Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json)
Hash identifier: a8jek8QRz7iTNBLlTHdIBMwyPyFgPFv7QniaclN7YaI=
Subject key identifier: 92:6E:03:F4:7C:CC:FB:66:55:1E:44:09:3F:2B:A4:FA:34:61:A2:39
Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Certificate serial: 01984A09F4A865818391EB981E346F9F0932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 04:00:23 +0000
Manifest this update: Sun 27 Jul 2025 04:00:23 +0000
Manifest next update: Mon 28 Jul 2025 04:00:23 +0000
Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: nNDI4thiAifbxn5hCl6sxayq0GMvJo2SNqfCYFaswl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f4:a8:65:81:83:91:eb:98:1e:34:6f:9f:09:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Validity
Not Before: Jul 27 04:00:23 2025 GMT
Not After : Jul 28 04:00:23 2025 GMT
Subject: CN=926e03f47cccfb66551e44093f2ba4fa3461a239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:00:19:3a:9c:f3:b2:a5:5d:47:06:34:90:
f2:1f:8f:d2:be:0c:ed:e4:3b:02:95:80:9f:ea:52:
05:53:df:ca:3f:d0:a9:90:ba:5a:04:d2:b7:18:89:
be:a3:11:e5:aa:ea:19:9c:24:4f:6b:13:b0:db:b6:
a5:fc:78:bf:f3:02:51:b5:3a:fc:e4:97:5f:ef:0a:
b6:f1:5d:24:c9:3a:33:2b:4a:4b:e4:ca:3e:57:a5:
de:a3:63:73:6a:9c:78:05:c4:c3:87:ae:43:5b:d4:
2d:87:15:e6:f5:ab:89:86:66:55:85:0e:18:93:ea:
26:e9:cd:79:fc:e4:d3:70:0d:8d:98:bd:03:84:96:
3b:4a:e1:d3:38:7c:65:d6:8d:74:4f:ff:c5:81:96:
0d:5e:e4:20:4e:f4:84:f3:70:0a:99:38:21:63:b5:
5d:14:db:99:89:af:49:f9:45:e6:09:97:69:24:76:
07:23:3c:cb:72:c2:dd:43:9a:6a:ed:e0:c8:69:8c:
b8:0b:74:f1:9c:0a:a6:17:92:89:4c:20:de:9a:f2:
00:f5:92:73:e6:94:ef:e4:f6:e0:21:ab:a4:53:ec:
1b:a3:00:b2:25:7d:fd:4d:a3:4c:dd:ea:b1:03:e2:
06:f2:21:b6:be:7d:ba:55:45:c6:5e:5f:06:9c:2e:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6E:03:F4:7C:CC:FB:66:55:1E:44:09:3F:2B:A4:FA:34:61:A2:39
X509v3 Authority Key Identifier:
keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d5:c9:6c:f4:4a:9c:cd:ad:18:85:d3:58:22:0d:7d:b8:0c:
e2:95:df:3e:03:f0:e3:ce:c5:92:73:70:2d:ff:41:bb:3b:59:
80:5a:15:c3:40:1d:7c:ea:03:14:10:da:a6:f4:49:02:31:fc:
db:10:c2:4f:30:64:2a:0a:51:e7:e1:be:38:76:49:31:70:90:
58:7f:09:13:ea:2d:d7:af:46:ea:62:cc:b5:07:88:28:fd:e0:
50:76:eb:7a:57:b6:3d:7c:b9:1b:27:98:53:7b:b0:ae:9e:f1:
c8:bf:d4:90:7b:a2:84:5e:89:14:c5:d8:8e:d6:dd:9b:b8:f2:
c8:bc:be:0e:5e:56:d1:93:2f:c7:2b:25:96:e1:1f:c8:2d:68:
1f:88:48:e8:31:7d:7c:0c:d2:bf:e1:22:f0:0b:16:fb:ce:78:
87:b8:e0:03:9d:88:08:31:e8:7a:cc:5f:74:43:ef:ea:b5:28:
a2:4e:46:47:0d:af:9c:de:d3:83:d4:fb:e3:7d:8d:bb:97:fe:
90:4f:d4:39:63:15:50:ce:a0:57:65:03:7d:71:73:f6:98:72:
29:ba:71:68:a8:98:da:5f:50:4f:c8:d0:4d:3e:0c:a4:5b:a0:
7e:c6:82:e0:36:a1:ed:86:c5:cd:e5:2d:d9:b6:be:79:29:8d:
d7:62:80:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCfSoZYGDkeuYHjRvnwkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDQyYmQ3ODMyYTZhYmUxNmUxNTIyYTJkN2U0ZTQwZDNl
YmEwYTIwHhcNMjUwNzI3MDQwMDIzWhcNMjUwNzI4MDQwMDIzWjAzMTEwLwYDVQQD
Eyg5MjZlMDNmNDdjY2NmYjY2NTUxZTQ0MDkzZjJiYTRmYTM0NjFhMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YMAGTqc87KlXUcGNJDyH4/Svgzt
5DsClYCf6lIFU9/KP9CpkLpaBNK3GIm+oxHlquoZnCRPaxOw27al/Hi/8wJRtTr8
5Jdf7wq28V0kyTozK0pL5Mo+V6Xeo2Nzapx4BcTDh65DW9QthxXm9auJhmZVhQ4Y
k+om6c15/OTTcA2NmL0DhJY7SuHTOHxl1o10T//FgZYNXuQgTvSE83AKmTghY7Vd
FNuZia9J+UXmCZdpJHYHIzzLcsLdQ5pq7eDIaYy4C3TxnAqmF5KJTCDemvIA9ZJz
5pTv5PbgIaukU+wbowCyJX39TaNM3eqxA+IG8iG2vn26VUXGXl8GnC6miQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJuA/R8zPtmVR5ECT8rpPo0YaI5MB8GA1UdIwQY
MBaAFLvUK9eDKmq+FuFSKi1+TkDT66CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYt
ODBjOGE4NjdkNzcxLzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYtODBjOGE4NjdkNzcx
LzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedXJbPRK
nM2tGIXTWCINfbgM4pXfPgPw487FknNwLf9BuztZgFoVw0AdfOoDFBDapvRJAjH8
2xDCTzBkKgpR5+G+OHZJMXCQWH8JE+ot169G6mLMtQeIKP3gUHbrele2PXy5GyeY
U3uwrp7xyL/UkHuihF6JFMXYjtbdm7jyyLy+Dl5W0ZMvxyslluEfyC1oH4hI6DF9
fAzSv+Ei8AsW+854h7jgA52ICDHoesxfdEPv6rUook5GRw2vnN7Tg9T7432Nu5f+
kE/UOWMVUM6gV2UDfXFz9phyKbpxaKiY2l9QT8jQTT4MpFugfsaC4Dah7YbFzeUt
2ba+eSmN12KAxg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:19 2025 by rpki-client