Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
File: 9z1njq7ZSnm3Qt1DveP1TynbMVI.mft (raw, json)
Hash identifier: ITgeM2tJ0OoFcDOKFWXD49ncTbZKh28UlNIKE31/WG4=
Subject key identifier: 77:32:34:53:F6:46:BC:45:9E:D1:FF:46:CD:1B:75:7E:5D:DB:6A:40
Authority key identifier: F7:3D:67:8E:AE:D9:4A:79:B7:42:DD:43:BD:E3:F5:4F:29:DB:31:52
Certificate issuer: /CN=f73d678eaed94a79b742dd43bde3f54f29db3152
Certificate serial: 0198D4A821BC0771EDC7C72B442E373D3CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
Manifest number: 43
Signing time: Sat 23 Aug 2025 02:00:45 +0000
Manifest this update: Sat 23 Aug 2025 02:00:45 +0000
Manifest next update: Sun 24 Aug 2025 02:00:45 +0000
Files and hashes: 1: 9z1njq7ZSnm3Qt1DveP1TynbMVI.crl (hash: 69TlmgLNlYWKbPIbdHfbbBqfjOCK0P7aqLHUT32AYM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:21:bc:07:71:ed:c7:c7:2b:44:2e:37:3d:3c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73d678eaed94a79b742dd43bde3f54f29db3152
Validity
Not Before: Aug 23 02:00:45 2025 GMT
Not After : Aug 24 02:00:45 2025 GMT
Subject: CN=77323453f646bc459ed1ff46cd1b757e5ddb6a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:4a:49:3a:70:fa:34:4c:b9:2f:f3:43:37:
ab:dd:07:51:6d:25:24:77:b4:fd:3c:3f:98:53:1f:
04:e7:08:c7:2f:98:64:0e:f4:ce:04:7c:6f:3e:f5:
60:ed:36:ce:91:cc:21:dc:dd:d6:3c:33:5e:8f:a9:
3c:6f:f1:87:b0:bb:ec:e5:54:f5:b0:a6:50:a7:9b:
31:48:bc:44:2f:0e:6b:3d:76:7b:c2:1c:27:e2:44:
d3:9e:a1:52:99:00:a1:7b:58:b6:20:1c:b4:06:eb:
cf:59:ad:f3:c5:57:ef:68:27:a7:a4:90:7f:af:5c:
30:0f:17:76:9f:8e:ab:12:c6:16:7b:fc:3f:ed:81:
b8:66:ce:65:20:bd:f4:a2:24:c9:66:22:0c:25:84:
63:23:12:e1:26:a1:73:ce:29:7e:2e:ae:80:56:8a:
e6:06:09:cd:7c:73:85:54:0b:2f:6a:d6:93:ad:cf:
e4:87:32:fb:9e:e1:3c:60:90:2e:69:b0:0e:eb:22:
71:81:f5:49:0c:81:eb:4a:ff:21:4a:a9:dc:fe:c1:
1e:af:2f:87:6d:ce:83:6f:b1:66:10:8e:c3:e1:c5:
c8:3a:99:15:0f:19:35:18:0d:8f:f6:dc:56:3f:c6:
33:26:ad:f5:a2:94:69:9a:ca:03:be:72:64:69:b2:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:34:53:F6:46:BC:45:9E:D1:FF:46:CD:1B:75:7E:5D:DB:6A:40
X509v3 Authority Key Identifier:
keyid:F7:3D:67:8E:AE:D9:4A:79:B7:42:DD:43:BD:E3:F5:4F:29:DB:31:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f4:72:10:05:f1:2a:c7:b2:24:4e:32:90:d7:89:55:13:c8:
f8:b9:dd:a9:b3:60:27:08:f5:49:4b:67:c2:82:db:3a:72:5d:
89:a4:48:f3:8d:39:32:1a:b1:ed:cc:d9:26:26:b2:4b:70:db:
19:ef:0f:4b:cb:c3:20:ef:72:d5:a4:ea:a9:32:1b:68:60:95:
cf:52:1b:54:7a:a2:87:15:3c:5e:5d:7a:87:9e:f6:26:4f:f8:
d1:64:a0:b0:99:86:12:01:a4:18:3a:c4:11:f9:25:07:0c:73:
70:61:ef:bd:2c:01:38:82:08:59:38:32:9c:e8:fe:e6:9c:6b:
04:0b:cd:06:db:50:55:3b:1a:9b:c6:3f:ea:72:f3:1c:0d:1d:
ad:b2:f9:c6:6a:88:8e:7d:b2:17:40:cb:da:22:49:fd:94:7c:
d8:dd:84:66:68:0c:97:6b:15:94:8f:ac:43:45:94:d0:72:8d:
93:51:c3:b2:a8:3c:31:87:83:eb:c4:f8:ce:a4:b6:c1:53:1c:
af:c0:b8:ac:a3:cf:9d:ee:da:56:8c:9a:0f:d1:9c:6f:3a:21:
66:69:a5:bd:60:ad:6d:8e:ab:e0:b0:88:c4:6e:bb:4c:f7:54:
45:03:72:2d:c3:5e:81:9d:3c:88:4b:06:49:63:8b:36:8c:1a:
80:96:e4:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqCG8B3Htx8crRC43PTy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3M2Q2NzhlYWVkOTRhNzliNzQyZGQ0M2JkZTNmNTRmMjlk
YjMxNTIwHhcNMjUwODIzMDIwMDQ1WhcNMjUwODI0MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg3NzMyMzQ1M2Y2NDZiYzQ1OWVkMWZmNDZjZDFiNzU3ZTVkZGI2YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaVKSTpw+jRMuS/zQzer3QdRbSUk
d7T9PD+YUx8E5wjHL5hkDvTOBHxvPvVg7TbOkcwh3N3WPDNej6k8b/GHsLvs5VT1
sKZQp5sxSLxELw5rPXZ7whwn4kTTnqFSmQChe1i2IBy0BuvPWa3zxVfvaCenpJB/
r1wwDxd2n46rEsYWe/w/7YG4Zs5lIL30oiTJZiIMJYRjIxLhJqFzzil+Lq6AVorm
BgnNfHOFVAsvataTrc/khzL7nuE8YJAuabAO6yJxgfVJDIHrSv8hSqnc/sEery+H
bc6Db7FmEI7D4cXIOpkVDxk1GA2P9txWP8YzJq31opRpmsoDvnJkabIQiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcyNFP2RrxFntH/Rs0bdX5d22pAMB8GA1UdIwQY
MBaAFPc9Z46u2Up5t0LdQ73j9U8p2zFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXoxbmpxN1pTbm0zUXQxRHZlUDFUeW5iTVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80OTcxMjUtNjFmYi00MmU4LWFjNDkt
NjE2NzNhNDc3NTQzLzEvOXoxbmpxN1pTbm0zUXQxRHZlUDFUeW5iTVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi80OTcxMjUtNjFmYi00MmU4LWFjNDktNjE2NzNhNDc3NTQz
LzEvOXoxbmpxN1pTbm0zUXQxRHZlUDFUeW5iTVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfRyEAXx
KseyJE4ykNeJVRPI+LndqbNgJwj1SUtnwoLbOnJdiaRI8405Mhqx7czZJiayS3Db
Ge8PS8vDIO9y1aTqqTIbaGCVz1IbVHqihxU8Xl16h572Jk/40WSgsJmGEgGkGDrE
EfklBwxzcGHvvSwBOIIIWTgynOj+5pxrBAvNBttQVTsam8Y/6nLzHA0drbL5xmqI
jn2yF0DL2iJJ/ZR82N2EZmgMl2sVlI+sQ0WU0HKNk1HDsqg8MYeD68T4zqS2wVMc
r8C4rKPPne7aVoyaD9GcbzohZmmlvWCtbY6r4LCIxG67TPdURQNyLcNegZ08iEsG
SWOLNowagJbkmw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:42 2025 by rpki-client