Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
File: rK67C7Ozijz0QMgf97PhaTMqpm0.mft (raw, json)
Hash identifier: Kwuu5wbrkA/mE1ogSZQttMhxeLW15qaEbvV+f4RwN6c=
Subject key identifier: 69:71:58:59:BE:EA:7C:FD:44:A9:3F:4F:C5:FE:A7:7E:D0:E1:C6:64
Authority key identifier: AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
Certificate issuer: /CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Certificate serial: 0198D660B22E875A1A9B4EE2691977EC373B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
Manifest number: 1251
Signing time: Sat 23 Aug 2025 10:01:57 +0000
Manifest this update: Sat 23 Aug 2025 10:01:57 +0000
Manifest next update: Sun 24 Aug 2025 10:01:57 +0000
Files and hashes: 1: rK67C7Ozijz0QMgf97PhaTMqpm0.crl (hash: T5GEt8v+EB4YgA8VuOODWfqZOYbBh8pa9mNsll+lpCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b2:2e:87:5a:1a:9b:4e:e2:69:19:77:ec:37:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Validity
Not Before: Aug 23 10:01:57 2025 GMT
Not After : Aug 24 10:01:57 2025 GMT
Subject: CN=69715859beea7cfd44a93f4fc5fea77ed0e1c664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:e0:c0:2b:54:82:fc:d2:05:dd:55:bc:94:
6e:39:86:e3:48:92:16:e2:ff:a0:78:f5:60:a5:dd:
54:4a:58:8a:ea:58:75:c2:7a:b3:9c:16:48:70:41:
65:a0:2e:12:fe:40:91:8c:0a:af:db:a4:b9:47:0f:
0a:f1:83:37:33:59:fd:16:e4:20:c9:d9:0e:de:10:
5c:66:70:e8:7d:3c:2a:03:2a:95:70:9a:b0:0e:7c:
20:7b:78:4f:fe:25:ec:02:fe:10:e4:5e:9b:33:d3:
ec:3c:91:d3:4d:bc:91:2e:02:a6:75:8c:8a:fd:37:
0a:56:2c:51:e4:62:7f:85:e5:10:40:98:d5:b0:4e:
94:9f:21:8a:2a:01:4d:d7:7d:84:c7:d9:ac:22:37:
78:e7:48:fb:9b:b8:f3:eb:fa:1d:86:eb:13:db:fe:
9a:f1:25:20:e2:c5:a0:3b:d0:f1:fc:77:21:e8:17:
4c:db:8b:e0:10:93:06:fb:dc:02:84:72:fa:92:fc:
65:18:3c:f1:fe:b4:85:86:01:d2:20:59:3d:ee:70:
1b:a8:85:2a:ac:97:d6:89:ea:ca:1c:0e:6c:b0:7b:
9c:ab:50:b7:14:21:a1:7b:87:05:7a:4f:6f:ba:80:
d0:4e:9d:97:db:42:b7:9e:92:c8:bf:77:44:02:67:
c9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:71:58:59:BE:EA:7C:FD:44:A9:3F:4F:C5:FE:A7:7E:D0:E1:C6:64
X509v3 Authority Key Identifier:
keyid:AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1f:69:96:4a:ca:e3:54:73:31:4e:fe:26:f0:8b:ba:e9:be:
d4:be:5e:2c:a1:e1:8a:67:55:f4:66:b8:2d:17:11:51:88:1a:
18:0a:b7:f8:7e:92:3b:a6:5b:46:6c:88:20:2e:41:82:ee:82:
3d:33:ca:e1:21:e1:fb:f6:a1:dd:f5:39:07:30:ba:91:26:57:
d1:2d:d7:e4:5d:ec:ad:68:22:49:b4:63:80:db:ed:7f:46:dc:
cc:84:b8:31:de:d0:1a:15:5d:5b:94:b8:87:93:27:a0:ef:a7:
af:4b:ca:f9:85:55:ce:46:fc:60:a5:a0:be:55:7a:08:52:3f:
bd:15:8a:9c:f1:1f:5b:0d:fa:21:d2:06:2d:e2:72:6b:46:26:
15:95:49:2e:fe:43:2a:bf:09:e4:d1:c0:dc:aa:26:a0:7a:bc:
3a:b9:e0:b1:de:95:34:f0:df:8d:64:23:92:f5:39:e1:3c:fd:
aa:54:a9:45:39:f4:36:54:fe:1e:96:fe:ca:0a:1b:03:9c:fb:
0d:e8:d6:74:d8:7d:f3:27:54:49:f5:57:55:05:a8:fa:28:d7:
47:0e:af:6b:ea:b1:74:3e:6d:e5:b0:31:6c:90:6b:8a:dc:39:
ed:b5:f2:dc:f1:a6:fc:6a:db:ea:d3:6a:d0:8a:d9:96:b8:9d:
7b:73:bf:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYLIuh1oam07iaRl37Dc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYWViYjBiYjNiMzhhM2NmNDQwYzgxZmY3YjNlMTY5MzMy
YWE2NmQwHhcNMjUwODIzMTAwMTU3WhcNMjUwODI0MTAwMTU3WjAzMTEwLwYDVQQD
Eyg2OTcxNTg1OWJlZWE3Y2ZkNDRhOTNmNGZjNWZlYTc3ZWQwZTFjNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0HgwCtUgvzSBd1VvJRuOYbjSJIW
4v+gePVgpd1USliK6lh1wnqznBZIcEFloC4S/kCRjAqv26S5Rw8K8YM3M1n9FuQg
ydkO3hBcZnDofTwqAyqVcJqwDnwge3hP/iXsAv4Q5F6bM9PsPJHTTbyRLgKmdYyK
/TcKVixR5GJ/heUQQJjVsE6UnyGKKgFN132Ex9msIjd450j7m7jz6/odhusT2/6a
8SUg4sWgO9Dx/Hch6BdM24vgEJMG+9wChHL6kvxlGDzx/rSFhgHSIFk97nAbqIUq
rJfWierKHA5ssHucq1C3FCGhe4cFek9vuoDQTp2X20K3npLIv3dEAmfJgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlxWFm+6nz9RKk/T8X+p37Q4cZkMB8GA1UdIwQY
MBaAFKyuuwuzs4o89EDIH/ez4WkzKqZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDdlMzUtODhmNy00MzViLTg0YTgt
ZDE0YmQzZDc3ODIyLzEvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84MDdlMzUtODhmNy00MzViLTg0YTgtZDE0YmQzZDc3ODIy
LzEvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB9plkrK
41RzMU7+JvCLuum+1L5eLKHhimdV9Ga4LRcRUYgaGAq3+H6SO6ZbRmyIIC5Bgu6C
PTPK4SHh+/ah3fU5BzC6kSZX0S3X5F3srWgiSbRjgNvtf0bczIS4Md7QGhVdW5S4
h5MnoO+nr0vK+YVVzkb8YKWgvlV6CFI/vRWKnPEfWw36IdIGLeJya0YmFZVJLv5D
Kr8J5NHA3KomoHq8Orngsd6VNPDfjWQjkvU54Tz9qlSpRTn0NlT+Hpb+ygobA5z7
DejWdNh98ydUSfVXVQWo+ijXRw6va+qxdD5t5bAxbJBritw57bXy3PGm/Grb6tNq
0IrZlride3O/3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:53 2025 by rpki-client