Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
File: 582m42RtyToNLUKV0esJR2xmvKY.mft (raw, json)
Hash identifier: 0VDSJQjpEUH9dETwF1DpH9Q7bwj7aPWw/GGjYG3NNlQ=
Subject key identifier: 69:DD:2E:2C:0D:79:8E:35:6A:F4:B7:75:CB:7C:42:0D:C5:5E:41:12
Authority key identifier: E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
Certificate issuer: /CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Certificate serial: 01984852DB713BFF67D05033620DCAD88AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
Manifest number: 0327
Signing time: Sat 26 Jul 2025 20:00:46 +0000
Manifest this update: Sat 26 Jul 2025 20:00:46 +0000
Manifest next update: Sun 27 Jul 2025 20:00:46 +0000
Files and hashes: 1: 582m42RtyToNLUKV0esJR2xmvKY.crl (hash: 9N4uNz1E2I/hWOEPo7JvqWqA4HerlDupyhSsrAj9DPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:db:71:3b:ff:67:d0:50:33:62:0d:ca:d8:8a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Validity
Not Before: Jul 26 20:00:46 2025 GMT
Not After : Jul 27 20:00:46 2025 GMT
Subject: CN=69dd2e2c0d798e356af4b775cb7c420dc55e4112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:ec:ea:87:be:c3:6b:76:a7:f4:bb:f3:c1:
35:f4:bb:07:11:50:0a:2c:7c:aa:44:cd:29:bf:0a:
69:8b:f6:2a:8f:c0:39:c4:8e:e4:38:4b:05:cd:27:
18:7a:80:b8:0e:bd:22:c1:6f:58:16:4a:1f:77:fc:
a6:89:28:79:75:8f:61:32:f6:70:9c:d1:f8:d2:bc:
5d:60:9b:c6:38:38:b7:d8:f4:87:6c:7c:7c:c4:a4:
02:47:f4:50:bb:a5:c6:e0:81:bc:59:fb:be:02:5f:
05:5c:64:b5:be:0b:33:9f:25:eb:48:ce:65:97:2a:
f1:52:74:da:b1:8d:90:4a:55:21:5d:57:f2:97:ea:
73:05:a9:b2:72:b0:41:c5:25:e1:f6:5e:aa:5e:17:
70:6a:df:69:49:e7:9f:e8:68:cc:95:fc:71:e1:85:
18:f7:51:3f:e9:7e:f0:d3:10:97:ab:58:43:f0:1a:
69:55:f1:2c:a6:25:eb:3f:47:05:f0:c8:f3:f3:f2:
ba:5f:cf:8f:6e:ef:e4:4a:9b:33:fe:b0:a7:dd:31:
99:16:b5:e6:b6:cf:3a:85:ff:5e:b6:6f:95:98:8d:
4e:a8:48:52:89:b4:ad:8a:03:05:d7:5b:a9:3a:cc:
e3:8d:84:2e:e3:5a:5a:49:97:05:f1:32:86:34:6c:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:2E:2C:0D:79:8E:35:6A:F4:B7:75:CB:7C:42:0D:C5:5E:41:12
X509v3 Authority Key Identifier:
keyid:E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0e:6c:2b:68:ab:30:03:59:3a:54:5c:5b:1b:b7:21:78:2b:
92:2e:c4:c8:a9:2b:41:8e:34:aa:c8:36:ca:6f:59:97:e6:17:
6e:65:79:d6:d0:7d:fd:44:86:2d:bb:cb:d3:09:f5:29:bb:54:
7f:b3:27:aa:f1:1a:c2:89:17:b4:8d:fd:5b:e5:57:c2:cf:f0:
88:2f:c2:87:ef:1f:30:1a:35:e8:b1:ad:1f:8f:2a:29:09:cd:
45:37:75:bc:c6:ec:51:23:4e:76:c4:a1:f9:78:af:92:16:35:
2c:5d:f7:3c:a8:29:f0:ce:24:66:0d:66:52:7e:32:60:e0:e4:
e4:8f:d7:4f:e6:d5:c7:91:26:6a:e9:72:15:f5:69:2c:82:66:
db:e1:f9:35:90:47:c1:23:9c:dc:04:a5:b9:7a:47:30:ed:8a:
65:b2:6e:5b:a7:27:4d:6e:c4:cc:38:ea:17:8b:f8:51:fd:ec:
a8:10:cf:51:ca:e9:f8:f2:b0:1a:a6:72:5e:28:30:bd:da:31:
17:da:44:55:24:67:fe:bb:d5:fe:1b:b7:0c:10:7d:fa:00:a9:
a3:9d:e6:97:0c:42:3b:2f:09:08:97:64:91:3e:d2:5d:5f:0f:
3c:ce:32:3e:70:a9:94:22:25:cf:53:52:b3:9c:cf:12:da:8f:
08:99:5d:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUttxO/9n0FAzYg3K2IrtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2RhNmUzNjQ2ZGM5M2EwZDJkNDI5NWQxZWIwOTQ3NmM2
NmJjYTYwHhcNMjUwNzI2MjAwMDQ2WhcNMjUwNzI3MjAwMDQ2WjAzMTEwLwYDVQQD
Eyg2OWRkMmUyYzBkNzk4ZTM1NmFmNGI3NzVjYjdjNDIwZGM1NWU0MTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Ps6oe+w2t2p/S788E19LsHEVAK
LHyqRM0pvwppi/Yqj8A5xI7kOEsFzScYeoC4Dr0iwW9YFkofd/ymiSh5dY9hMvZw
nNH40rxdYJvGODi32PSHbHx8xKQCR/RQu6XG4IG8Wfu+Al8FXGS1vgsznyXrSM5l
lyrxUnTasY2QSlUhXVfyl+pzBamycrBBxSXh9l6qXhdwat9pSeef6GjMlfxx4YUY
91E/6X7w0xCXq1hD8BppVfEspiXrP0cF8Mjz8/K6X8+Pbu/kSpsz/rCn3TGZFrXm
ts86hf9etm+VmI1OqEhSibStigMF11upOszjjYQu41paSZcF8TKGNGyCUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGndLiwNeY41avS3dct8Qg3FXkESMB8GA1UdIwQY
MBaAFOfNpuNkbck6DS1CldHrCUdsZrymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTgybTQyUnR5VG9OTFVLVjBlc0pSMnhtdktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zYTZkMjgtMWM0My00YjhiLWI3MTMt
NTY4YzQwN2IzMGY3LzEvNTgybTQyUnR5VG9OTFVLVjBlc0pSMnhtdktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zYTZkMjgtMWM0My00YjhiLWI3MTMtNTY4YzQwN2IzMGY3
LzEvNTgybTQyUnR5VG9OTFVLVjBlc0pSMnhtdktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeA5sK2ir
MANZOlRcWxu3IXgrki7EyKkrQY40qsg2ym9Zl+YXbmV51tB9/USGLbvL0wn1KbtU
f7MnqvEawokXtI39W+VXws/wiC/Ch+8fMBo16LGtH48qKQnNRTd1vMbsUSNOdsSh
+XivkhY1LF33PKgp8M4kZg1mUn4yYODk5I/XT+bVx5EmaulyFfVpLIJm2+H5NZBH
wSOc3ASluXpHMO2KZbJuW6cnTW7EzDjqF4v4Uf3sqBDPUcrp+PKwGqZyXigwvdox
F9pEVSRn/rvV/hu3DBB9+gCpo53mlwxCOy8JCJdkkT7SXV8PPM4yPnCplCIlz1NS
s5zPEtqPCJldzQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:06:45 2025 by rpki-client