Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File: 7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier: OvP9JDIzU4pboyhah994oyg/xKMwlldClyvtzytqK7U=
Subject key identifier: 83:8D:B1:A2:BB:40:6C:6F:54:E7:4E:5E:B1:A2:EE:34:07:19:F3:C8
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer: /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial: 019921B121D89DAA57549DE885D812791FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number: 109F
Signing time: Sun 07 Sep 2025 01:01:20 +0000
Manifest this update: Sun 07 Sep 2025 01:01:20 +0000
Manifest next update: Mon 08 Sep 2025 01:01:20 +0000
Files and hashes: 1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: 8OT97R79F+o4H/S5LDo/qbYRhslRl85baLt6kwEYvxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:21:d8:9d:aa:57:54:9d:e8:85:d8:12:79:1f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
Validity
Not Before: Sep 7 01:01:20 2025 GMT
Not After : Sep 8 01:01:20 2025 GMT
Subject: CN=838db1a2bb406c6f54e74e5eb1a2ee340719f3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:7c:3a:0e:ff:c7:8e:ba:e6:0f:53:6b:3b:
46:06:d4:04:b6:4c:5f:30:23:49:0e:2c:5a:2b:2c:
ae:98:3b:c6:cd:b2:7d:1e:01:dc:90:6a:c1:42:d4:
98:f2:72:5b:13:7b:52:8a:85:73:9b:f3:55:03:da:
92:0b:a7:b0:bc:c2:42:ac:50:35:ed:91:08:24:f1:
bd:e1:e1:84:2e:a8:e6:5b:fc:2a:c5:0b:61:1c:4c:
d3:cd:51:0b:6d:94:6c:70:26:59:72:6e:9f:51:39:
66:8f:82:7d:b2:a3:df:bf:ce:d5:85:2e:f5:bc:1e:
99:8a:2c:b5:6b:27:87:4b:39:45:67:35:7f:ce:2f:
f8:8f:e5:b8:d0:e0:f5:21:5d:b3:42:df:c9:ba:b3:
34:67:22:60:91:27:88:16:72:a0:9f:49:7b:f3:4d:
e4:a7:6e:e9:f4:e8:c1:0e:e4:dc:40:68:8d:ed:01:
43:ad:ab:df:ed:56:24:cf:b5:a1:6e:05:77:b5:4e:
8c:c6:3a:54:b5:28:13:e9:af:d9:ab:c1:7c:b3:ed:
b2:4b:12:17:42:bd:46:1d:64:0d:36:3b:6c:cc:cb:
81:84:09:a4:91:b5:ee:7a:96:b6:35:f5:82:17:ec:
b4:08:ed:b6:42:5f:9a:bd:85:98:fa:f0:4c:d5:75:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:B1:A2:BB:40:6C:6F:54:E7:4E:5E:B1:A2:EE:34:07:19:F3:C8
X509v3 Authority Key Identifier:
keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:75:8c:64:1b:8b:d6:4d:e3:a3:7a:9b:39:ed:df:3e:8d:
87:aa:f7:2a:fc:70:31:2c:60:0f:cc:27:ce:77:04:aa:97:28:
ab:f3:2a:50:be:b3:d0:11:10:66:04:e0:1d:9e:0c:29:f4:a7:
8d:0f:41:7e:2b:3f:cb:c6:49:35:8b:9a:13:47:dc:40:1e:b9:
41:63:92:a3:64:6f:eb:10:ab:e4:a5:a5:92:99:69:83:20:73:
1f:1d:24:3f:cb:6e:cb:f8:37:29:7c:c2:82:f3:de:97:ad:f4:
fb:dc:98:70:98:37:44:14:e9:89:a7:59:61:ce:37:9d:96:54:
28:fe:07:43:50:66:01:e9:64:bd:3b:d5:c5:b0:16:c5:b7:9b:
df:82:a6:ea:fb:3d:d7:80:dd:1e:e4:e1:45:b4:6a:75:06:8f:
fa:d2:15:8f:ad:6c:e9:85:d9:fc:20:17:e6:21:15:dc:2b:49:
98:c6:c5:70:86:c5:98:61:c5:4f:23:88:00:64:b1:f1:82:a8:
18:a6:31:78:4c:23:6f:b4:05:c6:33:82:91:e0:e3:14:5f:0d:
6e:db:e5:9f:59:09:6d:7a:99:e1:19:40:bc:4f:7f:e4:02:d4:
2a:01:6c:20:6b:ef:ac:f4:67:05:85:a8:d0:c2:5c:8c:45:62:
35:44:03:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsSHYnapXVJ3ohdgSeR/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTU5Mzk3ZjVkNmFmZWRiYzhkOTE2NmFmZmViYjI4MDAw
OTFmOTQwHhcNMjUwOTA3MDEwMTIwWhcNMjUwOTA4MDEwMTIwWjAzMTEwLwYDVQQD
Eyg4MzhkYjFhMmJiNDA2YzZmNTRlNzRlNWViMWEyZWUzNDA3MTlmM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9l8Og7/x4665g9TaztGBtQEtkxf
MCNJDixaKyyumDvGzbJ9HgHckGrBQtSY8nJbE3tSioVzm/NVA9qSC6ewvMJCrFA1
7ZEIJPG94eGELqjmW/wqxQthHEzTzVELbZRscCZZcm6fUTlmj4J9sqPfv87VhS71
vB6Ziiy1ayeHSzlFZzV/zi/4j+W40OD1IV2zQt/JurM0ZyJgkSeIFnKgn0l7803k
p27p9OjBDuTcQGiN7QFDravf7VYkz7WhbgV3tU6MxjpUtSgT6a/Zq8F8s+2ySxIX
Qr1GHWQNNjtszMuBhAmkkbXuepa2NfWCF+y0CO22Ql+avYWY+vBM1XVsTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIONsaK7QGxvVOdOXrGi7jQHGfPIMB8GA1UdIwQY
MBaAFO7lk5f11q/tvI2RZq/+uygACR+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yNDg5NmQtZTkwZC00OTAzLWFlNmUt
ZTdkZjk0ZTAyMjM0LzEvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8yNDg5NmQtZTkwZC00OTAzLWFlNmUtZTdkZjk0ZTAyMjM0
LzEvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWZ1jGQb
i9ZN46N6mznt3z6Nh6r3KvxwMSxgD8wnzncEqpcoq/MqUL6z0BEQZgTgHZ4MKfSn
jQ9Bfis/y8ZJNYuaE0fcQB65QWOSo2Rv6xCr5KWlkplpgyBzHx0kP8tuy/g3KXzC
gvPel630+9yYcJg3RBTpiadZYc43nZZUKP4HQ1BmAelkvTvVxbAWxbeb34Km6vs9
14DdHuThRbRqdQaP+tIVj61s6YXZ/CAX5iEV3CtJmMbFcIbFmGHFTyOIAGSx8YKo
GKYxeEwjb7QFxjOCkeDjFF8Nbtvln1kJbXqZ4RlAvE9/5ALUKgFsIGvvrPRnBYWo
0MJcjEViNUQDFA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:19 2025 by rpki-client