Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
File: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft (raw, json)
Hash identifier: HPBC4lGRxbmJQFwcyyJpPM+k7vOm888Zl1wL7UgsrEs=
Subject key identifier: C8:B7:F4:E0:B3:FA:60:75:CF:AE:83:27:04:C6:6C:19:85:12:92:9B
Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
Certificate issuer: /CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Certificate serial: 01989FA8972DCBCE34E1674D6134510C4B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
Manifest number: 0D62
Signing time: Tue 12 Aug 2025 19:01:22 +0000
Manifest this update: Tue 12 Aug 2025 19:01:22 +0000
Manifest next update: Wed 13 Aug 2025 19:01:22 +0000
Files and hashes: 1: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl (hash: waLGuhhO4VupFiQjaehD8y8lS4g1UMAxa/eG5IJJ2+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:97:2d:cb:ce:34:e1:67:4d:61:34:51:0c:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Validity
Not Before: Aug 12 19:01:22 2025 GMT
Not After : Aug 13 19:01:22 2025 GMT
Subject: CN=c8b7f4e0b3fa6075cfae832704c66c198512929b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:1f:6e:4c:11:f7:d1:60:e3:be:85:9b:79:
76:e8:d4:26:17:6f:d7:79:59:d8:aa:f6:68:d4:fd:
e1:fd:6d:e0:67:75:fc:65:d9:8c:8a:3e:be:0f:dd:
77:c4:0d:57:6b:91:c4:9e:c3:64:6a:01:96:78:5d:
65:ca:46:4b:e5:51:96:31:64:04:2c:9d:f0:cf:08:
22:f8:58:0c:28:b7:a7:f6:4d:8d:35:99:2b:00:83:
d7:81:45:8d:89:a6:6d:ca:bd:56:59:72:49:ae:8f:
65:1a:51:67:e2:9a:82:27:7a:12:74:28:a5:06:67:
68:b7:3b:32:45:ff:8c:fa:61:2d:e2:3d:df:42:a5:
21:aa:91:c4:cb:f1:ca:52:03:4f:06:77:76:00:70:
e6:4b:a8:02:32:90:de:19:04:9e:71:78:bf:45:94:
e8:79:35:56:ae:14:f4:f9:f3:1d:7c:f2:cb:23:a8:
f0:79:e7:a1:16:9f:11:f1:cc:4f:06:23:57:b0:ab:
81:d9:87:31:0e:fc:64:0f:14:25:b4:ea:b8:1a:c3:
a3:dd:da:7c:0c:5a:ec:f8:d1:a5:eb:db:68:fb:c4:
8d:75:5e:a8:33:ca:d6:f0:c2:8e:b7:54:67:ad:4e:
a0:7a:df:8c:b6:60:2a:f6:74:43:47:5d:a8:c0:f3:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:F4:E0:B3:FA:60:75:CF:AE:83:27:04:C6:6C:19:85:12:92:9B
X509v3 Authority Key Identifier:
keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6f:1c:93:61:61:d5:a4:ef:8b:96:68:32:29:b8:86:1e:c3:
c7:00:fa:ca:a9:1b:54:93:4b:d7:ac:02:8e:47:07:f5:85:e0:
f2:41:87:fd:f4:77:1c:31:a8:a9:ef:19:ad:8d:01:e5:f8:a1:
f5:ac:8d:99:c1:1a:e6:21:34:7e:7b:06:9f:ec:b6:ad:59:20:
c2:62:06:1b:67:11:71:12:ee:04:52:ba:4f:24:c7:34:b7:d0:
3b:c2:09:00:7d:54:24:d7:c5:d5:7d:de:f0:5f:7d:5f:e1:26:
f3:f5:51:56:4b:aa:0f:30:c6:5f:a4:ca:d4:45:cc:6d:3c:0e:
22:e0:99:9d:da:8b:67:5d:aa:0b:69:0b:b5:5f:4e:eb:32:f2:
a5:e2:c1:f3:3e:b6:72:40:e8:70:d9:dc:0f:4f:4b:d8:0c:d3:
8c:23:9e:aa:12:fc:3a:c7:17:8f:37:c4:94:99:4a:38:0a:f5:
79:df:5d:be:36:7c:76:af:d0:ec:20:4d:15:91:d2:ac:f5:2b:
62:58:f4:2c:b7:a7:19:d7:90:d4:ec:70:47:1b:76:31:41:74:
8e:db:b6:0d:07:e0:ca:6f:24:1e:45:21:84:6c:3a:f5:4e:21:
71:bf:30:52:3b:ec:83:d2:54:f1:1d:85:7a:9a:ad:9b:60:5e:
82:fc:bd:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifqJcty8404WdNYTRRDEtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MjQxYWFjOWVkYTdiZWY2OTA4OWY2NDdiNWQ4Zjc3NGZm
NDNhMjYwHhcNMjUwODEyMTkwMTIyWhcNMjUwODEzMTkwMTIyWjAzMTEwLwYDVQQD
EyhjOGI3ZjRlMGIzZmE2MDc1Y2ZhZTgzMjcwNGM2NmMxOTg1MTI5MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNsfbkwR99Fg476Fm3l26NQmF2/X
eVnYqvZo1P3h/W3gZ3X8ZdmMij6+D913xA1Xa5HEnsNkagGWeF1lykZL5VGWMWQE
LJ3wzwgi+FgMKLen9k2NNZkrAIPXgUWNiaZtyr1WWXJJro9lGlFn4pqCJ3oSdCil
BmdotzsyRf+M+mEt4j3fQqUhqpHEy/HKUgNPBnd2AHDmS6gCMpDeGQSecXi/RZTo
eTVWrhT0+fMdfPLLI6jweeehFp8R8cxPBiNXsKuB2YcxDvxkDxQltOq4GsOj3dp8
DFrs+NGl69to+8SNdV6oM8rW8MKOt1RnrU6get+MtmAq9nRDR12owPOMrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi39OCz+mB1z66DJwTGbBmFEpKbMB8GA1UdIwQY
MBaAFJgkGqye2nvvaQifZHtdj3dP9DomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNRYXJKN2FlLTlwQ0o5a2UxMlBkMF8wT2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jZGE5NTgtM2NhYi00YjIzLTkxNmMt
MzVkZTM4NGMwOTgyLzEvbUNRYXJKN2FlLTlwQ0o5a2UxMlBkMF8wT2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jZGE5NTgtM2NhYi00YjIzLTkxNmMtMzVkZTM4NGMwOTgy
LzEvbUNRYXJKN2FlLTlwQ0o5a2UxMlBkMF8wT2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGm8ck2Fh
1aTvi5ZoMim4hh7DxwD6yqkbVJNL16wCjkcH9YXg8kGH/fR3HDGoqe8ZrY0B5fih
9ayNmcEa5iE0fnsGn+y2rVkgwmIGG2cRcRLuBFK6TyTHNLfQO8IJAH1UJNfF1X3e
8F99X+Em8/VRVkuqDzDGX6TK1EXMbTwOIuCZndqLZ12qC2kLtV9O6zLypeLB8z62
ckDocNncD09L2AzTjCOeqhL8OscXjzfElJlKOAr1ed9dvjZ8dq/Q7CBNFZHSrPUr
Ylj0LLenGdeQ1OxwRxt2MUF0jtu2DQfgym8kHkUhhGw69U4hcb8wUjvsg9JU8R2F
epqtm2Begvy9mg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:08 2025 by rpki-client