Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: YaH4E079JiAHS7ffN+pqqWIHK8yZu8/7aUSbZkWXT4U=
Subject key identifier: 15:98:DB:E4:07:5E:D4:2D:CA:9A:F3:21:B5:39:CB:30:54:2E:9F:65
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019847E494FD9E7EBB650A0BC76FA3FC6B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 18:00:19 +0000
Manifest this update: Sat 26 Jul 2025 18:00:19 +0000
Manifest next update: Sun 27 Jul 2025 18:00:19 +0000
Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: vHxZKC1NsGiVyhMgYr+7O2b/9tKOKclX8dh9W5T3umc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:94:fd:9e:7e:bb:65:0a:0b:c7:6f:a3:fc:6b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jul 26 18:00:19 2025 GMT
Not After : Jul 27 18:00:19 2025 GMT
Subject: CN=1598dbe4075ed42dca9af321b539cb30542e9f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:0d:80:ca:6c:39:43:7a:5b:1b:4b:b1:a2:
b8:c0:c1:be:e8:fe:82:cc:ac:9d:4b:98:08:de:d1:
a7:b3:5d:23:6f:cb:ce:bd:8a:39:b3:df:eb:79:6d:
84:d9:e8:8a:18:a7:58:be:74:ec:13:c6:ab:3c:12:
e3:02:7c:57:f2:c0:53:d6:56:93:56:2a:03:9f:dc:
65:39:ad:50:6f:ef:7a:3a:8e:48:dd:46:a3:06:31:
f6:21:88:6b:9e:ab:87:93:83:17:9b:9e:b7:6d:00:
ab:e4:03:61:ab:b1:c1:98:84:ab:d9:7a:6f:76:34:
4a:35:de:cd:48:04:53:48:02:df:6d:ae:1b:b2:8a:
fd:ed:a0:33:cb:4b:0e:b2:49:c8:2a:13:d9:9b:5b:
ba:26:18:c0:8f:bb:e4:32:4c:6d:54:e9:02:94:6d:
73:3d:a2:9e:b9:19:7f:76:1c:d7:79:90:e5:5d:ae:
4e:24:05:f2:e4:6d:72:53:1a:9a:78:2d:88:8b:ff:
b4:69:d2:2d:c8:05:e1:23:0b:e5:13:22:e5:51:87:
b6:75:4a:97:aa:b5:4d:5a:4e:5a:1c:d0:99:d9:97:
73:a5:a8:da:92:3f:e9:68:72:5c:ce:8b:f3:dd:91:
55:86:0e:ad:ee:f2:80:c3:01:a3:a5:f6:37:bc:03:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:98:DB:E4:07:5E:D4:2D:CA:9A:F3:21:B5:39:CB:30:54:2E:9F:65
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6f:35:10:b5:f5:0e:49:ea:d7:93:84:30:41:21:3b:32:88:
a2:b2:a7:61:73:de:e3:47:c9:f1:bb:53:76:86:f7:92:28:f5:
2b:b9:9d:13:5f:4d:54:0b:2d:92:b9:07:de:e8:67:37:57:0c:
14:33:28:71:15:51:97:4c:31:dd:4e:eb:74:c7:83:37:04:2b:
19:2e:01:c4:39:8f:8c:82:0f:97:8a:eb:05:c1:e9:b1:18:b5:
5e:28:3b:ae:bd:c3:ea:66:d0:ce:ce:e7:14:5c:19:3c:9b:92:
b9:62:1c:ee:28:24:78:48:6d:98:24:4d:66:82:e1:40:c3:3e:
a7:4b:4a:94:ab:b8:ac:2d:b8:fb:2e:f6:6b:5f:21:3c:2d:90:
b9:91:2c:ae:71:90:77:bd:a0:46:15:93:df:c8:b4:f9:78:cb:
12:0f:a2:78:e3:2b:e2:99:bf:e2:74:3e:20:d5:09:e1:0b:4c:
ed:24:a4:a6:3d:4f:17:87:13:d1:b0:2e:c8:4e:00:a1:4e:3e:
0d:5b:a2:98:a7:78:43:45:fc:9c:32:72:3f:f7:ce:f8:ca:b4:
04:39:65:a8:bc:36:81:12:79:b5:de:f8:6e:f3:07:2d:96:15:
53:03:fe:2a:85:1a:40:79:d5:14:fa:e4:f9:bb:d7:60:7b:d4:
f9:e6:30:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5JT9nn67ZQoLx2+j/Gt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNTBiYWFkZmYyYzI4NmM2MGI5NjEwN2QyYzY0ZDUzN2Vj
MGFjYTYwHhcNMjUwNzI2MTgwMDE5WhcNMjUwNzI3MTgwMDE5WjAzMTEwLwYDVQQD
EygxNTk4ZGJlNDA3NWVkNDJkY2E5YWYzMjFiNTM5Y2IzMDU0MmU5ZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSoNgMpsOUN6WxtLsaK4wMG+6P6C
zKydS5gI3tGns10jb8vOvYo5s9/reW2E2eiKGKdYvnTsE8arPBLjAnxX8sBT1laT
VioDn9xlOa1Qb+96Oo5I3UajBjH2IYhrnquHk4MXm563bQCr5ANhq7HBmISr2Xpv
djRKNd7NSARTSALfba4bsor97aAzy0sOsknIKhPZm1u6JhjAj7vkMkxtVOkClG1z
PaKeuRl/dhzXeZDlXa5OJAXy5G1yUxqaeC2Ii/+0adItyAXhIwvlEyLlUYe2dUqX
qrVNWk5aHNCZ2Zdzpajakj/paHJczovz3ZFVhg6t7vKAwwGjpfY3vAN9wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWY2+QHXtQtyprzIbU5yzBULp9lMB8GA1UdIwQY
MBaAFHJQuq3/LChsYLlhB9LGTVN+wKymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEt
OGU5YjUxMWNhYzFhLzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEtOGU5YjUxMWNhYzFh
LzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATG81ELX1
Dknq15OEMEEhOzKIorKnYXPe40fJ8btTdob3kij1K7mdE19NVAstkrkH3uhnN1cM
FDMocRVRl0wx3U7rdMeDNwQrGS4BxDmPjIIPl4rrBcHpsRi1Xig7rr3D6mbQzs7n
FFwZPJuSuWIc7igkeEhtmCRNZoLhQMM+p0tKlKu4rC24+y72a18hPC2QuZEsrnGQ
d72gRhWT38i0+XjLEg+ieOMr4pm/4nQ+INUJ4QtM7SSkpj1PF4cT0bAuyE4AoU4+
DVuimKd4Q0X8nDJyP/fO+Mq0BDllqLw2gRJ5td74bvMHLZYVUwP+KoUaQHnVFPrk
+bvXYHvU+eYwuA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:55:52 2025 by rpki-client