Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: iQWmRNq5X9EYddZKVwN4k4W1+VIRsvnUvsnZJ3YAWGA=
Subject key identifier: 86:ED:31:48:55:E7:4F:FB:91:40:67:74:40:CB:82:9D:8E:E4:A1:88
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 01984B8A3B0EFB6275C783B3DE1BD99C3765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 0526
Signing time: Sun 27 Jul 2025 11:00:06 +0000
Manifest this update: Sun 27 Jul 2025 11:00:06 +0000
Manifest next update: Mon 28 Jul 2025 11:00:06 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: os8Uy8AYM0X7hA1T7/rwB0dviwwcy59RVy9T0DStzUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:3b:0e:fb:62:75:c7:83:b3:de:1b:d9:9c:37:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: Jul 27 11:00:06 2025 GMT
Not After : Jul 28 11:00:06 2025 GMT
Subject: CN=86ed314855e74ffb9140677440cb829d8ee4a188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:51:1a:36:83:50:58:1b:f3:c3:0a:4f:86:
3f:bc:97:31:12:5c:90:a0:cc:a5:9e:59:7f:87:83:
64:d7:96:87:3d:4b:87:5e:1c:eb:84:86:13:e5:6d:
f8:0c:8e:93:5e:a6:05:ed:83:7e:a9:5f:3c:d3:71:
56:63:80:f2:b9:e0:46:37:c8:be:e7:c4:04:73:56:
07:85:f7:08:5f:68:80:82:9e:43:c8:e8:d5:5d:9d:
08:74:52:d2:ae:ec:d5:01:bc:90:71:ad:99:41:5f:
56:24:5a:d3:aa:e9:e5:db:a7:cf:d7:c6:f0:15:62:
8f:1f:3e:af:67:d1:b5:e1:08:ff:ce:27:d3:66:49:
c9:23:2a:0e:27:4e:bd:a4:39:35:ae:ef:90:44:20:
26:94:50:29:06:5b:ef:06:eb:c9:57:a1:9e:51:13:
18:34:56:93:0b:a3:62:08:fe:f4:bc:0b:eb:bd:29:
e9:2f:4f:fa:37:c6:70:b4:82:1b:5c:9e:46:55:4b:
42:be:fe:91:f8:b1:ff:16:0c:bc:4a:78:8a:dd:e6:
79:a6:2b:3c:ce:98:ea:ce:65:ee:e9:29:39:89:3f:
49:65:2e:fe:57:5b:6e:32:ae:df:65:ba:d7:50:85:
04:6f:97:4d:c1:ac:4b:59:14:ae:82:ca:bd:64:45:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:31:48:55:E7:4F:FB:91:40:67:74:40:CB:82:9D:8E:E4:A1:88
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4c:54:de:a1:d8:fb:3b:87:fc:88:58:d2:11:21:94:3a:f9:
c5:f6:e9:31:73:cc:0c:df:4f:25:79:ea:55:4e:72:30:12:05:
a6:d0:e0:65:0f:b5:f7:fc:d2:dd:f5:6a:3a:b6:f2:d3:9c:a6:
cc:7a:f8:17:aa:b7:ec:48:b7:af:5a:94:ee:5c:75:96:11:fc:
de:af:e8:8f:ad:aa:67:bc:3d:ff:48:67:c2:ad:c4:0d:b0:b8:
44:36:29:a0:e4:f5:b1:2f:0c:2a:54:14:f8:56:43:1e:06:71:
80:7c:91:48:49:50:02:74:f4:41:8d:27:4c:c5:74:48:93:66:
ef:75:ce:a8:b9:6a:23:7b:73:d9:44:2e:6b:89:5e:ab:d9:59:
9b:ab:29:54:90:8a:e8:06:23:0b:56:17:64:fd:0d:56:81:30:
20:ca:6c:1f:40:30:c0:d4:38:38:52:b8:68:e6:7d:b1:46:f4:
0f:a0:42:72:b6:bc:8d:46:35:34:e2:82:5c:5f:93:54:42:77:
7b:d9:cc:d5:af:bb:5e:c4:9b:82:9b:ea:fa:ba:7b:69:e2:ce:
33:16:98:5d:51:a9:cb:84:ec:0f:54:91:61:45:72:8d:88:c3:
6e:c5:fa:ae:1c:38:17:1c:d7:fb:1d:6d:46:e5:6d:cb:80:3b:
bb:08:c2:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLijsO+2J1x4Oz3hvZnDdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjEzNGIyNmE1ZjNmN2NjZDhjYWY1ZDJjNmJlNzBjYWMw
ZmEyNGIwHhcNMjUwNzI3MTEwMDA2WhcNMjUwNzI4MTEwMDA2WjAzMTEwLwYDVQQD
Eyg4NmVkMzE0ODU1ZTc0ZmZiOTE0MDY3NzQ0MGNiODI5ZDhlZTRhMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbBRGjaDUFgb88MKT4Y/vJcxElyQ
oMylnll/h4Nk15aHPUuHXhzrhIYT5W34DI6TXqYF7YN+qV8803FWY4DyueBGN8i+
58QEc1YHhfcIX2iAgp5DyOjVXZ0IdFLSruzVAbyQca2ZQV9WJFrTqunl26fP18bw
FWKPHz6vZ9G14Qj/zifTZknJIyoOJ069pDk1ru+QRCAmlFApBlvvBuvJV6GeURMY
NFaTC6NiCP70vAvrvSnpL0/6N8ZwtIIbXJ5GVUtCvv6R+LH/Fgy8SniK3eZ5pis8
zpjqzmXu6Sk5iT9JZS7+V1tuMq7fZbrXUIUEb5dNwaxLWRSugsq9ZEWvUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbtMUhV50/7kUBndEDLgp2O5KGIMB8GA1UdIwQY
MBaAFLvxNLJqXz98zYyvXSxr5wysD6JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQt
OTViYzY0MGUzYzU2LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQtOTViYzY0MGUzYzU2
LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUxU3qHY
+zuH/IhY0hEhlDr5xfbpMXPMDN9PJXnqVU5yMBIFptDgZQ+19/zS3fVqOrby05ym
zHr4F6q37Ei3r1qU7lx1lhH83q/oj62qZ7w9/0hnwq3EDbC4RDYpoOT1sS8MKlQU
+FZDHgZxgHyRSElQAnT0QY0nTMV0SJNm73XOqLlqI3tz2UQua4leq9lZm6spVJCK
6AYjC1YXZP0NVoEwIMpsH0AwwNQ4OFK4aOZ9sUb0D6BCcra8jUY1NOKCXF+TVEJ3
e9nM1a+7XsSbgpvq+rp7aeLOMxaYXVGpy4TsD1SRYUVyjYjDbsX6rhw4FxzX+x1t
RuVty4A7uwjCWQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:22:27 2025 by rpki-client