Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json)
Hash identifier: tB9hXbjrUY7dm0sS4JjMLZao+W13YRAT/ksbekS44GE=
Subject key identifier: D3:62:F6:67:4C:26:75:B8:68:C1:6C:94:3F:F6:A7:1D:48:DE:78:9B
Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Certificate serial: 01987B9C73EF87C29A63947FD4FC7EC15681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
Manifest number: 15AA
Signing time: Tue 05 Aug 2025 19:01:47 +0000
Manifest this update: Tue 05 Aug 2025 19:01:47 +0000
Manifest next update: Wed 06 Aug 2025 19:01:47 +0000
Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: 7nDBJXafGvMFS2xFlvX/GUdprZY9R8hSES0tnUK5axk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:73:ef:87:c2:9a:63:94:7f:d4:fc:7e:c1:56:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Validity
Not Before: Aug 5 19:01:47 2025 GMT
Not After : Aug 6 19:01:47 2025 GMT
Subject: CN=d362f6674c2675b868c16c943ff6a71d48de789b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:97:a9:26:37:65:08:7e:ce:68:c5:45:77:
09:98:1a:c3:e7:fd:81:42:94:cb:a8:92:8d:34:45:
14:b6:bf:03:1b:f3:fd:f8:ab:cc:d4:4d:04:f6:11:
2a:a9:12:e3:16:60:ed:39:90:ea:89:79:db:bd:78:
61:5b:53:95:d9:73:85:4d:f1:fb:09:8c:97:de:96:
6a:9d:5f:98:95:6f:3a:0f:7c:46:51:de:47:0d:29:
f6:d7:49:5d:5c:ec:08:2a:44:28:e4:f6:dc:a0:99:
b5:d9:ca:ea:33:7a:95:9c:45:dd:fe:3c:35:8c:47:
4e:3b:fc:6c:b6:ab:08:56:35:0c:e8:d0:cb:8d:e0:
5e:1f:ca:a8:d4:89:21:61:25:9d:ec:f5:e0:58:cd:
ef:47:b0:08:9c:3e:6a:98:6f:fd:48:09:ae:9b:68:
87:24:a8:0f:78:dd:e9:8d:5a:9d:5d:39:b8:83:ac:
0b:9f:bf:36:50:fb:16:77:c4:42:6a:8a:65:c3:3b:
c5:a3:8c:34:de:75:7d:4e:bd:60:27:6d:14:da:13:
60:96:91:97:38:4e:63:79:e0:bf:cb:f5:28:7b:da:
62:34:78:2a:43:d8:88:e2:e0:4c:43:15:8f:ea:16:
95:a3:93:cc:16:43:26:50:75:4a:62:22:2c:1a:6b:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:62:F6:67:4C:26:75:B8:68:C1:6C:94:3F:F6:A7:1D:48:DE:78:9B
X509v3 Authority Key Identifier:
keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c5:95:a8:5c:a4:0c:c1:91:30:c5:9b:b2:1a:f2:45:c7:75:
fc:f3:8c:be:f1:3a:5e:aa:97:4a:62:b4:4b:b5:04:a3:3f:86:
5d:41:63:03:01:32:26:f5:5b:58:5e:09:ab:60:96:82:88:ba:
32:1f:3b:f7:01:1d:34:3e:a0:9c:b7:b8:ee:b4:88:f1:a9:ca:
46:9e:54:e0:ef:5c:2b:d1:4b:b6:60:14:14:8a:86:48:a8:fd:
c0:2b:8c:b9:cf:91:f0:0d:17:eb:d9:b8:22:21:d2:a8:b9:f7:
ef:eb:bc:aa:65:44:49:d3:4b:d4:9a:72:26:52:cf:09:f6:39:
10:dd:7c:f3:0d:40:58:9a:d7:df:b0:4d:a7:be:f8:fd:07:7d:
80:90:67:38:e6:a8:31:0d:d1:f1:54:d5:06:df:39:17:30:cb:
e0:15:59:dd:f3:19:a5:6c:34:16:66:d6:50:97:41:b6:e7:b2:
e7:21:d0:98:31:85:99:71:7c:8a:5f:79:b6:90:c8:1d:df:fd:
f7:ed:c8:b4:96:d1:de:a9:3c:2f:74:95:a9:ba:3c:41:b9:6e:
07:57:68:80:5e:ec:cf:85:db:d1:74:57:c8:aa:ed:9c:fd:31:
41:89:33:34:7e:af:a4:d9:30:92:76:d8:0b:d8:53:41:aa:b7:
d5:59:d2:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nHPvh8KaY5R/1Px+wVaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMjYxZGVlNmQ1NGRkNTM2ZWY3MDBmMmQ5ZDgxOTdjODYw
OTM5NjYwHhcNMjUwODA1MTkwMTQ3WhcNMjUwODA2MTkwMTQ3WjAzMTEwLwYDVQQD
EyhkMzYyZjY2NzRjMjY3NWI4NjhjMTZjOTQzZmY2YTcxZDQ4ZGU3ODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi62XqSY3ZQh+zmjFRXcJmBrD5/2B
QpTLqJKNNEUUtr8DG/P9+KvM1E0E9hEqqRLjFmDtOZDqiXnbvXhhW1OV2XOFTfH7
CYyX3pZqnV+YlW86D3xGUd5HDSn210ldXOwIKkQo5PbcoJm12crqM3qVnEXd/jw1
jEdOO/xstqsIVjUM6NDLjeBeH8qo1IkhYSWd7PXgWM3vR7AInD5qmG/9SAmum2iH
JKgPeN3pjVqdXTm4g6wLn782UPsWd8RCaoplwzvFo4w03nV9Tr1gJ20U2hNglpGX
OE5jeeC/y/Uoe9piNHgqQ9iI4uBMQxWP6haVo5PMFkMmUHVKYiIsGmv/qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNi9mdMJnW4aMFslD/2px1I3nibMB8GA1UdIwQY
MBaAFNImHe5tVN1TbvcA8tnYGXyGCTlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYWNlYzMtNDkxYi00NDBiLThiNDgt
NmYwZjQ2ZjRkNGI0LzEvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iYWNlYzMtNDkxYi00NDBiLThiNDgtNmYwZjQ2ZjRkNGI0
LzEvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8WVqFyk
DMGRMMWbshryRcd1/POMvvE6XqqXSmK0S7UEoz+GXUFjAwEyJvVbWF4Jq2CWgoi6
Mh879wEdND6gnLe47rSI8anKRp5U4O9cK9FLtmAUFIqGSKj9wCuMuc+R8A0X69m4
IiHSqLn37+u8qmVESdNL1JpyJlLPCfY5EN188w1AWJrX37BNp774/Qd9gJBnOOao
MQ3R8VTVBt85FzDL4BVZ3fMZpWw0FmbWUJdBtuey5yHQmDGFmXF8il95tpDIHd/9
9+3ItJbR3qk8L3SVqbo8QbluB1dogF7sz4Xb0XRXyKrtnP0xQYkzNH6vpNkwknbY
C9hTQaq31VnSXg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:45 2025 by rpki-client