Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File: a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier: hMqqjHoFEy+cIVCBcbEuONpT7yhvemdhaWDVFFuzvnw=
Subject key identifier: B8:7F:17:00:15:25:D1:DA:B8:66:E6:E9:DA:6B:AD:DD:53:A9:8E:BE
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer: /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial: 01988EED4893014E5DD64772F14CA13BFA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 13:02:51 +0000
Manifest this update: Sat 09 Aug 2025 13:02:51 +0000
Manifest next update: Sun 10 Aug 2025 13:02:51 +0000
Files and hashes: 1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: opajv2eAJg3MphJTottLKMsq9ackgp8GiWQ/DV6uB20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:48:93:01:4e:5d:d6:47:72:f1:4c:a1:3b:fa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Validity
Not Before: Aug 9 13:02:51 2025 GMT
Not After : Aug 10 13:02:51 2025 GMT
Subject: CN=b87f17001525d1dab866e6e9da6baddd53a98ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:b7:a0:28:a1:31:a3:7b:49:b2:88:bd:49:
56:43:d0:d1:0a:dc:65:7b:94:3e:be:b7:78:bc:a3:
11:f1:f5:0c:ee:43:40:43:da:f7:f2:b6:c1:83:b4:
7e:de:44:46:ca:eb:9b:75:9b:93:11:01:1a:a2:b9:
5a:60:49:26:dc:f2:65:d1:76:0a:a7:06:2e:14:54:
fc:5d:7f:3b:f8:cc:43:7c:a9:b5:0d:90:6a:d7:8b:
fc:af:e2:bd:cd:ae:7e:19:f0:eb:5d:42:cf:b2:8a:
8e:60:35:67:01:f4:3b:b5:8b:d6:b1:74:a9:91:dc:
a1:47:14:30:8c:d6:61:c6:d6:0e:fc:c7:6c:26:65:
db:a2:c9:fb:a1:38:c9:50:63:1f:0a:bc:ce:8b:38:
3e:f8:bd:0e:5a:36:f1:62:a3:a7:93:a3:1e:b6:57:
3e:6f:8a:42:8e:39:92:6f:95:7b:50:25:10:cf:29:
8e:38:62:b3:ac:75:2d:8f:5d:32:07:26:60:ea:57:
fd:d5:7f:ed:81:89:9e:b8:c4:40:bb:fc:3a:7a:18:
fe:a2:2e:20:97:3d:dc:16:1a:0a:76:51:46:dc:f8:
3c:32:12:00:3d:48:ad:b2:d4:9d:55:04:12:60:1d:
1d:6a:f9:cd:42:2e:fb:ea:f2:d4:f6:a8:94:ff:3f:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:17:00:15:25:D1:DA:B8:66:E6:E9:DA:6B:AD:DD:53:A9:8E:BE
X509v3 Authority Key Identifier:
keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:04:99:f4:f1:11:90:1b:63:f3:4c:f8:fa:0c:53:31:28:4a:
d0:c0:43:4b:f9:a1:45:45:27:b0:22:05:6d:f7:59:9e:d5:43:
62:0c:5f:dd:27:c9:99:c6:92:36:6f:3c:f5:a9:0d:66:e7:ca:
62:00:02:b7:2c:ca:7f:93:fe:77:98:f2:21:0d:e6:a6:25:e7:
71:08:34:39:fa:8f:6a:2b:94:a5:20:ed:9b:54:f5:0e:54:6d:
c8:bd:95:95:36:e4:80:2f:99:54:9d:cf:61:2e:4b:7a:f2:d6:
5f:bc:5d:d8:3c:05:be:c8:11:ba:7d:6d:7f:29:10:34:35:93:
da:cd:36:e5:a5:21:fa:36:42:65:ac:b3:f8:3d:e3:d4:cd:ce:
c2:3b:61:a4:f7:e4:44:54:17:8c:e4:c6:9f:6b:f2:24:1b:e4:
bd:e8:79:b8:59:eb:33:37:be:a9:a2:b7:1e:01:39:59:62:e6:
ff:8f:c2:da:8e:99:0d:c9:42:19:2c:49:c0:8f:b6:f9:ef:6c:
dd:a1:73:78:06:ef:a2:44:6c:32:5a:ab:d8:0c:01:5e:ab:6a:
0f:5f:ff:20:83:5b:c8:41:9b:6a:6a:85:9e:ac:d2:72:d1:00:
23:0b:41:cd:b7:57:7a:75:b1:45:4d:a2:05:d3:01:d1:96:19:
87:7c:ff:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7UiTAU5d1kdy8UyhO/oeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjBjYjJhZTQ2ZDIzODI1ODFmZThiNzQ3ZTMzMWI0Njgy
NGY0MWUwHhcNMjUwODA5MTMwMjUxWhcNMjUwODEwMTMwMjUxWjAzMTEwLwYDVQQD
EyhiODdmMTcwMDE1MjVkMWRhYjg2NmU2ZTlkYTZiYWRkZDUzYTk4ZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Eq3oCihMaN7SbKIvUlWQ9DRCtxl
e5Q+vrd4vKMR8fUM7kNAQ9r38rbBg7R+3kRGyuubdZuTEQEaorlaYEkm3PJl0XYK
pwYuFFT8XX87+MxDfKm1DZBq14v8r+K9za5+GfDrXULPsoqOYDVnAfQ7tYvWsXSp
kdyhRxQwjNZhxtYO/MdsJmXbosn7oTjJUGMfCrzOizg++L0OWjbxYqOnk6Metlc+
b4pCjjmSb5V7UCUQzymOOGKzrHUtj10yByZg6lf91X/tgYmeuMRAu/w6ehj+oi4g
lz3cFhoKdlFG3Pg8MhIAPUitstSdVQQSYB0davnNQi776vLU9qiU/z/QPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLh/FwAVJdHauGbm6dprrd1TqY6+MB8GA1UdIwQY
MBaAFGuwyyrkbSOCWB/ot0fjMbRoJPQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdETEt1UnRJNEpZSC1pM1ItTXh0R2drOUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZjZjNWYtZWFmOS00NmNlLTllMTYt
ZjI5MGM1NjNmZjUwLzEvYTdETEt1UnRJNEpZSC1pM1ItTXh0R2drOUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZjZjNWYtZWFmOS00NmNlLTllMTYtZjI5MGM1NjNmZjUw
LzEvYTdETEt1UnRJNEpZSC1pM1ItTXh0R2drOUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQSZ9PER
kBtj80z4+gxTMShK0MBDS/mhRUUnsCIFbfdZntVDYgxf3SfJmcaSNm889akNZufK
YgACtyzKf5P+d5jyIQ3mpiXncQg0OfqPaiuUpSDtm1T1DlRtyL2VlTbkgC+ZVJ3P
YS5LevLWX7xd2DwFvsgRun1tfykQNDWT2s025aUh+jZCZayz+D3j1M3OwjthpPfk
RFQXjOTGn2vyJBvkveh5uFnrMze+qaK3HgE5WWLm/4/C2o6ZDclCGSxJwI+2+e9s
3aFzeAbvokRsMlqr2AwBXqtqD1//IINbyEGbamqFnqzSctEAIwtBzbdXenWxRU2i
BdMB0ZYZh3z/MA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:36 2025 by rpki-client