Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier: b15FBP+s9GHXDOWCDw/L2uM8BxbMtR0sqnCnBJjHq/E=
Subject key identifier: 4B:E6:ED:28:AC:78:DB:D6:DB:73:58:09:4A:1B:6E:74:3B:7A:C3:93
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial: 019894B855EA351C04977FF2DF1B3DDF5870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number: 083D
Signing time: Sun 10 Aug 2025 16:02:45 +0000
Manifest this update: Sun 10 Aug 2025 16:02:45 +0000
Manifest next update: Mon 11 Aug 2025 16:02:45 +0000
Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: vZgTDJHaEtm0JE/OcDtvXMto7JQf/9+VWewHrN0aTBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:55:ea:35:1c:04:97:7f:f2:df:1b:3d:df:58:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Validity
Not Before: Aug 10 16:02:45 2025 GMT
Not After : Aug 11 16:02:45 2025 GMT
Subject: CN=4be6ed28ac78dbd6db7358094a1b6e743b7ac393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bf:4b:1c:ff:48:e8:e1:b8:44:d3:54:3e:0a:
86:47:45:00:da:8b:54:51:83:ed:2d:bf:31:ba:2a:
55:2c:ab:83:c8:1c:85:b3:d4:b7:4a:2f:6b:d3:f4:
cb:31:ed:72:f8:4b:1f:61:71:4f:12:c0:64:13:44:
50:ec:aa:cd:94:78:45:4e:79:7e:63:02:4d:ad:ab:
e6:6b:a1:6f:c6:b9:ed:37:ec:9b:a8:d4:74:a4:b2:
37:84:13:e8:fa:72:9a:db:21:a9:b3:f0:f2:0f:1e:
bb:1b:f9:8b:7e:e8:2d:7f:cb:1c:79:61:10:27:5f:
b6:8b:cb:df:f7:8a:01:40:eb:f5:8f:86:04:15:68:
a8:50:df:d0:23:44:de:86:71:80:21:09:d6:2d:5b:
0a:10:f0:55:df:51:7c:df:6a:01:d4:0e:0b:cd:01:
9b:fc:0d:a7:35:cc:1b:1d:44:7f:4c:fd:2d:61:47:
50:7c:ec:52:b2:ae:25:ce:a5:0d:89:c2:bd:62:25:
45:b3:e3:e5:29:60:c0:cb:cb:3d:b8:63:af:f1:ab:
0b:5f:d3:3d:c2:e8:97:28:7c:be:ed:3a:2c:a0:2d:
a9:be:70:64:8c:30:dc:25:9b:27:c9:2a:d6:59:da:
50:ec:cd:f0:f8:76:42:b9:22:d4:94:fe:6d:a5:ec:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E6:ED:28:AC:78:DB:D6:DB:73:58:09:4A:1B:6E:74:3B:7A:C3:93
X509v3 Authority Key Identifier:
keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ca:f7:79:0a:d0:73:6a:50:79:b9:6c:69:b9:fd:49:4d:fa:
e5:87:81:3c:58:3a:ce:e4:d8:d9:9e:f2:e3:df:ed:a2:a1:5b:
74:16:87:a9:08:4f:37:25:44:8d:6d:52:f2:32:c8:a3:9f:44:
0f:b5:50:1a:aa:9a:86:0f:e1:09:9b:7c:41:ac:2b:f8:94:dc:
35:71:22:e1:60:ed:40:5f:46:ae:9c:f4:f0:61:ce:09:63:98:
0a:4f:fc:25:2b:ab:8f:6c:e8:98:01:7c:7c:9b:ed:b9:ba:d1:
89:a9:ad:cc:d2:0a:b6:c6:29:77:74:80:e4:8a:46:fb:1e:c1:
ff:e0:5c:c4:4b:5b:88:d0:ab:80:a4:9a:24:10:43:90:f4:34:
2b:2a:9e:36:03:a6:34:ec:61:d8:cb:03:51:6d:6b:b9:d0:85:
14:76:f9:6b:b3:ec:9d:75:b1:fd:77:fd:16:e7:ec:27:fe:7c:
b6:7b:0d:40:69:f4:3f:18:f0:5f:e3:50:a1:4c:9a:36:b1:ba:
0b:a4:bd:8a:f5:e5:28:0e:a0:6a:72:dd:e8:4f:a3:74:67:93:
5a:ae:7a:50:47:92:7e:50:97:d2:a1:80:9a:2a:97:56:76:cc:
ab:f6:96:57:0c:77:54:4d:0a:23:76:cb:b3:be:37:0d:56:9a:
71:d2:97:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUuFXqNRwEl3/y3xs931hwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDlhMjlkMTgwZTgxOWE0NzgyZmI2YzZlYTE2ZDNhN2Qz
MjkxMDAwHhcNMjUwODEwMTYwMjQ1WhcNMjUwODExMTYwMjQ1WjAzMTEwLwYDVQQD
Eyg0YmU2ZWQyOGFjNzhkYmQ2ZGI3MzU4MDk0YTFiNmU3NDNiN2FjMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7b9LHP9I6OG4RNNUPgqGR0UA2otU
UYPtLb8xuipVLKuDyByFs9S3Si9r0/TLMe1y+EsfYXFPEsBkE0RQ7KrNlHhFTnl+
YwJNravma6FvxrntN+ybqNR0pLI3hBPo+nKa2yGps/DyDx67G/mLfugtf8sceWEQ
J1+2i8vf94oBQOv1j4YEFWioUN/QI0TehnGAIQnWLVsKEPBV31F832oB1A4LzQGb
/A2nNcwbHUR/TP0tYUdQfOxSsq4lzqUNicK9YiVFs+PlKWDAy8s9uGOv8asLX9M9
wuiXKHy+7TosoC2pvnBkjDDcJZsnySrWWdpQ7M3w+HZCuSLUlP5tpewrJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvm7SiseNvW23NYCUobbnQ7esOTMB8GA1UdIwQY
MBaAFFfZop0YDoGaR4L7bG6hbTp9MpEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQt
MDE1Y2Y1NDdlNDQ3LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQtMDE1Y2Y1NDdlNDQ3
LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisr3eQrQ
c2pQeblsabn9SU365YeBPFg6zuTY2Z7y49/toqFbdBaHqQhPNyVEjW1S8jLIo59E
D7VQGqqahg/hCZt8Qawr+JTcNXEi4WDtQF9Grpz08GHOCWOYCk/8JSurj2zomAF8
fJvtubrRiamtzNIKtsYpd3SA5IpG+x7B/+BcxEtbiNCrgKSaJBBDkPQ0KyqeNgOm
NOxh2MsDUW1rudCFFHb5a7PsnXWx/Xf9FufsJ/58tnsNQGn0PxjwX+NQoUyaNrG6
C6S9ivXlKA6ganLd6E+jdGeTWq56UEeSflCX0qGAmiqXVnbMq/aWVwx3VE0KI3bL
s743DVaacdKXNw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:45 2025 by rpki-client