Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier: gbwPb8VE/EcX1+ISJvsZYXQ3eitlI/Pm1HAkS3S0clc=
Subject key identifier: 35:9A:3B:47:FE:99:5E:67:B2:4F:B9:F2:7E:B2:96:7E:EC:72:BB:8C
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial: 019921B1A290EC06D21A82C9F9E570EA6817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:01:53 +0000
Manifest this update: Sun 07 Sep 2025 01:01:53 +0000
Manifest next update: Mon 08 Sep 2025 01:01:53 +0000
Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: AlltQU7sHjdDHB3AYTTvGgacGdwtEULo3BsNsTgY4n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:a2:90:ec:06:d2:1a:82:c9:f9:e5:70:ea:68:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Validity
Not Before: Sep 7 01:01:53 2025 GMT
Not After : Sep 8 01:01:53 2025 GMT
Subject: CN=359a3b47fe995e67b24fb9f27eb2967eec72bb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c1:2b:f9:bd:30:7c:47:f6:a5:b6:55:7d:1c:
7b:f6:94:23:e8:b4:d7:f9:33:bb:fb:13:29:b3:0e:
7e:81:a0:2e:72:d7:8b:c6:b4:a0:1d:6b:3a:71:c2:
c7:66:98:e7:12:d3:4c:81:b8:f2:f4:ea:e0:95:23:
7b:68:ba:b1:a5:ad:df:42:ca:05:e3:83:56:ae:95:
54:9c:b5:c4:d3:43:54:c7:04:e3:e6:ff:67:09:a3:
43:0a:47:70:b8:db:29:ef:c2:6e:29:8f:c6:13:9e:
98:6d:c1:ba:8d:da:86:11:d6:29:5a:c5:ad:ba:b5:
fb:54:e2:99:56:62:5a:d5:b9:a1:42:05:f1:be:ca:
fc:6e:3f:6b:eb:ba:0b:4d:7d:ba:4b:5c:a6:b5:ed:
1d:98:27:61:fd:0f:49:95:eb:2f:37:b5:c0:7d:84:
0f:f9:15:4a:a6:21:52:7d:d0:df:1a:c4:a1:90:f0:
3f:de:5a:40:03:5b:77:36:28:4b:47:9a:82:e6:40:
1f:98:e7:0f:c4:11:6a:00:75:72:12:fd:23:87:39:
2f:46:f2:f6:65:af:21:7e:7f:72:1c:0a:88:ac:85:
9a:3d:1e:49:79:63:d4:c8:7f:bf:9a:bf:77:b8:bb:
77:62:6e:be:45:7c:c4:44:d2:ef:be:99:ac:45:7f:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:3B:47:FE:99:5E:67:B2:4F:B9:F2:7E:B2:96:7E:EC:72:BB:8C
X509v3 Authority Key Identifier:
keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b0:66:ed:36:43:ff:32:c5:dc:eb:dc:45:f7:ab:43:c3:95:
89:be:56:fd:10:95:32:1e:43:72:c3:f7:ba:91:42:49:b0:b3:
c6:4e:03:ed:e9:4b:fb:7d:c8:83:dc:62:fd:11:56:b0:94:d4:
ad:53:8a:03:55:93:0b:b7:d9:3b:56:cf:49:a4:ae:32:c3:40:
03:d3:9e:a3:b2:e6:9a:33:ec:c1:a2:25:3f:49:8a:41:41:3e:
36:65:b2:8d:49:16:00:60:99:d9:34:c8:e3:97:ab:c6:1d:5b:
c1:90:50:fa:a5:2e:a2:2c:3f:34:63:10:44:f8:59:d1:d5:b5:
79:fb:25:d4:fd:7e:3d:5c:b0:6f:09:1a:9b:ff:a7:47:0f:0f:
d9:ee:c3:e9:27:59:79:1e:98:34:cf:b5:24:40:54:82:70:6f:
09:36:90:c6:d2:83:ad:33:de:e3:e0:e0:99:4b:c3:d6:6a:ad:
87:d4:09:15:cd:cc:e3:18:35:8c:e7:5d:8b:1f:74:1b:1d:71:
4e:dc:51:44:23:09:ff:bb:d4:a6:16:99:3e:a2:06:ff:45:5a:
6d:94:7c:7c:e3:86:63:ba:2a:7e:2a:f0:ea:c4:d7:7a:13:c1:
ed:dd:84:12:d9:b6:82:ec:1e:69:7b:9b:70:8d:1b:7d:fd:f3:
eb:dd:db:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsaKQ7AbSGoLJ+eVw6mgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzQyMzNkMGJhOGU3ODYxOGEwOWE3MjU2MWRjY2QwNjQ5
OGM4NGUwHhcNMjUwOTA3MDEwMTUzWhcNMjUwOTA4MDEwMTUzWjAzMTEwLwYDVQQD
EygzNTlhM2I0N2ZlOTk1ZTY3YjI0ZmI5ZjI3ZWIyOTY3ZWVjNzJiYjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcEr+b0wfEf2pbZVfRx79pQj6LTX
+TO7+xMpsw5+gaAucteLxrSgHWs6ccLHZpjnEtNMgbjy9OrglSN7aLqxpa3fQsoF
44NWrpVUnLXE00NUxwTj5v9nCaNDCkdwuNsp78JuKY/GE56YbcG6jdqGEdYpWsWt
urX7VOKZVmJa1bmhQgXxvsr8bj9r67oLTX26S1ymte0dmCdh/Q9JlesvN7XAfYQP
+RVKpiFSfdDfGsShkPA/3lpAA1t3NihLR5qC5kAfmOcPxBFqAHVyEv0jhzkvRvL2
Za8hfn9yHAqIrIWaPR5JeWPUyH+/mr93uLt3Ym6+RXzERNLvvpmsRX+XOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWaO0f+mV5nsk+58n6yln7scruMMB8GA1UdIwQY
MBaAFJPEIz0LqOeGGKCaclYdzNBkmMhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81Zjc1N2ItNGYyMi00M2RiLTlkYTkt
MjQ5NjExNmU0MTVkLzEvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi81Zjc1N2ItNGYyMi00M2RiLTlkYTktMjQ5NjExNmU0MTVk
LzEvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7Bm7TZD
/zLF3OvcRferQ8OVib5W/RCVMh5DcsP3upFCSbCzxk4D7elL+33Ig9xi/RFWsJTU
rVOKA1WTC7fZO1bPSaSuMsNAA9Oeo7LmmjPswaIlP0mKQUE+NmWyjUkWAGCZ2TTI
45erxh1bwZBQ+qUuoiw/NGMQRPhZ0dW1efsl1P1+PVywbwkam/+nRw8P2e7D6SdZ
eR6YNM+1JEBUgnBvCTaQxtKDrTPe4+DgmUvD1mqth9QJFc3M4xg1jOddix90Gx1x
TtxRRCMJ/7vUphaZPqIG/0VabZR8fOOGY7oqfirw6sTXehPB7d2EEtm2guweaXub
cI0bff3z693bpw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:29 2025 by rpki-client