Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: IaFG2xIRxFTaxOecKVFLGFOFnVyMg10LW2ajraw7UCY=
Subject key identifier: 41:CA:4D:2D:C9:3E:00:19:61:CC:B2:E1:85:E5:7E:D7:0B:1C:33:22
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 019893361B5361C54BC058D0C75D71399C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 09:00:53 +0000
Manifest this update: Sun 10 Aug 2025 09:00:53 +0000
Manifest next update: Mon 11 Aug 2025 09:00:53 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: XYmUT+46T/plHYe8/9GVo3Niv96xVlsfh6SwH/+RITM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:1b:53:61:c5:4b:c0:58:d0:c7:5d:71:39:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Aug 10 09:00:53 2025 GMT
Not After : Aug 11 09:00:53 2025 GMT
Subject: CN=41ca4d2dc93e001961ccb2e185e57ed70b1c3322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:07:42:7c:a6:e2:c4:07:3c:4e:d2:ee:5d:
91:e2:91:bd:59:15:b4:d2:f3:51:e1:f5:8c:b5:4f:
6d:c2:fc:6a:90:d2:8c:ca:8b:fb:78:71:b7:5b:7f:
80:67:45:f6:e3:1b:28:2b:7c:b3:19:2d:a2:0f:fd:
fa:8a:5f:b5:95:83:d6:d2:a7:71:65:5c:08:8a:27:
4d:81:28:dd:0f:cc:be:a4:f2:a1:77:fc:cd:70:c6:
f7:0e:4b:e2:c5:10:49:75:a2:e4:89:0c:4e:40:8d:
70:3c:08:55:3a:fa:6a:1d:61:fc:5e:da:0c:b0:3b:
07:8b:cf:e9:d1:d5:ae:43:bd:36:75:34:ac:a6:52:
5a:85:8e:6c:9e:d8:82:2b:f2:d1:5e:3e:e5:9a:63:
63:7b:32:33:90:6f:eb:eb:63:9d:87:40:cc:4e:d8:
c8:27:91:2b:4a:79:ff:4f:39:72:76:e7:fa:0e:ce:
e1:ec:f7:16:e9:1e:23:14:55:16:2a:8b:6d:55:aa:
49:95:9e:7b:54:ef:90:3c:4d:31:9a:8e:ad:d1:8b:
5a:34:dd:d5:4f:2a:16:3a:a3:1e:9a:c6:ef:2c:8c:
90:a2:48:c8:47:b8:46:31:cc:78:18:41:dd:ee:7c:
0b:b8:d6:d0:5c:b1:37:f7:1d:b5:a5:20:fd:0b:5a:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CA:4D:2D:C9:3E:00:19:61:CC:B2:E1:85:E5:7E:D7:0B:1C:33:22
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bf:03:f3:26:ee:3a:f6:c0:7b:3a:28:84:4a:77:0c:d2:41:
be:a1:b8:0e:f4:ab:c9:be:70:af:8e:6a:23:d0:3d:61:2a:fb:
65:7b:2a:87:2c:58:34:a9:f6:da:e8:fc:b1:a2:02:a1:2d:97:
5a:75:87:f9:b8:eb:39:3a:0d:10:06:49:e8:77:4e:72:2c:ce:
02:3a:81:ba:28:45:3f:73:bd:a0:43:a6:85:62:9f:b4:db:c7:
b9:75:23:0f:de:a9:5b:e0:1f:03:9c:b4:b1:9f:fb:99:2a:f4:
df:ff:d2:15:9c:05:a1:51:20:68:6c:39:0c:b7:20:8f:6e:28:
77:d1:14:90:51:3c:4e:c8:ba:c9:10:03:dd:08:8a:b3:5c:43:
40:66:9f:ea:c4:be:1c:8e:ef:a7:c1:03:d4:31:5a:dd:d4:86:
23:54:14:f5:7c:c7:0e:d6:07:74:fd:4a:87:34:f2:13:07:7a:
33:79:30:d1:3c:e6:e2:eb:08:e6:f8:75:78:ca:d1:e3:56:94:
cb:fb:fa:87:93:13:50:ef:10:02:71:e6:2b:0a:ad:13:19:e5:
97:51:79:10:0e:32:4f:a7:ab:fb:66:96:d5:62:6d:be:f0:1f:
82:fc:1e:8c:36:6f:7e:31:41:d3:2a:83:16:02:9a:50:c0:37:
c2:30:01:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTNhtTYcVLwFjQx11xOZw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzk3NjA1MjBiN2MxNWMyZTQyNjAzMDgyNzJiODQ5Zjg4
ZWQ2NzcwHhcNMjUwODEwMDkwMDUzWhcNMjUwODExMDkwMDUzWjAzMTEwLwYDVQQD
Eyg0MWNhNGQyZGM5M2UwMDE5NjFjY2IyZTE4NWU1N2VkNzBiMWMzMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxwHQnym4sQHPE7S7l2R4pG9WRW0
0vNR4fWMtU9twvxqkNKMyov7eHG3W3+AZ0X24xsoK3yzGS2iD/36il+1lYPW0qdx
ZVwIiidNgSjdD8y+pPKhd/zNcMb3DkvixRBJdaLkiQxOQI1wPAhVOvpqHWH8XtoM
sDsHi8/p0dWuQ702dTSsplJahY5sntiCK/LRXj7lmmNjezIzkG/r62Odh0DMTtjI
J5ErSnn/Tzlyduf6Ds7h7PcW6R4jFFUWKottVapJlZ57VO+QPE0xmo6t0YtaNN3V
TyoWOqMemsbvLIyQokjIR7hGMcx4GEHd7nwLuNbQXLE39x21pSD9C1pt7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHKTS3JPgAZYcyy4YXlftcLHDMiMB8GA1UdIwQY
MBaAFA95dgUgt8FcLkJgMIJyuEn4jtZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUt
MDA0MjQyNWJhYjFhLzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUtMDA0MjQyNWJhYjFh
LzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQr8D8ybu
OvbAezoohEp3DNJBvqG4DvSryb5wr45qI9A9YSr7ZXsqhyxYNKn22uj8saICoS2X
WnWH+bjrOToNEAZJ6HdOcizOAjqBuihFP3O9oEOmhWKftNvHuXUjD96pW+AfA5y0
sZ/7mSr03//SFZwFoVEgaGw5DLcgj24od9EUkFE8Tsi6yRAD3QiKs1xDQGaf6sS+
HI7vp8ED1DFa3dSGI1QU9XzHDtYHdP1KhzTyEwd6M3kw0Tzm4usI5vh1eMrR41aU
y/v6h5MTUO8QAnHmKwqtExnll1F5EA4yT6er+2aW1WJtvvAfgvwejDZvfjFB0yqD
FgKaUMA3wjABcA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:42 2025 by rpki-client