
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: v1812F39Qu/AjffOErA0aK7/iNtXpMlIiGAzcRebRG4=
Subject key identifier: FE:B3:71:D2:D6:28:7C:9D:4C:38:28:5A:6D:7A:FA:B8:E0:14:50:7D
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 0198D66001D64CC53A718B64DA7BE6D5DEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0977
Signing time: Sat 23 Aug 2025 10:01:12 +0000
Manifest this update: Sat 23 Aug 2025 10:01:12 +0000
Manifest next update: Sun 24 Aug 2025 10:01:12 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: KBePVKIF3B60KbN9tPaoAZLjBv8bwnlqovMFFwR32rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:01:d6:4c:c5:3a:71:8b:64:da:7b:e6:d5:de:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Aug 23 10:01:12 2025 GMT
Not After : Aug 24 10:01:12 2025 GMT
Subject: CN=feb371d2d6287c9d4c38285a6d7afab8e014507d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:2b:23:17:43:22:18:2a:71:dd:af:af:10:
5d:44:1d:e3:23:20:21:ee:37:33:77:41:e1:83:8d:
1b:29:dd:18:33:c3:30:0b:d6:84:7f:98:55:5a:06:
a6:ba:2a:ab:b3:10:e2:4c:a3:93:c2:2e:94:6c:fc:
00:db:73:d7:e8:4e:d6:ed:b2:49:db:4b:55:3f:0f:
d9:1f:0d:44:9d:b9:a6:df:7f:ba:dc:0e:99:94:32:
06:ed:6a:c7:70:e9:00:8e:f8:23:01:18:cb:0a:6e:
25:1b:74:6a:a1:77:25:b3:cf:8a:8f:ae:fe:cb:84:
41:66:76:8a:64:3b:32:61:8c:e8:1e:a4:19:42:2f:
22:f8:c1:79:66:0b:dd:99:4e:07:fe:46:55:67:9a:
86:68:63:e3:71:f3:87:9b:31:0f:90:f0:4c:7b:55:
91:e9:03:38:db:ff:31:55:26:30:de:a4:ba:98:13:
44:ff:6a:90:da:26:ec:53:f5:a6:bf:b0:df:84:33:
ef:f1:54:1a:4d:9a:71:6d:79:1e:2a:ce:99:0e:6c:
41:45:74:34:84:71:20:46:24:22:91:fa:5d:f6:90:
09:eb:25:b8:d5:96:09:d6:92:89:d6:0b:eb:04:82:
6a:6b:80:41:76:bd:21:1b:bc:fd:a8:b0:67:b7:b2:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B3:71:D2:D6:28:7C:9D:4C:38:28:5A:6D:7A:FA:B8:E0:14:50:7D
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d4:bc:a3:0a:02:5c:00:ea:65:fe:eb:64:3f:57:9f:10:7e:
e1:ce:45:fc:0b:e2:ed:88:70:b2:e7:12:77:2e:5d:e1:c3:e5:
28:55:ec:37:b2:b6:cf:a1:00:ae:19:3e:c9:98:80:63:b5:e0:
12:3a:91:3b:21:83:06:6f:a2:fc:a7:35:a0:cd:3a:11:3b:89:
33:7c:b2:d5:db:85:4e:c0:3a:5b:09:f2:25:31:4a:f1:a2:0a:
20:53:06:86:c5:14:f2:9b:af:cb:f6:57:a1:65:c9:0e:03:1e:
51:ef:71:f6:0f:7b:f3:cf:a8:17:60:06:d1:5e:98:4a:d3:56:
2b:c6:46:fb:de:ef:2c:c0:95:58:3a:44:de:25:00:eb:f8:0e:
01:17:f9:97:55:fb:28:23:ee:41:6a:ae:04:fe:07:43:d5:35:
4d:55:1d:57:c1:4f:0c:02:0a:19:30:60:bf:5b:91:d7:f9:f1:
c5:f2:5f:49:f6:02:22:29:60:fa:a6:7c:d4:0f:0a:d5:43:4e:
a8:e7:05:8d:7b:4e:0b:e7:c2:03:88:9e:bc:00:ad:d9:30:49:
b7:88:85:79:68:88:65:c5:98:03:ef:bc:4e:7e:19:8c:d2:f0:
15:1a:70:c6:31:b7:3f:5e:51:10:bd:9c:e5:55:55:c2:e2:07:
df:03:2c:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYAHWTMU6cYtk2nvm1d6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjhjMjJiMDI1MDI3NWZhNmViNzM0YmEwMGU3OTBmN2Uz
N2E1NTAwHhcNMjUwODIzMTAwMTEyWhcNMjUwODI0MTAwMTEyWjAzMTEwLwYDVQQD
EyhmZWIzNzFkMmQ2Mjg3YzlkNGMzODI4NWE2ZDdhZmFiOGUwMTQ1MDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDorIxdDIhgqcd2vrxBdRB3jIyAh
7jczd0Hhg40bKd0YM8MwC9aEf5hVWgamuiqrsxDiTKOTwi6UbPwA23PX6E7W7bJJ
20tVPw/ZHw1Enbmm33+63A6ZlDIG7WrHcOkAjvgjARjLCm4lG3RqoXcls8+Kj67+
y4RBZnaKZDsyYYzoHqQZQi8i+MF5ZgvdmU4H/kZVZ5qGaGPjcfOHmzEPkPBMe1WR
6QM42/8xVSYw3qS6mBNE/2qQ2ibsU/Wmv7DfhDPv8VQaTZpxbXkeKs6ZDmxBRXQ0
hHEgRiQikfpd9pAJ6yW41ZYJ1pKJ1gvrBIJqa4BBdr0hG7z9qLBnt7J3vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6zcdLWKHydTDgoWm16+rjgFFB9MB8GA1UdIwQY
MBaAFPcowisCUCdfputzS6AOeQ9+N6VQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYt
MDZmNjRlYjAwNTY2LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYtMDZmNjRlYjAwNTY2
LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdS8owoC
XADqZf7rZD9XnxB+4c5F/Avi7YhwsucSdy5d4cPlKFXsN7K2z6EArhk+yZiAY7Xg
EjqROyGDBm+i/Kc1oM06ETuJM3yy1duFTsA6WwnyJTFK8aIKIFMGhsUU8puvy/ZX
oWXJDgMeUe9x9g9788+oF2AG0V6YStNWK8ZG+97vLMCVWDpE3iUA6/gOARf5l1X7
KCPuQWquBP4HQ9U1TVUdV8FPDAIKGTBgv1uR1/nxxfJfSfYCIilg+qZ81A8K1UNO
qOcFjXtOC+fCA4ievACt2TBJt4iFeWiIZcWYA++8Tn4ZjNLwFRpwxjG3P15REL2c
5VVVwuIH3wMsUA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:52 2025 by rpki-client