Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier: 2ZnY7q9WAtq2qrngeNpcVMWm1fGX28IXS9WN+8SR1XM=
Subject key identifier: 3C:42:76:64:8D:F2:A5:65:53:58:67:C2:0F:6E:FC:C8:D7:5D:7F:38
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial: 01984A09DEC907B509B8551D76A69206B4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number: 04F9
Signing time: Sun 27 Jul 2025 04:00:17 +0000
Manifest this update: Sun 27 Jul 2025 04:00:17 +0000
Manifest next update: Mon 28 Jul 2025 04:00:17 +0000
Files and hashes: 1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: +AWxkScdHAmWUaFvwWclas5K1FyJxc9opiL74EN2ImM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:de:c9:07:b5:09:b8:55:1d:76:a6:92:06:b4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Validity
Not Before: Jul 27 04:00:17 2025 GMT
Not After : Jul 28 04:00:17 2025 GMT
Subject: CN=3c4276648df2a565535867c20f6efcc8d75d7f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:3d:87:c2:80:86:a7:93:44:25:dd:c4:07:
03:1e:5c:22:df:d9:e2:00:4c:b8:dc:af:7d:d0:9b:
4a:48:3c:f9:97:1b:c7:f6:f7:53:c1:86:e1:b6:f5:
bd:21:2a:cb:b5:c4:7c:26:5d:71:db:33:27:9d:5d:
c7:01:0f:b9:97:8a:bf:3a:65:2c:78:a8:69:18:ed:
c0:d1:99:be:7d:80:74:de:81:8f:51:de:4c:af:e5:
fa:83:bb:fd:40:15:60:ac:8d:8c:00:b0:75:f9:ce:
c5:50:82:f8:05:62:ef:fe:9f:3b:25:6b:49:be:a3:
a0:92:43:2a:11:cb:66:c3:bd:e9:b3:ba:ea:11:fb:
86:99:a0:5c:e0:a1:1a:9e:08:0d:8e:8a:c5:6e:c8:
b4:78:c8:89:4f:76:fc:fd:a9:f5:ee:d7:82:63:77:
ad:75:cf:76:13:3c:86:d1:ed:42:cf:a7:f5:c6:fc:
05:bd:b0:7e:8a:9f:1e:ba:96:68:d2:6f:75:c5:a0:
a6:08:79:5b:cd:cc:5e:52:5f:3c:d2:84:1f:52:ca:
05:0a:2d:d2:c1:b7:d0:1c:e9:9b:e2:5f:6b:14:2a:
fb:21:50:03:aa:f9:49:3a:e6:0f:53:2b:06:96:00:
2a:b9:91:fc:30:4c:06:c8:01:1d:bb:10:e1:8d:bc:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:76:64:8D:F2:A5:65:53:58:67:C2:0F:6E:FC:C8:D7:5D:7F:38
X509v3 Authority Key Identifier:
keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9f:ac:a2:bb:2e:51:c1:b5:2b:b4:01:a9:85:14:70:f9:64:
02:29:77:7e:96:3c:f7:42:7f:35:69:f9:6d:be:46:22:1e:eb:
8c:9f:f4:d7:98:65:9a:a1:a2:61:ea:36:e6:d7:56:6b:0b:42:
15:52:d0:a9:ae:23:32:4d:a1:3a:05:df:2b:6a:74:d1:db:53:
33:94:ae:07:de:1f:80:03:db:50:d9:4c:62:4b:3d:d0:69:75:
6b:af:33:17:70:53:40:e2:a2:2d:d2:75:8d:15:9d:c0:b3:f3:
3b:0a:c3:a9:d1:d7:fa:5e:c7:0c:f2:7e:28:3a:68:c5:d7:f9:
2f:da:bc:e3:e0:ec:02:a5:5f:63:29:7a:2e:ef:cf:10:3b:df:
c4:d1:a1:a3:0f:94:95:25:77:8d:a6:c7:14:a7:ff:a1:e3:b3:
17:02:8d:5e:d4:2b:41:cf:bb:a2:36:16:93:8c:1f:b7:67:8f:
f9:63:35:d0:e6:56:5a:09:b4:9a:51:bd:51:d7:1b:31:81:29:
25:c4:47:31:7d:49:6b:16:17:75:2c:40:f3:2c:1d:95:68:ec:
a7:07:fc:69:1d:63:72:d8:c0:b4:f2:3d:8f:c6:f7:77:e3:a6:
6e:dc:db:e7:54:7c:ea:33:96:29:08:43:a2:e1:31:09:e7:cf:
50:44:66:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCd7JB7UJuFUddqaSBrTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzk3ZDBjMWJiY2NjM2Q4NjcxMjJhMTE3MTBmNTVmNzAy
MzAwOGUwHhcNMjUwNzI3MDQwMDE3WhcNMjUwNzI4MDQwMDE3WjAzMTEwLwYDVQQD
EygzYzQyNzY2NDhkZjJhNTY1NTM1ODY3YzIwZjZlZmNjOGQ3NWQ3ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDM9h8KAhqeTRCXdxAcDHlwi39ni
AEy43K990JtKSDz5lxvH9vdTwYbhtvW9ISrLtcR8Jl1x2zMnnV3HAQ+5l4q/OmUs
eKhpGO3A0Zm+fYB03oGPUd5Mr+X6g7v9QBVgrI2MALB1+c7FUIL4BWLv/p87JWtJ
vqOgkkMqEctmw73ps7rqEfuGmaBc4KEanggNjorFbsi0eMiJT3b8/an17teCY3et
dc92EzyG0e1Cz6f1xvwFvbB+ip8eupZo0m91xaCmCHlbzcxeUl880oQfUsoFCi3S
wbfQHOmb4l9rFCr7IVADqvlJOuYPUysGlgAquZH8MEwGyAEduxDhjbw0CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxCdmSN8qVlU1hnwg9u/MjXXX84MB8GA1UdIwQY
MBaAFP7JfQwbvMw9hnEioRcQ9V9wIwCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzkt
OTM5Zjg3YTMxYmYwLzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzktOTM5Zjg3YTMxYmYw
LzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdp+sorsu
UcG1K7QBqYUUcPlkAil3fpY890J/NWn5bb5GIh7rjJ/015hlmqGiYeo25tdWawtC
FVLQqa4jMk2hOgXfK2p00dtTM5SuB94fgAPbUNlMYks90Gl1a68zF3BTQOKiLdJ1
jRWdwLPzOwrDqdHX+l7HDPJ+KDpoxdf5L9q84+DsAqVfYyl6Lu/PEDvfxNGhow+U
lSV3jabHFKf/oeOzFwKNXtQrQc+7ojYWk4wft2eP+WM10OZWWgm0mlG9UdcbMYEp
JcRHMX1JaxYXdSxA8ywdlWjspwf8aR1jctjAtPI9j8b3d+Ombtzb51R86jOWKQhD
ouExCefPUERmIA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:18 2025 by rpki-client