Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier: T9DqOtH1SBAO63kdYi3Sw8HDDg8JKQgvEAWU9Jq2bmA=
Subject key identifier: E7:55:93:B7:E2:6E:23:05:04:A6:36:9E:28:19:35:8A:C6:0C:D3:5F
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer: /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial: 019921B1FC3CC7263C48C96CB82EBA7ECD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number: 14AC
Signing time: Sun 07 Sep 2025 01:02:16 +0000
Manifest this update: Sun 07 Sep 2025 01:02:16 +0000
Manifest next update: Mon 08 Sep 2025 01:02:16 +0000
Files and hashes: 1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: VESMNoOKGs1rRIJAfYjgxO9ToPwZAcabuuaYz4milcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:fc:3c:c7:26:3c:48:c9:6c:b8:2e:ba:7e:cd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Validity
Not Before: Sep 7 01:02:16 2025 GMT
Not After : Sep 8 01:02:16 2025 GMT
Subject: CN=e75593b7e26e230504a6369e2819358ac60cd35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:6e:8f:e4:4d:0a:ed:7a:fe:e4:e1:ab:47:
1a:f2:46:c4:7d:30:eb:0a:c4:0c:90:88:d3:ca:e9:
46:c2:96:6c:88:d6:22:76:0d:01:ec:cd:8a:ea:4d:
90:dc:6c:2f:90:3d:5f:73:4b:0c:71:fd:87:9d:7e:
68:81:ec:f6:8e:1e:8f:89:5a:90:89:7f:8e:53:8a:
ad:39:83:b3:7a:71:b6:57:04:5c:1e:20:69:61:cb:
d9:79:d7:8e:3e:9b:10:03:60:e9:bd:53:1d:b3:9d:
0d:de:61:88:28:33:a4:c5:b1:fb:df:f6:2a:22:a7:
82:62:36:88:fd:24:40:55:f0:1b:af:5a:2f:36:7f:
32:f8:81:87:7f:cb:74:a8:02:c8:d3:0c:8e:93:85:
b9:c4:6c:9a:5b:74:83:d1:c6:87:2f:ed:79:64:83:
d1:48:02:80:4f:a1:fa:19:63:ef:16:b8:e2:d3:2b:
1b:2a:c7:7e:45:21:bd:a4:2a:f5:6f:2d:37:1d:e7:
c8:66:00:bf:d0:4c:6a:8d:94:2b:73:7f:40:f7:ab:
4a:a4:f9:00:08:15:d7:e6:84:d9:1d:77:d9:16:58:
84:9f:e6:53:e7:87:6d:73:ab:b6:d6:99:17:02:f9:
a3:92:c9:72:d1:a7:6b:fb:1c:4a:50:16:79:96:37:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:55:93:B7:E2:6E:23:05:04:A6:36:9E:28:19:35:8A:C6:0C:D3:5F
X509v3 Authority Key Identifier:
keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c4:d3:a9:19:8a:ef:3e:bb:32:95:b1:b5:75:1f:29:5c:cc:
ab:33:5a:36:61:d6:07:fa:6f:46:ce:14:49:63:b4:84:ac:37:
bf:50:5a:7f:41:23:0e:7f:a5:32:a7:cb:56:bb:a4:f1:88:52:
b2:22:a8:10:58:3f:d7:54:8b:af:8b:a7:26:9a:9c:ea:c0:0c:
2c:5d:5f:e6:d2:e6:a9:ef:31:4f:51:9d:f4:49:ca:de:e9:47:
d1:0f:e9:89:71:b4:ec:23:db:a9:b0:2f:94:b0:df:95:53:91:
c7:d9:d8:b6:4b:6d:fb:52:bb:90:fa:78:bd:2a:ad:24:35:71:
f0:3c:24:83:fc:ee:59:62:3a:57:93:e0:38:31:a7:71:8e:2b:
f2:66:cd:bc:bc:98:eb:e4:bb:c0:21:d4:ab:fe:23:ab:5b:0a:
7b:01:51:0b:e0:0a:66:a5:99:18:3b:c5:b7:46:25:38:54:14:
e7:26:83:7a:a3:d8:a4:8a:ed:5a:34:64:32:7f:52:03:e7:c6:
04:26:0a:56:be:d3:50:6b:22:d0:81:ed:6b:4e:e0:a9:a8:b0:
93:95:b3:ab:84:1d:fc:b5:5e:8a:c3:9a:ff:ad:35:c5:fa:5d:
06:96:f0:48:b8:8e:d3:28:32:a7:44:ea:8a:7e:7e:2c:5c:91:
84:99:11:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsfw8xyY8SMlsuC66fs16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmYzM2U4YTNiYWFlMmQ4ZDg1NjAwMTBjOTdjNzZmM2Ix
OWZhYzkwHhcNMjUwOTA3MDEwMjE2WhcNMjUwOTA4MDEwMjE2WjAzMTEwLwYDVQQD
EyhlNzU1OTNiN2UyNmUyMzA1MDRhNjM2OWUyODE5MzU4YWM2MGNkMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFduj+RNCu16/uThq0ca8kbEfTDr
CsQMkIjTyulGwpZsiNYidg0B7M2K6k2Q3GwvkD1fc0sMcf2HnX5ogez2jh6PiVqQ
iX+OU4qtOYOzenG2VwRcHiBpYcvZedeOPpsQA2DpvVMds50N3mGIKDOkxbH73/Yq
IqeCYjaI/SRAVfAbr1ovNn8y+IGHf8t0qALI0wyOk4W5xGyaW3SD0caHL+15ZIPR
SAKAT6H6GWPvFrji0ysbKsd+RSG9pCr1by03HefIZgC/0ExqjZQrc39A96tKpPkA
CBXX5oTZHXfZFliEn+ZT54dtc6u21pkXAvmjksly0adr+xxKUBZ5ljcVDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdVk7fibiMFBKY2nigZNYrGDNNfMB8GA1UdIwQY
MBaAFO3/M+ijuq4tjYVgAQyXx287GfrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Y4ejZLTzZyaTJOaFdBQkRKZkhienNaLXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMDUzMzItYmVlZi00ZjQyLTg4Zjgt
MGRjZTI3MWY3ZTYxLzEvN2Y4ejZLTzZyaTJOaFdBQkRKZkhienNaLXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mMDUzMzItYmVlZi00ZjQyLTg4ZjgtMGRjZTI3MWY3ZTYx
LzEvN2Y4ejZLTzZyaTJOaFdBQkRKZkhienNaLXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsTTqRmK
7z67MpWxtXUfKVzMqzNaNmHWB/pvRs4USWO0hKw3v1Baf0EjDn+lMqfLVruk8YhS
siKoEFg/11SLr4unJpqc6sAMLF1f5tLmqe8xT1Gd9EnK3ulH0Q/piXG07CPbqbAv
lLDflVORx9nYtktt+1K7kPp4vSqtJDVx8Dwkg/zuWWI6V5PgODGncY4r8mbNvLyY
6+S7wCHUq/4jq1sKewFRC+AKZqWZGDvFt0YlOFQU5yaDeqPYpIrtWjRkMn9SA+fG
BCYKVr7TUGsi0IHta07gqaiwk5Wzq4Qd/LVeisOa/601xfpdBpbwSLiO0ygyp0Tq
in5+LFyRhJkRfw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:36 2025 by rpki-client