
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: PgVT1P3eER0IDfYRPSTSE9MXcOzB0A0D76xm10ZJTso=
Subject key identifier: 67:C8:7F:69:80:4A:5F:F3:B8:E1:83:10:7A:EA:9C:4F:A2:EE:A3:D3
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 019881680CB667F045FB97325E04AA4D5AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 10F7
Signing time: Wed 06 Aug 2025 22:02:16 +0000
Manifest this update: Wed 06 Aug 2025 22:02:16 +0000
Manifest next update: Thu 07 Aug 2025 22:02:16 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: BhDnAYUVY7tK6QbrMLDWP3h1Oypve3pmfWdvGFb1Amw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:0c:b6:67:f0:45:fb:97:32:5e:04:aa:4d:5a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Aug 6 22:02:16 2025 GMT
Not After : Aug 7 22:02:16 2025 GMT
Subject: CN=67c87f69804a5ff3b8e183107aea9c4fa2eea3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:14:41:bf:f9:c2:2e:a1:19:aa:02:3f:6e:
3c:de:2b:db:81:e4:0b:94:ee:3c:d4:e6:d5:85:93:
cc:c9:ba:92:17:3b:a7:5a:69:af:d6:66:45:70:6b:
56:20:a7:e5:5d:28:2c:8e:b8:7f:76:89:24:2d:fc:
a3:b8:89:25:6c:29:45:da:74:74:6a:2c:f1:07:58:
f8:a5:5a:b7:62:14:d3:3a:75:47:61:6b:ff:b2:a8:
8a:5e:84:00:6d:b5:ff:db:34:55:31:9a:15:a0:a9:
04:d4:4f:50:ff:cb:78:99:de:a2:b3:06:21:28:d2:
f2:ea:ec:fc:a0:7f:9a:41:cd:1b:c0:3e:77:b1:b8:
1d:b2:46:f1:f0:5b:74:a1:60:cd:32:1f:10:a1:8d:
2c:8b:e0:2e:7b:96:3a:af:b8:43:47:ac:32:c7:64:
e7:4e:19:21:4c:8a:ae:f6:02:7d:6a:e7:c8:c9:40:
e0:6f:0c:e0:b8:02:a5:86:5e:d9:ba:10:b1:61:42:
bb:c4:ee:58:8a:15:50:95:40:f3:04:78:90:ca:ad:
f6:c4:ad:09:6a:f1:ab:11:23:5b:c5:11:7a:36:8f:
78:1a:d2:4a:85:80:4c:d5:7b:09:19:6b:f9:c1:5a:
e1:d4:cd:45:8a:4b:21:aa:23:a9:fb:61:20:27:72:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C8:7F:69:80:4A:5F:F3:B8:E1:83:10:7A:EA:9C:4F:A2:EE:A3:D3
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:38:b1:2f:ef:5f:9f:e5:ea:86:13:cf:35:c2:3f:9e:33:f0:
25:31:de:5a:88:3d:c2:79:1c:68:3b:44:7b:f7:76:c7:47:3e:
ba:81:79:f5:b6:90:10:db:ce:7c:7f:03:55:0c:16:b6:6e:5e:
69:2a:d4:6e:55:fb:da:62:d3:59:bd:d1:7a:97:88:00:1a:92:
99:12:bf:ad:8e:df:09:62:e6:ba:54:2e:59:00:6d:a7:f2:fc:
77:17:9b:dc:9b:49:16:2f:51:8f:c2:9d:e9:c0:c1:f2:ea:3d:
26:7a:02:d6:2b:4b:af:d9:0c:58:15:a9:83:84:44:31:ff:d2:
cf:48:8d:6f:42:63:dd:72:69:52:ea:de:96:74:1c:d6:d2:05:
57:87:70:f4:fa:3d:e6:ee:36:41:1e:2e:9e:01:63:89:8a:57:
0e:29:11:14:17:48:38:53:0e:68:3b:a0:74:7d:c7:8a:09:cc:
7f:57:8e:b1:77:00:86:dc:45:de:3b:46:cc:2a:a6:38:8d:6a:
da:a3:10:00:54:b4:c2:18:e9:93:3e:65:2c:90:8b:be:64:bf:
30:03:7d:4d:ac:5e:b5:80:23:d7:21:b3:57:76:7f:01:63:d6:
bb:b2:a4:f7:5b:5b:57:6d:96:bb:de:67:14:51:1b:02:1e:e9:
91:28:ce:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaAy2Z/BF+5cyXgSqTVr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTYyNWRjMzk4Y2I3MDBmNzJmYThlYTZmNDMxM2JmMzMz
NWE1M2IwHhcNMjUwODA2MjIwMjE2WhcNMjUwODA3MjIwMjE2WjAzMTEwLwYDVQQD
Eyg2N2M4N2Y2OTgwNGE1ZmYzYjhlMTgzMTA3YWVhOWM0ZmEyZWVhM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4sUQb/5wi6hGaoCP2483ivbgeQL
lO481ObVhZPMybqSFzunWmmv1mZFcGtWIKflXSgsjrh/dokkLfyjuIklbClF2nR0
aizxB1j4pVq3YhTTOnVHYWv/sqiKXoQAbbX/2zRVMZoVoKkE1E9Q/8t4md6iswYh
KNLy6uz8oH+aQc0bwD53sbgdskbx8Ft0oWDNMh8QoY0si+Aue5Y6r7hDR6wyx2Tn
ThkhTIqu9gJ9aufIyUDgbwzguAKlhl7ZuhCxYUK7xO5YihVQlUDzBHiQyq32xK0J
avGrESNbxRF6No94GtJKhYBM1XsJGWv5wVrh1M1FikshqiOp+2EgJ3J+8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfIf2mASl/zuOGDEHrqnE+i7qPTMB8GA1UdIwQY
MBaAFF+mJdw5jLcA9y+o6m9DE78zNaU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAt
ZWFjMTA2MzAwYjBhLzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAtZWFjMTA2MzAwYjBh
LzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTixL+9f
n+XqhhPPNcI/njPwJTHeWog9wnkcaDtEe/d2x0c+uoF59baQENvOfH8DVQwWtm5e
aSrUblX72mLTWb3RepeIABqSmRK/rY7fCWLmulQuWQBtp/L8dxeb3JtJFi9Rj8Kd
6cDB8uo9JnoC1itLr9kMWBWpg4REMf/Sz0iNb0Jj3XJpUurelnQc1tIFV4dw9Po9
5u42QR4ungFjiYpXDikRFBdIOFMOaDugdH3HignMf1eOsXcAhtxF3jtGzCqmOI1q
2qMQAFS0whjpkz5lLJCLvmS/MAN9TaxetYAj1yGzV3Z/AWPWu7Kk91tbV22Wu95n
FFEbAh7pkSjOCw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:16 2025 by rpki-client