Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
File: RrLFRAI1IgBtccF5VhxL0wW6030.mft (raw, json)
Hash identifier: /f4HjQcLmJH+hnfg4V1LxAjbsu54ZsIdqoeHpSm/giM=
Subject key identifier: D1:FE:A4:4F:2E:86:46:1A:F6:FB:18:30:D2:66:11:2E:2D:EE:D2:41
Authority key identifier: 46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
Certificate issuer: /CN=46b2c544023522006d71c179561c4bd305bad37d
Certificate serial: 01989034B5F620471973256F30F93A846485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
Manifest number: 07A8
Signing time: Sat 09 Aug 2025 19:00:30 +0000
Manifest this update: Sat 09 Aug 2025 19:00:30 +0000
Manifest next update: Sun 10 Aug 2025 19:00:30 +0000
Files and hashes: 1: RrLFRAI1IgBtccF5VhxL0wW6030.crl (hash: xG7hB3oa5ASg6mOhnIiAMyNkje1V2BgPgw6GfALosIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:b5:f6:20:47:19:73:25:6f:30:f9:3a:84:64:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46b2c544023522006d71c179561c4bd305bad37d
Validity
Not Before: Aug 9 19:00:30 2025 GMT
Not After : Aug 10 19:00:30 2025 GMT
Subject: CN=d1fea44f2e86461af6fb1830d266112e2deed241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:c7:fe:5c:8a:f0:a5:48:b8:a7:46:ad:da:
0c:3a:3b:d0:31:57:6b:e6:43:87:82:17:2d:1d:e0:
a1:04:0f:0b:53:19:71:0d:0c:6f:c5:ca:ae:ae:27:
f5:4c:ec:2a:c5:c4:b0:b6:56:da:da:d0:80:6f:d1:
71:db:2a:56:a4:9a:68:99:0a:7b:e6:5b:f7:32:66:
0b:f9:26:92:ab:08:f0:f8:3d:bc:b3:aa:e3:62:aa:
84:28:42:5c:f6:c7:27:04:90:e1:c6:2c:6e:6a:df:
ae:53:63:e2:2e:8d:90:a6:53:f0:54:81:c5:05:6c:
1c:8a:39:6a:27:08:f9:16:8c:58:cf:ed:7f:82:1e:
53:84:1e:73:cf:4f:ff:64:87:4f:b4:a2:ab:7b:f2:
31:46:27:33:f1:07:43:d4:55:a5:00:83:35:28:8e:
ee:46:fa:b7:ee:98:49:6a:03:f7:3c:38:bf:0d:e6:
2b:6f:9f:45:dc:b1:51:df:74:16:d6:1e:8c:1a:93:
77:f2:1e:37:65:a9:0b:a7:2b:18:8b:23:e6:1d:0a:
46:d2:9d:0d:e1:70:15:44:9d:02:99:17:27:8e:1b:
86:76:c4:98:01:cb:4b:60:8b:24:83:70:b8:86:30:
0f:35:c1:a2:3c:d1:4e:fc:7e:db:c6:00:66:70:8f:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FE:A4:4F:2E:86:46:1A:F6:FB:18:30:D2:66:11:2E:2D:EE:D2:41
X509v3 Authority Key Identifier:
keyid:46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c6:dc:31:45:7f:c6:25:2c:ab:a5:0f:79:ef:5a:1c:37:82:
59:47:dd:c4:fc:20:5d:65:09:d6:a7:a1:e6:76:23:3c:7b:08:
c5:40:ff:c9:d0:96:a0:73:41:52:ca:ee:95:c2:8e:98:4d:72:
d0:fc:75:f5:68:00:e7:ab:b6:d9:af:a6:3b:0a:b7:64:07:72:
49:f7:89:dd:0d:cd:06:3c:da:87:67:d7:a5:d1:bf:7a:9c:ba:
16:fe:c6:64:2f:df:d4:76:db:fc:53:f5:54:3c:b9:72:5c:29:
89:06:b4:44:79:58:10:ab:15:2b:d3:8f:06:7d:90:af:59:cb:
a6:b4:da:1e:6b:9d:3c:3f:05:b3:be:1f:3b:f8:12:49:97:af:
2d:a4:f8:12:43:4e:7d:8b:e3:c9:ad:3d:7f:c7:94:66:c4:0d:
a3:1e:b1:9c:59:92:51:b8:9e:c5:a3:38:1f:dd:bc:e0:53:ff:
d0:18:c1:93:7f:36:f5:e0:7e:31:ce:62:cc:a2:a1:f3:e5:42:
44:1a:0c:6d:12:4d:11:19:f9:6b:8f:9f:34:82:b4:c8:5e:50:
bb:2d:04:3b:30:af:be:df:c3:03:3b:16:22:57:31:a1:55:c1:
34:6b:36:0e:a7:3b:7a:aa:fe:b9:02:8e:b4:a5:25:93:ef:63:
c5:a0:ac:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNLX2IEcZcyVvMPk6hGSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YjJjNTQ0MDIzNTIyMDA2ZDcxYzE3OTU2MWM0YmQzMDVi
YWQzN2QwHhcNMjUwODA5MTkwMDMwWhcNMjUwODEwMTkwMDMwWjAzMTEwLwYDVQQD
EyhkMWZlYTQ0ZjJlODY0NjFhZjZmYjE4MzBkMjY2MTEyZTJkZWVkMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMTH/lyK8KVIuKdGrdoMOjvQMVdr
5kOHghctHeChBA8LUxlxDQxvxcqurif1TOwqxcSwtlba2tCAb9Fx2ypWpJpomQp7
5lv3MmYL+SaSqwjw+D28s6rjYqqEKEJc9scnBJDhxixuat+uU2PiLo2QplPwVIHF
BWwcijlqJwj5FoxYz+1/gh5ThB5zz0//ZIdPtKKre/IxRicz8QdD1FWlAIM1KI7u
Rvq37phJagP3PDi/DeYrb59F3LFR33QW1h6MGpN38h43ZakLpysYiyPmHQpG0p0N
4XAVRJ0CmRcnjhuGdsSYActLYIskg3C4hjAPNcGiPNFO/H7bxgBmcI+GNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH+pE8uhkYa9vsYMNJmES4t7tJBMB8GA1UdIwQY
MBaAFEayxUQCNSIAbXHBeVYcS9MFutN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNWI0YWMtNDk1My00MDBmLWI1ZDUt
ZTBhYzdhNGE0ZmVjLzEvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNWI0YWMtNDk1My00MDBmLWI1ZDUtZTBhYzdhNGE0ZmVj
LzEvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8bcMUV/
xiUsq6UPee9aHDeCWUfdxPwgXWUJ1qeh5nYjPHsIxUD/ydCWoHNBUsrulcKOmE1y
0Px19WgA56u22a+mOwq3ZAdySfeJ3Q3NBjzah2fXpdG/epy6Fv7GZC/f1Hbb/FP1
VDy5clwpiQa0RHlYEKsVK9OPBn2Qr1nLprTaHmudPD8Fs74fO/gSSZevLaT4EkNO
fYvjya09f8eUZsQNox6xnFmSUbiexaM4H9284FP/0BjBk3829eB+Mc5izKKh8+VC
RBoMbRJNERn5a4+fNIK0yF5Quy0EOzCvvt/DAzsWIlcxoVXBNGs2Dqc7eqr+uQKO
tKUlk+9jxaCsdA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:14:43 2025 by rpki-client