Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
File: 36xiikxcxuVw9PQcTg1jlUkbTX8.mft (raw, json)
Hash identifier: E1gYFFrrafd9XwXGlYPxR10bdNI55CXBKEskqNbb8/c=
Subject key identifier: D1:77:F4:24:7B:15:1B:00:BB:D5:B0:4C:89:C6:F8:CD:17:57:90:2E
Authority key identifier: DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
Certificate issuer: /CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Certificate serial: 019897B753597AD7F993E9F55D24C7DACAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 06:00:30 +0000
Manifest this update: Mon 11 Aug 2025 06:00:30 +0000
Manifest next update: Tue 12 Aug 2025 06:00:30 +0000
Files and hashes: 1: 36xiikxcxuVw9PQcTg1jlUkbTX8.crl (hash: CfTXYr9goZ8OU92kNpSC6uAeRVCyvPkwGZx6KPgqcEI=)
2: 7JS41vM91mOZftvqn8jPBmhbJuk.roa (hash: aROAKgddtydWzjEbRgk4taCxbXsDkr5HWG29W6Kls8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:53:59:7a:d7:f9:93:e9:f5:5d:24:c7:da:ca:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Validity
Not Before: Aug 11 06:00:30 2025 GMT
Not After : Aug 12 06:00:30 2025 GMT
Subject: CN=d177f4247b151b00bbd5b04c89c6f8cd1757902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:14:c1:7a:88:4f:17:17:15:e3:0f:7e:ae:
d9:43:d5:b5:40:f4:ca:1b:ab:cc:08:72:41:a8:ff:
e3:43:bb:e5:56:8b:93:e6:e0:ab:4a:23:b3:19:e5:
e0:6d:c5:f9:d3:83:e4:bc:87:d1:10:1a:5a:c5:d1:
bf:18:28:60:fb:6b:70:d8:65:74:1f:4b:86:6d:bf:
cc:01:e0:b3:1e:41:13:eb:ea:92:fc:9a:48:89:28:
f0:d2:64:06:a5:c4:96:07:1d:59:5f:ee:b9:66:dc:
2c:cd:af:13:96:e7:de:96:8b:9a:61:13:17:00:9f:
30:c9:41:bb:93:2f:65:8c:76:7c:87:25:78:72:b0:
a5:a3:7a:82:7c:85:de:bd:77:04:99:9b:fc:d1:b6:
03:07:e0:60:18:0f:4f:e9:4c:9b:6c:a5:56:6e:19:
53:19:5d:77:ce:bf:5b:1b:f5:24:f3:55:9c:cd:f7:
3e:c0:c7:87:0a:29:92:68:9b:b4:1a:11:43:77:96:
4b:c2:3b:91:de:cd:f9:79:df:d6:4f:fe:39:49:56:
a5:71:bf:25:c4:d4:55:57:73:c5:3a:d1:d3:e7:aa:
48:85:a6:09:9d:9b:99:b5:7d:cf:5e:82:ec:91:1b:
7f:c5:56:e6:0f:5b:b6:14:ad:12:87:08:52:ed:27:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:77:F4:24:7B:15:1B:00:BB:D5:B0:4C:89:C6:F8:CD:17:57:90:2E
X509v3 Authority Key Identifier:
keyid:DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9c:3c:04:bc:ec:e5:6a:f1:62:e8:59:b2:e0:0e:31:d3:44:
46:5a:93:f4:68:1d:a3:85:c3:29:42:49:b3:f9:21:b9:ea:90:
d9:96:95:a7:ee:71:6d:81:5c:d0:c6:a4:33:00:96:25:da:2c:
01:d5:0d:56:71:de:a6:de:4e:7a:25:3a:57:88:3a:96:b1:ef:
d4:30:4b:28:34:12:01:85:e0:fe:5c:96:df:33:94:05:af:b9:
2d:3d:40:c2:6a:b1:78:46:09:e1:88:4b:21:4d:3d:6a:a0:fd:
78:1a:7c:15:27:3a:3f:f5:26:6c:11:48:14:23:18:b0:35:52:
f0:d3:0d:ab:55:d6:64:67:32:e9:e6:4d:d2:29:4e:bc:8a:b9:
3b:03:e0:eb:6a:d2:40:73:3a:ac:00:d5:a4:b4:dc:ab:f5:30:
26:50:85:11:33:fa:87:6a:e9:63:de:90:72:96:2c:90:af:9c:
4d:f4:b5:81:9a:15:5e:b3:f0:1d:7f:b0:9d:a2:fa:ea:60:ce:
c1:57:7d:86:f1:de:5b:a6:36:56:df:cc:fc:7c:a1:ba:f3:8f:
fb:c6:99:51:bb:53:d8:33:ef:48:69:d3:89:34:54:ca:34:6a:
40:66:29:c6:f6:8d:7c:48:09:e4:4d:46:a0:2e:ea:15:89:1d:
cd:09:df:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt1NZetf5k+n1XSTH2srZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYWM2MjhhNGM1Y2M2ZTU3MGY0ZjQxYzRlMGQ2Mzk1NDkx
YjRkN2YwHhcNMjUwODExMDYwMDMwWhcNMjUwODEyMDYwMDMwWjAzMTEwLwYDVQQD
EyhkMTc3ZjQyNDdiMTUxYjAwYmJkNWIwNGM4OWM2ZjhjZDE3NTc5MDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf8UwXqITxcXFeMPfq7ZQ9W1QPTK
G6vMCHJBqP/jQ7vlVouT5uCrSiOzGeXgbcX504PkvIfREBpaxdG/GChg+2tw2GV0
H0uGbb/MAeCzHkET6+qS/JpIiSjw0mQGpcSWBx1ZX+65Ztwsza8TlufelouaYRMX
AJ8wyUG7ky9ljHZ8hyV4crClo3qCfIXevXcEmZv80bYDB+BgGA9P6UybbKVWbhlT
GV13zr9bG/Uk81Wczfc+wMeHCimSaJu0GhFDd5ZLwjuR3s35ed/WT/45SValcb8l
xNRVV3PFOtHT56pIhaYJnZuZtX3PXoLskRt/xVbmD1u2FK0ShwhS7SfCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNF39CR7FRsAu9WwTInG+M0XV5AuMB8GA1UdIwQY
MBaAFN+sYopMXMblcPT0HE4NY5VJG01/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZ4aWlreGN4dVZ3OVBRY1RnMWpsVWtiVFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wODBiZjItN2IyZS00NjVlLWFlOWMt
YzRhZGJlYjVhZGMwLzEvMzZ4aWlreGN4dVZ3OVBRY1RnMWpsVWtiVFg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wODBiZjItN2IyZS00NjVlLWFlOWMtYzRhZGJlYjVhZGMw
LzEvMzZ4aWlreGN4dVZ3OVBRY1RnMWpsVWtiVFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJw8BLzs
5WrxYuhZsuAOMdNERlqT9Ggdo4XDKUJJs/khueqQ2ZaVp+5xbYFc0MakMwCWJdos
AdUNVnHept5OeiU6V4g6lrHv1DBLKDQSAYXg/lyW3zOUBa+5LT1AwmqxeEYJ4YhL
IU09aqD9eBp8FSc6P/UmbBFIFCMYsDVS8NMNq1XWZGcy6eZN0ilOvIq5OwPg62rS
QHM6rADVpLTcq/UwJlCFETP6h2rpY96QcpYskK+cTfS1gZoVXrPwHX+wnaL66mDO
wVd9hvHeW6Y2Vt/M/HyhuvOP+8aZUbtT2DPvSGnTiTRUyjRqQGYpxvaNfEgJ5E1G
oC7qFYkdzQnfZg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:15 2025 by rpki-client