Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
File: pU3VdP7HLUOUwlU2uoUyydOPQLo.mft (raw, json)
Hash identifier: vPHKDk/HKDryf1QXuKyXz29DY42CcOUz8GuE5kw/N1g=
Subject key identifier: E5:8A:58:E6:36:9D:21:21:8B:AA:9A:B8:A6:4C:A9:CE:C0:20:A4:61
Authority key identifier: A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
Certificate issuer: /CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Certificate serial: 0198439B5D95B30D796C31C8B7606BE1A3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
Manifest number: 0913
Signing time: Fri 25 Jul 2025 22:01:52 +0000
Manifest this update: Fri 25 Jul 2025 22:01:52 +0000
Manifest next update: Sat 26 Jul 2025 22:01:52 +0000
Files and hashes: 1: pU3VdP7HLUOUwlU2uoUyydOPQLo.crl (hash: 3Pw8B5IhFQMvEDdPHTF3tZP4LtWszVpRIvfd1JX20R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:5d:95:b3:0d:79:6c:31:c8:b7:60:6b:e1:a3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Validity
Not Before: Jul 25 22:01:52 2025 GMT
Not After : Jul 26 22:01:52 2025 GMT
Subject: CN=e58a58e6369d21218baa9ab8a64ca9cec020a461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:9f:70:ae:2b:74:c8:23:77:01:5f:10:27:
cd:27:a1:eb:f0:4e:08:50:23:04:88:64:7a:01:7b:
09:20:62:87:42:09:e7:dc:5a:a6:a9:0c:b2:c6:bd:
91:fa:a9:27:fc:e7:c7:04:73:8d:44:49:e7:4e:fa:
09:79:ed:0f:ff:09:72:7a:93:43:0d:21:b3:04:e6:
81:22:1e:64:69:79:8e:96:37:0a:37:b9:35:25:fa:
0a:76:15:c9:4d:62:98:00:dd:80:a0:be:10:6a:24:
d9:73:4b:2a:d2:6a:c4:9d:b6:c4:2c:00:fe:9b:ae:
96:e1:41:75:1f:89:d6:ac:9d:68:fc:89:f7:35:f5:
76:87:4a:c0:61:84:8c:d9:cb:1e:5a:e2:37:33:2f:
e3:8c:de:2c:66:a7:38:41:d6:f1:f8:2e:6c:fa:fa:
3f:5b:62:03:0a:44:aa:80:78:c8:f6:59:85:12:c7:
c0:5a:10:aa:41:91:75:d8:c2:f1:d6:fb:ed:e3:ce:
b3:3d:74:a0:b0:bd:b2:fd:cf:ba:49:06:ca:ac:af:
c1:f6:71:6c:bd:b8:7a:75:fd:32:c0:1e:3e:7a:eb:
46:17:56:54:04:8f:14:b6:36:81:90:ea:7f:c5:55:
e6:1b:9e:68:fa:9c:51:20:bb:8e:50:9b:4a:63:62:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8A:58:E6:36:9D:21:21:8B:AA:9A:B8:A6:4C:A9:CE:C0:20:A4:61
X509v3 Authority Key Identifier:
keyid:A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:45:be:54:17:56:f1:f0:4b:2a:cf:34:f4:6f:35:5b:f4:ce:
b2:4d:ea:91:a4:dc:73:1f:e7:93:7a:aa:cc:30:21:93:d2:95:
25:00:a6:80:5c:0e:ca:3c:8f:17:c0:64:ae:41:05:cc:b1:58:
e0:b0:4d:e1:c9:fc:6a:fe:a8:a9:24:c7:35:d7:e3:c0:77:53:
b9:12:cd:3f:19:75:07:42:bf:79:61:f7:79:f5:42:e2:78:fb:
c4:37:b7:76:b4:55:05:b6:8a:6c:43:08:f8:a5:21:a0:84:27:
e8:73:39:c4:0a:2d:63:b2:a9:60:26:87:b4:8b:ca:8f:e5:64:
e5:64:11:a9:3d:40:e9:6b:d5:db:2d:bb:34:2c:7e:76:f5:bc:
9b:a7:30:e7:36:5f:a4:d6:02:a8:be:3a:7e:d0:4b:d6:bc:3b:
8c:43:44:58:7d:75:b1:b8:49:dc:49:14:32:16:23:59:a6:63:
b3:e8:1c:95:4f:2c:3c:41:d3:f9:42:26:ad:41:a3:1c:41:73:
6c:76:87:31:47:25:77:95:5f:b9:23:16:68:fc:46:97:8c:a4:
ef:a1:a9:41:ff:d4:ec:12:df:35:0e:a1:31:7d:dd:34:3d:ef:
23:58:16:d9:fb:91:8f:a5:bc:94:db:74:ae:d1:63:ff:6f:2c:
70:b1:94:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDm12Vsw15bDHIt2Br4aOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NGRkNTc0ZmVjNzJkNDM5NGMyNTUzNmJhODUzMmM5ZDM4
ZjQwYmEwHhcNMjUwNzI1MjIwMTUyWhcNMjUwNzI2MjIwMTUyWjAzMTEwLwYDVQQD
EyhlNThhNThlNjM2OWQyMTIxOGJhYTlhYjhhNjRjYTljZWMwMjBhNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQSfcK4rdMgjdwFfECfNJ6Hr8E4I
UCMEiGR6AXsJIGKHQgnn3FqmqQyyxr2R+qkn/OfHBHONREnnTvoJee0P/wlyepND
DSGzBOaBIh5kaXmOljcKN7k1JfoKdhXJTWKYAN2AoL4QaiTZc0sq0mrEnbbELAD+
m66W4UF1H4nWrJ1o/In3NfV2h0rAYYSM2cseWuI3My/jjN4sZqc4Qdbx+C5s+vo/
W2IDCkSqgHjI9lmFEsfAWhCqQZF12MLx1vvt486zPXSgsL2y/c+6SQbKrK/B9nFs
vbh6df0ywB4+eutGF1ZUBI8UtjaBkOp/xVXmG55o+pxRILuOUJtKY2LU/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWKWOY2nSEhi6qauKZMqc7AIKRhMB8GA1UdIwQY
MBaAFKVN1XT+xy1DlMJVNrqFMsnTj0C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFUzVmRQN0hMVU9Vd2xVMnVvVXl5ZE9QUUxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82OTM0YjUtOTZjMC00NzZkLWJmNTQt
MjM3ZjY1YjY0MzI3LzEvcFUzVmRQN0hMVU9Vd2xVMnVvVXl5ZE9QUUxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82OTM0YjUtOTZjMC00NzZkLWJmNTQtMjM3ZjY1YjY0MzI3
LzEvcFUzVmRQN0hMVU9Vd2xVMnVvVXl5ZE9QUUxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0W+VBdW
8fBLKs809G81W/TOsk3qkaTccx/nk3qqzDAhk9KVJQCmgFwOyjyPF8BkrkEFzLFY
4LBN4cn8av6oqSTHNdfjwHdTuRLNPxl1B0K/eWH3efVC4nj7xDe3drRVBbaKbEMI
+KUhoIQn6HM5xAotY7KpYCaHtIvKj+Vk5WQRqT1A6WvV2y27NCx+dvW8m6cw5zZf
pNYCqL46ftBL1rw7jENEWH11sbhJ3EkUMhYjWaZjs+gclU8sPEHT+UImrUGjHEFz
bHaHMUcld5VfuSMWaPxGl4yk76GpQf/U7BLfNQ6hMX3dND3vI1gW2fuRj6W8lNt0
rtFj/28scLGU4w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:22:31 2025 by rpki-client