Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
File: mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft (raw, json)
Hash identifier: fMp25AJg/npoMUCfXnx5JwBHQO5UgYU+9tqx/Ubr+TE=
Subject key identifier: 9D:64:DD:D5:99:BA:38:4D:E7:61:51:42:75:7D:17:91:0C:15:81:AF
Authority key identifier: 99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
Certificate issuer: /CN=99f4973e524b08717582577630d33193e53b67c9
Certificate serial: 01987DF7B8E2AC3778D07604B2E792095954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
Manifest number: 04CE
Signing time: Wed 06 Aug 2025 06:00:43 +0000
Manifest this update: Wed 06 Aug 2025 06:00:43 +0000
Manifest next update: Thu 07 Aug 2025 06:00:43 +0000
Files and hashes: 1: mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl (hash: EtKFQPwZj+lGBrIH33abNTbQZe50OGFe5nAOqMCIlYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:b8:e2:ac:37:78:d0:76:04:b2:e7:92:09:59:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f4973e524b08717582577630d33193e53b67c9
Validity
Not Before: Aug 6 06:00:43 2025 GMT
Not After : Aug 7 06:00:43 2025 GMT
Subject: CN=9d64ddd599ba384de7615142757d17910c1581af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:09:2f:4e:d7:ae:b7:bd:41:ec:2f:53:32:
ba:4e:2b:90:b3:2d:12:67:dd:54:b3:b6:16:ae:48:
87:1d:45:92:d6:55:da:03:93:b7:70:fb:84:37:39:
4d:64:14:01:f0:ff:d0:e9:cb:32:56:96:a0:79:43:
1b:7a:51:8d:f6:5e:a7:e4:1d:1f:c9:f6:4b:12:9d:
9d:26:e2:8a:9b:3a:3b:9c:a7:13:d7:77:4b:1b:b8:
90:2c:b3:ae:fe:6f:79:8b:81:b7:c4:e7:7e:ec:48:
df:12:90:7a:46:da:25:77:61:bb:77:08:a8:fe:e8:
9c:0a:9b:9c:6c:66:03:f3:00:a1:77:ea:93:64:85:
1c:41:ba:b3:92:92:39:44:c6:76:6e:c7:eb:8e:51:
2e:fa:ed:76:07:4c:cd:88:be:b5:f8:fb:4d:0e:e4:
eb:56:47:32:19:9b:cd:1b:17:35:5a:84:f2:f9:48:
2f:b4:11:a9:b8:60:a6:37:af:1d:de:70:2a:f0:2f:
12:c5:e5:2c:53:ca:b1:ca:a3:e4:5e:66:46:b7:a2:
30:d4:cd:02:7f:2b:21:c6:17:f0:07:63:5e:8c:9a:
1a:a2:07:3d:30:08:31:48:1e:2d:11:72:43:31:5d:
13:f5:9a:34:9c:cc:23:ee:26:97:ce:53:53:32:79:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:64:DD:D5:99:BA:38:4D:E7:61:51:42:75:7D:17:91:0C:15:81:AF
X509v3 Authority Key Identifier:
keyid:99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:05:a9:b8:22:6d:f3:1e:bf:47:74:10:3d:c7:6e:7a:dd:cd:
4f:1d:74:9b:1e:f5:ef:ca:51:7f:aa:5d:02:c4:74:9d:e8:7d:
8b:5f:95:33:da:48:22:cb:f0:e5:eb:e0:77:3d:48:14:b2:a1:
4b:33:80:d2:71:f9:75:8c:5f:71:03:0b:5c:7f:3c:23:ac:bf:
f6:bb:9b:11:67:26:35:14:46:1e:c2:29:24:85:6c:18:d9:5a:
d9:6b:dc:af:bd:6c:63:2d:67:d9:ae:7c:86:36:5c:f0:f6:1f:
93:f8:a5:41:bd:e8:5e:60:a7:6b:fa:c0:66:12:25:8a:4b:b7:
73:a4:3f:d7:dd:71:64:bf:18:b4:39:c8:04:c9:f1:8e:57:b5:
9f:c8:a7:47:08:10:ad:64:6d:31:7d:57:b7:af:14:1b:f5:b9:
60:74:fe:b9:85:68:a0:67:16:6a:ab:68:4d:1d:81:f1:29:82:
2f:a2:10:ff:6c:5c:66:47:a1:26:10:8b:ab:5c:0e:88:4c:77:
ca:1e:de:57:d8:55:26:e2:29:99:22:11:9d:de:56:64:37:23:
56:14:58:02:04:42:d4:12:36:a9:42:8d:4e:fd:3c:6c:61:13:
c7:9e:6f:d4:cb:3c:5c:32:7d:2b:59:66:09:e0:35:be:8e:08:
1b:38:69:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh997jirDd40HYEsueSCVlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZjQ5NzNlNTI0YjA4NzE3NTgyNTc3NjMwZDMzMTkzZTUz
YjY3YzkwHhcNMjUwODA2MDYwMDQzWhcNMjUwODA3MDYwMDQzWjAzMTEwLwYDVQQD
Eyg5ZDY0ZGRkNTk5YmEzODRkZTc2MTUxNDI3NTdkMTc5MTBjMTU4MWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rwJL07Xrre9QewvUzK6TiuQsy0S
Z91Us7YWrkiHHUWS1lXaA5O3cPuENzlNZBQB8P/Q6csyVpageUMbelGN9l6n5B0f
yfZLEp2dJuKKmzo7nKcT13dLG7iQLLOu/m95i4G3xOd+7EjfEpB6Rtold2G7dwio
/uicCpucbGYD8wChd+qTZIUcQbqzkpI5RMZ2bsfrjlEu+u12B0zNiL61+PtNDuTr
VkcyGZvNGxc1WoTy+UgvtBGpuGCmN68d3nAq8C8SxeUsU8qxyqPkXmZGt6Iw1M0C
fyshxhfwB2NejJoaogc9MAgxSB4tEXJDMV0T9Zo0nMwj7iaXzlNTMnlELwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1k3dWZujhN52FRQnV9F5EMFYGvMB8GA1UdIwQY
MBaAFJn0lz5SSwhxdYJXdjDTMZPlO2fJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZTWFBsSkxDSEYxZ2xkMk1OTXhrLVU3WjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zYzRhNjQtNGIzNS00MWQyLTgyYTUt
ZjMwMzAzZjNmMmY1LzEvbWZTWFBsSkxDSEYxZ2xkMk1OTXhrLVU3WjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zYzRhNjQtNGIzNS00MWQyLTgyYTUtZjMwMzAzZjNmMmY1
LzEvbWZTWFBsSkxDSEYxZ2xkMk1OTXhrLVU3WjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwWpuCJt
8x6/R3QQPcduet3NTx10mx7178pRf6pdAsR0neh9i1+VM9pIIsvw5evgdz1IFLKh
SzOA0nH5dYxfcQMLXH88I6y/9rubEWcmNRRGHsIpJIVsGNla2Wvcr71sYy1n2a58
hjZc8PYfk/ilQb3oXmCna/rAZhIliku3c6Q/191xZL8YtDnIBMnxjle1n8inRwgQ
rWRtMX1Xt68UG/W5YHT+uYVooGcWaqtoTR2B8SmCL6IQ/2xcZkehJhCLq1wOiEx3
yh7eV9hVJuIpmSIRnd5WZDcjVhRYAgRC1BI2qUKNTv08bGETx55v1Ms8XDJ9K1lm
CeA1vo4IGzhpWQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:05:50 2025 by rpki-client