Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File: S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier: lry3BTg2talPU77LuC1TsW2BJBlZs6C0NXK+0Swxmyc=
Subject key identifier: 9F:B4:33:D9:4E:C5:B1:44:2E:87:4C:90:FB:3D:1F:7C:B4:69:46:35
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer: /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial: 019892C808D37C9060068F0305235B117812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number: 09CB
Signing time: Sun 10 Aug 2025 07:00:39 +0000
Manifest this update: Sun 10 Aug 2025 07:00:39 +0000
Manifest next update: Mon 11 Aug 2025 07:00:39 +0000
Files and hashes: 1: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: CCXSnChcw3iA9adbf89iU/XZbFU/sEdMy+TlBeVejh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:08:d3:7c:90:60:06:8f:03:05:23:5b:11:78:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Validity
Not Before: Aug 10 07:00:39 2025 GMT
Not After : Aug 11 07:00:39 2025 GMT
Subject: CN=9fb433d94ec5b1442e874c90fb3d1f7cb4694635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:e7:35:50:1b:36:1b:3e:5b:9b:88:e7:b2:
26:93:9a:2e:eb:88:01:7e:09:9e:da:98:02:b2:18:
a3:e5:d0:68:4b:13:4e:27:cf:ba:df:9b:e7:e0:84:
d0:23:f1:40:37:ae:d9:dc:db:5a:6e:f1:67:6e:bc:
94:63:70:68:9a:9c:b9:eb:ad:f8:2f:95:a0:12:c8:
81:e0:8c:0e:66:c2:35:70:41:34:c7:e0:14:cd:3a:
20:9c:5d:dd:94:e4:40:8a:8a:90:7e:cb:7c:6b:2f:
b7:3c:12:ef:d5:61:4b:14:6b:94:b6:e1:e5:51:13:
94:5c:bb:e5:e6:e1:96:f0:cd:91:67:06:31:6a:b4:
b4:10:96:ff:d2:18:dd:ad:de:45:1a:49:17:36:e5:
0e:40:f6:a8:5a:06:2e:3a:8c:8c:1b:c4:79:17:4a:
1d:8a:83:87:3d:97:3c:fe:45:dd:4a:c4:71:8e:c7:
c1:35:43:c3:fd:95:fe:bd:b4:9d:76:9e:c4:75:9f:
5e:c5:b1:a6:61:bf:de:c5:b6:25:d5:d4:c8:36:af:
f7:be:7a:e6:82:64:74:d5:d3:5e:f3:47:85:c5:ca:
56:8c:ef:40:80:f6:a4:1a:4c:ab:97:30:a8:28:9f:
b1:6c:68:69:e6:1f:e8:cc:74:7c:f6:68:b5:c0:bb:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B4:33:D9:4E:C5:B1:44:2E:87:4C:90:FB:3D:1F:7C:B4:69:46:35
X509v3 Authority Key Identifier:
keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:29:57:0f:5d:e7:c0:c0:02:ba:9a:34:ab:4c:08:49:f5:f9:
34:c1:8e:b0:8a:c1:5f:ed:98:16:37:49:f7:e1:b9:83:a3:2f:
24:8e:fc:23:85:1c:ad:86:53:e5:2b:25:ba:31:44:b7:76:35:
c1:57:2d:42:8d:41:58:1b:94:45:a4:97:54:a2:a9:31:34:ed:
94:87:22:af:9f:df:06:1d:df:47:85:f5:b8:06:8c:04:e5:28:
7d:0f:99:69:c3:f0:7a:74:cb:5a:96:f9:d4:36:b7:78:0d:5c:
3d:45:5e:45:b4:9d:b9:aa:41:99:99:b9:0e:8b:a4:a0:3c:f1:
a2:52:38:33:9d:37:40:43:af:73:70:1c:e4:f7:9c:a8:66:aa:
cf:0f:01:7b:13:92:a3:ce:f4:d9:98:56:3d:0f:8a:13:b7:d2:
c9:a7:ad:a8:d5:0c:2d:72:c0:cc:76:be:31:27:6a:58:50:dc:
0d:d7:2a:23:3f:3c:6c:d4:b7:95:34:0e:3a:13:b7:98:92:c7:
98:74:96:13:10:72:01:01:98:12:f4:90:5b:db:b9:93:7f:59:
b1:ce:d7:9c:e8:8e:c5:d9:a1:a1:84:dd:51:c3:c1:96:d7:26:
b7:f8:3c:b9:ff:14:2c:89:bd:b6:39:ce:99:02:9d:c0:a1:dc:
ef:02:23:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyAjTfJBgBo8DBSNbEXgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTRkMTBkYWFlM2M5MmRhN2QyZWU5NzNiNzQ4Y2IxZjk0
OTIyZTkwHhcNMjUwODEwMDcwMDM5WhcNMjUwODExMDcwMDM5WjAzMTEwLwYDVQQD
Eyg5ZmI0MzNkOTRlYzViMTQ0MmU4NzRjOTBmYjNkMWY3Y2I0Njk0NjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF3nNVAbNhs+W5uI57Imk5ou64gB
fgme2pgCshij5dBoSxNOJ8+635vn4ITQI/FAN67Z3NtabvFnbryUY3Bompy56634
L5WgEsiB4IwOZsI1cEE0x+AUzTognF3dlORAioqQfst8ay+3PBLv1WFLFGuUtuHl
UROUXLvl5uGW8M2RZwYxarS0EJb/0hjdrd5FGkkXNuUOQPaoWgYuOoyMG8R5F0od
ioOHPZc8/kXdSsRxjsfBNUPD/ZX+vbSddp7EdZ9exbGmYb/exbYl1dTINq/3vnrm
gmR01dNe80eFxcpWjO9AgPakGkyrlzCoKJ+xbGhp5h/ozHR89mi1wLtaXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+0M9lOxbFELodMkPs9H3y0aUY1MB8GA1UdIwQY
MBaAFEuk0Q2q48ktp9Lulzt0jLH5SSLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZUUkRhcmp5UzJuMHU2WE8zU01zZmxKSXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9hZDkwYTUtODk2YS00NTJlLWFjN2Qt
MDRjY2M4MGQxODc2LzEvUzZUUkRhcmp5UzJuMHU2WE8zU01zZmxKSXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9hZDkwYTUtODk2YS00NTJlLWFjN2QtMDRjY2M4MGQxODc2
LzEvUzZUUkRhcmp5UzJuMHU2WE8zU01zZmxKSXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSlXD13n
wMACupo0q0wISfX5NMGOsIrBX+2YFjdJ9+G5g6MvJI78I4UcrYZT5SslujFEt3Y1
wVctQo1BWBuURaSXVKKpMTTtlIcir5/fBh3fR4X1uAaMBOUofQ+ZacPwenTLWpb5
1Da3eA1cPUVeRbSduapBmZm5DoukoDzxolI4M503QEOvc3Ac5PecqGaqzw8BexOS
o8702ZhWPQ+KE7fSyaetqNUMLXLAzHa+MSdqWFDcDdcqIz88bNS3lTQOOhO3mJLH
mHSWExByAQGYEvSQW9u5k39Zsc7XnOiOxdmhoYTdUcPBltcmt/g8uf8ULIm9tjnO
mQKdwKHc7wIjSQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:36 2025 by rpki-client