Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: 3eVb4JgdZoBG0FA0TlJDfgLdr+Xv5hMUuYo9rhdwA/c=
Subject key identifier: DC:E0:E0:EE:73:1F:36:18:CF:BA:A4:0D:80:A6:14:D2:82:35:92:07
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 0198733D935EE8CB4E1AABFE2E6C7D4BB93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 0D43
Signing time: Mon 04 Aug 2025 04:01:11 +0000
Manifest this update: Mon 04 Aug 2025 04:01:11 +0000
Manifest next update: Tue 05 Aug 2025 04:01:11 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: id5WhE981QUQfwAXI3O4JdDRAX0PKYnXRffEzEHojE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:93:5e:e8:cb:4e:1a:ab:fe:2e:6c:7d:4b:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Aug 4 04:01:11 2025 GMT
Not After : Aug 5 04:01:11 2025 GMT
Subject: CN=dce0e0ee731f3618cfbaa40d80a614d282359207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:32:84:dd:22:37:40:0b:6f:61:4b:c0:05:
de:31:d9:0d:bd:63:50:26:c2:ee:ab:00:78:ca:87:
bc:f5:40:9c:5e:f4:9e:8d:53:23:bc:b5:2f:9e:21:
1c:fc:ac:6e:49:ec:40:c0:6d:72:f9:bf:85:bc:c0:
0f:7f:41:5b:fe:3f:4b:95:76:2b:2d:e8:a1:5d:68:
44:cf:ca:69:d7:21:3b:2d:b0:27:dd:96:f9:75:3f:
7a:f1:8e:15:0a:bc:d4:69:f7:f1:9c:ae:2d:61:3d:
42:bd:67:ab:e1:90:16:00:be:fd:45:63:36:ac:87:
c2:0a:a9:eb:fd:5f:4a:33:06:01:b8:34:8e:e6:ca:
f6:e3:f0:bc:61:f1:e6:8a:66:d2:e0:c6:c6:ca:ba:
11:eb:40:d9:59:7c:98:45:1c:5a:57:d9:ac:49:e1:
76:2f:bb:ad:96:db:ed:f9:3a:57:68:1d:58:d5:c2:
b3:ed:5d:f8:0e:f1:7e:0a:3b:5f:f8:e1:b6:54:f0:
f2:53:78:98:95:09:79:6b:03:08:60:bf:ef:30:70:
75:d4:ca:34:89:65:1f:d4:65:7e:d9:bc:11:ae:af:
bf:35:50:0d:78:4b:1d:ff:34:75:b2:a5:3c:d6:21:
8a:65:30:36:fd:ff:ba:72:c9:fa:97:3d:f5:ab:01:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E0:E0:EE:73:1F:36:18:CF:BA:A4:0D:80:A6:14:D2:82:35:92:07
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e4:9a:88:31:0f:18:3d:68:5f:9e:fe:cf:57:81:81:7f:8e:
8c:c4:d0:a3:38:ae:67:63:d4:f9:78:4c:a1:c2:65:52:3f:ae:
75:b2:f2:18:e6:95:64:d9:7a:c7:15:78:c2:4a:52:71:51:8d:
b3:75:54:68:f9:d1:a6:ce:eb:32:b8:29:20:88:a9:e2:db:17:
73:ed:5f:fd:4b:47:d8:40:d4:29:cd:ee:67:45:ec:06:d7:79:
2b:1b:02:db:41:d3:f1:9c:da:31:0a:c6:56:09:61:02:89:9b:
fc:9b:bd:af:ef:70:13:75:42:1d:25:6e:7b:58:e8:82:5c:8c:
8a:59:e1:1b:1e:17:50:c9:a2:e5:c3:b7:dc:4c:2c:4e:fb:d3:
ed:d6:31:b8:e2:41:d9:a8:9f:28:13:37:f3:0b:1d:36:9a:0f:
5d:1d:f1:49:4f:a0:a0:4a:68:f7:fb:3b:00:ac:2b:63:32:46:
74:5c:10:db:86:d4:7b:03:f7:7f:22:7b:a1:93:5b:06:71:52:
bf:08:2a:ca:f6:bd:65:5f:5d:98:a4:2b:29:da:2c:a2:d8:83:
ad:ac:71:84:e2:e4:c3:fe:12:fb:31:ea:bc:81:b9:d6:03:87:
0d:11:ff:20:22:77:24:61:c1:35:f8:b2:be:e0:71:d4:85:66:
56:2c:61:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPZNe6MtOGqv+Lmx9S7k/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Nzc2NmYwNzI2Y2ZmODYxOGFmOTY4MjU4ZjViYjIyOWU5
MzdjNmUwHhcNMjUwODA0MDQwMTExWhcNMjUwODA1MDQwMTExWjAzMTEwLwYDVQQD
EyhkY2UwZTBlZTczMWYzNjE4Y2ZiYWE0MGQ4MGE2MTRkMjgyMzU5MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjkyhN0iN0ALb2FLwAXeMdkNvWNQ
JsLuqwB4yoe89UCcXvSejVMjvLUvniEc/KxuSexAwG1y+b+FvMAPf0Fb/j9LlXYr
LeihXWhEz8pp1yE7LbAn3Zb5dT968Y4VCrzUaffxnK4tYT1CvWer4ZAWAL79RWM2
rIfCCqnr/V9KMwYBuDSO5sr24/C8YfHmimbS4MbGyroR60DZWXyYRRxaV9msSeF2
L7utltvt+TpXaB1Y1cKz7V34DvF+Cjtf+OG2VPDyU3iYlQl5awMIYL/vMHB11Mo0
iWUf1GV+2bwRrq+/NVANeEsd/zR1sqU81iGKZTA2/f+6csn6lz31qwGPXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzg4O5zHzYYz7qkDYCmFNKCNZIHMB8GA1UdIwQY
MBaAFPV3ZvBybP+GGK+Wglj1uyKek3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMt
YTgwMjI0NjA0ZjI1LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMtYTgwMjI0NjA0ZjI1
LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOSaiDEP
GD1oX57+z1eBgX+OjMTQoziuZ2PU+XhMocJlUj+udbLyGOaVZNl6xxV4wkpScVGN
s3VUaPnRps7rMrgpIIip4tsXc+1f/UtH2EDUKc3uZ0XsBtd5KxsC20HT8ZzaMQrG
VglhAomb/Ju9r+9wE3VCHSVue1joglyMilnhGx4XUMmi5cO33EwsTvvT7dYxuOJB
2aifKBM38wsdNpoPXR3xSU+goEpo9/s7AKwrYzJGdFwQ24bUewP3fyJ7oZNbBnFS
vwgqyva9ZV9dmKQrKdosotiDraxxhOLkw/4S+zHqvIG51gOHDRH/ICJ3JGHBNfiy
vuBx1IVmVixh3g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:28 2025 by rpki-client