Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: XR6RJZbeRxnPuEd0aH7jso6jmEfHZ+jz3sRWyWiKVcM=
Subject key identifier: B9:25:61:6B:D7:B0:57:4D:5C:6D:F9:6E:F7:FC:B5:64:F2:D7:3E:09
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 0198D65F5B4D76947DABAA29921A028B39D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:30 +0000
Manifest this update: Sat 23 Aug 2025 10:00:30 +0000
Manifest next update: Sun 24 Aug 2025 10:00:30 +0000
Files and hashes: 1: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: RUDm8E7LDORAFDoQN7K2yzrfeXUq8tmt8IN+D0rlH3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5b:4d:76:94:7d:ab:aa:29:92:1a:02:8b:39:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Aug 23 10:00:30 2025 GMT
Not After : Aug 24 10:00:30 2025 GMT
Subject: CN=b925616bd7b0574d5c6df96ef7fcb564f2d73e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:5f:54:93:7e:4e:63:8e:32:e1:07:26:a5:
ad:6d:53:b7:b5:a9:41:7c:c1:0a:b4:df:f4:42:88:
8f:ea:79:00:95:15:d5:bb:a8:d6:57:31:6d:fa:f4:
77:5d:98:57:ae:cd:21:57:d9:bf:6c:79:c9:4c:cc:
8a:57:05:c6:17:8d:ac:a1:f6:d0:46:95:3d:0d:41:
77:aa:45:f6:a3:b8:1c:e6:0f:02:d1:43:e7:a6:c1:
86:5d:4f:30:13:69:70:80:cd:c2:06:1c:7f:04:18:
7a:b6:66:5a:7d:40:94:d7:a4:41:b1:58:39:3a:99:
9c:ae:32:93:cd:cc:5e:ae:55:56:2b:32:ec:c1:dd:
e1:35:61:4e:c7:9c:d4:19:33:01:94:90:36:a0:a6:
7a:3f:90:30:f9:b6:0a:e8:c5:d1:26:1c:b0:e9:4b:
b7:0d:51:19:26:d0:91:67:40:17:12:ff:e1:31:98:
73:dc:78:bb:fa:8a:92:4c:32:2c:39:7a:7b:37:79:
e4:d2:c6:63:5f:7b:08:74:2d:f6:31:e1:19:b7:69:
a8:a3:02:ca:ea:26:d5:d0:23:93:b6:f1:dd:79:4f:
51:e2:39:c5:00:22:30:6a:91:6f:e2:6c:a1:5f:1c:
97:b0:1f:cd:37:ee:55:2a:5f:8f:fb:37:ff:1c:b3:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:25:61:6B:D7:B0:57:4D:5C:6D:F9:6E:F7:FC:B5:64:F2:D7:3E:09
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3d:dc:63:e7:5d:97:f4:34:15:30:ba:53:bb:37:5f:79:b9:
50:18:06:3e:5f:0a:0c:2c:c3:53:36:b5:48:bf:33:44:34:e6:
ad:24:fb:f5:71:58:7a:98:f2:23:8a:04:c2:c1:61:f4:20:b3:
8e:22:a7:31:4a:f1:27:37:09:5f:44:5c:45:ff:48:3d:db:8f:
cc:15:dc:45:03:a4:6a:ec:ce:ed:a6:f2:10:e7:75:34:30:8d:
ca:c8:57:d4:7c:79:35:11:64:de:57:e2:71:2d:ff:e4:4a:3a:
eb:fe:39:d3:34:5f:41:86:0a:b6:36:fd:b9:64:0a:73:a8:a1:
33:b5:f5:11:f7:84:a0:ae:f6:c9:5a:ac:75:2b:42:7d:a8:7e:
af:e4:74:01:13:68:56:8d:d3:59:a7:7b:45:cc:d8:4e:7f:a3:
c8:08:f7:05:4b:29:fb:6f:8c:72:a0:4e:36:fe:ab:22:47:3c:
d0:8a:e6:b0:9b:ba:ee:ba:e5:e8:18:aa:dc:e8:e4:be:e9:53:
43:78:15:34:36:fb:f4:ed:6b:36:32:fe:5d:71:87:3a:b0:f6:
e2:dd:da:a7:85:e6:d1:aa:4f:10:d7:15:f5:58:8b:12:2c:62:
cd:96:21:20:3c:e4:d9:d0:56:7b:9f:77:b8:c0:81:92:67:17:
d8:34:c8:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX1tNdpR9q6opkhoCiznYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2
ZjA4YzIwHhcNMjUwODIzMTAwMDMwWhcNMjUwODI0MTAwMDMwWjAzMTEwLwYDVQQD
EyhiOTI1NjE2YmQ3YjA1NzRkNWM2ZGY5NmVmN2ZjYjU2NGYyZDczZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs95fVJN+TmOOMuEHJqWtbVO3talB
fMEKtN/0QoiP6nkAlRXVu6jWVzFt+vR3XZhXrs0hV9m/bHnJTMyKVwXGF42sofbQ
RpU9DUF3qkX2o7gc5g8C0UPnpsGGXU8wE2lwgM3CBhx/BBh6tmZafUCU16RBsVg5
OpmcrjKTzcxerlVWKzLswd3hNWFOx5zUGTMBlJA2oKZ6P5Aw+bYK6MXRJhyw6Uu3
DVEZJtCRZ0AXEv/hMZhz3Hi7+oqSTDIsOXp7N3nk0sZjX3sIdC32MeEZt2moowLK
6ibV0COTtvHdeU9R4jnFACIwapFv4myhXxyXsB/NN+5VKl+P+zf/HLMIGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLklYWvXsFdNXG35bvf8tWTy1z4JMB8GA1UdIwQY
MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt
YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3
LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz3cY+dd
l/Q0FTC6U7s3X3m5UBgGPl8KDCzDUza1SL8zRDTmrST79XFYepjyI4oEwsFh9CCz
jiKnMUrxJzcJX0RcRf9IPduPzBXcRQOkauzO7abyEOd1NDCNyshX1Hx5NRFk3lfi
cS3/5Eo66/450zRfQYYKtjb9uWQKc6ihM7X1EfeEoK72yVqsdStCfah+r+R0ARNo
Vo3TWad7RczYTn+jyAj3BUsp+2+McqBONv6rIkc80IrmsJu67rrl6Biq3OjkvulT
Q3gVNDb79O1rNjL+XXGHOrD24t3ap4Xm0apPENcV9ViLEixizZYhIDzk2dBWe593
uMCBkmcX2DTIDw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:43 2025 by rpki-client