Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: ox6KynU110XDGvayr+hwOwLcqRu/l1kw4isewdE2Dd0=
Subject key identifier: 37:83:65:D1:F7:06:12:F3:2E:65:EE:2C:2E:A3:DD:BF:D4:CD:1F:3A
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 01987FE6518A54B79274EBAA94DD08E95D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 138A
Signing time: Wed 06 Aug 2025 15:00:57 +0000
Manifest this update: Wed 06 Aug 2025 15:00:57 +0000
Manifest next update: Thu 07 Aug 2025 15:00:57 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: xVAIj1IBorDsqC+lRExK7qSNCsniTdMN2skqIIj+CZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:51:8a:54:b7:92:74:eb:aa:94:dd:08:e9:5d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: Aug 6 15:00:57 2025 GMT
Not After : Aug 7 15:00:57 2025 GMT
Subject: CN=378365d1f70612f32e65ee2c2ea3ddbfd4cd1f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:c4:c1:81:b7:c6:fa:f8:79:c2:a0:dd:d8:
ae:de:a0:c6:09:e0:d1:09:f8:8e:77:8f:ab:13:d6:
ab:90:09:8d:1c:1f:cb:0b:1a:e9:71:73:3d:db:c1:
e4:e0:9b:94:66:03:c5:63:88:c7:ec:ed:f0:10:6d:
b3:ca:b2:36:c1:14:97:6b:d5:47:88:07:6f:9d:74:
ab:8d:77:d1:de:c4:ec:5a:ee:4e:65:e5:23:da:11:
7c:b1:7c:30:87:38:0e:19:0e:a0:d2:f5:5b:6f:ac:
c3:5f:73:13:9f:ad:c7:57:ae:f9:d6:85:09:bf:d4:
14:ca:dd:7c:e3:cb:38:71:e7:6b:d4:0f:02:0c:06:
6d:1d:c3:d4:19:66:cc:92:c0:fd:38:a4:49:2f:9b:
c1:31:78:97:b9:65:ae:4f:90:7d:48:56:c8:32:09:
39:6a:4b:62:06:be:70:b2:dd:5d:9c:c2:96:fe:dd:
3e:3f:7a:57:13:09:01:44:cc:c6:61:52:15:92:8c:
b7:e3:2b:8f:50:b4:93:9d:85:48:4d:3d:29:43:47:
a6:e8:f9:5b:ff:67:d2:a7:b6:cd:18:d5:d0:5c:49:
ef:81:51:09:fb:89:a3:f3:15:5d:bb:74:1c:c8:47:
3f:8b:16:2f:3f:56:2b:ec:e8:62:cf:61:e9:96:17:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:83:65:D1:F7:06:12:F3:2E:65:EE:2C:2E:A3:DD:BF:D4:CD:1F:3A
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:45:56:73:69:7e:f7:57:ae:2c:33:2d:ef:bc:ad:b7:00:51:
fb:3f:94:2f:4d:c5:6c:ac:f2:e7:56:d2:82:18:0e:db:c4:21:
50:1e:af:40:23:60:c6:c2:5d:00:6c:40:49:03:d0:94:b1:83:
0b:1a:0d:b0:62:8b:12:15:20:80:7a:42:9c:ce:1d:55:f8:ab:
c3:fa:73:0c:b7:75:bd:c7:59:2d:19:a4:8a:de:67:5d:fd:72:
13:43:29:21:e9:74:f2:54:a8:d5:ad:c4:d6:df:d4:60:b1:ec:
db:82:90:7c:1f:31:79:b9:84:4b:d1:5c:4f:79:ae:27:63:4f:
2c:bf:d2:e2:33:a0:67:d7:a4:a8:84:e8:28:d7:ca:be:42:9d:
9f:da:6f:bb:0e:ff:3a:87:6d:2a:49:fe:ef:11:c4:cf:d8:21:
2d:62:c3:4c:3a:83:9f:4e:b3:4d:39:36:ef:b3:96:f2:bd:52:
9d:18:98:95:82:00:32:67:be:3e:bd:71:0f:92:fc:a3:bb:ce:
ef:27:ea:12:b8:b0:d4:df:50:5f:e5:8b:4d:e7:d6:7c:99:b1:
33:ed:d4:8b:62:a3:91:ef:aa:b2:c4:00:d1:31:f4:eb:64:8a:
e1:2e:c7:99:0d:19:5b:03:f0:66:07:a8:57:f7:25:e4:d0:ad:
63:cc:c9:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/5lGKVLeSdOuqlN0I6V0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzBjNWJlNzdlZjk5Y2E0YTdlOTFkZmZkNThlNmE3OTg3
NDNjZmEwHhcNMjUwODA2MTUwMDU3WhcNMjUwODA3MTUwMDU3WjAzMTEwLwYDVQQD
EygzNzgzNjVkMWY3MDYxMmYzMmU2NWVlMmMyZWEzZGRiZmQ0Y2QxZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m/EwYG3xvr4ecKg3diu3qDGCeDR
CfiOd4+rE9arkAmNHB/LCxrpcXM928Hk4JuUZgPFY4jH7O3wEG2zyrI2wRSXa9VH
iAdvnXSrjXfR3sTsWu5OZeUj2hF8sXwwhzgOGQ6g0vVbb6zDX3MTn63HV6751oUJ
v9QUyt1848s4cedr1A8CDAZtHcPUGWbMksD9OKRJL5vBMXiXuWWuT5B9SFbIMgk5
aktiBr5wst1dnMKW/t0+P3pXEwkBRMzGYVIVkoy34yuPULSTnYVITT0pQ0em6Plb
/2fSp7bNGNXQXEnvgVEJ+4mj8xVdu3QcyEc/ixYvP1Yr7Ohiz2HplhfSuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeDZdH3BhLzLmXuLC6j3b/UzR86MB8GA1UdIwQY
MBaAFJvAxb5375nKSn6R3/1Y5qeYdDz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThERnZuZnZtY3BLZnBIZl9Wam1wNWgwUFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84OWQ5ZjAtOWJiYy00ZWVkLWIwMDMt
Y2VkMjA2NTExOTI3LzEvbThERnZuZnZtY3BLZnBIZl9Wam1wNWgwUFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84OWQ5ZjAtOWJiYy00ZWVkLWIwMDMtY2VkMjA2NTExOTI3
LzEvbThERnZuZnZtY3BLZnBIZl9Wam1wNWgwUFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEVWc2l+
91euLDMt77yttwBR+z+UL03FbKzy51bSghgO28QhUB6vQCNgxsJdAGxASQPQlLGD
CxoNsGKLEhUggHpCnM4dVfirw/pzDLd1vcdZLRmkit5nXf1yE0MpIel08lSo1a3E
1t/UYLHs24KQfB8xebmES9FcT3muJ2NPLL/S4jOgZ9ekqIToKNfKvkKdn9pvuw7/
OodtKkn+7xHEz9ghLWLDTDqDn06zTTk277OW8r1SnRiYlYIAMme+Pr1xD5L8o7vO
7yfqEriw1N9QX+WLTefWfJmxM+3Ui2Kjke+qssQA0TH062SK4S7HmQ0ZWwPwZgeo
V/cl5NCtY8zJ8A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:45:07 2025 by rpki-client