Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
File: l4axG6O9mY3t75gTwTPEJkI0lV4.mft (raw, json)
Hash identifier: D7Usd+7f4n5D3jZKR8KaA9iqNjjpGU38Z3otbtgmhjA=
Subject key identifier: 08:AD:9E:08:E8:58:2E:0A:A9:EB:32:55:40:AD:36:5C:59:77:D9:8B
Authority key identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
Certificate issuer: /CN=9786b11ba3bd998dedef9813c133c4264234955e
Certificate serial: 0199FCC678AFAF61C3647BC72E77FB4B6D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
Manifest number: 01FF
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: l4axG6O9mY3t75gTwTPEJkI0lV4.crl (hash: Go4CYnr6Sx6H7uR4qH0L24G8Lf+dzF3fN34feNoCpYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:78:af:af:61:c3:64:7b:c7:2e:77:fb:4b:6d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9786b11ba3bd998dedef9813c133c4264234955e
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=08ad9e08e8582e0aa9eb325540ad365c5977d98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:ee:ad:06:04:49:f6:60:a3:c2:e4:83:f7:
18:05:c0:34:dd:cc:84:d1:26:11:da:71:fe:45:34:
d8:98:b9:88:ad:eb:1c:74:53:24:61:dd:06:ce:e9:
58:3d:98:cd:fb:4c:00:12:3f:a2:1b:a1:02:1d:47:
8e:4b:1d:51:c7:c2:36:c4:57:85:0a:0e:fc:6d:db:
f8:d6:b1:39:af:d7:cf:b4:bb:38:a4:3f:b7:5c:2a:
41:5d:4a:76:3f:84:92:4a:37:1b:4f:ca:3d:6a:26:
f6:46:6b:36:84:e4:1d:e7:d5:e1:72:ed:05:99:d7:
8d:47:56:6c:d1:90:c7:69:cb:2b:98:b9:d9:6b:a2:
fe:33:e6:a6:7d:f2:32:dd:01:9f:74:4c:af:86:45:
65:24:1a:a6:3f:ba:ff:07:98:9e:c1:d6:98:89:08:
b1:a2:d4:85:e4:8a:b4:9a:78:a0:c7:41:1f:63:44:
5b:b1:e1:10:79:5d:d4:b0:24:4e:81:fd:33:81:c5:
86:db:74:9e:ce:6d:e2:2c:e9:5b:f9:66:38:a4:42:
2d:12:ac:a5:9a:56:4f:59:4f:e3:3e:55:38:f6:bb:
33:d3:c3:f7:73:f2:32:75:63:82:8d:20:29:39:23:
b0:1b:cb:52:6a:c3:93:a9:76:9c:4e:8c:05:e9:e6:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:9E:08:E8:58:2E:0A:A9:EB:32:55:40:AD:36:5C:59:77:D9:8B
X509v3 Authority Key Identifier:
keyid:97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:03:72:00:69:f4:ef:63:02:9d:9a:8f:29:ac:2c:2b:3b:3d:
0a:93:0f:31:dc:9e:cf:d3:12:bf:d0:55:be:78:23:00:51:99:
26:3b:ea:5d:2c:ef:25:bb:17:c7:d3:ff:a6:a6:20:19:da:b2:
44:4e:72:f7:4c:0d:de:63:f8:13:32:46:de:8a:06:ed:fd:65:
82:29:af:91:0f:8a:da:4a:ee:f6:b1:0e:e7:2e:9a:03:8a:62:
1d:aa:62:ff:ea:7d:09:2d:b8:07:d7:81:3f:a0:87:d5:3f:25:
44:75:d4:73:08:66:c7:48:1b:5c:a7:82:07:9b:d7:38:e6:bd:
48:f6:3d:3c:af:61:7c:7f:9f:37:18:4b:6b:01:41:67:48:36:
21:45:d7:7d:a1:e6:0a:e0:2e:ac:3b:14:86:aa:3b:18:fd:b3:
40:04:6b:c6:52:1a:f5:72:f3:91:f5:bd:b7:a8:35:6b:5f:79:
1f:5d:03:e3:00:d5:d9:1b:67:5b:21:79:f3:50:d1:f2:16:3c:
5a:2e:98:9e:c1:84:0f:27:99:46:58:65:72:f7:53:87:40:ef:
ff:a9:7d:7e:bf:47:d5:b2:e8:7a:5f:43:13:5c:6a:ca:71:5d:
bc:09:e4:ce:e5:a9:fc:e9:7b:0f:8a:c8:fd:f5:0b:d7:d2:8a:
a2:5e:bc:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnivr2HDZHvHLnf7S21aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODZiMTFiYTNiZDk5OGRlZGVmOTgxM2MxMzNjNDI2NDIz
NDk1NWUwHhcNMjUxMDE5MTQwMTI5WhcNMjUxMDIwMTQwMTI5WjAzMTEwLwYDVQQD
EygwOGFkOWUwOGU4NTgyZTBhYTllYjMyNTU0MGFkMzY1YzU5NzdkOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32/urQYESfZgo8Lkg/cYBcA03cyE
0SYR2nH+RTTYmLmIrescdFMkYd0GzulYPZjN+0wAEj+iG6ECHUeOSx1Rx8I2xFeF
Cg78bdv41rE5r9fPtLs4pD+3XCpBXUp2P4SSSjcbT8o9aib2Rms2hOQd59Xhcu0F
mdeNR1Zs0ZDHacsrmLnZa6L+M+amffIy3QGfdEyvhkVlJBqmP7r/B5iewdaYiQix
otSF5Iq0mnigx0EfY0RbseEQeV3UsCROgf0zgcWG23Sezm3iLOlb+WY4pEItEqyl
mlZPWU/jPlU49rsz08P3c/IydWOCjSApOSOwG8tSasOTqXacTowF6ebeqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAitngjoWC4KqesyVUCtNlxZd9mLMB8GA1UdIwQY
MBaAFJeGsRujvZmN7e+YE8EzxCZCNJVeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRheEc2TzltWTN0NzVnVHdUUEVKa0kwbFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNzM3ZTktY2Q0ZC00OGEwLWIwN2Mt
OTNmZmZmYmNhNTVkLzEvbDRheEc2TzltWTN0NzVnVHdUUEVKa0kwbFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNzM3ZTktY2Q0ZC00OGEwLWIwN2MtOTNmZmZmYmNhNTVk
LzEvbDRheEc2TzltWTN0NzVnVHdUUEVKa0kwbFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwNyAGn0
72MCnZqPKawsKzs9CpMPMdyez9MSv9BVvngjAFGZJjvqXSzvJbsXx9P/pqYgGdqy
RE5y90wN3mP4EzJG3ooG7f1lgimvkQ+K2kru9rEO5y6aA4piHapi/+p9CS24B9eB
P6CH1T8lRHXUcwhmx0gbXKeCB5vXOOa9SPY9PK9hfH+fNxhLawFBZ0g2IUXXfaHm
CuAurDsUhqo7GP2zQARrxlIa9XLzkfW9t6g1a195H10D4wDV2RtnWyF581DR8hY8
Wi6YnsGEDyeZRlhlcvdTh0Dv/6l9fr9H1bLoel9DE1xqynFdvAnkzuWp/Ol7D4rI
/fUL19KKol68ng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:57 2025 by rpki-client