Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: zxTuHr9fpz9vGAHn9PpN1yei7/en464mDuGcZF3m/fI=
Subject key identifier: 13:75:20:12:E7:F0:CA:78:20:FF:18:C2:60:5E:E8:5B:65:FA:75:D9
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 019880C28D39640FF9731745F3C61D49EE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 0252
Signing time: Wed 06 Aug 2025 19:01:30 +0000
Manifest this update: Wed 06 Aug 2025 19:01:30 +0000
Manifest next update: Thu 07 Aug 2025 19:01:30 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: A5eziBCNaH6drYTUGjTgV3tZntjjk06q4KfhDY8uR/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:8d:39:64:0f:f9:73:17:45:f3:c6:1d:49:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Aug 6 19:01:30 2025 GMT
Not After : Aug 7 19:01:30 2025 GMT
Subject: CN=13752012e7f0ca7820ff18c2605ee85b65fa75d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:51:1a:05:5b:33:8b:62:cb:c8:44:2c:c6:
30:1e:91:60:a8:da:dc:8d:54:a3:66:43:c1:a5:c9:
d0:f7:1e:ef:b6:36:7f:97:48:8a:f2:29:91:43:e9:
78:6d:ab:44:cf:bc:a2:98:ef:33:97:a4:7f:f5:03:
40:c1:ba:dc:f6:b4:5c:4a:7a:24:93:02:37:ff:53:
9c:ae:7b:ae:ef:a2:1f:1f:ef:6f:e7:06:49:c3:72:
e4:03:8e:1f:5b:ee:9a:8f:0f:df:9f:bc:83:dd:23:
9d:a3:5e:d1:e4:ff:7f:35:e1:1f:32:88:2c:cd:34:
64:19:0b:bb:e7:55:72:01:39:f8:6f:d1:01:98:25:
62:26:ab:d4:8c:af:87:c5:b4:79:a5:9b:97:0a:07:
08:12:eb:ae:52:fe:70:fd:da:d7:02:a8:a0:46:d0:
a2:8c:8e:9b:6b:a5:2c:ca:56:37:a7:8b:80:d4:d6:
81:2d:81:a0:1d:62:8d:29:d6:ce:01:f6:3d:9a:18:
6f:60:99:ec:6a:5d:3d:8e:3e:12:bb:70:67:4f:5f:
25:4c:78:e8:ab:0f:d2:11:54:e2:7a:7d:f0:3d:75:
b5:eb:56:b4:06:b0:fc:4a:d4:2e:6a:37:63:25:9a:
59:e9:4b:36:d9:af:bc:16:3c:10:9d:8f:05:9e:55:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:75:20:12:E7:F0:CA:78:20:FF:18:C2:60:5E:E8:5B:65:FA:75:D9
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d8:42:1c:a8:42:f2:a4:12:07:44:00:d6:38:d2:7f:41:45:
3d:35:b9:7a:65:b6:5a:cf:c9:c8:e4:56:29:c2:c5:c2:cd:b9:
40:06:0c:46:02:91:6c:e2:13:08:aa:08:cc:75:49:4e:6e:dc:
ad:24:97:1f:b6:cc:96:b6:0c:9d:9e:e9:e3:ad:04:98:54:a1:
9d:f6:41:2d:9a:78:93:7f:1a:0a:da:30:6b:3a:2b:c1:16:6e:
cf:12:c4:96:4d:7e:ff:ad:aa:45:6f:92:27:08:74:ee:f1:63:
a4:67:66:e4:4d:ea:6d:1f:9d:29:6d:92:28:b7:d5:f0:b8:82:
d1:ee:47:c9:e9:0a:ad:08:7f:ee:ca:c9:1c:84:95:6c:53:54:
9d:e2:39:ba:42:dd:2c:b4:9a:11:d1:75:1e:f7:87:33:ce:7b:
f6:39:6a:a0:71:6d:88:e3:0a:2d:65:d1:73:6f:52:af:bd:2c:
9a:12:0d:ff:4f:2c:c5:1c:15:9a:13:b2:d5:fe:42:af:c9:dc:
b4:82:45:e3:fc:85:8a:c8:c3:c3:d6:bf:a3:82:a0:10:52:0c:
ba:2a:06:4c:2d:02:e4:e1:55:1f:e1:2e:0a:4d:95:82:60:24:
4c:0d:98:27:fc:2a:b3:bb:1d:7e:d5:0c:48:6f:14:0a:e3:64:
9f:db:a3:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwo05ZA/5cxdF88YdSe6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODc3MTI1ODU5NDdkYzU1MTlhYTg2ZTBiZDFmNDM1ZGY1
MmI1ZWUwHhcNMjUwODA2MTkwMTMwWhcNMjUwODA3MTkwMTMwWjAzMTEwLwYDVQQD
EygxMzc1MjAxMmU3ZjBjYTc4MjBmZjE4YzI2MDVlZTg1YjY1ZmE3NWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMdRGgVbM4tiy8hELMYwHpFgqNrc
jVSjZkPBpcnQ9x7vtjZ/l0iK8imRQ+l4batEz7yimO8zl6R/9QNAwbrc9rRcSnok
kwI3/1Ocrnuu76IfH+9v5wZJw3LkA44fW+6ajw/fn7yD3SOdo17R5P9/NeEfMogs
zTRkGQu751VyATn4b9EBmCViJqvUjK+HxbR5pZuXCgcIEuuuUv5w/drXAqigRtCi
jI6ba6UsylY3p4uA1NaBLYGgHWKNKdbOAfY9mhhvYJnsal09jj4Su3BnT18lTHjo
qw/SEVTien3wPXW161a0BrD8StQuajdjJZpZ6Us22a+8FjwQnY8FnlWVTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBN1IBLn8Mp4IP8YwmBe6Ftl+nXZMB8GA1UdIwQY
MBaAFPWHcSWFlH3FUZqobgvR9DXfUrXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEt
N2RjN2U2ZjkyZWQ0LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEtN2RjN2U2ZjkyZWQ0
LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNhCHKhC
8qQSB0QA1jjSf0FFPTW5emW2Ws/JyORWKcLFws25QAYMRgKRbOITCKoIzHVJTm7c
rSSXH7bMlrYMnZ7p460EmFShnfZBLZp4k38aCtowazorwRZuzxLElk1+/62qRW+S
Jwh07vFjpGdm5E3qbR+dKW2SKLfV8LiC0e5HyekKrQh/7srJHISVbFNUneI5ukLd
LLSaEdF1HveHM8579jlqoHFtiOMKLWXRc29Sr70smhIN/08sxRwVmhOy1f5Cr8nc
tIJF4/yFisjDw9a/o4KgEFIMuioGTC0C5OFVH+EuCk2VgmAkTA2YJ/wqs7sdftUM
SG8UCuNkn9ujWQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:12 2025 by rpki-client