Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier: h0lmnct4lJTkH3tckgPTgPzQf1c09up0JIehONM330g=
Subject key identifier: 3A:65:19:3A:FF:8A:A4:87:AC:36:B7:45:E3:A2:DA:A4:08:F4:89:A9
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer: /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial: 019849D34CFA3A32A492E3378F57CE880459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number: 095D
Signing time: Sun 27 Jul 2025 03:00:41 +0000
Manifest this update: Sun 27 Jul 2025 03:00:41 +0000
Manifest next update: Mon 28 Jul 2025 03:00:41 +0000
Files and hashes: 1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: g9rPVwrtm+4SiyKPnrcal6IOFnVfgNPOT2/MRpDPA84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:4c:fa:3a:32:a4:92:e3:37:8f:57:ce:88:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Validity
Not Before: Jul 27 03:00:41 2025 GMT
Not After : Jul 28 03:00:41 2025 GMT
Subject: CN=3a65193aff8aa487ac36b745e3a2daa408f489a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:b4:f3:c4:b0:49:d5:53:bc:ab:66:35:de:
b1:eb:39:22:43:c8:47:13:9d:6e:be:ce:de:49:ae:
86:40:23:16:21:5f:33:df:fb:9f:5f:4a:d2:50:aa:
2d:c2:39:fd:94:04:2f:20:49:d1:d4:94:c9:ac:50:
c6:fc:07:ae:85:25:85:dd:cf:82:f1:54:49:5d:f3:
a2:e1:49:16:b6:d1:ec:43:37:f8:9c:1c:2e:b3:af:
e7:b7:a5:d5:88:b0:21:4c:5d:11:c3:2d:cf:6e:b9:
a0:e7:e0:80:fc:d4:c8:cb:c2:81:f3:da:47:9f:fa:
d5:0e:b7:67:ee:4b:b7:60:5e:05:ae:67:ee:a1:9c:
47:eb:fb:50:75:c9:09:b0:66:fb:34:82:66:52:61:
dd:5f:ad:1b:e9:bb:bd:54:96:c0:b4:e0:8a:77:1d:
73:9a:f9:90:93:de:cf:2f:0e:42:03:ba:f7:5b:c1:
d8:f6:eb:ab:e9:e5:ac:ae:2d:c2:3e:ee:2f:f8:0d:
36:14:87:d5:d7:ee:fb:1d:b2:43:1f:18:81:0d:b6:
59:55:0b:93:57:d1:0e:d9:86:c5:d3:c8:d4:68:ca:
17:00:7a:d3:4c:33:b4:0b:33:43:46:be:a5:68:41:
7f:8e:03:12:ee:9c:2c:11:98:c4:b9:d1:82:65:71:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:65:19:3A:FF:8A:A4:87:AC:36:B7:45:E3:A2:DA:A4:08:F4:89:A9
X509v3 Authority Key Identifier:
keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:09:eb:f0:7f:ef:98:9a:1f:81:85:02:ec:47:3b:9c:39:5f:
a1:0e:10:bb:eb:93:27:33:b6:46:42:e8:8c:ba:13:76:88:66:
aa:2d:c9:7e:43:84:39:96:5e:3a:e6:58:e1:6c:cb:df:6e:08:
f9:1b:0c:db:72:d8:89:70:8e:4e:fd:11:f2:08:d7:0b:96:cb:
f7:ef:3c:4e:aa:61:38:35:d6:f8:cb:6b:d5:c4:62:5a:e9:aa:
14:64:d8:4f:67:e6:22:c7:99:f0:9a:a0:49:f6:75:e9:41:06:
40:13:5e:c4:93:a5:9a:b3:00:f1:72:8f:2d:8a:b7:40:4f:dd:
59:a8:73:60:81:ea:f0:86:90:38:46:83:8b:a0:68:b2:30:2c:
c7:8f:3c:be:22:2f:5e:b6:7b:36:5b:50:14:18:0e:13:a5:81:
78:75:08:c1:b8:02:66:3f:67:8b:c5:fd:0a:2a:3a:b4:b1:54:
78:8f:80:6f:46:ea:b9:92:c2:25:0e:9b:df:45:5e:8f:cb:6f:
e8:af:37:49:1f:96:b2:5e:2b:64:c8:e1:c6:a3:29:56:a4:ac:
c4:92:d8:3d:89:ca:df:c1:39:bf:84:ae:18:a9:95:25:f2:03:
00:21:94:4d:cf:5d:20:83:be:b3:fd:d0:d0:5c:3e:75:d5:c3:
f6:d8:09:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ00z6OjKkkuM3j1fOiARZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjI5YmQ2ODJmZTBhMzQxMDY5OGJkZDRjMjYyZGM5OWNj
MDI3OTcwHhcNMjUwNzI3MDMwMDQxWhcNMjUwNzI4MDMwMDQxWjAzMTEwLwYDVQQD
EygzYTY1MTkzYWZmOGFhNDg3YWMzNmI3NDVlM2EyZGFhNDA4ZjQ4OWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQW088SwSdVTvKtmNd6x6zkiQ8hH
E51uvs7eSa6GQCMWIV8z3/ufX0rSUKotwjn9lAQvIEnR1JTJrFDG/AeuhSWF3c+C
8VRJXfOi4UkWttHsQzf4nBwus6/nt6XViLAhTF0Rwy3Pbrmg5+CA/NTIy8KB89pH
n/rVDrdn7ku3YF4FrmfuoZxH6/tQdckJsGb7NIJmUmHdX60b6bu9VJbAtOCKdx1z
mvmQk97PLw5CA7r3W8HY9uur6eWsri3CPu4v+A02FIfV1+77HbJDHxiBDbZZVQuT
V9EO2YbF08jUaMoXAHrTTDO0CzNDRr6laEF/jgMS7pwsEZjEudGCZXG7UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDplGTr/iqSHrDa3ReOi2qQI9ImpMB8GA1UdIwQY
MBaAFDMim9aC/go0EGmL3UwmLcmcwCeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlLYjFvTC1DalFRYVl2ZFRDWXR5WnpBSjVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mOGRkOTgtODFiNi00ZGY4LTkxNTQt
MDdkZWYxMGExMThiLzEvTXlLYjFvTC1DalFRYVl2ZFRDWXR5WnpBSjVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mOGRkOTgtODFiNi00ZGY4LTkxNTQtMDdkZWYxMGExMThi
LzEvTXlLYjFvTC1DalFRYVl2ZFRDWXR5WnpBSjVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAnr8H/v
mJofgYUC7Ec7nDlfoQ4Qu+uTJzO2RkLojLoTdohmqi3JfkOEOZZeOuZY4WzL324I
+RsM23LYiXCOTv0R8gjXC5bL9+88TqphODXW+Mtr1cRiWumqFGTYT2fmIseZ8Jqg
SfZ16UEGQBNexJOlmrMA8XKPLYq3QE/dWahzYIHq8IaQOEaDi6BosjAsx488viIv
XrZ7NltQFBgOE6WBeHUIwbgCZj9ni8X9Cio6tLFUeI+Ab0bquZLCJQ6b30Vej8tv
6K83SR+Wsl4rZMjhxqMpVqSsxJLYPYnK38E5v4SuGKmVJfIDACGUTc9dIIO+s/3Q
0Fw+ddXD9tgJnw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:14 2025 by rpki-client