Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
File: _x2DMuEYqaIYfqtYhCedZYDxGfc.mft (raw, json)
Hash identifier: PWH9akID7khIk0ar04g9i3majuUJLoFixSTFFRfhwt4=
Subject key identifier: AF:86:26:3B:09:37:0E:52:16:AB:0A:6E:F0:F8:A8:0A:AE:62:1D:5F
Authority key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
Certificate issuer: /CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Certificate serial: 0198481BF498D3F71D4642ECC11F466541AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
Manifest number: 045A
Signing time: Sat 26 Jul 2025 19:00:48 +0000
Manifest this update: Sat 26 Jul 2025 19:00:48 +0000
Manifest next update: Sun 27 Jul 2025 19:00:48 +0000
Files and hashes: 1: _x2DMuEYqaIYfqtYhCedZYDxGfc.crl (hash: L4yKHQUB4kxgr3n42ouUKw2QgEWt8cAQ9MZzIdYbodo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:f4:98:d3:f7:1d:46:42:ec:c1:1f:46:65:41:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Validity
Not Before: Jul 26 19:00:48 2025 GMT
Not After : Jul 27 19:00:48 2025 GMT
Subject: CN=af86263b09370e5216ab0a6ef0f8a80aae621d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:18:aa:52:9b:79:9a:ee:0e:e8:85:17:5c:
08:08:5a:a1:4a:26:f9:60:e1:55:51:b7:1c:7e:bc:
a0:03:f0:74:49:0f:a4:a5:3f:60:19:96:7a:a3:77:
72:99:8b:bb:20:f0:73:e0:5e:31:0b:7d:a5:e8:ac:
e1:8b:05:a3:db:5a:05:5d:7b:4e:8e:fd:30:8c:fc:
bf:19:a0:7f:b1:f5:3e:eb:2f:3d:80:1d:2e:7d:d4:
d0:76:cc:5e:ad:5a:e5:02:82:95:7c:46:d3:80:b3:
ba:51:ab:d1:3d:8b:b0:b2:9c:09:a6:b0:5b:c9:31:
53:71:1e:9b:28:1b:72:bc:11:5c:b8:79:96:d4:bd:
6a:2e:84:84:c7:3e:bd:15:2d:af:0f:93:7c:70:5a:
18:94:4a:56:75:8e:ed:85:79:08:ff:74:7a:85:ce:
e0:4f:dc:cb:23:35:77:52:c5:50:12:2e:09:3f:60:
35:8c:f7:87:40:14:60:6a:f6:3a:b6:9c:d2:8a:51:
33:b3:73:c9:1f:ab:3a:ec:5a:81:53:94:70:92:23:
44:4f:02:10:fa:be:24:a8:69:f0:df:e8:b6:69:19:
3a:e7:6c:a0:88:a6:76:95:cc:00:d6:8d:66:3a:e1:
79:6b:80:91:0b:6c:8f:47:89:26:16:a5:6a:88:09:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:86:26:3B:09:37:0E:52:16:AB:0A:6E:F0:F8:A8:0A:AE:62:1D:5F
X509v3 Authority Key Identifier:
keyid:FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7a:57:cf:25:1d:9e:0d:7b:b2:56:89:05:e2:b6:7a:3a:4d:
cc:b6:19:60:a5:12:8c:ac:92:64:31:dd:f2:4b:f6:0b:b4:ee:
87:f1:e3:a3:84:c1:cf:fe:16:ff:6b:73:10:85:2e:50:af:73:
fa:be:20:ef:e1:1a:27:a1:26:02:12:6b:02:b7:0b:26:87:ac:
3d:9b:11:a3:bb:f5:4f:00:40:92:69:76:51:89:2f:a4:9e:6d:
41:e8:df:8c:1b:9e:62:6d:9c:98:fb:14:46:e7:11:3e:80:7e:
c8:f5:73:f8:6a:40:20:04:e0:1f:23:b4:74:4c:a5:86:02:3e:
59:15:2f:8d:43:4c:31:78:3e:93:4e:9f:d8:f6:ee:ea:cb:5e:
fd:2c:7a:1e:c1:15:5a:51:ab:36:42:3f:3d:52:9f:b4:0e:87:
22:ee:8e:6d:92:40:8b:e7:aa:84:96:6e:0e:48:69:bd:67:74:
20:a0:71:b5:e2:81:0a:cb:e4:08:a2:c5:be:ed:7f:f5:ac:a3:
6f:7f:b2:83:e1:82:7f:d1:d3:c3:fd:d3:22:d6:04:25:ed:22:
99:de:8d:15:89:29:1a:ab:24:9e:e9:40:9c:d5:3e:e4:51:3f:
86:91:8e:30:70:a8:4d:6b:21:3b:53:62:12:42:c1:7f:6f:17:
8a:87:b7:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG/SY0/cdRkLswR9GZUGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWQ4MzMyZTExOGE5YTIxODdlYWI1ODg0Mjc5ZDY1ODBm
MTE5ZjcwHhcNMjUwNzI2MTkwMDQ4WhcNMjUwNzI3MTkwMDQ4WjAzMTEwLwYDVQQD
EyhhZjg2MjYzYjA5MzcwZTUyMTZhYjBhNmVmMGY4YTgwYWFlNjIxZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohAYqlKbeZruDuiFF1wICFqhSib5
YOFVUbccfrygA/B0SQ+kpT9gGZZ6o3dymYu7IPBz4F4xC32l6KzhiwWj21oFXXtO
jv0wjPy/GaB/sfU+6y89gB0ufdTQdsxerVrlAoKVfEbTgLO6UavRPYuwspwJprBb
yTFTcR6bKBtyvBFcuHmW1L1qLoSExz69FS2vD5N8cFoYlEpWdY7thXkI/3R6hc7g
T9zLIzV3UsVQEi4JP2A1jPeHQBRgavY6tpzSilEzs3PJH6s67FqBU5RwkiNETwIQ
+r4kqGnw3+i2aRk652ygiKZ2lcwA1o1mOuF5a4CRC2yPR4kmFqVqiAmK4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+GJjsJNw5SFqsKbvD4qAquYh1fMB8GA1UdIwQY
MBaAFP8dgzLhGKmiGH6rWIQnnWWA8Rn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hYWM2YmUtMTg1NS00ODRiLTgwMjUt
ZGVhMzBlY2I3MzZkLzEvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hYWM2YmUtMTg1NS00ODRiLTgwMjUtZGVhMzBlY2I3MzZk
LzEvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnpXzyUd
ng17slaJBeK2ejpNzLYZYKUSjKySZDHd8kv2C7Tuh/Hjo4TBz/4W/2tzEIUuUK9z
+r4g7+EaJ6EmAhJrArcLJoesPZsRo7v1TwBAkml2UYkvpJ5tQejfjBueYm2cmPsU
RucRPoB+yPVz+GpAIATgHyO0dEylhgI+WRUvjUNMMXg+k06f2Pbu6ste/Sx6HsEV
WlGrNkI/PVKftA6HIu6ObZJAi+eqhJZuDkhpvWd0IKBxteKBCsvkCKLFvu1/9ayj
b3+yg+GCf9HTw/3TItYEJe0imd6NFYkpGqsknulAnNU+5FE/hpGOMHCoTWshO1Ni
EkLBf28Xioe35Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:30:07 2025 by rpki-client