Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: 3e9LDYM8q+FScpAxqiq1Pz22C+RMHmaqvBSL+SuvZiQ=
Subject key identifier: 4B:D4:4E:75:74:F1:FC:44:99:E8:97:2C:0C:34:04:A6:09:9C:A5:F3
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 0198D773D958552B1CA85CA29E1221D7D519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 05CC
Signing time: Sat 23 Aug 2025 15:02:30 +0000
Manifest this update: Sat 23 Aug 2025 15:02:30 +0000
Manifest next update: Sun 24 Aug 2025 15:02:30 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: 4v5LhFW7NdzSu/yGNgIkzva0VtmejGuXL7/qj31Sba8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:d9:58:55:2b:1c:a8:5c:a2:9e:12:21:d7:d5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Aug 23 15:02:30 2025 GMT
Not After : Aug 24 15:02:30 2025 GMT
Subject: CN=4bd44e7574f1fc4499e8972c0c3404a6099ca5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:5d:97:f0:62:f7:cc:cc:a8:5f:5b:80:e3:
2d:40:88:5f:12:c6:3b:c2:0a:aa:6f:bd:c9:fa:0b:
41:0c:ed:ac:9a:12:4c:8e:48:41:84:37:b6:aa:c7:
2a:45:6d:ac:da:f2:2b:e3:17:c4:f6:46:e8:99:e0:
17:67:48:d7:1d:21:b9:bd:4a:6c:c8:83:f8:ff:72:
c3:1f:42:99:4d:8a:1a:ef:8f:72:de:63:52:15:e1:
af:93:19:8f:59:9c:22:89:db:9a:65:62:d2:06:d5:
5c:20:12:8e:e3:73:fb:96:12:bc:30:a6:ff:ba:57:
a9:ea:a0:23:b3:70:07:23:ce:f4:d2:22:60:4f:e6:
df:6a:5f:5f:52:7b:60:a4:2b:27:dd:bc:ff:37:9f:
c8:64:5a:1a:5f:1c:95:94:95:b8:44:56:3d:4b:9d:
34:25:af:8f:63:06:7e:53:f5:f6:3a:33:e8:d6:14:
cb:bb:e8:9f:f8:7a:1a:fd:c1:25:bc:07:04:88:96:
55:c8:37:24:f8:e5:48:48:37:14:b8:19:84:9e:0e:
03:8a:7d:c8:08:0f:fa:89:9e:57:8b:e2:7c:b3:68:
8b:9f:fa:f9:9b:81:6a:a7:43:55:70:24:3e:cd:b5:
0b:e1:e7:41:f7:c6:57:7f:94:46:41:9b:a8:1c:ba:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D4:4E:75:74:F1:FC:44:99:E8:97:2C:0C:34:04:A6:09:9C:A5:F3
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:91:8b:61:de:21:52:8f:0d:df:2a:a5:40:96:58:9f:30:b8:
26:7e:bf:54:01:0e:ed:2e:b8:8c:6f:76:5d:f3:c6:03:28:cc:
ac:ee:c3:6c:3b:0f:6d:9d:ec:d4:f9:e2:49:95:4b:56:cd:e6:
d2:9f:10:f1:c9:a0:14:bc:8c:0d:cc:4d:37:27:e0:46:0e:08:
72:c4:18:34:d9:be:b5:1c:1b:f7:2d:3a:06:72:5f:d2:b3:2b:
1c:bc:57:21:9b:60:15:cf:14:47:bb:5c:00:a6:4e:90:2c:8a:
4a:34:54:d1:f8:5f:6c:2e:9a:a4:ef:18:14:d0:87:67:ba:bd:
7c:e6:19:8d:39:5e:81:c7:76:fc:ee:b1:02:c4:1a:60:37:68:
25:11:16:90:1b:05:89:1a:aa:aa:eb:2e:3b:00:2e:f6:7f:b8:
df:00:4e:6e:d3:99:e7:42:7c:6b:fd:77:7d:79:dc:a1:44:46:
bd:e6:94:29:33:0c:b0:89:b8:5f:32:cc:ed:20:bf:72:58:a1:
0f:67:77:69:e8:68:5d:f1:74:33:ba:11:54:cf:88:eb:e9:be:
a9:3a:6b:a4:98:5a:70:6a:a5:d5:9a:63:3a:c4:ff:c8:25:ce:
f7:44:b4:7c:a7:ff:c6:53:20:41:ec:2b:1b:a0:42:a0:29:09:
5d:8b:5d:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc9lYVSscqFyinhIh19UZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MzkxY2ZkMjhiMDdlNmE5ZTFjYTMyNTZjZGI4MjAxN2Iy
YjU2MjEwHhcNMjUwODIzMTUwMjMwWhcNMjUwODI0MTUwMjMwWjAzMTEwLwYDVQQD
Eyg0YmQ0NGU3NTc0ZjFmYzQ0OTllODk3MmMwYzM0MDRhNjA5OWNhNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxNdl/Bi98zMqF9bgOMtQIhfEsY7
wgqqb73J+gtBDO2smhJMjkhBhDe2qscqRW2s2vIr4xfE9kbomeAXZ0jXHSG5vUps
yIP4/3LDH0KZTYoa749y3mNSFeGvkxmPWZwiiduaZWLSBtVcIBKO43P7lhK8MKb/
ulep6qAjs3AHI8700iJgT+bfal9fUntgpCsn3bz/N5/IZFoaXxyVlJW4RFY9S500
Ja+PYwZ+U/X2OjPo1hTLu+if+Hoa/cElvAcEiJZVyDck+OVISDcUuBmEng4Din3I
CA/6iZ5Xi+J8s2iLn/r5m4Fqp0NVcCQ+zbUL4edB98ZXf5RGQZuoHLqxCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvUTnV08fxEmeiXLAw0BKYJnKXzMB8GA1UdIwQY
MBaAFPQ5HP0osH5qnhyjJWzbggF7K1YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMt
ZTVhOWJhOGY1NmFlLzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMtZTVhOWJhOGY1NmFl
LzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJGLYd4h
Uo8N3yqlQJZYnzC4Jn6/VAEO7S64jG92XfPGAyjMrO7DbDsPbZ3s1PniSZVLVs3m
0p8Q8cmgFLyMDcxNNyfgRg4IcsQYNNm+tRwb9y06BnJf0rMrHLxXIZtgFc8UR7tc
AKZOkCyKSjRU0fhfbC6apO8YFNCHZ7q9fOYZjTlegcd2/O6xAsQaYDdoJREWkBsF
iRqqqusuOwAu9n+43wBObtOZ50J8a/13fXncoURGveaUKTMMsIm4XzLM7SC/clih
D2d3aehoXfF0M7oRVM+I6+m+qTprpJhacGql1ZpjOsT/yCXO90S0fKf/xlMgQewr
G6BCoCkJXYtd3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:48 2025 by rpki-client