Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
File: dggs9uV3xDJnGZEkoogbNzLO9AQ.mft (raw, json)
Hash identifier: u2fARH2mnY2ZFlkfsDrrKr6jZkOSxyj3J/HoKD1Cd7U=
Subject key identifier: D6:EB:D1:F8:F6:F2:A2:25:96:EC:EB:A0:7E:DB:D2:A3:E0:4D:40:6A
Authority key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
Certificate issuer: /CN=76082cf6e577c43267199124a2881b3732cef404
Certificate serial: 0199FE46B726F6EB3F4D6188344BD1CFD30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 21:01:11 +0000
Manifest this update: Sun 19 Oct 2025 21:01:11 +0000
Manifest next update: Mon 20 Oct 2025 21:01:11 +0000
Files and hashes: 1: dggs9uV3xDJnGZEkoogbNzLO9AQ.crl (hash: XZ8SVhpeHpvun0rNdTY5dA+lhGuqENkabkvN8V8f74Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b7:26:f6:eb:3f:4d:61:88:34:4b:d1:cf:d3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76082cf6e577c43267199124a2881b3732cef404
Validity
Not Before: Oct 19 21:01:11 2025 GMT
Not After : Oct 20 21:01:11 2025 GMT
Subject: CN=d6ebd1f8f6f2a22596eceba07edbd2a3e04d406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:e3:8c:ec:9f:25:e0:60:48:8e:c9:a7:4f:
cf:66:59:17:4b:96:16:ce:94:c3:de:5e:8a:db:a8:
c3:d1:bd:38:8f:59:3b:a6:b2:f0:54:24:f6:3c:d0:
ae:10:03:48:02:90:26:f7:46:f5:90:dc:b0:20:46:
71:b6:bb:9f:ad:8d:c2:c6:e3:bd:09:ed:0c:b9:c3:
2d:fd:7c:d0:68:4b:01:29:20:35:db:36:ef:f1:5f:
ca:2f:78:9f:b0:c7:c1:11:f3:f3:f5:e3:0c:ca:fa:
fb:ad:da:61:8c:51:3f:cf:fa:85:c2:d4:72:43:43:
74:4e:3d:7e:0b:39:f7:00:99:d0:f8:5c:e4:e1:c2:
bf:92:fe:4f:98:5f:20:d5:2a:24:0d:9c:c3:62:40:
91:5f:0e:f8:c2:85:41:e4:2c:fc:97:7e:0f:50:e1:
d0:13:f1:1a:c8:da:94:0e:5f:6f:4c:7f:47:89:4b:
8d:0a:93:6a:df:bb:33:ba:c9:07:0a:24:72:9f:8d:
ec:9d:28:cb:15:3f:fd:6f:fd:ee:ae:52:50:56:7b:
63:a6:7c:f1:ab:a0:e6:c9:32:52:68:fe:e1:b7:a7:
66:99:78:5f:b1:97:2a:9e:94:ee:8d:39:d9:c4:d5:
f5:35:83:50:4a:5e:7d:40:a8:c6:b5:5f:1c:a2:10:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EB:D1:F8:F6:F2:A2:25:96:EC:EB:A0:7E:DB:D2:A3:E0:4D:40:6A
X509v3 Authority Key Identifier:
keyid:76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:86:ca:f2:21:36:38:6f:02:da:2a:ba:80:c7:99:b0:11:90:
ab:50:2d:66:73:a4:93:2c:31:33:8c:ae:41:d4:25:be:a0:a4:
cf:8a:ed:bb:18:6d:79:62:d1:f6:71:d3:b6:b2:9c:f5:d6:c3:
22:b2:98:99:f3:48:5a:7f:42:d8:59:fa:ff:50:5b:1d:c3:2e:
66:32:f6:a7:eb:8f:54:0f:2f:3b:ab:50:d7:29:c1:23:03:bc:
35:a8:67:72:66:36:d3:48:5e:27:7f:17:b2:ed:01:02:c5:64:
fa:c0:b7:ff:88:e2:12:50:53:b1:43:a5:aa:48:b5:28:fd:31:
4a:34:31:db:d9:08:94:79:a4:04:68:d9:4a:f3:4c:48:80:53:
e6:5c:3b:81:4e:36:c9:39:de:34:ac:f4:e5:46:ff:8e:3d:ff:
76:dd:da:86:c3:11:04:12:ce:71:f1:d8:87:f1:cd:ff:73:3a:
3c:32:30:c9:ad:7c:30:f7:aa:37:0b:88:35:ee:6c:95:82:be:
9a:92:e1:15:76:1b:a8:ac:ad:a5:a3:a2:66:83:03:bb:29:0e:
c9:ab:45:d5:d6:39:95:75:75:f8:70:19:5f:94:49:a8:61:ce:
21:bf:95:85:ff:c5:91:ae:28:8b:84:07:92:68:3c:a5:81:a1:
2c:2c:9e:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rrcm9us/TWGINEvRz9MMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MDgyY2Y2ZTU3N2M0MzI2NzE5OTEyNGEyODgxYjM3MzJj
ZWY0MDQwHhcNMjUxMDE5MjEwMTExWhcNMjUxMDIwMjEwMTExWjAzMTEwLwYDVQQD
EyhkNmViZDFmOGY2ZjJhMjI1OTZlY2ViYTA3ZWRiZDJhM2UwNGQ0MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/rjjOyfJeBgSI7Jp0/PZlkXS5YW
zpTD3l6K26jD0b04j1k7prLwVCT2PNCuEANIApAm90b1kNywIEZxtrufrY3CxuO9
Ce0MucMt/XzQaEsBKSA12zbv8V/KL3ifsMfBEfPz9eMMyvr7rdphjFE/z/qFwtRy
Q0N0Tj1+Czn3AJnQ+Fzk4cK/kv5PmF8g1SokDZzDYkCRXw74woVB5Cz8l34PUOHQ
E/EayNqUDl9vTH9HiUuNCpNq37szuskHCiRyn43snSjLFT/9b/3urlJQVntjpnzx
q6DmyTJSaP7ht6dmmXhfsZcqnpTujTnZxNX1NYNQSl59QKjGtV8cohBTvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbr0fj28qIlluzroH7b0qPgTUBqMB8GA1UdIwQY
MBaAFHYILPbld8QyZxmRJKKIGzcyzvQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGdnczl1VjN4REpuR1pFa29vZ2JOekxPOUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83ZjdlM2UtYzAyMi00NzM5LWI5Mzkt
ZDVkNGYwNzIwNWY4LzEvZGdnczl1VjN4REpuR1pFa29vZ2JOekxPOUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83ZjdlM2UtYzAyMi00NzM5LWI5MzktZDVkNGYwNzIwNWY4
LzEvZGdnczl1VjN4REpuR1pFa29vZ2JOekxPOUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4bK8iE2
OG8C2iq6gMeZsBGQq1AtZnOkkywxM4yuQdQlvqCkz4rtuxhteWLR9nHTtrKc9dbD
IrKYmfNIWn9C2Fn6/1BbHcMuZjL2p+uPVA8vO6tQ1ynBIwO8NahncmY200heJ38X
su0BAsVk+sC3/4jiElBTsUOlqki1KP0xSjQx29kIlHmkBGjZSvNMSIBT5lw7gU42
yTneNKz05Ub/jj3/dt3ahsMRBBLOcfHYh/HN/3M6PDIwya18MPeqNwuINe5slYK+
mpLhFXYbqKytpaOiZoMDuykOyatF1dY5lXV1+HAZX5RJqGHOIb+Vhf/Fka4oi4QH
kmg8pYGhLCye2A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:53 2025 by rpki-client