Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: mDY0uxGEg0r5ok/dswoOk0aShlmOkYviYnitA+flKGg=
Subject key identifier: 51:16:33:CE:59:48:46:E3:CA:24:7F:0B:C1:44:4B:6B:C3:A1:0A:FF
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 01984C9D3C2C6E0DD6E10C84269DFF931D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 16:00:29 +0000
Manifest this update: Sun 27 Jul 2025 16:00:29 +0000
Manifest next update: Mon 28 Jul 2025 16:00:29 +0000
Files and hashes: 1: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: 9WuuU+D47TYGNpHH/E7U+J42kKYL60KbXhtRiq6LquM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:3c:2c:6e:0d:d6:e1:0c:84:26:9d:ff:93:1d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Jul 27 16:00:29 2025 GMT
Not After : Jul 28 16:00:29 2025 GMT
Subject: CN=511633ce594846e3ca247f0bc1444b6bc3a10aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:28:86:3a:ab:45:f7:6d:1c:bb:c6:b1:fc:
af:56:e0:94:50:e2:dd:d9:68:24:37:9b:17:d1:f7:
24:4f:a4:85:50:3d:25:7e:3b:0a:9d:55:aa:b8:68:
54:41:5a:b6:6c:0f:f3:8b:98:2a:ac:ba:83:c8:ba:
6d:10:ba:84:65:c5:a2:ff:88:6e:10:00:fb:0a:66:
5d:a6:60:35:b1:f6:1d:59:db:8f:af:b5:39:13:71:
01:44:be:02:da:aa:6f:b9:42:3e:f1:64:5d:25:70:
6e:b0:91:b1:da:97:56:33:65:e2:fa:1b:52:94:d1:
0e:91:f3:9f:34:5c:d9:e7:33:6e:16:ac:74:bc:db:
f5:d0:ae:7d:5c:0c:60:dc:3d:2d:95:be:84:ab:69:
ff:09:b7:84:d2:0c:26:76:43:3e:8e:79:80:a3:a9:
58:e5:4e:4d:fd:06:f7:04:eb:09:c6:ab:22:66:44:
e6:36:f6:30:d9:19:10:38:d9:18:7e:ff:90:e7:b9:
9a:1d:ef:61:2f:c5:56:66:c7:8c:03:0f:2b:31:3a:
cf:be:36:35:b9:c0:7f:ba:bf:67:a2:4c:d3:f9:37:
fc:a1:77:a1:d9:c2:14:9a:90:c0:5e:c0:4d:58:28:
99:cd:fd:3a:7d:95:bf:8c:d7:bd:39:80:e1:53:78:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:33:CE:59:48:46:E3:CA:24:7F:0B:C1:44:4B:6B:C3:A1:0A:FF
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:28:f8:f7:33:61:bd:ea:76:eb:f6:1a:2c:14:ec:ec:08:4f:
0f:03:39:3c:0a:2e:ab:5f:d9:60:d5:59:f5:ed:43:0a:3e:34:
e4:fc:94:91:a5:69:e3:31:05:18:b2:f0:dc:5c:93:8a:d1:c4:
a8:4a:f6:0e:b4:36:55:a7:81:44:c2:d7:6f:26:9b:0e:74:69:
54:6a:e3:75:40:d3:d0:ba:35:ef:64:7e:5d:e2:ce:70:6f:31:
b0:1c:b7:3b:32:b0:1d:cf:3f:a3:50:2f:df:4b:ff:0d:5e:93:
9d:64:48:0b:05:32:5c:25:9d:d9:cc:c3:b4:18:fd:c0:d1:8f:
51:80:15:58:c5:cd:7a:af:a5:a9:6b:cf:48:cd:be:87:cc:d2:
eb:98:5b:d7:1b:c1:6a:02:c0:91:3e:4a:1c:27:fa:73:52:74:
f5:75:5e:67:a0:fd:ef:15:be:8a:e6:9f:7d:bf:a6:ac:96:b6:
1e:23:1a:71:1e:ae:8a:0e:b7:8b:fc:6a:c0:90:a5:98:f3:fc:
48:54:a0:b4:d6:e6:e2:21:f2:4e:98:7b:cb:34:1e:94:9e:ec:
b4:2f:62:9b:90:81:5e:dc:66:18:6c:1c:62:e7:64:40:ac:b5:
37:71:1a:6b:c2:ce:27:8d:fd:fd:ff:d4:3b:1c:ea:2b:ee:54:
b6:6c:2f:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhMnTwsbg3W4QyEJp3/kx0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODg5YmRhNTRmODg1N2RhNDI5MGM2Nzc5YmMwMDYxMWU3
M2UyMTIwHhcNMjUwNzI3MTYwMDI5WhcNMjUwNzI4MTYwMDI5WjAzMTEwLwYDVQQD
Eyg1MTE2MzNjZTU5NDg0NmUzY2EyNDdmMGJjMTQ0NGI2YmMzYTEwYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqYohjqrRfdtHLvGsfyvVuCUUOLd
2WgkN5sX0fckT6SFUD0lfjsKnVWquGhUQVq2bA/zi5gqrLqDyLptELqEZcWi/4hu
EAD7CmZdpmA1sfYdWduPr7U5E3EBRL4C2qpvuUI+8WRdJXBusJGx2pdWM2Xi+htS
lNEOkfOfNFzZ5zNuFqx0vNv10K59XAxg3D0tlb6Eq2n/CbeE0gwmdkM+jnmAo6lY
5U5N/Qb3BOsJxqsiZkTmNvYw2RkQONkYfv+Q57maHe9hL8VWZseMAw8rMTrPvjY1
ucB/ur9nokzT+Tf8oXeh2cIUmpDAXsBNWCiZzf06fZW/jNe9OYDhU3gcWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEWM85ZSEbjyiR/C8FES2vDoQr/MB8GA1UdIwQY
MBaAFHWIm9pU+IV9pCkMZ3m8AGEec+ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82ZGIyZjYtZTg3Yi00ZTFjLTgyYzct
ZTc4NTUzYTAzN2JkLzEvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82ZGIyZjYtZTg3Yi00ZTFjLTgyYzctZTc4NTUzYTAzN2Jk
LzEvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCj49zNh
vep26/YaLBTs7AhPDwM5PAouq1/ZYNVZ9e1DCj405PyUkaVp4zEFGLLw3FyTitHE
qEr2DrQ2VaeBRMLXbyabDnRpVGrjdUDT0Lo172R+XeLOcG8xsBy3OzKwHc8/o1Av
30v/DV6TnWRICwUyXCWd2czDtBj9wNGPUYAVWMXNeq+lqWvPSM2+h8zS65hb1xvB
agLAkT5KHCf6c1J09XVeZ6D97xW+iuaffb+mrJa2HiMacR6uig63i/xqwJClmPP8
SFSgtNbm4iHyTph7yzQelJ7stC9im5CBXtxmGGwcYudkQKy1N3Eaa8LOJ439/f/U
OxzqK+5Utmwv1A==
-----END CERTIFICATE-----
Generated at Mon Jul 28 01:21:34 2025 by rpki-client