Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: HWa9cogUzl1ogysNQ4+WB/MT+skPidHNyiw7oTl8DsY=
Subject key identifier: 10:82:1A:AA:4A:FD:40:18:28:95:1E:96:5C:E0:B7:D7:61:1D:24:23
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 01988CFDE22767DC3AE02C476DAA7F3AB721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 135C
Signing time: Sat 09 Aug 2025 04:01:45 +0000
Manifest this update: Sat 09 Aug 2025 04:01:45 +0000
Manifest next update: Sun 10 Aug 2025 04:01:45 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: 98mIrrCcPu1AvUyyligjmf/8Km3fQztXhA/96c5pco0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:e2:27:67:dc:3a:e0:2c:47:6d:aa:7f:3a:b7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: Aug 9 04:01:45 2025 GMT
Not After : Aug 10 04:01:45 2025 GMT
Subject: CN=10821aaa4afd401828951e965ce0b7d7611d2423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c9:8c:74:a4:86:38:64:60:69:01:55:d6:4c:
82:9e:50:71:0f:3e:79:28:38:e0:7f:19:39:ad:eb:
64:8a:02:2f:7b:0a:c7:a1:81:5b:f0:53:bd:6a:aa:
a1:c2:dd:22:15:f2:2a:c6:ba:53:06:f1:b3:08:54:
5f:15:0e:f1:3e:88:05:63:76:25:8e:14:3e:78:57:
fe:84:04:0b:f2:a5:86:5f:40:db:f1:52:6a:13:09:
04:cb:fb:f8:fd:9e:da:aa:9d:35:16:4c:8e:42:f7:
99:19:f3:40:a0:ce:d7:65:46:9a:cf:12:8b:9d:b2:
89:aa:0e:4b:93:cb:b2:14:d0:a7:2d:28:3d:3f:2c:
a1:c4:68:c1:28:9a:7f:a4:6b:3f:00:ae:4a:33:eb:
59:0b:4a:98:c6:67:74:41:15:09:e0:98:ea:02:bd:
f8:11:a7:88:97:61:d2:c5:9c:4f:45:62:c9:d9:d6:
ba:39:9c:6d:d7:e6:6b:79:aa:41:14:0c:89:24:49:
a8:5e:2c:de:44:3d:b8:b1:1a:0d:12:f4:1a:79:d2:
54:28:94:07:de:50:60:be:c4:81:e0:a6:30:ea:47:
6e:33:7e:3d:3b:fa:36:a8:c2:d4:a5:97:47:52:eb:
b5:32:94:2c:63:84:73:6e:90:7a:38:86:45:72:a3:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:1A:AA:4A:FD:40:18:28:95:1E:96:5C:E0:B7:D7:61:1D:24:23
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b2:47:31:e7:41:cc:0a:68:d6:c0:be:e1:2a:60:94:0e:85:
da:aa:62:e5:bd:7f:c8:5c:f1:9b:f2:62:78:0f:d4:f5:fc:05:
df:0d:2a:fa:44:d7:9d:d6:73:da:11:1a:65:0a:77:5e:a1:4e:
5c:02:6b:3c:8e:41:aa:b9:1a:85:c1:69:35:a8:ee:e8:c5:c7:
de:6a:3f:e4:c0:66:44:95:54:0c:1c:e6:08:e9:bd:4e:82:14:
5e:22:59:3c:11:df:86:bd:1a:21:45:3b:01:d5:fd:00:ef:ad:
31:ab:17:a2:99:d3:4d:97:32:74:8b:70:ee:5c:d4:cc:ed:91:
c4:55:23:b2:db:c2:b8:5d:8f:5b:b8:7c:61:8c:ea:97:a0:58:
cb:c5:e9:50:ab:ec:c2:cf:a2:3b:c1:98:3f:26:fa:ff:50:12:
d2:b2:8e:4a:95:f1:db:81:39:25:5f:b9:c9:79:0a:24:a1:10:
e9:27:a4:88:a3:bd:cd:df:1c:a7:57:1c:a3:ce:50:8f:a9:20:
12:8c:54:70:c0:de:28:d9:98:2a:e5:37:e0:7f:ff:b4:9d:a5:
04:74:8d:2d:0f:69:af:f9:71:a2:b4:56:61:5d:cb:a5:e6:07:
f2:cc:d7:e4:ea:17:60:ce:91:2d:b2:ff:58:d4:a7:0b:6c:da:
e6:cf:a3:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/eInZ9w64CxHbap/OrchMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwM2Y2ZTgxNzZjOTExZGFhMmMzNDMwNTMzMTFmZTNmMDNk
N2Q2N2YwHhcNMjUwODA5MDQwMTQ1WhcNMjUwODEwMDQwMTQ1WjAzMTEwLwYDVQQD
EygxMDgyMWFhYTRhZmQ0MDE4Mjg5NTFlOTY1Y2UwYjdkNzYxMWQyNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cmMdKSGOGRgaQFV1kyCnlBxDz55
KDjgfxk5retkigIvewrHoYFb8FO9aqqhwt0iFfIqxrpTBvGzCFRfFQ7xPogFY3Yl
jhQ+eFf+hAQL8qWGX0Db8VJqEwkEy/v4/Z7aqp01FkyOQveZGfNAoM7XZUaazxKL
nbKJqg5Lk8uyFNCnLSg9PyyhxGjBKJp/pGs/AK5KM+tZC0qYxmd0QRUJ4JjqAr34
EaeIl2HSxZxPRWLJ2da6OZxt1+ZreapBFAyJJEmoXizeRD24sRoNEvQaedJUKJQH
3lBgvsSB4KYw6kduM349O/o2qMLUpZdHUuu1MpQsY4RzbpB6OIZFcqOOrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCCGqpK/UAYKJUellzgt9dhHSQjMB8GA1UdIwQY
MBaAFIA/boF2yRHaosNDBTMR/j8D19Z/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jY2E1ZTctYWEyYS00MTVjLWEwMDMt
MGUzNDQ3ZjcxYjVmLzEvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jY2E1ZTctYWEyYS00MTVjLWEwMDMtMGUzNDQ3ZjcxYjVm
LzEvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7JHMedB
zApo1sC+4SpglA6F2qpi5b1/yFzxm/JieA/U9fwF3w0q+kTXndZz2hEaZQp3XqFO
XAJrPI5BqrkahcFpNaju6MXH3mo/5MBmRJVUDBzmCOm9ToIUXiJZPBHfhr0aIUU7
AdX9AO+tMasXopnTTZcydItw7lzUzO2RxFUjstvCuF2PW7h8YYzql6BYy8XpUKvs
ws+iO8GYPyb6/1AS0rKOSpXx24E5JV+5yXkKJKEQ6SekiKO9zd8cp1cco85Qj6kg
EoxUcMDeKNmYKuU34H//tJ2lBHSNLQ9pr/lxorRWYV3LpeYH8szX5OoXYM6RLbL/
WNSnC2za5s+j2w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:15 2025 by rpki-client