Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: YLNq2DAYdnGSyu6U7IC1M+eUjXucF6iRYsZ2rtxHpuI=
Subject key identifier: A9:61:BF:64:51:42:B7:FE:C8:F0:B4:96:C4:DC:A6:4A:0E:D2:8A:64
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 0198733D0749BCDB6DE03ABB32558A11ADFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 15AC
Signing time: Mon 04 Aug 2025 04:00:35 +0000
Manifest this update: Mon 04 Aug 2025 04:00:35 +0000
Manifest next update: Tue 05 Aug 2025 04:00:35 +0000
Files and hashes: 1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: 3KVWvM/uKpz09fhFCOLDBCOxDHxcbZDXKPlvApVkTWE=)
2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:07:49:bc:db:6d:e0:3a:bb:32:55:8a:11:ad:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Aug 4 04:00:35 2025 GMT
Not After : Aug 5 04:00:35 2025 GMT
Subject: CN=a961bf645142b7fec8f0b496c4dca64a0ed28a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:ae:9a:ec:b9:f9:a9:b7:04:62:9d:b8:ad:
82:7b:dc:4e:67:6a:94:2e:0e:fe:7c:45:45:a9:46:
b1:12:d0:38:17:ce:48:67:85:4c:ea:ef:3e:3e:3d:
50:eb:49:a2:69:0f:c8:99:ac:d5:ac:e7:f3:6b:60:
68:9e:ac:ef:54:d3:c5:75:09:18:1f:c5:e5:5a:cb:
38:fb:45:de:3e:f4:f7:e7:46:af:14:b0:0c:f1:5c:
1b:f2:3a:9d:e0:ea:68:ae:28:4d:9b:ca:2b:1e:27:
c5:4a:34:59:f6:74:43:f3:21:00:f6:8f:56:a1:0c:
6b:06:a3:e4:65:52:df:1e:11:d5:ef:8c:d6:8d:e1:
f6:d6:c1:4d:77:b5:04:de:89:d2:ee:95:a4:a0:ee:
f9:53:07:79:65:46:ae:f0:06:28:77:de:10:4d:52:
cb:11:5d:aa:72:35:f1:71:c1:82:7c:70:35:32:c3:
d3:0d:8f:23:54:d3:f0:79:df:9e:c8:22:d8:99:20:
65:8d:bc:b4:8e:f2:0f:c3:39:1a:32:fb:6e:1f:b8:
a7:7e:19:89:74:a0:ad:6a:a5:60:ef:ef:03:77:75:
fa:b1:5d:e1:6c:5a:2f:b6:67:94:3e:2c:9a:53:21:
a3:1d:27:69:17:a8:c0:ed:54:98:70:07:49:e2:63:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:BF:64:51:42:B7:FE:C8:F0:B4:96:C4:DC:A6:4A:0E:D2:8A:64
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:50:72:2f:39:09:68:d2:44:1d:65:69:3a:7f:3b:f3:ce:0e:
58:32:f6:2f:73:ba:4e:78:c5:94:55:58:39:71:b2:bd:e8:5f:
f5:12:88:28:5f:e6:c5:62:5d:3f:15:6b:eb:ea:0f:9b:8e:5c:
31:b3:63:74:ee:83:bc:30:0a:4a:04:92:0b:11:8c:16:9a:02:
84:53:12:d1:e8:97:87:5f:4c:a6:c2:fc:0e:56:3d:af:ef:23:
65:67:4c:19:59:b9:67:c9:d7:fe:e0:ff:3f:8b:da:48:9f:61:
17:bd:04:e6:d7:0f:e5:d0:7a:db:c7:e9:03:66:ff:33:41:f9:
3d:97:8f:df:b9:4c:e4:b1:c2:d1:80:87:6e:0d:8f:24:07:3e:
20:67:c4:ad:24:66:89:40:17:36:99:b4:be:cb:04:c1:77:5e:
2b:37:9e:47:f9:fb:fc:1a:c6:8a:c3:cf:c3:6f:88:c1:8f:65:
30:b6:a9:54:b0:a8:b6:42:23:6e:96:27:52:ed:01:2c:e1:d9:
b7:64:b2:5e:03:6f:a9:f0:06:c6:0f:8d:25:3d:0e:b4:83:5b:
5c:ec:34:bb:78:17:10:ad:49:f8:cf:b7:5a:2b:7f:d7:1b:71:
cc:5a:f2:9c:2b:0b:a4:83:af:f8:c1:30:fa:b1:3c:1d:0c:db:
8b:30:e7:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPQdJvNtt4Dq7MlWKEa3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MTZlNTNiMzJjYWE3NjE5MDZmMGZjZGVhMjc1YjcyMGUx
NzQyYzgwHhcNMjUwODA0MDQwMDM1WhcNMjUwODA1MDQwMDM1WjAzMTEwLwYDVQQD
EyhhOTYxYmY2NDUxNDJiN2ZlYzhmMGI0OTZjNGRjYTY0YTBlZDI4YTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuCumuy5+am3BGKduK2Ce9xOZ2qU
Lg7+fEVFqUaxEtA4F85IZ4VM6u8+Pj1Q60miaQ/ImazVrOfza2BonqzvVNPFdQkY
H8XlWss4+0XePvT350avFLAM8Vwb8jqd4OporihNm8orHifFSjRZ9nRD8yEA9o9W
oQxrBqPkZVLfHhHV74zWjeH21sFNd7UE3onS7pWkoO75Uwd5ZUau8AYod94QTVLL
EV2qcjXxccGCfHA1MsPTDY8jVNPwed+eyCLYmSBljby0jvIPwzkaMvtuH7infhmJ
dKCtaqVg7+8Dd3X6sV3hbFovtmeUPiyaUyGjHSdpF6jA7VSYcAdJ4mN0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlhv2RRQrf+yPC0lsTcpkoO0opkMB8GA1UdIwQY
MBaAFEUW5TsyyqdhkG8PzeonW3IOF0LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2Yt
YmEwMmM5NjBiOGY0LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2YtYmEwMmM5NjBiOGY0
LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlByLzkJ
aNJEHWVpOn87884OWDL2L3O6TnjFlFVYOXGyvehf9RKIKF/mxWJdPxVr6+oPm45c
MbNjdO6DvDAKSgSSCxGMFpoChFMS0eiXh19MpsL8DlY9r+8jZWdMGVm5Z8nX/uD/
P4vaSJ9hF70E5tcP5dB628fpA2b/M0H5PZeP37lM5LHC0YCHbg2PJAc+IGfErSRm
iUAXNpm0vssEwXdeKzeeR/n7/BrGisPPw2+IwY9lMLapVLCotkIjbpYnUu0BLOHZ
t2SyXgNvqfAGxg+NJT0OtINbXOw0u3gXEK1J+M+3Wit/1xtxzFrynCsLpIOv+MEw
+rE8HQzbizDniw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:55 2025 by rpki-client