:6e:ce:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7A:1A:EF:9F:F7:F3:2F:87:3D:11:9F:AE:5D:34:AA:33:CE:C3:9C
X509v3 Authority Key Identifier:
keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ba:08:d2:9a:0a:c0:2b:08:5b:d9:5d:0f:1f:7b:77:ad:22:
44:08:a4:32:30:fc:26:87:67:5e:36:67:44:0b:f7:c7:ab:4c:
0b:61:98:24:1f:7b:4c:61:0e:e9:20:bc:18:21:5a:5c:be:67:
45:3d:b2:58:90:d5:fb:f9:e6:0d:d4:0b:68:23:e1:49:b7:cf:
e1:1c:26:94:2d:98:e2:00:91:a5:a5:74:78:0e:b5:9e:f2:4d:
e2:de:81:3b:6f:5a:91:48:84:20:0b:29:47:af:61:0b:f8:c6:
7c:82:40:af:5f:01:0f:77:4f:21:e1:ad:a8:18:f1:fa:bf:95:
b1:53:8d:28:bd:d2:d3:22:8a:0e:f1:c0:a2:89:63:a5:f8:8a:
80:4b:87:32:7b:2f:99:3f:60:5a:6d:9d:fe:b4:c4:c0:38:32:
bf:19:b9:44:cf:e8:de:80:af:6b:07:4b:8d:89:ca:e4:d8:07:
93:c5:74:1f:93:9b:b3:9a:7e:3a:40:71:f0:0a:65:e5:f1:e9:
86:cb:fe:f1:e1:2c:9d:69:26:b9:e9:59:09:4f:74:65:7e:fd:
dc:bf:a1:2d:07:98:7c:1d:7b:13:6b:41:e7:fa:32:f5:a1:d5:
db:19:cb:fc:72:ad:b1:bc:f5:4e:f5:56:4d:1f:00:5a:ac:87:
17:15:10:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiYkynj5x4GgV2esIX+/DGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOWQzNjNiMjhmMWM5MDg0ZTFjMTk4Njg3NmJiNDA5Yjc5
YTEzOGMwHhcNMjUwODExMTAwMDM4WhcNMjUwODEyMTAwMDM4WjAzMTEwLwYDVQQD
EyhkODdhMWFlZjlmZjdmMzJmODczZDExOWZhZTVkMzRhYTMzY2VjMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78Pc1QRHBIvH/i1NezFW5ENsqwLp
ymfQusFDck4AYDsEJSDVExEmAdzJClf/iTN6Gx39fR73IjgMkE6KOYHshJil4iEK
qPK8BegSdlygCI+OaIwrIKxBUCqSo+ttfdMkNMEB0hVLA08tlNxLRKlgzOmDt+Bz
hpY8mRpiwy6fvjB+kdjKgYT4QKAkY5IW7n4Nzg/pj66WhQklWN1dUCnPS+5Asz9h
fCBYLJ8PXvYrxh4vAX0nRyn+UmENDTBtG+E1fca5QPa39FUhaMW2FY6qamXeJ7+6
t5+Wg9CQxQThQ3JgakdtKReTfEU2AZqi5x1+3DKbpcB6i+ve/zhQbs40yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh6Gu+f9/Mvhz0Rn65dNKozzsOcMB8GA1UdIwQY
MBaAFIOdNjso8ckIThwZhodrtAm3mhOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzUwMk95anh5UWhPSEJtR2gydTBDYmVhRTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hOWU4YTYtMWNmMi00Yzg3LWI0OWEt
NTIyODgyM2ZiOTdiLzEvZzUwMk95anh5UWhPSEJtR2gydTBDYmVhRTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hOWU4YTYtMWNmMi00Yzg3LWI0OWEtNTIyODgyM2ZiOTdi
LzEvZzUwMk95anh5UWhPSEJtR2gydTBDYmVhRTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLoI0poK
wCsIW9ldDx97d60iRAikMjD8JodnXjZnRAv3x6tMC2GYJB97TGEO6SC8GCFaXL5n
RT2yWJDV+/nmDdQLaCPhSbfP4RwmlC2Y4gCRpaV0eA61nvJN4t6BO29akUiEIAsp
R69hC/jGfIJAr18BD3dPIeGtqBjx+r+VsVONKL3S0yKKDvHAooljpfiKgEuHMnsv
mT9gWm2d/rTEwDgyvxm5RM/o3oCvawdLjYnK5NgHk8V0H5Obs5p+OkBx8Apl5fHp
hsv+8eEsnWkmuelZCU90ZX793L+hLQeYfB17E2tB5/oy9aHV2xnL/HKtsbz1TvVW
TR8AWqyHFxUQrg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 12:52:34 2025 by rpki-client