
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: pbsh08tY+buKTtRvjJSz8Fya0GaYKlSyknbSgNx4dtI=
Subject key identifier: 04:94:B9:BA:3C:5E:54:84:DF:80:3C:4A:BE:31:9D:03:22:6F:55:30
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 019882434BAF9EDE3492A2267D47FB454F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 161A
Signing time: Thu 07 Aug 2025 02:01:44 +0000
Manifest this update: Thu 07 Aug 2025 02:01:44 +0000
Manifest next update: Fri 08 Aug 2025 02:01:44 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: 129Rd8JoWHVkL6+dHCsRzqrD30/SuVbAePcCRYkLr10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:4b:af:9e:de:34:92:a2:26:7d:47:fb:45:4f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: Aug 7 02:01:44 2025 GMT
Not After : Aug 8 02:01:44 2025 GMT
Subject: CN=0494b9ba3c5e5484df803c4abe319d03226f5530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:f2:83:39:93:c3:f9:e6:2d:05:57:ea:bc:
55:fc:90:9e:e2:5b:66:d6:28:5d:42:e3:55:4b:20:
98:2a:55:4b:d5:14:7d:6b:8f:8d:f1:7d:ee:bf:52:
2c:4e:a6:32:3b:cb:79:f3:9d:4c:94:b7:ce:3a:71:
3c:c1:f5:2a:1e:32:e2:69:b0:29:f0:61:ec:3e:76:
77:b3:5e:45:aa:f6:ee:18:60:11:90:df:d1:4a:18:
50:3d:b5:52:3c:7e:f9:51:a0:3c:3b:ca:84:d4:fc:
11:2c:13:e0:18:8b:0c:2f:b4:21:a5:bf:8f:58:89:
e4:e3:f5:c9:0a:98:a8:1b:62:35:83:ac:46:a6:18:
b1:c8:15:6a:00:54:5f:b6:2f:63:8e:27:cf:87:be:
7f:8b:ba:37:d2:60:0d:60:9b:76:04:13:9d:a0:b3:
54:b4:4e:52:10:aa:7c:8d:54:77:c2:fb:dd:ef:f4:
31:f9:65:20:56:ea:b3:f0:d1:a4:85:a5:c6:cf:94:
63:38:c0:af:3d:ad:1e:b1:3a:eb:95:ad:4c:c3:3d:
2e:f2:45:30:b2:99:22:dc:02:53:41:3c:de:93:73:
bc:6e:c3:a3:80:9e:1d:4a:e0:83:57:42:64:5b:0e:
8d:30:78:4c:2d:16:bc:29:07:06:d1:b7:15:cc:6d:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:94:B9:BA:3C:5E:54:84:DF:80:3C:4A:BE:31:9D:03:22:6F:55:30
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7e:83:cf:48:54:55:80:0e:76:65:28:d7:dd:da:bc:1e:4f:
08:73:93:ea:98:eb:c6:48:11:4e:5e:5f:4e:19:f2:da:5b:47:
5b:3e:87:2e:f0:00:d7:7b:b6:74:32:23:b4:db:37:23:b3:a3:
3d:7c:db:5b:ee:e3:c3:de:fb:ba:2e:1e:c3:b5:01:ca:d3:05:
83:09:ba:79:70:49:10:6e:76:c3:a5:c9:73:91:a6:e6:08:fd:
b3:18:44:63:43:66:9f:4b:e6:53:61:35:c9:43:56:dd:03:c1:
5e:b7:83:37:fc:34:f0:41:a9:3c:bd:08:78:48:f3:3a:9b:8f:
63:9d:ce:ed:0c:3c:b4:2a:79:c1:df:f6:37:6c:b8:9a:76:34:
cd:a0:4a:70:5b:22:8d:e3:36:ba:76:10:24:02:ac:84:12:82:
1a:65:69:25:10:3a:01:f5:25:a2:17:30:da:3d:4d:e4:23:ae:
18:44:21:1e:11:13:fe:8b:98:1a:a0:95:54:ae:ed:26:51:45:
5c:7a:2e:6b:cb:0c:2c:a6:26:da:cb:1a:8b:cf:50:71:95:75:
ad:1b:72:c3:3b:07:e5:ba:a1:49:1b:7b:3c:84:60:24:2b:d9:
ab:30:c8:4e:c0:32:21:a1:24:c1:60:4b:97:a2:11:3e:0f:fb:
0e:11:18:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCQ0uvnt40kqImfUf7RU8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjMxZjRjNTJlOWVhYjU4ODMwZTM4N2QwYjM5MDkzMDY4
NGM0MWEwHhcNMjUwODA3MDIwMTQ0WhcNMjUwODA4MDIwMTQ0WjAzMTEwLwYDVQQD
EygwNDk0YjliYTNjNWU1NDg0ZGY4MDNjNGFiZTMxOWQwMzIyNmY1NTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkbygzmTw/nmLQVX6rxV/JCe4ltm
1ihdQuNVSyCYKlVL1RR9a4+N8X3uv1IsTqYyO8t5851MlLfOOnE8wfUqHjLiabAp
8GHsPnZ3s15FqvbuGGARkN/RShhQPbVSPH75UaA8O8qE1PwRLBPgGIsML7Qhpb+P
WInk4/XJCpioG2I1g6xGphixyBVqAFRfti9jjifPh75/i7o30mANYJt2BBOdoLNU
tE5SEKp8jVR3wvvd7/Qx+WUgVuqz8NGkhaXGz5RjOMCvPa0esTrrla1Mwz0u8kUw
spki3AJTQTzek3O8bsOjgJ4dSuCDV0JkWw6NMHhMLRa8KQcG0bcVzG3PzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASUubo8XlSE34A8Sr4xnQMib1UwMB8GA1UdIwQY
MBaAFMfzH0xS6eq1iDDjh9CzkJMGhMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYt
ODY3MGZiZWEzOTg5LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYtODY3MGZiZWEzOTg5
LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ36Dz0hU
VYAOdmUo193avB5PCHOT6pjrxkgRTl5fThny2ltHWz6HLvAA13u2dDIjtNs3I7Oj
PXzbW+7jw977ui4ew7UBytMFgwm6eXBJEG52w6XJc5Gm5gj9sxhEY0Nmn0vmU2E1
yUNW3QPBXreDN/w08EGpPL0IeEjzOpuPY53O7Qw8tCp5wd/2N2y4mnY0zaBKcFsi
jeM2unYQJAKshBKCGmVpJRA6AfUlohcw2j1N5COuGEQhHhET/ouYGqCVVK7tJlFF
XHoua8sMLKYm2ssai89QcZV1rRtywzsH5bqhSRt7PIRgJCvZqzDITsAyIaEkwWBL
l6IRPg/7DhEY/w==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:29 2025 by rpki-client