Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: 0lSCAEyJ1dRxk0+W1aZ4G4loNg01sZx2UfO0gbVA8uM=
Subject key identifier: 6D:84:3F:80:EE:76:DA:6A:E4:43:2D:DE:B9:9B:52:E9:22:BE:B3:0C
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 0198530EC3245E31BE7111049C11E9F7447B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0A56
Signing time: Mon 28 Jul 2025 22:02:13 +0000
Manifest this update: Mon 28 Jul 2025 22:02:13 +0000
Manifest next update: Tue 29 Jul 2025 22:02:13 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: ZLoGbRqvCCKZXe1/YPFfRYB5vomOg9Wdiyr9zMtq0C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:c3:24:5e:31:be:71:11:04:9c:11:e9:f7:44:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Jul 28 22:02:13 2025 GMT
Not After : Jul 29 22:02:13 2025 GMT
Subject: CN=6d843f80ee76da6ae4432ddeb99b52e922beb30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:85:39:22:9e:e7:5f:25:a0:6a:bc:30:f1:
54:9b:e3:75:aa:07:59:8e:81:f5:34:7b:e1:7d:f1:
ae:f6:f6:f8:cb:11:05:b2:b0:90:5d:c5:10:04:ab:
4d:82:5d:6c:69:39:a9:38:81:34:58:57:75:31:9a:
fe:1d:96:16:d4:8c:8a:96:bf:4d:9e:a7:f6:da:90:
b3:e2:3d:ef:2d:21:23:70:94:c0:68:c4:f9:c8:07:
d0:d7:99:9d:32:e6:7f:98:cc:e8:f1:93:b0:55:ea:
3b:8f:5d:91:0c:59:49:41:83:78:0c:d9:0d:47:2b:
c7:73:7b:5d:76:d0:77:39:18:d9:bd:43:42:ca:9c:
21:6a:94:a7:66:e6:33:3d:b1:31:80:b5:fe:03:3e:
65:bb:a9:0f:ce:09:ea:0d:34:33:bf:77:1b:a5:2e:
59:ff:d4:24:ff:44:24:90:b6:be:9f:39:c1:42:93:
65:4c:da:35:e8:70:b0:e5:3a:83:40:06:5a:df:50:
f2:49:30:e6:5c:b4:e1:64:31:de:a2:c1:6a:0f:d8:
72:7f:bc:9a:bd:ac:bf:69:f0:52:b6:8c:6e:62:2d:
14:8b:96:42:72:18:2f:b6:d6:a6:24:6c:b1:59:32:
7f:37:14:67:f7:fe:3e:71:b1:2e:1c:44:17:a1:4f:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:3F:80:EE:76:DA:6A:E4:43:2D:DE:B9:9B:52:E9:22:BE:B3:0C
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b5:54:53:c7:a2:76:31:28:1b:01:e5:14:00:d9:dd:6f:ba:
ee:46:cd:c7:05:20:0f:3f:70:f7:dc:7b:eb:da:b8:c6:c3:7a:
1e:5b:25:3b:59:d3:91:95:2a:0f:fd:ba:a8:13:34:be:da:09:
47:65:23:56:40:f3:87:a3:3a:b8:a2:95:fb:9b:e0:42:67:85:
1c:8a:39:fe:72:d1:a8:cf:8b:3b:71:1c:02:52:78:55:cf:04:
cf:2c:04:57:73:b3:cf:aa:ab:54:b4:53:ae:26:09:d6:04:ed:
46:2c:c5:47:ac:ca:f9:d7:f2:d2:de:2d:a3:9a:f7:45:23:b0:
c9:5d:42:4f:24:db:a2:f9:3d:48:de:c4:14:49:c6:97:ad:8e:
17:22:b8:fd:be:92:05:14:07:ec:86:75:39:42:3f:ac:5e:de:
b9:a8:b7:ba:d0:a8:80:49:be:d4:86:e9:28:58:61:20:44:d3:
97:20:f8:38:a9:47:e4:7d:fb:65:3f:60:7f:25:75:e4:17:c8:
57:bd:49:6e:32:1d:32:3e:26:f0:69:8c:ca:a5:57:6e:19:5b:
bc:83:a0:5b:ad:73:fc:33:76:0d:e3:95:fd:c1:f0:c3:80:29:
4e:5e:1a:d4:13:4f:18:cc:62:6d:ea:9e:40:a0:87:58:43:22:
5d:35:72:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDsMkXjG+cREEnBHp90R7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NjMxOTVkNWNmYzdiOTUyNzM1MDY0MDZmYTkwOTFjMjJm
NmM0MjQwHhcNMjUwNzI4MjIwMjEzWhcNMjUwNzI5MjIwMjEzWjAzMTEwLwYDVQQD
Eyg2ZDg0M2Y4MGVlNzZkYTZhZTQ0MzJkZGViOTliNTJlOTIyYmViMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3yFOSKe518loGq8MPFUm+N1qgdZ
joH1NHvhffGu9vb4yxEFsrCQXcUQBKtNgl1saTmpOIE0WFd1MZr+HZYW1IyKlr9N
nqf22pCz4j3vLSEjcJTAaMT5yAfQ15mdMuZ/mMzo8ZOwVeo7j12RDFlJQYN4DNkN
RyvHc3tddtB3ORjZvUNCypwhapSnZuYzPbExgLX+Az5lu6kPzgnqDTQzv3cbpS5Z
/9Qk/0QkkLa+nznBQpNlTNo16HCw5TqDQAZa31DySTDmXLThZDHeosFqD9hyf7ya
vay/afBStoxuYi0Ui5ZCchgvttamJGyxWTJ/NxRn9/4+cbEuHEQXoU98WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2EP4Dudtpq5EMt3rmbUukivrMMMB8GA1UdIwQY
MBaAFMdjGV1c/HuVJzUGQG+pCRwi9sQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUt
MzQ5YmRjZmY0NDIwLzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUtMzQ5YmRjZmY0NDIw
LzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLVUU8ei
djEoGwHlFADZ3W+67kbNxwUgDz9w99x769q4xsN6HlslO1nTkZUqD/26qBM0vtoJ
R2UjVkDzh6M6uKKV+5vgQmeFHIo5/nLRqM+LO3EcAlJ4Vc8EzywEV3Ozz6qrVLRT
riYJ1gTtRizFR6zK+dfy0t4to5r3RSOwyV1CTyTbovk9SN7EFEnGl62OFyK4/b6S
BRQH7IZ1OUI/rF7euai3utCogEm+1IbpKFhhIETTlyD4OKlH5H37ZT9gfyV15BfI
V71JbjIdMj4m8GmMyqVXbhlbvIOgW61z/DN2DeOV/cHww4ApTl4a1BNPGMxibeqe
QKCHWEMiXTVyIA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:41:30 2025 by rpki-client