Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
File: mXZKyKibCft4hQ10xo4dqo8-KvE.mft (raw, json)
Hash identifier: vHnX29QDgoQfSEhHgNdOD3ngW4s/9A3G2JqWz1hmsJI=
Subject key identifier: A8:69:D7:12:56:23:66:7B:34:EA:ED:FA:3B:C4:5D:71:A3:C7:7F:0C
Authority key identifier: 99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
Certificate issuer: /CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Certificate serial: 019849D3CBAF48142AC9751ECFAAD0FCA811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
Manifest number: 0814
Signing time: Sun 27 Jul 2025 03:01:13 +0000
Manifest this update: Sun 27 Jul 2025 03:01:13 +0000
Manifest next update: Mon 28 Jul 2025 03:01:13 +0000
Files and hashes: 1: mXZKyKibCft4hQ10xo4dqo8-KvE.crl (hash: dnsJWOBEHVM1CH3kG2/qu3tGuzvEpNiSPIAWfzSRojs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:cb:af:48:14:2a:c9:75:1e:cf:aa:d0:fc:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Validity
Not Before: Jul 27 03:01:13 2025 GMT
Not After : Jul 28 03:01:13 2025 GMT
Subject: CN=a869d7125623667b34eaedfa3bc45d71a3c77f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:7a:41:97:9f:69:10:cc:f5:ad:d7:06:68:
bd:f9:a3:72:85:03:09:7b:9d:37:43:93:37:e2:34:
2b:a9:a1:cb:32:74:15:e3:36:ca:ff:a8:7d:21:34:
e4:92:6c:63:fe:e3:a0:9a:4a:09:2d:35:ab:4e:19:
63:f7:19:f5:fc:8e:95:37:61:05:d6:fd:b1:8a:36:
00:99:b0:82:81:e5:66:2e:56:da:cc:9b:56:7f:90:
6d:79:c7:06:aa:11:f4:9e:b8:4d:be:d1:10:ed:98:
b0:f8:73:f1:f7:54:b6:a7:54:d4:f7:e0:2c:e1:c6:
9a:af:33:9e:f7:c9:14:c2:ad:4c:a4:6c:96:73:a6:
65:75:b0:6c:ac:71:4b:b4:e7:22:c2:d0:e4:3e:0a:
00:ea:13:aa:f6:b9:01:42:e0:fa:c2:1e:e8:e2:26:
53:63:ec:dd:ec:27:df:e2:7e:84:60:8a:5c:c2:83:
d8:3f:1d:0e:9a:c5:ba:6d:92:a7:71:22:be:ab:c1:
8f:a3:db:b6:88:a4:71:80:53:29:33:20:da:5f:99:
77:1b:c5:90:70:f8:88:b4:f7:70:39:5f:55:86:de:
07:90:02:03:14:d5:01:dc:93:34:3d:9f:22:6a:42:
14:3a:1d:0a:9c:7b:e1:68:81:a1:32:19:3c:48:39:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:69:D7:12:56:23:66:7B:34:EA:ED:FA:3B:C4:5D:71:A3:C7:7F:0C
X509v3 Authority Key Identifier:
keyid:99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:53:27:ea:d4:a7:7b:98:35:5a:30:c2:4a:35:74:65:0e:28:
dd:19:9d:ce:bd:16:74:bf:a0:35:d2:48:c4:f2:ac:0b:64:f1:
3a:67:61:7f:8d:9d:f5:fa:7a:67:86:e4:ec:18:4c:95:bb:f5:
f0:95:4e:d7:c6:da:94:e3:7c:3a:f0:85:c0:7a:50:4c:fe:76:
a7:25:60:b7:f5:91:d9:89:75:20:1e:62:a8:dc:c7:0e:36:3d:
1f:1f:f0:3d:9a:76:de:ba:00:74:a7:bf:e2:e7:b5:fc:78:09:
97:32:de:4e:e5:72:bc:f0:af:8a:fa:1d:cb:94:88:53:0a:9e:
29:08:ee:43:19:9b:66:e3:46:3d:63:c7:18:7f:9d:a6:99:19:
5a:60:ab:2f:a9:e3:d8:39:69:0b:68:8e:c0:45:de:78:b2:fb:
a1:07:b9:85:94:7f:f1:df:14:50:50:23:e6:06:5f:49:9c:57:
3a:18:d6:07:a4:bf:c2:85:d4:59:5e:ee:5d:5c:63:8c:71:bc:
ec:fe:c9:a5:f4:c4:36:32:18:f1:28:bf:0a:f3:be:93:c6:01:
10:d6:60:2f:08:23:3b:96:4c:f5:73:ca:dd:1a:34:e8:32:19:
0e:21:b6:cf:b8:0a:82:00:ec:b1:40:5b:23:8d:d5:b5:37:39:
5d:55:69:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ08uvSBQqyXUez6rQ/KgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NzY0YWM4YTg5YjA5ZmI3ODg1MGQ3NGM2OGUxZGFhOGYz
ZTJhZjEwHhcNMjUwNzI3MDMwMTEzWhcNMjUwNzI4MDMwMTEzWjAzMTEwLwYDVQQD
EyhhODY5ZDcxMjU2MjM2NjdiMzRlYWVkZmEzYmM0NWQ3MWEzYzc3ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRJ6QZefaRDM9a3XBmi9+aNyhQMJ
e503Q5M34jQrqaHLMnQV4zbK/6h9ITTkkmxj/uOgmkoJLTWrThlj9xn1/I6VN2EF
1v2xijYAmbCCgeVmLlbazJtWf5BteccGqhH0nrhNvtEQ7Ziw+HPx91S2p1TU9+As
4caarzOe98kUwq1MpGyWc6ZldbBsrHFLtOciwtDkPgoA6hOq9rkBQuD6wh7o4iZT
Y+zd7Cff4n6EYIpcwoPYPx0OmsW6bZKncSK+q8GPo9u2iKRxgFMpMyDaX5l3G8WQ
cPiItPdwOV9Vht4HkAIDFNUB3JM0PZ8iakIUOh0KnHvhaIGhMhk8SDmOmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhp1xJWI2Z7NOrt+jvEXXGjx38MMB8GA1UdIwQY
MBaAFJl2Ssiomwn7eIUNdMaOHaqPPirxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVhaS3lLaWJDZnQ0aFExMHhvNGRxbzgtS3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYjU4ZWItN2MwNC00Y2I5LThmMzMt
ODE2OGNmNDcyOTYyLzEvbVhaS3lLaWJDZnQ0aFExMHhvNGRxbzgtS3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jYjU4ZWItN2MwNC00Y2I5LThmMzMtODE2OGNmNDcyOTYy
LzEvbVhaS3lLaWJDZnQ0aFExMHhvNGRxbzgtS3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFMn6tSn
e5g1WjDCSjV0ZQ4o3Rmdzr0WdL+gNdJIxPKsC2TxOmdhf42d9fp6Z4bk7BhMlbv1
8JVO18balON8OvCFwHpQTP52pyVgt/WR2Yl1IB5iqNzHDjY9Hx/wPZp23roAdKe/
4ue1/HgJlzLeTuVyvPCvivody5SIUwqeKQjuQxmbZuNGPWPHGH+dppkZWmCrL6nj
2DlpC2iOwEXeeLL7oQe5hZR/8d8UUFAj5gZfSZxXOhjWB6S/woXUWV7uXVxjjHG8
7P7JpfTENjIY8Si/CvO+k8YBENZgLwgjO5ZM9XPK3Ro06DIZDiG2z7gKggDssUBb
I43VtTc5XVVppA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:45:53 2025 by rpki-client