Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: vFmwT2LXEheY4zYOcV9tBMOxWCoAe/OWlKFnMDp5dhY=
Subject key identifier: DD:84:F1:50:81:85:F2:60:0D:DC:D9:A1:A9:09:1C:03:E3:BF:4D:15
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 0199239F99C586B02F918A570B05921B2DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 1600
Signing time: Sun 07 Sep 2025 10:01:25 +0000
Manifest this update: Sun 07 Sep 2025 10:01:25 +0000
Manifest next update: Mon 08 Sep 2025 10:01:25 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: n+aP8OnXUKGgPFiX7zYByRP8RnMDp4jpIiES7CVuQfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:99:c5:86:b0:2f:91:8a:57:0b:05:92:1b:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Sep 7 10:01:25 2025 GMT
Not After : Sep 8 10:01:25 2025 GMT
Subject: CN=dd84f1508185f2600ddcd9a1a9091c03e3bf4d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:60:9a:e4:a2:dc:2b:10:23:e6:0a:97:90:
fd:d5:75:4c:a1:0c:b9:bf:29:91:da:98:09:7b:9c:
00:63:5f:87:1d:59:2c:c7:57:26:3f:aa:05:a0:7a:
da:8d:fa:2f:5a:de:31:db:57:0a:2f:48:74:10:bb:
b0:43:88:17:f2:a1:f4:95:c0:19:d0:ac:bc:87:ea:
01:3e:95:9b:ca:ba:fb:a6:50:21:07:c4:84:33:e2:
3c:6e:0b:42:fb:bb:80:97:03:58:c9:60:68:2f:12:
28:84:49:53:e0:cf:51:0f:56:88:ed:bb:75:0b:6c:
69:d8:18:e2:ba:bd:28:fc:54:16:8d:f8:17:2f:50:
97:98:11:25:23:19:ec:3c:6b:d8:5a:22:0a:7c:63:
14:c9:84:4a:b8:25:59:01:0a:52:33:2f:de:8e:3a:
f3:51:91:4a:37:fd:58:05:7f:d6:3b:24:82:d7:7b:
b5:7f:c0:70:b6:be:d1:85:54:76:01:69:89:f7:16:
a3:f9:10:33:5c:ab:bc:a7:09:e9:8a:e5:65:a4:77:
c8:12:cb:23:18:bd:0f:37:e7:9f:54:c6:9d:90:52:
e8:b5:0f:3c:f7:09:dd:31:04:62:7d:8a:4f:5a:0b:
0b:99:8f:97:f5:17:97:bd:1d:89:f4:9f:46:66:37:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:84:F1:50:81:85:F2:60:0D:DC:D9:A1:A9:09:1C:03:E3:BF:4D:15
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:7a:44:a7:9c:b6:51:3a:96:89:a2:a9:c0:24:cf:ca:8b:
58:ce:b7:27:4a:38:05:95:b6:e5:55:6f:41:9d:30:3a:37:48:
d6:8e:64:dc:0f:ed:f2:2c:71:23:e4:0a:a9:e6:2d:fc:24:fa:
94:ac:5a:c2:ff:b2:6e:21:d1:8e:b3:94:55:5f:bc:f7:80:6c:
2e:7b:72:7d:45:c8:81:d1:b9:32:76:82:12:74:99:3b:a5:06:
18:8e:aa:ff:b9:e4:08:8c:cd:b6:d6:48:f9:8c:02:1d:06:c6:
fd:d4:d3:b6:3e:d6:2f:49:04:26:97:8e:73:23:5f:52:7f:da:
73:e5:a9:3f:b9:5f:3d:b9:d7:cd:bb:20:1d:99:0f:ab:28:35:
68:e2:3d:26:a0:90:22:57:77:dc:bd:d1:f5:1d:1f:1e:f6:1b:
99:f3:08:18:59:9c:67:7b:23:3a:28:2c:e5:94:7c:26:a1:f3:
7d:74:54:85:c4:93:f0:c0:ac:87:9f:5d:ce:c4:e2:a0:3f:73:
71:82:19:d1:9d:4e:a8:be:4c:8d:06:ba:32:29:c6:7e:dc:a7:
95:fa:1a:e7:1b:8a:e4:fa:27:a7:10:7f:51:2e:54:62:b4:49:
82:d7:5d:d2:07:81:2f:ba:d8:a6:48:bf:00:ef:33:f9:dc:18:
25:e1:f3:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn5nFhrAvkYpXCwWSGy3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTlhNmFlZmQzY2E4ZjUwZmM4ZjM0YWIzZDE0NzkyNTZk
YjlkNzgwHhcNMjUwOTA3MTAwMTI1WhcNMjUwOTA4MTAwMTI1WjAzMTEwLwYDVQQD
EyhkZDg0ZjE1MDgxODVmMjYwMGRkY2Q5YTFhOTA5MWMwM2UzYmY0ZDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo1gmuSi3CsQI+YKl5D91XVMoQy5
vymR2pgJe5wAY1+HHVksx1cmP6oFoHrajfovWt4x21cKL0h0ELuwQ4gX8qH0lcAZ
0Ky8h+oBPpWbyrr7plAhB8SEM+I8bgtC+7uAlwNYyWBoLxIohElT4M9RD1aI7bt1
C2xp2Bjiur0o/FQWjfgXL1CXmBElIxnsPGvYWiIKfGMUyYRKuCVZAQpSMy/ejjrz
UZFKN/1YBX/WOySC13u1f8Bwtr7RhVR2AWmJ9xaj+RAzXKu8pwnpiuVlpHfIEssj
GL0PN+efVMadkFLotQ889wndMQRifYpPWgsLmY+X9ReXvR2J9J9GZjdKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2E8VCBhfJgDdzZoakJHAPjv00VMB8GA1UdIwQY
MBaAFHkZpq79PKj1D8jzSrPRR5JW2514MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAt
OTExZTgzOTA0Y2ExLzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAtOTExZTgzOTA0Y2Ex
LzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDl6RKec
tlE6lomiqcAkz8qLWM63J0o4BZW25VVvQZ0wOjdI1o5k3A/t8ixxI+QKqeYt/CT6
lKxawv+ybiHRjrOUVV+894BsLntyfUXIgdG5MnaCEnSZO6UGGI6q/7nkCIzNttZI
+YwCHQbG/dTTtj7WL0kEJpeOcyNfUn/ac+WpP7lfPbnXzbsgHZkPqyg1aOI9JqCQ
Ild33L3R9R0fHvYbmfMIGFmcZ3sjOigs5ZR8JqHzfXRUhcST8MCsh59dzsTioD9z
cYIZ0Z1OqL5MjQa6MinGftynlfoa5xuK5PonpxB/US5UYrRJgtdd0geBL7rYpki/
AO8z+dwYJeHzqQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:16 2025 by rpki-client