Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json)
Hash identifier: l22pP19J6EuewsfPqwFT4Wdc6Mba1Yb0eypWSJTPyQQ=
Subject key identifier: D6:57:5B:B4:7E:64:79:5A:50:7A:7C:3B:4F:49:97:69:50:EB:9F:5A
Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
Certificate issuer: /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Certificate serial: 01988CFCB91BF967C0245910611ACC78AA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
Manifest number: D8
Signing time: Sat 09 Aug 2025 04:00:29 +0000
Manifest this update: Sat 09 Aug 2025 04:00:29 +0000
Manifest next update: Sun 10 Aug 2025 04:00:29 +0000
Files and hashes: 1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: +CCkuFFoRo0n4Mj+Us5dzmE/8NV/1u9fge3rJ8sDdT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fc:b9:1b:f9:67:c0:24:59:10:61:1a:cc:78:aa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Validity
Not Before: Aug 9 04:00:29 2025 GMT
Not After : Aug 10 04:00:29 2025 GMT
Subject: CN=d6575bb47e64795a507a7c3b4f49976950eb9f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:24:73:37:6f:31:50:95:68:a5:e5:af:32:
01:ea:d1:3e:35:83:7f:1c:00:0b:84:a2:9a:2f:48:
ec:2e:a7:88:a1:a1:07:70:4d:86:4e:12:52:89:d8:
20:31:a7:92:4e:5f:46:ca:96:4e:ce:99:97:fd:6b:
18:84:f5:94:1a:de:48:fd:11:d7:28:e6:ef:b9:37:
7e:02:30:26:3d:52:9b:85:a7:1b:55:b9:a0:f0:70:
1d:34:1d:0f:d2:32:fc:22:4f:f6:04:80:b7:9d:dd:
ea:3e:d4:8d:cd:bd:29:5e:45:01:0d:04:d6:18:84:
53:a0:8c:8d:e9:57:df:00:6e:32:c1:b4:b5:5c:f8:
02:b0:0d:9d:fd:6c:78:f6:68:77:ce:ce:72:16:1f:
2a:09:45:d1:31:7c:8f:12:2d:11:60:46:94:a2:af:
93:2c:96:29:ca:6b:78:21:89:5d:bd:11:85:17:ea:
80:2d:a3:32:fe:04:10:68:26:a2:e4:12:01:32:91:
8b:fc:31:29:04:52:51:2b:25:8d:d5:c7:ea:94:59:
d3:70:19:c1:c8:8e:bf:d0:ce:17:11:32:fb:53:e8:
a5:d4:f2:50:0a:9f:88:48:9d:c3:47:e5:37:da:d5:
9a:f2:06:9e:8f:2b:3e:e1:60:a7:9a:b2:ca:dc:89:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:57:5B:B4:7E:64:79:5A:50:7A:7C:3B:4F:49:97:69:50:EB:9F:5A
X509v3 Authority Key Identifier:
keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:f5:81:67:13:be:c6:b9:03:bc:01:af:26:2f:df:68:64:
20:06:27:60:76:56:66:db:63:e2:01:25:76:af:9f:d7:85:10:
b6:f3:9e:bc:af:34:54:d8:4a:85:ea:97:5a:cd:b5:58:00:3e:
ca:4f:98:de:ce:d9:27:32:1c:5d:43:0a:35:66:da:2a:23:26:
9d:55:49:95:8a:c9:d6:3d:77:b2:80:4a:fd:4b:37:40:13:87:
91:92:96:96:cd:ae:34:ec:bc:31:94:8d:77:6d:cb:fb:e8:32:
dc:82:2d:da:97:f6:85:c8:9d:4c:d5:e9:b1:78:1b:c6:cb:a1:
a9:50:72:2b:42:36:a0:9b:92:b1:86:45:d4:68:17:f4:5f:50:
b1:a1:11:69:3b:64:e6:8a:b9:b4:73:9b:e2:3f:71:d1:06:dd:
a3:b1:de:9c:9a:56:5a:79:74:7c:71:82:18:c9:c1:3b:ef:fc:
b3:83:2a:63:55:1b:80:eb:83:32:72:89:0f:4f:e5:23:28:2c:
08:32:8e:6e:0a:3f:77:4b:b3:d9:0c:38:ff:65:27:c7:a8:4d:
8f:9b:38:92:8a:3e:5c:2a:b3:fd:f9:14:43:dc:cd:f6:06:27:
60:19:01:6e:9f:69:af:c1:95:3b:96:4a:59:d1:20:05:7b:9f:
9f:d6:07:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/Lkb+WfAJFkQYRrMeKo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTAwODE1ZDJiZDA0MWRjYzBlY2UwNjc2NTZiZTVlNmVi
MTJiNjIwHhcNMjUwODA5MDQwMDI5WhcNMjUwODEwMDQwMDI5WjAzMTEwLwYDVQQD
EyhkNjU3NWJiNDdlNjQ3OTVhNTA3YTdjM2I0ZjQ5OTc2OTUwZWI5ZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudQkczdvMVCVaKXlrzIB6tE+NYN/
HAALhKKaL0jsLqeIoaEHcE2GThJSidggMaeSTl9GypZOzpmX/WsYhPWUGt5I/RHX
KObvuTd+AjAmPVKbhacbVbmg8HAdNB0P0jL8Ik/2BIC3nd3qPtSNzb0pXkUBDQTW
GIRToIyN6VffAG4ywbS1XPgCsA2d/Wx49mh3zs5yFh8qCUXRMXyPEi0RYEaUoq+T
LJYpymt4IYldvRGFF+qALaMy/gQQaCai5BIBMpGL/DEpBFJRKyWN1cfqlFnTcBnB
yI6/0M4XETL7U+il1PJQCp+ISJ3DR+U32tWa8gaejys+4WCnmrLK3ImUrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZXW7R+ZHlaUHp8O09Jl2lQ659aMB8GA1UdIwQY
MBaAFJrgCBXSvQQdzA7OBnZWvl5usStiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MDQxNWItNTk2Yy00ODBkLThiZTIt
ZjQ4NTFkYTg3NjNkLzEvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MDQxNWItNTk2Yy00ODBkLThiZTItZjQ4NTFkYTg3NjNk
LzEvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzz1gWcT
vsa5A7wBryYv32hkIAYnYHZWZttj4gEldq+f14UQtvOevK80VNhKheqXWs21WAA+
yk+Y3s7ZJzIcXUMKNWbaKiMmnVVJlYrJ1j13soBK/Us3QBOHkZKWls2uNOy8MZSN
d23L++gy3IIt2pf2hcidTNXpsXgbxsuhqVByK0I2oJuSsYZF1GgX9F9QsaERaTtk
5oq5tHOb4j9x0Qbdo7HenJpWWnl0fHGCGMnBO+/8s4MqY1UbgOuDMnKJD0/lIygs
CDKObgo/d0uz2Qw4/2Unx6hNj5s4koo+XCqz/fkUQ9zN9gYnYBkBbp9pr8GVO5ZK
WdEgBXufn9YHLw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:00 2025 by rpki-client