
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
File: d6W3Uxx6reukfRwv65uee6qxu7c.mft (raw, json)
Hash identifier: WceUFVGH+NFhEoBQUv3a8j7n+zIQECsS8sH0C1WyHrU=
Subject key identifier: 4A:FE:54:FF:FF:50:49:D4:6E:65:67:8A:E3:E3:E1:97:21:9E:C9:35
Authority key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Certificate issuer: /CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Certificate serial: 01988B0E524B2F00D2A5DE4EBFFAFFE1ACB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 19:00:28 +0000
Manifest this update: Fri 08 Aug 2025 19:00:28 +0000
Manifest next update: Sat 09 Aug 2025 19:00:28 +0000
Files and hashes: 1: d6W3Uxx6reukfRwv65uee6qxu7c.crl (hash: 3eYxDqEJIP5S5qHpGE1K7h8V030ftcQdwuViThRYIbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:52:4b:2f:00:d2:a5:de:4e:bf:fa:ff:e1:ac:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Validity
Not Before: Aug 8 19:00:28 2025 GMT
Not After : Aug 9 19:00:28 2025 GMT
Subject: CN=4afe54ffff5049d46e65678ae3e3e197219ec935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:0d:bc:70:4f:71:e5:17:40:31:7d:14:8a:
42:df:fd:0c:f1:fa:b8:03:99:8b:de:ca:39:e9:53:
8c:43:e6:a8:c3:96:3a:86:b6:c6:c9:7c:09:cc:17:
7f:2f:3c:23:4d:df:5a:a0:34:de:8a:92:51:5d:36:
f5:e1:77:12:20:d9:02:be:85:b9:e4:85:9c:2c:b3:
d1:8f:06:13:3b:4e:e0:c4:b7:b1:1a:64:0b:74:87:
78:9b:77:f1:0b:22:cd:4f:9e:81:60:43:f6:7c:6a:
fd:40:9b:cd:69:7c:dc:fc:a5:29:1d:3c:8a:81:9d:
87:43:15:7f:ca:ef:dc:3c:62:12:a7:d4:93:0b:a1:
05:3a:d4:ba:15:fd:cc:96:77:3f:0c:02:49:bb:c1:
63:30:2e:85:04:85:72:f5:9b:fe:79:25:cd:3f:13:
66:c7:f1:35:b7:c2:2d:c9:ca:9f:3d:f4:23:11:99:
96:e6:9c:f0:59:95:0a:fe:95:ae:75:fd:d3:83:07:
2b:41:e7:d6:31:e0:ff:46:ad:ab:25:1a:8e:5e:6c:
a8:ab:5e:a5:a5:40:83:d6:d7:42:f2:9d:18:5f:90:
64:82:8b:d8:38:b7:25:7b:34:c7:1b:41:6a:a9:36:
d8:50:47:e5:fe:fa:42:4c:da:cd:c3:3c:a9:2b:3f:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FE:54:FF:FF:50:49:D4:6E:65:67:8A:E3:E3:E1:97:21:9E:C9:35
X509v3 Authority Key Identifier:
keyid:77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:52:98:9c:05:99:0e:37:9f:de:0f:d0:dc:04:32:69:15:f8:
95:98:89:75:0d:37:12:b5:9a:86:2e:b3:d3:32:82:55:c0:8b:
93:ba:e4:bc:3d:ae:5e:bb:78:c5:e9:85:0f:eb:1d:fa:c7:bc:
17:67:34:18:67:fc:0b:5f:aa:30:0f:4e:aa:c5:17:f4:f7:31:
c3:3d:58:de:0d:6d:43:d5:73:0c:fe:62:ca:b8:74:86:61:9e:
70:6b:0e:bc:8a:ed:81:dd:09:78:b3:87:0c:19:3b:06:ca:fb:
af:b0:61:2b:fd:de:64:b4:53:d5:a9:5e:9a:2f:f7:0b:25:8a:
07:48:db:c5:e3:cf:de:ae:aa:1c:ff:7d:56:ec:c0:d2:e3:12:
df:5b:95:56:3f:ed:44:4e:5a:ee:c2:43:7d:8a:43:10:34:fa:
9b:b9:1c:b6:d9:69:72:0b:71:98:fb:ab:91:be:a4:0f:05:c4:
12:fa:7d:6d:26:12:95:bd:44:7e:99:bf:c9:01:89:6e:82:e6:
7c:87:da:15:42:30:9d:c6:b0:a4:4a:fc:44:aa:3a:ec:2a:ea:
91:ba:2b:6f:7e:b7:ec:8c:65:7c:50:3a:11:64:52:20:61:bd:
82:66:d7:a7:8b:0b:ba:d0:12:20:da:62:6c:c1:d7:c2:83:33:
08:30:59:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDlJLLwDSpd5Ov/r/4aywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTViNzUzMWM3YWFkZWJhNDdkMWMyZmViOWI5ZTdiYWFi
MWJiYjcwHhcNMjUwODA4MTkwMDI4WhcNMjUwODA5MTkwMDI4WjAzMTEwLwYDVQQD
Eyg0YWZlNTRmZmZmNTA0OWQ0NmU2NTY3OGFlM2UzZTE5NzIxOWVjOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4MNvHBPceUXQDF9FIpC3/0M8fq4
A5mL3so56VOMQ+aow5Y6hrbGyXwJzBd/LzwjTd9aoDTeipJRXTb14XcSINkCvoW5
5IWcLLPRjwYTO07gxLexGmQLdId4m3fxCyLNT56BYEP2fGr9QJvNaXzc/KUpHTyK
gZ2HQxV/yu/cPGISp9STC6EFOtS6Ff3Mlnc/DAJJu8FjMC6FBIVy9Zv+eSXNPxNm
x/E1t8ItycqfPfQjEZmW5pzwWZUK/pWudf3TgwcrQefWMeD/Rq2rJRqOXmyoq16l
pUCD1tdC8p0YX5BkgovYOLclezTHG0FqqTbYUEfl/vpCTNrNwzypKz+OawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr+VP//UEnUbmVniuPj4Zchnsk1MB8GA1UdIwQY
MBaAFHelt1Mceq3rpH0cL+ubnnuqsbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZXM1V4eDZyZXVrZlJ3djY1dWVlNnF4dTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zZGQzN2QtNmIwYi00ZjFmLWIwZmIt
OTMyMzhmY2QxNjIyLzEvZDZXM1V4eDZyZXVrZlJ3djY1dWVlNnF4dTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zZGQzN2QtNmIwYi00ZjFmLWIwZmItOTMyMzhmY2QxNjIy
LzEvZDZXM1V4eDZyZXVrZlJ3djY1dWVlNnF4dTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1KYnAWZ
Djef3g/Q3AQyaRX4lZiJdQ03ErWahi6z0zKCVcCLk7rkvD2uXrt4xemFD+sd+se8
F2c0GGf8C1+qMA9OqsUX9Pcxwz1Y3g1tQ9VzDP5iyrh0hmGecGsOvIrtgd0JeLOH
DBk7Bsr7r7BhK/3eZLRT1alemi/3CyWKB0jbxePP3q6qHP99VuzA0uMS31uVVj/t
RE5a7sJDfYpDEDT6m7kcttlpcgtxmPurkb6kDwXEEvp9bSYSlb1Efpm/yQGJboLm
fIfaFUIwncawpEr8RKo67Crqkborb3637IxlfFA6EWRSIGG9gmbXp4sLutASINpi
bMHXwoMzCDBZFQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:11 2025 by rpki-client