Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier: f+a1jISEkLNMgm9JneYk3g+LchM9OschXXFjoNY6zuw=
Subject key identifier: 1D:09:D2:3E:D2:56:F0:4B:2D:A1:4C:C9:8C:7F:3F:B9:6B:B1:7B:41
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial: 01988BEAB47075B97B313E3C3BAF0180565F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 23:01:11 +0000
Manifest this update: Fri 08 Aug 2025 23:01:11 +0000
Manifest next update: Sat 09 Aug 2025 23:01:11 +0000
Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: 0IZRcGXK5tGnn7iS7qie7maE01n40XnsdKsds4Y3reo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:b4:70:75:b9:7b:31:3e:3c:3b:af:01:80:56:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
Validity
Not Before: Aug 8 23:01:11 2025 GMT
Not After : Aug 9 23:01:11 2025 GMT
Subject: CN=1d09d23ed256f04b2da14cc98c7f3fb96bb17b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:c3:ce:74:7d:2a:f4:f0:87:34:d7:1b:8d:
41:5b:fb:a9:47:13:de:bd:05:bd:2e:78:66:d4:c7:
22:1a:b6:d5:e0:e3:7d:3d:a4:26:f0:16:ce:db:32:
6e:c5:b7:aa:51:f9:73:4b:73:f4:9e:6e:00:0e:5b:
a0:bd:48:e1:92:b1:ea:07:b3:f5:85:d8:81:2c:35:
2d:62:d0:ce:f7:12:5d:f0:41:73:64:6f:d1:b6:d6:
3c:ca:63:e7:68:21:7b:f2:e4:fb:c2:00:9e:41:2f:
87:d8:e3:31:09:e4:d7:c6:d2:ff:0c:04:8b:1b:73:
85:37:b7:f6:f0:c5:3c:3b:19:98:60:2d:f1:c1:d1:
3b:d9:4a:aa:c0:b8:4b:4c:12:16:32:90:e6:f5:40:
94:43:4e:5c:d1:56:38:f0:72:66:12:c8:5b:1a:90:
c3:b9:84:4d:de:86:27:13:c3:11:39:82:e9:06:c4:
06:e7:91:5c:9c:22:b2:08:b7:a3:f8:37:df:3f:5d:
22:80:22:80:93:84:01:65:e5:b9:5b:2c:83:90:34:
df:f9:20:62:94:79:96:0e:f4:8c:4b:09:08:26:3c:
5e:d8:54:c3:f3:de:7b:9a:3d:87:9f:b2:50:62:61:
66:81:b9:f5:bf:af:68:bf:b4:bc:42:7a:5c:64:79:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:09:D2:3E:D2:56:F0:4B:2D:A1:4C:C9:8C:7F:3F:B9:6B:B1:7B:41
X509v3 Authority Key Identifier:
keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:93:2e:76:7f:d8:f7:d3:d3:f7:a3:43:bd:cb:4e:77:21:1e:
b1:d6:4c:c8:f7:d3:de:5c:55:45:d9:3c:a2:14:e4:19:3d:d8:
cd:e9:7c:63:1f:2c:f7:e0:83:58:93:28:3f:77:4a:a4:7a:f6:
c6:59:7f:df:d6:92:89:6d:37:93:7a:69:a5:dc:24:09:dc:2e:
fb:4b:c7:c5:72:1f:c3:33:e5:0e:28:d8:57:be:a1:da:1d:43:
d9:78:c7:f8:b4:0e:00:23:27:8a:dc:c2:ca:80:df:d3:f9:4b:
5a:73:58:42:71:c5:3d:0f:62:3b:ad:59:d9:9a:e0:90:b2:86:
ca:60:17:95:f3:d7:1c:af:b4:c3:81:0a:e0:30:a3:bd:6a:54:
38:e8:2b:c0:d9:5b:8f:e7:ab:3b:1e:04:33:bc:d9:ad:18:15:
5b:b9:de:d2:03:10:c6:47:c0:18:d6:cb:6d:48:8f:be:3e:1e:
68:fe:42:d2:f7:e8:99:f2:52:90:7b:d4:03:07:32:f5:2c:6b:
9b:74:6e:ac:33:29:fe:08:69:fa:7c:7e:6e:7a:c3:de:9a:cb:
a4:27:3b:f3:f4:c2:2f:09:07:eb:4b:73:64:06:19:14:80:21:
f2:5c:01:ed:50:86:82:59:95:2f:ef:ef:d0:6b:5f:84:3f:65:
d6:78:d7:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6rRwdbl7MT48O68BgFZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NzlmNTM3YjA5ZWJlYWRkZjk4Nzg3NDlkMWY4ODc1M2M1
NDBjNzUwHhcNMjUwODA4MjMwMTExWhcNMjUwODA5MjMwMTExWjAzMTEwLwYDVQQD
EygxZDA5ZDIzZWQyNTZmMDRiMmRhMTRjYzk4YzdmM2ZiOTZiYjE3YjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvPDznR9KvTwhzTXG41BW/upRxPe
vQW9Lnhm1MciGrbV4ON9PaQm8BbO2zJuxbeqUflzS3P0nm4ADlugvUjhkrHqB7P1
hdiBLDUtYtDO9xJd8EFzZG/RttY8ymPnaCF78uT7wgCeQS+H2OMxCeTXxtL/DASL
G3OFN7f28MU8OxmYYC3xwdE72UqqwLhLTBIWMpDm9UCUQ05c0VY48HJmEshbGpDD
uYRN3oYnE8MROYLpBsQG55FcnCKyCLej+DffP10igCKAk4QBZeW5WyyDkDTf+SBi
lHmWDvSMSwkIJjxe2FTD8957mj2Hn7JQYmFmgbn1v69ov7S8QnpcZHmmTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0J0j7SVvBLLaFMyYx/P7lrsXtBMB8GA1UdIwQY
MBaAFAl59Tewnr6t35h4dJ0fiHU8VAx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83ZDhhMWEtMDk1ZS00MTg2LTk1ZTAt
MDgyYjY4YjJjMDJhLzEvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS83ZDhhMWEtMDk1ZS00MTg2LTk1ZTAtMDgyYjY4YjJjMDJh
LzEvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJMudn/Y
99PT96NDvctOdyEesdZMyPfT3lxVRdk8ohTkGT3Yzel8Yx8s9+CDWJMoP3dKpHr2
xll/39aSiW03k3pppdwkCdwu+0vHxXIfwzPlDijYV76h2h1D2XjH+LQOACMnitzC
yoDf0/lLWnNYQnHFPQ9iO61Z2ZrgkLKGymAXlfPXHK+0w4EK4DCjvWpUOOgrwNlb
j+erOx4EM7zZrRgVW7ne0gMQxkfAGNbLbUiPvj4eaP5C0vfomfJSkHvUAwcy9Sxr
m3RurDMp/ghp+nx+bnrD3prLpCc78/TCLwkH60tzZAYZFIAh8lwB7VCGglmVL+/v
0GtfhD9l1njXnA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:46 2025 by rpki-client