Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: s0bnJ5MSkmwZyTr9OO1bQXKF1IHrNUdBmYokrRLhJrw=
Subject key identifier: 57:18:3E:D7:B1:4B:44:B4:F1:6A:E2:E9:A5:F6:22:C0:CA:8E:F8:1A
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 019872CFD5863EC6C73270CE2545C92A60A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 0F92
Signing time: Mon 04 Aug 2025 02:01:19 +0000
Manifest this update: Mon 04 Aug 2025 02:01:19 +0000
Manifest next update: Tue 05 Aug 2025 02:01:19 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: tqEdNESR/vWRXRXrI1STjnUaonp3kPCXhDZAYorWueY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d5:86:3e:c6:c7:32:70:ce:25:45:c9:2a:60:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Aug 4 02:01:19 2025 GMT
Not After : Aug 5 02:01:19 2025 GMT
Subject: CN=57183ed7b14b44b4f16ae2e9a5f622c0ca8ef81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:4a:6d:d2:13:80:8b:06:5c:99:73:14:17:
c5:5e:84:b3:74:fa:14:0c:87:da:75:be:8d:28:a6:
a5:f7:ca:7a:7b:de:de:08:20:77:2f:e3:d0:ab:9d:
d4:08:85:b3:7a:1b:93:da:e9:e6:d5:8f:f6:9c:0d:
ef:bb:e0:eb:3f:f7:fc:8b:61:a4:41:10:22:31:c7:
32:f9:10:ea:1d:36:13:85:49:ee:03:0a:a5:2c:6f:
63:8b:3d:b3:66:63:40:b0:c7:9b:c6:4d:ef:26:60:
e1:9d:cb:df:77:99:50:39:46:47:e6:8a:b4:0c:94:
29:c1:fc:e8:09:6b:9d:71:9f:4d:1c:6c:a7:3a:69:
55:75:c1:0a:0d:84:c3:54:1f:c6:51:39:0e:61:43:
80:fc:04:fc:2c:79:60:62:9b:5c:b3:c4:1f:07:90:
bc:13:67:e7:6c:8d:c3:b3:08:73:3f:37:eb:6b:f0:
0a:5d:7c:37:ec:0a:1b:58:09:f1:9e:0f:e3:16:5f:
16:3a:aa:89:16:a7:7e:6b:4d:27:f4:c1:59:0c:2b:
4a:5d:22:02:97:cc:77:7e:b4:da:52:28:2d:82:67:
c3:64:9e:72:a6:dd:c3:99:0b:36:06:d3:27:b9:cb:
f0:94:d1:40:25:69:2e:b2:4a:58:67:72:39:c3:c3:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:18:3E:D7:B1:4B:44:B4:F1:6A:E2:E9:A5:F6:22:C0:CA:8E:F8:1A
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:81:1d:30:02:61:7c:e6:8b:82:b3:f2:64:c4:53:03:d5:68:
a4:33:34:2b:f8:c2:ff:db:3b:1c:92:a9:71:1c:6d:16:d7:aa:
6c:35:49:1a:6d:23:13:6a:53:a3:cd:06:10:6b:9f:a6:da:f4:
c4:78:16:1a:a3:6f:56:1c:7c:0c:2d:9a:44:bd:3e:99:99:04:
dc:47:26:35:65:ee:c3:bf:57:f8:36:75:c0:8d:26:0c:98:d6:
d7:f6:e0:59:f0:1b:1f:02:2a:13:93:ad:4a:8c:89:fc:30:a7:
c7:83:f0:65:86:7d:9e:05:c1:b5:7d:9f:d2:17:5c:c8:67:7c:
11:57:06:c4:e9:da:d2:e7:12:d8:2d:81:4a:46:e0:d8:be:50:
18:dd:00:89:bd:bf:68:d9:4a:bb:7d:cf:31:91:a0:99:98:0d:
2a:2b:d9:19:19:6c:cc:47:06:05:be:57:e3:50:9f:f9:f3:e7:
38:49:4b:de:f1:01:b7:a3:da:66:8f:27:4c:90:9a:fb:5f:c3:
b3:8e:0d:03:97:11:21:fd:cb:f6:2a:75:6a:28:16:ed:fa:93:
03:5d:55:e9:e0:02:3d:c2:82:d4:14:84:be:67:17:6c:22:b9:
cb:9a:e5:9a:e9:34:5a:2d:e0:9e:ec:d2:b4:4d:ab:90:54:75:
4b:a0:2e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz9WGPsbHMnDOJUXJKmCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYzE2ZWVjYTZhZmVhODQ0Y2E0Njg4MjU4Y2UzMzAwZDJh
MzkzZmUwHhcNMjUwODA0MDIwMTE5WhcNMjUwODA1MDIwMTE5WjAzMTEwLwYDVQQD
Eyg1NzE4M2VkN2IxNGI0NGI0ZjE2YWUyZTlhNWY2MjJjMGNhOGVmODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rpKbdITgIsGXJlzFBfFXoSzdPoU
DIfadb6NKKal98p6e97eCCB3L+PQq53UCIWzehuT2unm1Y/2nA3vu+DrP/f8i2Gk
QRAiMccy+RDqHTYThUnuAwqlLG9jiz2zZmNAsMebxk3vJmDhncvfd5lQOUZH5oq0
DJQpwfzoCWudcZ9NHGynOmlVdcEKDYTDVB/GUTkOYUOA/AT8LHlgYptcs8QfB5C8
E2fnbI3DswhzPzfra/AKXXw37AobWAnxng/jFl8WOqqJFqd+a00n9MFZDCtKXSIC
l8x3frTaUigtgmfDZJ5ypt3DmQs2BtMnucvwlNFAJWkuskpYZ3I5w8N1IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcYPtexS0S08Wri6aX2IsDKjvgaMB8GA1UdIwQY
MBaAFEPBbuymr+qETKRogljOMwDSo5P+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MjlhMzItYTQwZi00NTcwLWE3ODUt
YjM5NzdmNjQ0N2IzLzEvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85MjlhMzItYTQwZi00NTcwLWE3ODUtYjM5NzdmNjQ0N2Iz
LzEvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYEdMAJh
fOaLgrPyZMRTA9VopDM0K/jC/9s7HJKpcRxtFteqbDVJGm0jE2pTo80GEGufptr0
xHgWGqNvVhx8DC2aRL0+mZkE3EcmNWXuw79X+DZ1wI0mDJjW1/bgWfAbHwIqE5Ot
SoyJ/DCnx4PwZYZ9ngXBtX2f0hdcyGd8EVcGxOna0ucS2C2BSkbg2L5QGN0Aib2/
aNlKu33PMZGgmZgNKivZGRlszEcGBb5X41Cf+fPnOElL3vEBt6PaZo8nTJCa+1/D
s44NA5cRIf3L9ip1aigW7fqTA11V6eACPcKC1BSEvmcXbCK5y5rlmuk0Wi3gnuzS
tE2rkFR1S6Auzw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:11 2025 by rpki-client