Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: 7jOJEqr+voI6nrpasYAOrarpQtOeQnhv3I5I7QGEd/4=
Subject key identifier: 36:8B:3F:8D:B5:2C:5E:AC:1C:4F:BB:AE:37:65:A7:60:3B:EB:BE:7B
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 01984A0A5FC910DF5F9FA9631E0ED4DABF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 0514
Signing time: Sun 27 Jul 2025 04:00:50 +0000
Manifest this update: Sun 27 Jul 2025 04:00:50 +0000
Manifest next update: Mon 28 Jul 2025 04:00:50 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: z/PHhz/c2O1LLulGWmbbTDPL2myngg0kmQdvG8NIHaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5f:c9:10:df:5f:9f:a9:63:1e:0e:d4:da:bf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Jul 27 04:00:50 2025 GMT
Not After : Jul 28 04:00:50 2025 GMT
Subject: CN=368b3f8db52c5eac1c4fbbae3765a7603bebbe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:10:d4:13:a3:c2:37:75:04:81:85:a9:42:
68:8f:f9:ec:52:21:15:42:a2:9a:28:74:ce:88:62:
3d:77:10:35:6b:32:dc:b3:c6:2a:5b:d3:ec:60:e3:
66:44:c3:7d:2a:52:83:b8:4d:8c:63:21:8b:03:bf:
12:62:b7:8f:8f:9d:04:87:ad:0b:2a:db:3c:1a:1d:
43:f5:69:dc:29:28:bb:86:24:3b:87:bc:39:42:6c:
c8:2e:11:9c:9e:cf:65:ab:3c:22:9b:fb:b1:ab:cb:
93:d3:52:63:3d:24:71:a7:65:ab:c8:c8:d4:f9:3d:
2f:66:42:da:22:5a:2e:bd:73:a1:b2:ae:6f:03:38:
6d:2c:5e:19:23:3e:9c:31:39:11:64:0f:b3:e0:4e:
2c:f8:a6:cf:d8:4d:90:98:4d:b2:96:e5:34:84:60:
0e:e4:08:55:e2:d1:af:3a:5e:8a:c4:a1:0a:f1:b4:
28:4c:97:6e:1b:3c:d5:56:55:7e:79:f2:3d:34:27:
23:47:87:30:d8:05:6c:44:5b:60:74:90:f2:0e:33:
d1:60:c1:98:97:7e:fc:e5:2c:de:d8:9b:10:41:78:
fd:c7:7d:d7:0a:6f:40:da:08:0a:b4:01:fa:e9:b7:
9a:b6:cb:dc:8b:36:ec:4a:31:48:53:a3:15:43:07:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:3F:8D:B5:2C:5E:AC:1C:4F:BB:AE:37:65:A7:60:3B:EB:BE:7B
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:df:60:cc:c3:1d:46:71:88:91:09:13:33:3f:12:3e:ab:69:
d2:2c:e2:49:a5:70:6c:83:6a:36:87:84:ff:3e:84:db:cd:05:
d4:bf:40:54:e6:c3:0e:5f:d7:b0:f8:84:1a:21:b6:1b:5e:6b:
f2:25:27:76:f3:fb:57:fd:7d:1f:a5:db:b7:79:3d:49:6b:fe:
31:eb:77:41:a2:ca:4c:ca:e4:94:a1:32:b6:db:b1:fa:d4:40:
26:45:2a:02:59:54:f5:f9:db:4f:80:58:8c:bf:7b:00:c0:94:
bf:45:ef:d8:bf:2e:ba:07:f0:88:49:22:79:72:2c:f3:97:b1:
5e:07:e4:8e:fb:da:2e:53:d0:79:cd:ce:09:25:ae:ed:2d:78:
f4:92:4b:f4:39:be:a6:47:1d:01:77:19:5f:7c:7d:81:bd:f8:
a5:d2:7a:b5:96:b6:33:9a:49:90:17:d8:9a:ac:6b:28:e9:21:
c6:09:46:fb:bd:3b:df:e0:6e:e1:a8:2f:04:2f:d5:06:8f:ef:
04:d1:20:2a:64:dd:54:35:fa:c7:75:5f:23:4c:32:50:46:f3:
8d:bf:73:e1:6f:ee:2a:59:20:01:bd:aa:1b:06:95:66:3e:63:
ba:58:0c:e9:a3:a7:14:db:82:e7:68:b7:19:6e:bf:b3:e1:a0:
ce:5a:59:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCl/JEN9fn6ljHg7U2r83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YWU4OTM4ZjBlMGIxZWFiNjE0ODgzMzZkMjNjYTM5MTg3
ZDZlYTMwHhcNMjUwNzI3MDQwMDUwWhcNMjUwNzI4MDQwMDUwWjAzMTEwLwYDVQQD
EygzNjhiM2Y4ZGI1MmM1ZWFjMWM0ZmJiYWUzNzY1YTc2MDNiZWJiZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFwQ1BOjwjd1BIGFqUJoj/nsUiEV
QqKaKHTOiGI9dxA1azLcs8YqW9PsYONmRMN9KlKDuE2MYyGLA78SYrePj50Eh60L
Kts8Gh1D9WncKSi7hiQ7h7w5QmzILhGcns9lqzwim/uxq8uT01JjPSRxp2WryMjU
+T0vZkLaIlouvXOhsq5vAzhtLF4ZIz6cMTkRZA+z4E4s+KbP2E2QmE2yluU0hGAO
5AhV4tGvOl6KxKEK8bQoTJduGzzVVlV+efI9NCcjR4cw2AVsRFtgdJDyDjPRYMGY
l3785Sze2JsQQXj9x33XCm9A2ggKtAH66beatsvcizbsSjFIU6MVQwf6fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaLP421LF6sHE+7rjdlp2A76757MB8GA1UdIwQY
MBaAFIeuiTjw4LHqthSIM20jyjkYfW6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYt
MjlkMGJhMTJlZGEyLzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYtMjlkMGJhMTJlZGEy
LzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu99gzMMd
RnGIkQkTMz8SPqtp0iziSaVwbINqNoeE/z6E280F1L9AVObDDl/XsPiEGiG2G15r
8iUndvP7V/19H6Xbt3k9SWv+Met3QaLKTMrklKEyttux+tRAJkUqAllU9fnbT4BY
jL97AMCUv0Xv2L8uugfwiEkieXIs85exXgfkjvvaLlPQec3OCSWu7S149JJL9Dm+
pkcdAXcZX3x9gb34pdJ6tZa2M5pJkBfYmqxrKOkhxglG+7073+Bu4agvBC/VBo/v
BNEgKmTdVDX6x3VfI0wyUEbzjb9z4W/uKlkgAb2qGwaVZj5julgM6aOnFNuC52i3
GW6/s+GgzlpZbA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:26 2025 by rpki-client