Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier: lI7/+qjo4vGbiclAUoJucF8xOaJI4tfqtijHXqcDwMI=
Subject key identifier: 4E:4F:AB:A6:40:1D:A7:76:71:7B:7C:12:0B:4B:FB:2C:08:B5:9E:E0
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial: 019896A4D1216043A3260924AB1E9C0493D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number: 06AF
Signing time: Mon 11 Aug 2025 01:00:40 +0000
Manifest this update: Mon 11 Aug 2025 01:00:40 +0000
Manifest next update: Tue 12 Aug 2025 01:00:40 +0000
Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: C8zagoUwPxDYzhGSg40hw00QBP4THY40IHCVfR+5Eys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:d1:21:60:43:a3:26:09:24:ab:1e:9c:04:93:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Validity
Not Before: Aug 11 01:00:40 2025 GMT
Not After : Aug 12 01:00:40 2025 GMT
Subject: CN=4e4faba6401da776717b7c120b4bfb2c08b59ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:8b:a5:86:95:92:0c:6f:3e:d5:96:89:2f:
ae:d0:0a:a2:22:d4:3f:f5:26:74:74:91:57:a1:8d:
31:3d:30:2d:02:ea:6d:92:90:49:de:3f:91:e7:c0:
23:df:86:69:f8:33:60:7e:c4:0e:d1:cd:9a:9e:d5:
ba:8e:91:2d:4b:93:7d:c0:c4:85:a5:8b:96:38:67:
f1:9e:52:47:7e:fb:13:81:05:a0:fe:20:8a:0b:a6:
8c:8e:76:14:00:b2:d0:c1:97:1d:57:12:60:03:ef:
30:39:f3:c7:c8:1d:cd:43:fc:0d:b0:b8:8a:36:c5:
8f:3a:eb:d4:e6:12:42:23:3a:7b:11:1a:4a:f8:21:
9a:13:0a:7b:49:61:fe:fc:ca:40:d9:1f:9e:f6:e4:
cd:55:bc:07:31:61:df:29:18:74:3e:55:de:6a:bd:
dc:43:d0:60:7f:0e:ef:c8:45:31:32:cb:02:0f:7a:
0c:17:a3:e2:8c:3d:d0:e0:22:03:90:9f:48:5c:42:
02:f6:7c:af:04:26:ed:4f:87:ae:85:02:ad:73:2e:
fd:85:8a:c7:8f:91:75:ce:fc:56:3b:1a:48:a2:fc:
ff:28:55:b8:fb:38:25:47:4e:bf:71:d7:1a:45:2e:
95:ed:f1:c0:85:61:d9:a0:ee:2c:30:4e:00:b8:d1:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4F:AB:A6:40:1D:A7:76:71:7B:7C:12:0B:4B:FB:2C:08:B5:9E:E0
X509v3 Authority Key Identifier:
keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:71:54:6c:5a:34:d1:ea:53:06:84:a6:ac:8b:33:c4:88:
df:10:52:59:14:77:cf:d9:99:24:4d:98:ea:d9:6e:e3:19:b4:
a0:26:c8:50:d6:2b:60:7a:85:c4:7c:9f:b4:76:1a:8d:1c:09:
a9:e9:eb:30:39:25:0b:51:3f:06:d3:9e:dc:79:6a:a4:68:90:
d9:79:cb:38:06:c9:c7:a3:7c:95:5b:91:e1:f0:c8:51:fe:25:
b7:cd:32:f7:71:ef:de:d4:64:55:a0:19:99:39:7c:66:11:38:
d6:3b:ba:6b:13:36:b2:cd:d2:ef:cf:5b:eb:1d:88:44:f6:cd:
03:2e:d3:7a:5d:88:b4:81:2a:30:ce:a0:f3:92:58:5f:59:60:
f1:02:ae:a4:bd:05:10:7e:9c:ca:1b:0a:fe:9f:37:b8:b3:ee:
1c:77:a4:5a:b9:45:53:f8:56:43:52:f1:96:09:0b:6f:26:c2:
1c:06:aa:a5:d2:80:55:df:85:9a:04:e9:57:e4:f3:d1:62:77:
d5:69:40:46:a2:f0:bd:7f:9c:08:fa:c0:cf:b5:7b:a9:f0:52:
d8:dd:e3:91:56:ac:89:d0:52:a8:8b:8a:49:9e:8f:a6:12:3c:
03:85:a0:8f:fd:aa:12:7f:b0:12:9c:c7:e4:ac:12:48:c1:72:
58:00:11:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpNEhYEOjJgkkqx6cBJPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzkyZTZkZjMxYjM1NDVhMTk2ZmUwMzViY2I1YTI1MzA2
YTdmNTQwHhcNMjUwODExMDEwMDQwWhcNMjUwODEyMDEwMDQwWjAzMTEwLwYDVQQD
Eyg0ZTRmYWJhNjQwMWRhNzc2NzE3YjdjMTIwYjRiZmIyYzA4YjU5ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs+LpYaVkgxvPtWWiS+u0AqiItQ/
9SZ0dJFXoY0xPTAtAuptkpBJ3j+R58Aj34Zp+DNgfsQO0c2antW6jpEtS5N9wMSF
pYuWOGfxnlJHfvsTgQWg/iCKC6aMjnYUALLQwZcdVxJgA+8wOfPHyB3NQ/wNsLiK
NsWPOuvU5hJCIzp7ERpK+CGaEwp7SWH+/MpA2R+e9uTNVbwHMWHfKRh0PlXear3c
Q9Bgfw7vyEUxMssCD3oMF6PijD3Q4CIDkJ9IXEIC9nyvBCbtT4euhQKtcy79hYrH
j5F1zvxWOxpIovz/KFW4+zglR06/cdcaRS6V7fHAhWHZoO4sME4AuNEHTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5Pq6ZAHad2cXt8EgtL+ywItZ7gMB8GA1UdIwQY
MBaAFHvJLm3zGzVFoZb+A1vLWiUwan9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDct
NGJkYjU4ODEyMDg2LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDctNGJkYjU4ODEyMDg2
LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMehxVGxa
NNHqUwaEpqyLM8SI3xBSWRR3z9mZJE2Y6tlu4xm0oCbIUNYrYHqFxHyftHYajRwJ
qenrMDklC1E/BtOe3HlqpGiQ2XnLOAbJx6N8lVuR4fDIUf4lt80y93Hv3tRkVaAZ
mTl8ZhE41ju6axM2ss3S789b6x2IRPbNAy7Tel2ItIEqMM6g85JYX1lg8QKupL0F
EH6cyhsK/p83uLPuHHekWrlFU/hWQ1LxlgkLbybCHAaqpdKAVd+FmgTpV+Tz0WJ3
1WlARqLwvX+cCPrAz7V7qfBS2N3jkVasidBSqIuKSZ6PphI8A4Wgj/2qEn+wEpzH
5KwSSMFyWAARfg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:55 2025 by rpki-client