Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: G4zhu5870mzpPmUupJfen7blX+PoiYppk7p6TCyxBYs=
Subject key identifier: BA:49:55:C2:4E:BF:E3:FE:B0:95:02:94:FF:68:5A:E7:61:40:43:A1
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 019874506623B4011D0C7B1F7DD5D37A4D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0A99
Signing time: Mon 04 Aug 2025 09:01:22 +0000
Manifest this update: Mon 04 Aug 2025 09:01:22 +0000
Manifest next update: Tue 05 Aug 2025 09:01:22 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: M6Wm1AvRVZgZKtQdNXFuTXJqqd3G6W4wsTAwoyyL+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:66:23:b4:01:1d:0c:7b:1f:7d:d5:d3:7a:4d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Aug 4 09:01:22 2025 GMT
Not After : Aug 5 09:01:22 2025 GMT
Subject: CN=ba4955c24ebfe3feb0950294ff685ae7614043a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:20:b2:37:9f:3f:9d:35:07:f4:75:80:8e:
21:39:c3:c5:37:4f:5f:23:e9:56:2c:9a:c4:87:22:
4a:fc:e9:e6:8b:90:a9:d3:e4:24:63:ce:36:3b:fc:
60:73:0d:59:c2:50:8f:3f:0c:72:f8:ff:cc:a6:6b:
f3:96:52:6e:c7:fd:75:22:55:13:8b:2f:88:1d:2a:
dc:29:b9:7a:25:7d:f4:75:18:8d:01:57:54:87:93:
e1:a4:9c:59:0e:dd:5a:1b:0a:e3:9a:29:1a:f5:d0:
ac:7f:a2:4b:f5:e8:36:95:77:ad:07:bd:6f:6a:82:
ed:50:7f:b5:e6:39:2b:62:6a:34:7b:af:b8:e6:36:
46:41:6a:df:ec:2a:a4:a6:6e:2b:b5:88:7d:a4:0f:
e3:23:d8:2b:ae:31:4d:c5:ba:6b:e9:8c:57:8c:f4:
2d:31:b0:c2:6f:ad:6a:77:b1:2d:72:29:7e:46:a7:
33:e3:87:41:7d:2b:a7:79:09:db:32:ca:51:13:93:
60:50:40:7c:09:cb:51:74:32:72:9d:d2:2b:9c:81:
77:dc:7c:a0:a9:6c:e5:45:c0:33:b1:38:81:a1:af:
1c:eb:db:e3:81:29:f2:f2:a9:99:a6:41:d1:69:b1:
15:ea:97:18:fb:52:6b:b1:fb:68:5c:ef:88:fc:4d:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:49:55:C2:4E:BF:E3:FE:B0:95:02:94:FF:68:5A:E7:61:40:43:A1
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:af:0b:1d:23:2d:c0:a7:4c:03:ad:ae:61:ae:4f:a4:72:
2d:7e:71:8f:73:2f:8b:da:1f:f4:d2:87:7a:7c:7c:56:be:51:
b7:26:8a:53:80:5a:44:55:98:37:b5:f1:b0:4f:35:91:5b:e6:
03:dd:8a:20:d8:bd:25:0d:98:af:a4:7d:22:36:13:21:0a:34:
2b:2b:2b:63:a2:b6:9a:99:0c:42:3c:78:42:b9:81:0f:35:90:
bb:44:88:cb:e6:f4:57:27:2c:26:88:4f:b0:89:e6:3b:43:87:
96:ba:8d:51:61:e4:47:31:14:69:62:37:6b:c7:0d:e6:12:26:
5f:ea:76:4b:79:07:6c:e3:9c:ad:09:8e:32:e8:d0:2f:97:62:
46:55:9a:9a:c2:e0:3a:ac:70:26:72:f3:ed:17:01:36:0e:ac:
00:39:87:81:61:05:cb:98:51:03:29:12:2f:eb:8d:c9:d6:8e:
ed:21:16:74:c1:70:78:a4:85:88:50:2b:e5:47:f3:e9:a8:07:
d1:1a:f4:f4:40:02:66:63:05:bf:c0:d7:03:de:ae:a0:f7:c9:
62:c0:94:23:fc:cf:0c:5d:6b:18:7e:2f:7d:0f:8e:48:d0:89:
ae:9c:11:e2:a2:ae:8d:62:b7:7b:e5:a7:86:64:ba:c1:e9:72:
08:d0:42:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UGYjtAEdDHsffdXTek1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmU0YTA5Njc3YjAwYmJjMzMzZjcxNjc4ZWFhODBhNzFi
NjJhNDgwHhcNMjUwODA0MDkwMTIyWhcNMjUwODA1MDkwMTIyWjAzMTEwLwYDVQQD
EyhiYTQ5NTVjMjRlYmZlM2ZlYjA5NTAyOTRmZjY4NWFlNzYxNDA0M2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuwgsjefP501B/R1gI4hOcPFN09f
I+lWLJrEhyJK/Onmi5Cp0+QkY842O/xgcw1ZwlCPPwxy+P/MpmvzllJux/11IlUT
iy+IHSrcKbl6JX30dRiNAVdUh5PhpJxZDt1aGwrjmika9dCsf6JL9eg2lXetB71v
aoLtUH+15jkrYmo0e6+45jZGQWrf7Cqkpm4rtYh9pA/jI9grrjFNxbpr6YxXjPQt
MbDCb61qd7Etcil+Rqcz44dBfSuneQnbMspRE5NgUEB8CctRdDJyndIrnIF33Hyg
qWzlRcAzsTiBoa8c69vjgSny8qmZpkHRabEV6pcY+1JrsftoXO+I/E2xBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpJVcJOv+P+sJUClP9oWudhQEOhMB8GA1UdIwQY
MBaAFOz+SglnewC7wzP3FnjqqApxtipIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEt
ZWQ5MzAyZmVkZGNiLzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEtZWQ5MzAyZmVkZGNi
LzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlS+vCx0j
LcCnTAOtrmGuT6RyLX5xj3Mvi9of9NKHenx8Vr5RtyaKU4BaRFWYN7XxsE81kVvm
A92KINi9JQ2Yr6R9IjYTIQo0KysrY6K2mpkMQjx4QrmBDzWQu0SIy+b0VycsJohP
sInmO0OHlrqNUWHkRzEUaWI3a8cN5hImX+p2S3kHbOOcrQmOMujQL5diRlWamsLg
OqxwJnLz7RcBNg6sADmHgWEFy5hRAykSL+uNydaO7SEWdMFweKSFiFAr5Ufz6agH
0Rr09EACZmMFv8DXA96uoPfJYsCUI/zPDF1rGH4vfQ+OSNCJrpwR4qKujWK3e+Wn
hmS6welyCNBCFw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:13 2025 by rpki-client