Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: VuKGK3/Cn7+m7rOwlToveMpemFC0yE5IN9T2RhiX1gY=
Subject key identifier: E8:92:94:D8:11:63:95:96:32:4F:5F:FF:5B:81:58:59:59:AD:4D:0A
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 01988CFDC1477868FC60B667C3763737B381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0A30
Signing time: Sat 09 Aug 2025 04:01:37 +0000
Manifest this update: Sat 09 Aug 2025 04:01:37 +0000
Manifest next update: Sun 10 Aug 2025 04:01:37 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: RKOlFrXrtVJ8YN82/R7cqWxInHsJVaDWfEWqzH0hAdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:c1:47:78:68:fc:60:b6:67:c3:76:37:37:b3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Aug 9 04:01:37 2025 GMT
Not After : Aug 10 04:01:37 2025 GMT
Subject: CN=e89294d811639596324f5fff5b81585959ad4d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:d3:a5:66:a6:33:9d:1c:5f:45:21:b5:e1:
5e:87:66:6b:e8:71:eb:85:65:0d:a8:2e:0b:7d:dc:
64:6d:09:97:d2:d4:14:c4:cf:ce:36:c2:f9:60:71:
8b:cf:c6:3d:fe:4b:5e:2b:18:4f:79:7d:18:74:84:
3b:3c:f8:81:86:03:dd:de:d9:f1:bf:1a:84:49:3d:
20:6c:b7:33:15:82:9c:8f:3e:48:47:4b:50:b8:68:
0d:7f:7d:24:3d:8e:15:16:c6:31:05:a6:a1:47:3c:
63:4f:45:52:48:50:b5:f8:b3:10:1f:1a:88:67:93:
40:48:19:da:f4:6f:be:33:dd:6c:34:76:57:1d:bd:
31:58:ca:1b:93:e5:f1:b8:35:1e:6c:db:84:e5:4b:
05:a9:71:d0:93:7c:0e:ea:c6:d7:2a:57:12:43:25:
22:53:b6:cb:e5:77:ac:cc:4d:ca:86:f9:b4:e7:dc:
fb:fb:9f:f0:92:3b:81:09:87:68:cd:42:2b:c9:ec:
ea:03:bd:45:2d:35:34:c7:54:9d:e8:e9:7a:dc:24:
79:bf:3f:e1:f1:2f:0a:dc:b7:22:fc:61:2f:fa:1a:
8b:97:e8:ec:7a:d6:7b:2f:35:bc:b6:47:7f:1a:9c:
e0:fa:94:45:e8:b8:ff:3f:71:82:98:aa:20:6f:2b:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:94:D8:11:63:95:96:32:4F:5F:FF:5B:81:58:59:59:AD:4D:0A
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:39:d7:5e:15:98:75:b8:83:e4:f1:3c:47:fc:ed:e9:bc:f4:
ab:ef:66:25:4e:54:01:25:ff:27:36:ce:6e:59:89:a0:18:7d:
90:86:eb:c9:4c:b6:70:81:0d:4e:6c:45:2f:9e:db:75:46:18:
39:2c:a8:9b:b4:d0:12:af:80:20:0e:73:3d:ba:4d:bf:e6:54:
db:b4:de:11:8e:4b:da:38:57:cf:62:a9:26:88:94:5f:4d:a8:
38:72:b5:a1:cb:00:8a:fb:9f:3b:e4:b2:c5:28:be:86:cb:68:
a8:4a:30:c2:1d:4e:fe:70:29:46:77:04:57:1e:88:69:e1:96:
07:a1:3b:b2:df:00:a9:76:d3:e2:39:8a:bf:7d:86:99:7a:9e:
81:c3:c0:03:34:56:14:98:48:9f:70:51:81:72:cb:76:5c:98:
2f:a3:10:df:86:53:f8:15:04:2f:b5:1d:9f:5c:4e:3b:77:ac:
c7:31:b8:43:63:35:85:49:89:16:28:f7:d6:93:5f:8e:19:2a:
96:00:49:d3:65:04:3d:95:f4:8f:00:72:7e:86:1c:0a:3d:02:
e1:58:f2:35:8e:70:eb:6a:b9:54:b3:82:61:cd:12:fd:20:19:
7a:2f:30:78:1f:a5:88:bb:05:3b:ce:94:87:3a:83:af:ce:a7:
ff:56:db:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/cFHeGj8YLZnw3Y3N7OBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmE3MWY2YmE5M2Y2Y2Y0N2ViMzE3YjJiZmQwNDlkNWNj
Mzk3NjAwHhcNMjUwODA5MDQwMTM3WhcNMjUwODEwMDQwMTM3WjAzMTEwLwYDVQQD
EyhlODkyOTRkODExNjM5NTk2MzI0ZjVmZmY1YjgxNTg1OTU5YWQ0ZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OfTpWamM50cX0UhteFeh2Zr6HHr
hWUNqC4LfdxkbQmX0tQUxM/ONsL5YHGLz8Y9/kteKxhPeX0YdIQ7PPiBhgPd3tnx
vxqEST0gbLczFYKcjz5IR0tQuGgNf30kPY4VFsYxBaahRzxjT0VSSFC1+LMQHxqI
Z5NASBna9G++M91sNHZXHb0xWMobk+XxuDUebNuE5UsFqXHQk3wO6sbXKlcSQyUi
U7bL5XeszE3Khvm059z7+5/wkjuBCYdozUIryezqA71FLTU0x1Sd6Ol63CR5vz/h
8S8K3Lci/GEv+hqLl+jsetZ7LzW8tkd/Gpzg+pRF6Lj/P3GCmKogbysgQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiSlNgRY5WWMk9f/1uBWFlZrU0KMB8GA1UdIwQY
MBaAFOdqcfa6k/bPR+sxeyv9BJ1cw5dgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTct
YTM5MGYzY2UzYTU2LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTctYTM5MGYzY2UzYTU2
LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJznXXhWY
dbiD5PE8R/zt6bz0q+9mJU5UASX/JzbOblmJoBh9kIbryUy2cIENTmxFL57bdUYY
OSyom7TQEq+AIA5zPbpNv+ZU27TeEY5L2jhXz2KpJoiUX02oOHK1ocsAivufO+Sy
xSi+hstoqEowwh1O/nApRncEVx6IaeGWB6E7st8AqXbT4jmKv32GmXqegcPAAzRW
FJhIn3BRgXLLdlyYL6MQ34ZT+BUEL7Udn1xOO3esxzG4Q2M1hUmJFij31pNfjhkq
lgBJ02UEPZX0jwByfoYcCj0C4VjyNY5w62q5VLOCYc0S/SAZei8weB+liLsFO86U
hzqDr86n/1bbpQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:40 2025 by rpki-client