Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: EB5lV2eW6Q4AG73LYKGVNP7ZyTxYhs8bK3BaFie1/ks=
Subject key identifier: FC:43:9B:AC:68:F7:50:C5:22:DC:5B:84:77:76:D3:D3:E3:EA:8D:B7
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 0198D4743D620BD39ACDB78320A763D0C45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 12D7
Signing time: Sat 23 Aug 2025 01:04:04 +0000
Manifest this update: Sat 23 Aug 2025 01:04:04 +0000
Manifest next update: Sun 24 Aug 2025 01:04:04 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: buFuTNennhdQuYq3SzMuOTWkLAvNNsh0KqzB6BCyFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:3d:62:0b:d3:9a:cd:b7:83:20:a7:63:d0:c4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Aug 23 01:04:04 2025 GMT
Not After : Aug 24 01:04:04 2025 GMT
Subject: CN=fc439bac68f750c522dc5b847776d3d3e3ea8db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:57:d3:25:83:5a:bb:d3:9b:e8:85:d5:f4:
36:e5:44:eb:c0:f5:60:f1:03:8e:73:37:e8:d4:59:
a1:a9:f2:c1:d2:2d:05:72:fb:dc:95:a8:3f:02:95:
da:53:22:19:20:b5:61:dd:2c:d6:e9:9c:f1:ba:ea:
cf:03:5d:e3:29:b6:a7:91:72:67:2b:fa:7d:93:53:
c9:c8:58:6c:ed:71:3d:ab:2c:0f:24:c2:20:9f:51:
3b:66:24:0c:12:ec:83:09:b5:87:51:95:a3:6a:31:
b8:41:20:bc:30:55:4b:10:0e:49:a9:79:80:9b:be:
4f:82:b6:25:58:ec:4b:c6:cf:92:65:f4:1d:a1:31:
a5:f1:e8:6d:78:df:ef:fc:85:33:46:1d:77:f3:be:
8f:9b:7f:95:d8:50:ee:b9:c4:06:b6:31:bb:b6:8c:
86:93:f1:a8:36:75:38:77:d4:81:2c:0e:4a:3a:3b:
a1:26:bd:db:c1:db:0a:e3:28:92:9c:28:4d:94:b2:
8c:35:e6:d1:64:ea:00:e2:86:eb:f5:67:89:49:37:
2c:5e:11:24:55:21:73:00:e7:ee:62:dd:ec:b1:ae:
2d:a3:46:ff:69:b1:6e:56:df:68:15:a1:1b:6a:3b:
13:f9:ff:62:97:fd:4b:7b:e4:28:f8:d8:4f:58:af:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:43:9B:AC:68:F7:50:C5:22:DC:5B:84:77:76:D3:D3:E3:EA:8D:B7
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a8:86:40:4d:c6:99:87:a2:b9:28:21:9b:66:4e:53:86:10:
89:6f:44:60:93:44:8e:cb:08:b3:c6:44:b1:f4:cc:60:90:13:
2e:43:78:39:4b:22:13:86:c3:09:e4:5e:1c:90:91:0d:fd:02:
7e:11:9d:d9:ce:e4:1a:99:f5:5b:e3:ee:45:aa:af:ab:b3:d0:
a0:78:14:ef:b5:fc:83:da:b9:26:dd:24:98:ff:a3:3d:a4:92:
45:17:08:3e:3f:19:8b:6e:5c:a7:eb:19:e3:32:29:25:63:82:
16:60:ad:80:2b:5b:3b:5b:02:65:10:01:94:ff:a2:31:4b:dd:
9c:ac:a4:30:36:31:20:57:40:61:11:08:c8:e6:2c:a5:a0:ee:
a7:58:d5:8b:13:b7:0a:1d:03:a1:5a:9d:41:cf:20:f9:cc:e2:
81:15:63:cd:c2:3c:cf:46:2f:66:23:02:c9:4a:85:88:18:bb:
a9:1c:b8:b3:84:61:b7:fb:4e:bf:8d:bd:4c:d3:18:5c:4a:ad:
55:2b:ae:7a:08:c9:ba:6c:19:e3:cf:8a:e2:fb:8c:ee:4c:00:
45:b8:ea:30:c6:18:ca:72:fe:70:16:f5:8e:d2:9b:74:6e:d7:
61:a9:a9:81:5b:73:0d:99:13:b9:75:33:5b:3f:21:5e:ca:a0:
b7:b6:05:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdD1iC9OazbeDIKdj0MRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Y2RkNGM3YzhiZjg3MTg3MDMwYTY0NDcwMjBhODk2ZjQx
ZTQ5OTMwHhcNMjUwODIzMDEwNDA0WhcNMjUwODI0MDEwNDA0WjAzMTEwLwYDVQQD
EyhmYzQzOWJhYzY4Zjc1MGM1MjJkYzViODQ3Nzc2ZDNkM2UzZWE4ZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSpX0yWDWrvTm+iF1fQ25UTrwPVg
8QOOczfo1FmhqfLB0i0Fcvvclag/ApXaUyIZILVh3SzW6ZzxuurPA13jKbankXJn
K/p9k1PJyFhs7XE9qywPJMIgn1E7ZiQMEuyDCbWHUZWjajG4QSC8MFVLEA5JqXmA
m75PgrYlWOxLxs+SZfQdoTGl8ehteN/v/IUzRh13876Pm3+V2FDuucQGtjG7toyG
k/GoNnU4d9SBLA5KOjuhJr3bwdsK4yiSnChNlLKMNebRZOoA4obr9WeJSTcsXhEk
VSFzAOfuYt3ssa4to0b/abFuVt9oFaEbajsT+f9il/1Le+Qo+NhPWK8pzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxDm6xo91DFItxbhHd209Pj6o23MB8GA1UdIwQY
MBaAFPTN1MfIv4cYcDCmRHAgqJb0HkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAt
ZjFlMTk4YTI0ZGJmLzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAtZjFlMTk4YTI0ZGJm
LzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqiGQE3G
mYeiuSghm2ZOU4YQiW9EYJNEjssIs8ZEsfTMYJATLkN4OUsiE4bDCeReHJCRDf0C
fhGd2c7kGpn1W+PuRaqvq7PQoHgU77X8g9q5Jt0kmP+jPaSSRRcIPj8Zi25cp+sZ
4zIpJWOCFmCtgCtbO1sCZRABlP+iMUvdnKykMDYxIFdAYREIyOYspaDup1jVixO3
Ch0DoVqdQc8g+czigRVjzcI8z0YvZiMCyUqFiBi7qRy4s4Rht/tOv429TNMYXEqt
VSuuegjJumwZ48+K4vuM7kwARbjqMMYYynL+cBb1jtKbdG7XYampgVtzDZkTuXUz
Wz8hXsqgt7YFvA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:16 2025 by rpki-client