Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: 3YfJw6BNsbzrfUzIqaNgMJgH3kSEGKUM4JgYFHYJsnA=
Subject key identifier: 3C:25:C3:D9:C8:3A:93:C0:2B:21:7E:B1:59:5D:08:C5:57:9D:1C:21
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 019874500E607376EF983DC213B3E709A379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0CE3
Signing time: Mon 04 Aug 2025 09:01:00 +0000
Manifest this update: Mon 04 Aug 2025 09:01:00 +0000
Manifest next update: Tue 05 Aug 2025 09:01:00 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: NkvdH33S3oFHYLLE+da7wQwb7JjldlQVLgnGyQZMzcI=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0e:60:73:76:ef:98:3d:c2:13:b3:e7:09:a3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Aug 4 09:01:00 2025 GMT
Not After : Aug 5 09:01:00 2025 GMT
Subject: CN=3c25c3d9c83a93c02b217eb1595d08c5579d1c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:b2:9e:e1:a9:4e:13:49:7b:cd:5b:f7:9b:
55:f0:67:69:2d:15:88:21:da:c8:1e:97:52:4a:8e:
25:d1:e8:13:58:d8:97:46:eb:73:d0:4f:89:c8:4c:
01:8c:45:73:c6:0e:15:f5:89:8c:b3:33:13:23:08:
18:65:23:97:de:a6:1e:ff:de:da:ba:41:99:2e:a6:
c0:86:6f:9c:11:6b:22:27:41:9e:5b:83:76:94:57:
91:5c:06:fd:05:59:29:e2:24:f7:ef:99:53:65:74:
d2:d9:f7:ac:5c:3c:09:29:5f:49:dc:c5:b3:5f:2b:
2f:56:76:22:de:da:cf:64:fe:77:86:61:1e:c4:a3:
42:22:d4:08:7b:59:84:eb:0e:5f:fd:c4:7f:9c:0b:
9c:74:ce:43:4c:25:de:b0:8f:94:59:24:c3:d7:f1:
a7:5f:6c:c6:37:72:a7:b6:fe:5e:e9:df:9f:8e:8c:
58:17:fa:c1:63:36:fc:74:68:e0:9d:d4:66:38:05:
28:ed:9b:cb:7c:22:29:d3:e1:1f:53:6f:ab:04:f0:
12:e2:6c:c1:a3:18:78:c7:ee:af:96:67:20:0f:2e:
66:e4:36:7b:33:a2:8f:2f:fd:0c:3e:69:19:b6:84:
b0:83:c6:e8:fd:1b:ea:44:9a:3f:df:31:da:61:6e:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:C3:D9:C8:3A:93:C0:2B:21:7E:B1:59:5D:08:C5:57:9D:1C:21
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b2:46:6b:23:a6:8d:65:38:c9:00:ba:e0:f3:9a:7e:6a:91:
62:69:11:5d:aa:6b:f0:85:7b:61:36:00:b0:0f:bb:46:f2:d1:
19:61:2f:c7:d4:8c:30:e8:93:ea:ec:35:c1:f2:be:62:40:df:
62:d6:ba:25:fe:72:6c:89:53:ad:9f:06:e9:66:8b:57:30:ab:
49:cb:d9:95:6f:3a:f0:fc:6f:fd:67:4d:fd:a6:e5:2e:c5:f4:
b4:eb:3a:95:da:a3:f7:29:e2:1b:f9:b8:07:55:de:da:90:45:
f4:2b:01:9b:9c:02:9b:dd:93:16:7f:12:65:f7:3f:30:6f:5e:
0f:23:59:ba:c7:8a:79:1c:00:95:5f:fc:1d:ff:51:90:ea:ed:
81:56:50:d4:d2:f3:f3:4d:31:18:25:ba:26:dc:c6:06:f5:7a:
6d:84:96:99:16:0c:d5:50:81:f2:7b:f2:9d:27:1e:e3:47:61:
40:c9:c7:d1:be:d9:26:bc:cb:62:57:21:02:c6:6a:32:7f:16:
ee:c5:88:cb:2d:9b:4d:e9:f8:aa:01:8f:40:5c:e4:c6:72:d7:
e9:e2:b3:4f:d3:79:56:58:0d:2c:d1:e3:47:d7:b8:c0:e3:c5:
97:0a:11:8e:86:01:90:a5:fd:05:c7:53:21:bb:76:4e:fe:f9:
07:96:27:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UA5gc3bvmD3CE7PnCaN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFm
NGU3N2YwHhcNMjUwODA0MDkwMTAwWhcNMjUwODA1MDkwMTAwWjAzMTEwLwYDVQQD
EygzYzI1YzNkOWM4M2E5M2MwMmIyMTdlYjE1OTVkMDhjNTU3OWQxYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0yynuGpThNJe81b95tV8GdpLRWI
IdrIHpdSSo4l0egTWNiXRutz0E+JyEwBjEVzxg4V9YmMszMTIwgYZSOX3qYe/97a
ukGZLqbAhm+cEWsiJ0GeW4N2lFeRXAb9BVkp4iT375lTZXTS2fesXDwJKV9J3MWz
XysvVnYi3trPZP53hmEexKNCItQIe1mE6w5f/cR/nAucdM5DTCXesI+UWSTD1/Gn
X2zGN3Kntv5e6d+fjoxYF/rBYzb8dGjgndRmOAUo7ZvLfCIp0+EfU2+rBPAS4mzB
oxh4x+6vlmcgDy5m5DZ7M6KPL/0MPmkZtoSwg8bo/RvqRJo/3zHaYW7hlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwlw9nIOpPAKyF+sVldCMVXnRwhMB8GA1UdIwQY
MBaAFPReeRQRMM7shXIV+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2Ut
MzNiZDg0MzQ5NWY4LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4
LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErJGayOm
jWU4yQC64POafmqRYmkRXapr8IV7YTYAsA+7RvLRGWEvx9SMMOiT6uw1wfK+YkDf
Yta6Jf5ybIlTrZ8G6WaLVzCrScvZlW868Pxv/WdN/ablLsX0tOs6ldqj9yniG/m4
B1Xe2pBF9CsBm5wCm92TFn8SZfc/MG9eDyNZuseKeRwAlV/8Hf9RkOrtgVZQ1NLz
800xGCW6JtzGBvV6bYSWmRYM1VCB8nvynSce40dhQMnH0b7ZJrzLYlchAsZqMn8W
7sWIyy2bTen4qgGPQFzkxnLX6eKzT9N5VlgNLNHjR9e4wOPFlwoRjoYBkKX9BcdT
Ibt2Tv75B5YnKA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:12 2025 by rpki-client