Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier: YqDJ9MwXw1lm871augX6QBfST05YdhZ3PLv2hZplSe8=
Subject key identifier: 02:91:D5:B0:78:36:DE:1D:A7:E1:F7:B9:53:50:6A:1B:98:CB:EF:04
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer: /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial: 0198733DC306108BB0E220D62D67AD0D7D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number: 0A0D
Signing time: Mon 04 Aug 2025 04:01:24 +0000
Manifest this update: Mon 04 Aug 2025 04:01:24 +0000
Manifest next update: Tue 05 Aug 2025 04:01:24 +0000
Files and hashes: 1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: qKeTzEU8QWPG0tOLKEB6nrev9+/rvOK4NaDmwhgd3SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c3:06:10:8b:b0:e2:20:d6:2d:67:ad:0d:7d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Validity
Not Before: Aug 4 04:01:24 2025 GMT
Not After : Aug 5 04:01:24 2025 GMT
Subject: CN=0291d5b07836de1da7e1f7b953506a1b98cbef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:cf:c1:52:13:5b:07:5f:9b:a0:c8:ec:b1:
a3:74:3b:3e:97:04:16:9b:f8:5f:c1:d3:15:43:b6:
1c:13:22:15:4f:bc:a5:3c:47:ca:8c:50:70:3c:2a:
ea:30:d1:b2:2b:4e:fe:dc:e1:b4:30:86:a3:ce:48:
be:a4:fd:c3:6b:05:9b:08:79:95:14:03:19:ba:b0:
c3:41:1a:1c:2b:4a:47:bb:c3:55:97:f6:18:ea:5b:
4c:21:73:b4:fd:17:90:28:91:2a:7c:83:19:91:eb:
ee:db:36:e2:bc:54:b2:c9:43:62:0f:71:e0:ee:d7:
59:5e:22:17:7f:2e:de:fa:a4:0d:75:2b:77:d0:86:
32:80:e8:e0:5f:0d:fb:fe:a8:2b:ca:cc:78:15:9f:
ae:5d:91:69:00:63:bc:7e:48:8d:e8:b4:41:73:54:
3d:ec:15:ea:06:70:38:dd:a8:0c:9c:7f:e8:7a:a5:
f4:92:46:0c:94:6a:69:7b:d6:09:85:1f:92:f7:12:
c0:3e:85:06:23:82:f4:78:bd:20:ba:73:82:8d:1c:
02:6c:7c:cc:45:37:e4:d5:a2:f6:a0:3e:c3:72:29:
f3:45:ee:45:94:34:2d:74:92:f9:3d:be:39:cd:e1:
c0:94:f0:7d:ba:85:57:07:0f:0f:1d:40:0e:55:b5:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:91:D5:B0:78:36:DE:1D:A7:E1:F7:B9:53:50:6A:1B:98:CB:EF:04
X509v3 Authority Key Identifier:
keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a5:c4:01:b3:dc:da:dd:1f:77:d6:49:04:6e:a1:f8:7a:b4:
4c:13:dd:a6:9e:d4:6a:84:94:a0:3d:92:dd:ad:06:62:0f:c9:
e0:e6:36:0f:78:2a:e0:26:b8:08:0e:40:31:c5:86:93:4c:46:
82:46:73:09:da:4d:d1:ff:e6:f4:15:bc:1e:8b:1b:58:58:ce:
1a:26:e3:e4:19:f4:c6:92:69:e4:59:db:9f:f6:58:ee:f2:b8:
b3:5a:3b:66:58:73:ba:a0:b6:85:a4:80:4d:ac:24:60:5a:d0:
64:89:a9:b7:89:92:a1:ff:79:39:27:0a:09:20:4a:a1:75:24:
f8:26:c4:70:d3:76:8a:55:43:e2:16:a3:0a:c2:c1:17:72:ff:
6c:fe:bd:2c:e3:d4:aa:a5:b9:0f:21:c0:6d:01:e7:7c:4d:0b:
66:1b:9e:05:33:10:6e:f4:b0:cb:1d:bd:36:62:5b:c5:aa:da:
6a:c3:70:61:03:0d:84:85:f8:14:20:15:c9:19:67:77:72:ac:
de:97:ec:a0:24:27:ee:7a:f0:e1:cc:fc:26:f3:6d:2b:5d:7d:
cb:5e:65:53:51:c4:06:87:ea:f0:ce:f4:23:0b:97:eb:2c:c3:
da:45:f2:67:7e:2a:fb:cc:c6:ea:b1:a3:33:12:bc:35:1f:a3:
93:d2:b8:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPcMGEIuw4iDWLWetDX0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMWUzZmNhNmYxMzYyOGU2ZWI4M2NmZmU1ZWQ4YTAxZWRk
NTllOGIwHhcNMjUwODA0MDQwMTI0WhcNMjUwODA1MDQwMTI0WjAzMTEwLwYDVQQD
EygwMjkxZDViMDc4MzZkZTFkYTdlMWY3Yjk1MzUwNmExYjk4Y2JlZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOTPwVITWwdfm6DI7LGjdDs+lwQW
m/hfwdMVQ7YcEyIVT7ylPEfKjFBwPCrqMNGyK07+3OG0MIajzki+pP3DawWbCHmV
FAMZurDDQRocK0pHu8NVl/YY6ltMIXO0/ReQKJEqfIMZkevu2zbivFSyyUNiD3Hg
7tdZXiIXfy7e+qQNdSt30IYygOjgXw37/qgrysx4FZ+uXZFpAGO8fkiN6LRBc1Q9
7BXqBnA43agMnH/oeqX0kkYMlGppe9YJhR+S9xLAPoUGI4L0eL0gunOCjRwCbHzM
RTfk1aL2oD7DcinzRe5FlDQtdJL5Pb45zeHAlPB9uoVXBw8PHUAOVbU2GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKR1bB4Nt4dp+H3uVNQahuYy+8EMB8GA1UdIwQY
MBaAFDAeP8pvE2KObrg8/+XtigHt1Z6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYt
ZDBkN2YyYjJhNWUwLzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYtZDBkN2YyYjJhNWUw
LzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqXEAbPc
2t0fd9ZJBG6h+Hq0TBPdpp7UaoSUoD2S3a0GYg/J4OY2D3gq4Ca4CA5AMcWGk0xG
gkZzCdpN0f/m9BW8HosbWFjOGibj5Bn0xpJp5Fnbn/ZY7vK4s1o7ZlhzuqC2haSA
TawkYFrQZImpt4mSof95OScKCSBKoXUk+CbEcNN2ilVD4hajCsLBF3L/bP69LOPU
qqW5DyHAbQHnfE0LZhueBTMQbvSwyx29NmJbxaraasNwYQMNhIX4FCAVyRlnd3Ks
3pfsoCQn7nrw4cz8JvNtK119y15lU1HEBofq8M70IwuX6yzD2kXyZ34q+8zG6rGj
MxK8NR+jk9K4rA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:01 2025 by rpki-client