
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: uYVx0rje0oObmo/LdhP4RjRUeyepBmTisH2SqPnUbpw=
Subject key identifier: 13:9D:78:38:8E:04:D0:6F:46:B4:83:16:0C:2C:E9:F3:F6:01:3A:30
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 0197C9F17FCF7055CC882C43EE5340FA327C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: 0182
Signing time: Wed 02 Jul 2025 07:02:16 +0000
Manifest this update: Wed 02 Jul 2025 07:02:16 +0000
Manifest next update: Thu 03 Jul 2025 07:02:16 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: V6fv7hWkXwMZhDZ4wnio65cxb8SgP+CWVDtn8exDqIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:7f:cf:70:55:cc:88:2c:43:ee:53:40:fa:32:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Jul 2 07:02:16 2025 GMT
Not After : Jul 3 07:02:16 2025 GMT
Subject: CN=139d78388e04d06f46b483160c2ce9f3f6013a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:e1:81:70:70:3d:e6:8f:ee:83:77:10:c3:
97:d1:06:33:33:32:47:ee:39:6e:f8:8e:70:7d:d7:
3c:17:cc:d9:37:73:9e:9a:c7:d8:e0:b8:76:80:c8:
d1:26:c4:ba:d0:3a:32:b5:02:a7:4b:62:de:8b:11:
3b:e6:ab:e9:4d:a2:62:db:bb:24:f8:37:16:90:c0:
be:27:82:76:2e:da:a1:d0:59:e0:52:30:64:ae:0b:
6b:ea:f1:67:55:56:7d:75:f6:3e:b3:22:af:e9:5b:
a1:61:c3:de:ad:7b:6f:40:6a:00:af:94:53:76:20:
dd:b1:2c:94:fa:e7:20:fd:25:c8:1c:57:40:52:a1:
09:4d:74:5e:55:d8:c4:2b:5c:41:fe:1e:08:57:12:
25:cd:15:25:0c:6e:fa:c6:2c:94:67:b4:72:e3:c6:
b9:e4:b8:f7:02:44:46:78:fd:b6:df:21:2a:c5:55:
26:8e:d1:ac:ba:74:8f:35:f2:7f:f2:cf:9d:bd:ab:
95:33:9a:c1:27:66:10:74:80:3d:8f:bf:7c:87:65:
00:37:15:f2:33:8f:d9:90:59:6a:e4:0e:ef:e2:ff:
8c:aa:95:90:01:9f:f9:3c:a4:ff:87:03:5d:f7:38:
61:3a:6b:89:0e:8b:2d:bc:49:f7:7e:38:23:31:e1:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:78:38:8E:04:D0:6F:46:B4:83:16:0C:2C:E9:F3:F6:01:3A:30
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:dd:b2:3d:3f:62:9a:1a:11:ff:21:7c:ee:72:07:e7:b6:aa:
a6:72:d7:1c:b2:94:6c:23:b7:14:ef:b8:b7:07:7c:21:3e:a6:
89:d8:59:d3:52:2d:48:2b:6e:4c:c1:f1:81:fb:6d:2d:3a:d5:
b7:61:dc:04:1e:26:8d:11:5c:7d:73:a9:bb:e8:ac:2d:ec:46:
30:01:72:a3:a0:88:47:cf:62:e9:bb:01:d0:d4:e1:f9:36:78:
0b:df:dd:87:ef:76:8d:0a:64:78:31:be:f1:be:df:d9:62:dd:
fc:52:e6:f4:53:c5:fe:c1:a5:6b:fb:6a:59:35:f3:e3:cd:f5:
8b:b6:33:42:e4:35:ce:2a:9a:08:83:7b:5a:c0:c8:2c:ae:8d:
8c:14:49:f9:f2:33:3c:b0:43:11:d8:91:03:f2:b8:18:1a:a0:
68:7d:98:22:2d:e9:49:ac:a3:9e:c7:a6:d8:7b:6a:58:05:c9:
06:ce:13:a5:3d:a2:ad:d9:95:04:9c:4c:56:bf:f4:5b:e0:e3:
0c:01:ed:73:68:d4:22:56:c7:73:41:3f:3f:ad:a9:52:b4:7a:
54:cb:ea:88:c2:bf:05:f6:6f:d2:8c:62:f1:e3:8f:c7:2d:55:
7e:7a:7d:68:5e:39:41:8e:0b:6c:64:e0:1d:e7:dc:a4:08:31:
7c:f3:49:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJ8X/PcFXMiCxD7lNA+jJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDg1Zjg0MzhkNzNiNTY2OGU4OWNjNjkyNjQ2Zjk0ODc5
NjVmYTkwHhcNMjUwNzAyMDcwMjE2WhcNMjUwNzAzMDcwMjE2WjAzMTEwLwYDVQQD
EygxMzlkNzgzODhlMDRkMDZmNDZiNDgzMTYwYzJjZTlmM2Y2MDEzYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44nhgXBwPeaP7oN3EMOX0QYzMzJH
7jlu+I5wfdc8F8zZN3OemsfY4Lh2gMjRJsS60DoytQKnS2LeixE75qvpTaJi27sk
+DcWkMC+J4J2Ltqh0FngUjBkrgtr6vFnVVZ9dfY+syKv6VuhYcPerXtvQGoAr5RT
diDdsSyU+ucg/SXIHFdAUqEJTXReVdjEK1xB/h4IVxIlzRUlDG76xiyUZ7Ry48a5
5Lj3AkRGeP223yEqxVUmjtGsunSPNfJ/8s+dvauVM5rBJ2YQdIA9j798h2UANxXy
M4/ZkFlq5A7v4v+MqpWQAZ/5PKT/hwNd9zhhOmuJDostvEn3fjgjMeHfKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOdeDiOBNBvRrSDFgws6fP2ATowMB8GA1UdIwQY
MBaAFHPYX4Q41ztWaOicxpJkb5SHll+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAt
YWVlMGM4MjQwOTllLzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAtYWVlMGM4MjQwOTll
LzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmN2yPT9i
mhoR/yF87nIH57aqpnLXHLKUbCO3FO+4twd8IT6midhZ01ItSCtuTMHxgfttLTrV
t2HcBB4mjRFcfXOpu+isLexGMAFyo6CIR89i6bsB0NTh+TZ4C9/dh+92jQpkeDG+
8b7f2WLd/FLm9FPF/sGla/tqWTXz4831i7YzQuQ1ziqaCIN7WsDILK6NjBRJ+fIz
PLBDEdiRA/K4GBqgaH2YIi3pSayjnsem2HtqWAXJBs4TpT2irdmVBJxMVr/0W+Dj
DAHtc2jUIlbHc0E/P62pUrR6VMvqiMK/BfZv0oxi8eOPxy1Vfnp9aF45QY4LbGTg
HefcpAgxfPNJyw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:38:17 2025 by rpki-client