Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
File: g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft (raw, json)
Hash identifier: OevZvjN1OifcH52JgJTa9jGG/WhA3pysxvXGcfXgj+U=
Subject key identifier: A9:FE:32:7A:A0:1B:9C:B3:F2:87:6D:D8:81:12:BE:B9:A6:90:50:23
Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
Certificate issuer: /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Certificate serial: 019873E3D463847E3374C4771F21EBC3B4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
Manifest number: EE
Signing time: Mon 04 Aug 2025 07:02:47 +0000
Manifest this update: Mon 04 Aug 2025 07:02:47 +0000
Manifest next update: Tue 05 Aug 2025 07:02:47 +0000
Files and hashes: 1: g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl (hash: ZuENN/ydvt86VpIuq1G1+YXMDAUKewX90pZFGVxq4AI=)
2: msDEeS6sASlV5Nrug60HOmxHAjw.roa (hash: td9s2j9cTMVJ/N4A25CfBZ5lbq+TNEGFP43f11ycPe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d4:63:84:7e:33:74:c4:77:1f:21:eb:c3:b4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Validity
Not Before: Aug 4 07:02:47 2025 GMT
Not After : Aug 5 07:02:47 2025 GMT
Subject: CN=a9fe327aa01b9cb3f2876dd88112beb9a6905023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:de:41:cd:f8:66:28:17:c5:fd:6c:f7:e4:
a7:e3:11:a9:e5:fe:c3:30:e6:98:9a:7d:63:b8:11:
61:d4:dd:70:75:0c:fb:7c:ea:dd:f9:c6:fc:e3:3f:
05:f6:69:5d:95:92:4b:53:25:8f:9b:52:f3:2a:90:
43:ac:c2:ae:3c:61:6f:fb:7a:d7:c2:34:3e:cf:4e:
bc:57:8a:a7:07:e0:85:d7:a6:96:43:79:44:2c:d6:
36:06:99:82:d8:20:60:40:86:b8:db:12:4e:40:f1:
bf:d7:9b:c3:42:ef:9f:f4:ac:67:6d:89:4b:23:86:
72:1c:61:3d:0a:a8:c4:63:41:e2:8a:07:a5:3a:41:
43:43:6f:fc:77:87:d5:9e:8c:d6:09:68:99:09:53:
b5:39:98:cc:9d:40:c6:22:9d:be:e1:66:d6:9d:b3:
28:fd:3a:02:33:ec:bb:fa:e9:18:47:ab:b3:f8:82:
81:e3:5c:3e:cd:5d:73:35:34:f7:bc:3b:cd:a6:70:
77:6d:6c:f9:9e:6f:74:e0:80:df:0d:1d:35:91:4c:
d5:4f:fe:d8:3d:12:c2:fa:28:5c:4e:38:37:dd:a1:
7d:0a:74:f1:60:20:62:55:43:5f:4e:68:de:d2:23:
5e:c9:f0:54:3d:5f:8a:10:96:cf:01:d6:15:50:60:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:32:7A:A0:1B:9C:B3:F2:87:6D:D8:81:12:BE:B9:A6:90:50:23
X509v3 Authority Key Identifier:
keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2a:10:af:8b:d7:55:10:99:52:84:e1:f2:4d:14:ca:e3:58:
77:b7:ae:28:1a:46:d4:56:8d:d6:e2:25:a3:76:ee:83:0d:1f:
8e:d9:3d:6a:fd:97:1e:d3:4f:97:4a:12:43:bf:cb:e4:ba:74:
70:e5:bd:96:ef:26:08:79:f3:0d:bc:fa:96:d6:82:1c:20:36:
d1:38:68:e4:13:5c:cc:c8:32:e0:65:56:b6:1d:2c:a0:2c:26:
67:45:12:7a:9d:65:51:e2:ce:2b:66:cb:91:c7:37:2f:ad:89:
51:33:76:8e:f4:9c:8e:3f:5f:b9:1a:c3:32:ce:9a:d2:d3:6b:
83:b9:f5:fa:af:6b:42:cb:ff:27:40:79:ac:c1:6a:a7:79:a6:
34:0e:6a:f3:72:aa:1d:e7:69:cc:12:29:62:e6:05:79:13:5d:
b8:ba:d6:bf:cf:2b:76:a5:5e:6c:ea:3a:2d:de:3c:70:b2:e4:
35:59:54:88:f1:c3:d1:47:8e:43:3a:cd:b7:7a:74:7b:50:35:
39:38:db:4f:77:23:40:34:23:92:d4:cd:a8:dd:88:c9:d6:a8:
9a:93:bb:f9:93:79:2d:3d:e8:37:f1:65:43:3e:6f:36:93:0d:
da:5e:1a:cc:87:10:1f:a0:d8:05:31:a1:c0:e4:1b:de:88:67:
5e:c3:ad:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz49RjhH4zdMR3HyHrw7TGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZGYwY2FjYjlmZDUwZTFiZTdkZmJmM2QwYWM4NTRiZWVk
Nzg2YmUwHhcNMjUwODA0MDcwMjQ3WhcNMjUwODA1MDcwMjQ3WjAzMTEwLwYDVQQD
EyhhOWZlMzI3YWEwMWI5Y2IzZjI4NzZkZDg4MTEyYmViOWE2OTA1MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlDeQc34ZigXxf1s9+Sn4xGp5f7D
MOaYmn1juBFh1N1wdQz7fOrd+cb84z8F9mldlZJLUyWPm1LzKpBDrMKuPGFv+3rX
wjQ+z068V4qnB+CF16aWQ3lELNY2BpmC2CBgQIa42xJOQPG/15vDQu+f9KxnbYlL
I4ZyHGE9CqjEY0HiigelOkFDQ2/8d4fVnozWCWiZCVO1OZjMnUDGIp2+4WbWnbMo
/ToCM+y7+ukYR6uz+IKB41w+zV1zNTT3vDvNpnB3bWz5nm904IDfDR01kUzVT/7Y
PRLC+ihcTjg33aF9CnTxYCBiVUNfTmje0iNeyfBUPV+KEJbPAdYVUGAbqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn+MnqgG5yz8odt2IESvrmmkFAjMB8GA1UdIwQY
MBaAFIPfDKy5/VDhvn3789CshUvu14a+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYTFjNTEtOTI2NC00MDZlLWI3OTYt
NGUwMGMzYjcwODc4LzEvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hYTFjNTEtOTI2NC00MDZlLWI3OTYtNGUwMGMzYjcwODc4
LzEvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyoQr4vX
VRCZUoTh8k0UyuNYd7euKBpG1FaN1uIlo3bugw0fjtk9av2XHtNPl0oSQ7/L5Lp0
cOW9lu8mCHnzDbz6ltaCHCA20Tho5BNczMgy4GVWth0soCwmZ0USep1lUeLOK2bL
kcc3L62JUTN2jvScjj9fuRrDMs6a0tNrg7n1+q9rQsv/J0B5rMFqp3mmNA5q83Kq
HedpzBIpYuYFeRNduLrWv88rdqVebOo6Ld48cLLkNVlUiPHD0UeOQzrNt3p0e1A1
OTjbT3cjQDQjktTNqN2IydaompO7+ZN5LT3oN/FlQz5vNpMN2l4azIcQH6DYBTGh
wOQb3ohnXsOt2A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:38 2025 by rpki-client