
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
File: n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft (raw, json)
Hash identifier: duFfBGCiNjOeJpIwbz3i9NmSkIA+5DObDKH4HxgHVvc=
Subject key identifier: 5B:AA:7F:56:72:A4:12:29:F9:A9:5E:B1:AB:D1:16:94:46:15:28:24
Authority key identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4
Certificate issuer: /CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
Certificate serial: 0197CB39F3294902EB4693041752DB75781E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
Manifest number: 0357
Signing time: Wed 02 Jul 2025 13:01:02 +0000
Manifest this update: Wed 02 Jul 2025 13:01:02 +0000
Manifest next update: Thu 03 Jul 2025 13:01:02 +0000
Files and hashes: 1: n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl (hash: wzUdbuZJeeDgnih7vaDBoGPRV3D1rEJW9ezhZTiA2i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:f3:29:49:02:eb:46:93:04:17:52:db:75:78:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
Validity
Not Before: Jul 2 13:01:02 2025 GMT
Not After : Jul 3 13:01:02 2025 GMT
Subject: CN=5baa7f5672a41229f9a95eb1abd1169446152824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:c7:4c:de:7c:14:8b:af:fa:e9:a6:51:f3:
a2:6e:5f:07:2f:97:d6:f2:47:2a:65:87:a0:38:fe:
57:b4:d5:b1:f0:bc:09:27:3f:7f:3d:9b:a3:22:59:
83:c9:67:f3:19:95:93:57:a9:6f:a9:78:da:cb:d0:
29:3f:bd:4f:12:72:a4:3a:6b:86:2f:76:ff:5f:6d:
89:28:09:86:94:f9:3e:2e:51:b6:ab:e4:72:68:ce:
1d:25:32:c2:bc:87:52:e6:bc:ef:af:2b:5a:0e:5a:
72:f1:f9:4e:17:a6:e1:9b:5d:27:15:c5:23:10:13:
c5:10:75:45:0f:1b:ae:59:a8:ea:a7:46:1c:1c:88:
db:d2:c0:88:c6:f6:db:a6:f1:c4:45:8f:ed:70:6a:
88:4e:4b:19:f9:80:26:46:bf:99:f9:d1:28:57:0e:
08:06:a7:e3:ce:34:bf:55:13:f6:a8:ba:6f:5e:c0:
73:c2:2c:26:b2:a1:1d:ab:49:d7:08:ed:2c:81:39:
7d:49:82:cd:42:c0:f2:59:ef:77:80:32:14:ce:3a:
b4:95:28:8f:6d:52:cc:33:62:fc:ee:99:71:94:41:
87:48:92:9e:18:e9:1b:65:62:19:bf:11:88:19:bf:
c1:9e:7f:05:17:52:98:ae:0c:d4:29:35:9c:20:aa:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AA:7F:56:72:A4:12:29:F9:A9:5E:B1:AB:D1:16:94:46:15:28:24
X509v3 Authority Key Identifier:
keyid:9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c2:3d:de:50:f6:a0:07:74:80:3e:42:c9:e1:5b:e3:28:72:
50:6c:72:c3:d8:e4:0c:ed:82:ab:99:0d:1c:4b:91:08:e2:46:
a4:45:be:b5:6d:08:5f:78:52:30:72:e8:7a:25:b4:46:16:f2:
4e:6d:5e:93:29:37:a8:59:a6:cb:3f:9e:30:56:ee:86:af:32:
f6:3f:f7:dd:78:ff:e0:96:98:ff:f1:5b:19:87:03:5b:5b:44:
28:49:96:75:dd:e1:32:44:7e:63:11:b4:19:1e:5b:a5:35:88:
98:e1:96:78:cd:8b:e2:b3:32:69:a4:c3:db:08:2a:31:99:06:
87:52:74:ec:d2:a0:9e:e4:e5:9f:da:14:d7:5e:83:f4:5c:00:
8a:0b:b4:35:00:04:d5:cb:dd:66:2f:e6:04:e1:cb:b5:d4:f0:
6a:b4:28:bf:cc:a0:94:7b:ea:56:ac:b7:a2:45:68:fe:7a:d1:
6c:d3:59:3d:a8:71:70:a9:e7:87:b8:8f:ed:10:6b:a4:82:63:
28:b9:12:d6:3e:e6:5a:b5:07:1d:c0:70:21:dc:ed:b5:fc:35:
31:50:51:a5:34:b7:02:e1:43:5c:a6:be:20:57:1d:3d:d1:81:
36:05:a1:98:7f:d8:00:4a:38:d3:fe:c2:51:57:50:21:2f:4d:
c2:c5:a0:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLOfMpSQLrRpMEF1LbdXgeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmUyNmY3ZDIwMjljZjE5MzMxMzcwMWVhYzNmYzliZGJi
ODk0ZDQwHhcNMjUwNzAyMTMwMTAyWhcNMjUwNzAzMTMwMTAyWjAzMTEwLwYDVQQD
Eyg1YmFhN2Y1NjcyYTQxMjI5ZjlhOTVlYjFhYmQxMTY5NDQ2MTUyODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlTHTN58FIuv+ummUfOibl8HL5fW
8kcqZYegOP5XtNWx8LwJJz9/PZujIlmDyWfzGZWTV6lvqXjay9ApP71PEnKkOmuG
L3b/X22JKAmGlPk+LlG2q+RyaM4dJTLCvIdS5rzvrytaDlpy8flOF6bhm10nFcUj
EBPFEHVFDxuuWajqp0YcHIjb0sCIxvbbpvHERY/tcGqITksZ+YAmRr+Z+dEoVw4I
BqfjzjS/VRP2qLpvXsBzwiwmsqEdq0nXCO0sgTl9SYLNQsDyWe93gDIUzjq0lSiP
bVLMM2L87plxlEGHSJKeGOkbZWIZvxGIGb/Bnn8FF1KYrgzUKTWcIKpw6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuqf1ZypBIp+alesavRFpRGFSgkMB8GA1UdIwQY
MBaAFJ/+JvfSApzxkzE3AerD/JvbuJTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl80bTk5SUNuUEdUTVRjQjZzUDhtOXU0bE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wNTljMmEtZTkzNC00ZTUyLTg3ODkt
MmFjYWMyM2U3NTlkLzEvbl80bTk5SUNuUEdUTVRjQjZzUDhtOXU0bE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8wNTljMmEtZTkzNC00ZTUyLTg3ODktMmFjYWMyM2U3NTlk
LzEvbl80bTk5SUNuUEdUTVRjQjZzUDhtOXU0bE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMI93lD2
oAd0gD5CyeFb4yhyUGxyw9jkDO2Cq5kNHEuRCOJGpEW+tW0IX3hSMHLoeiW0Rhby
Tm1ekyk3qFmmyz+eMFbuhq8y9j/33Xj/4JaY//FbGYcDW1tEKEmWdd3hMkR+YxG0
GR5bpTWImOGWeM2L4rMyaaTD2wgqMZkGh1J07NKgnuTln9oU116D9FwAigu0NQAE
1cvdZi/mBOHLtdTwarQov8yglHvqVqy3okVo/nrRbNNZPahxcKnnh7iP7RBrpIJj
KLkS1j7mWrUHHcBwIdzttfw1MVBRpTS3AuFDXKa+IFcdPdGBNgWhmH/YAEo40/7C
UVdQIS9NwsWgig==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:43:39 2025 by rpki-client