Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: bieYtZb5DNb/sHfcPRxxV96IwvrUEn2TO/vXqAhyHKg=
Subject key identifier: 51:79:30:5E:86:F4:5E:70:1D:D8:C0:E3:79:77:48:9B:A2:E6:AB:C9
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 019847E5059734CD8C7BF2F0219FB1AAD864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 0CE0
Signing time: Sat 26 Jul 2025 18:00:48 +0000
Manifest this update: Sat 26 Jul 2025 18:00:48 +0000
Manifest next update: Sun 27 Jul 2025 18:00:48 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: XAzj+6jW8AB5GIIqL+m7NAA3q4HAg0C8uVHWvNQ6smk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:05:97:34:cd:8c:7b:f2:f0:21:9f:b1:aa:d8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Jul 26 18:00:48 2025 GMT
Not After : Jul 27 18:00:48 2025 GMT
Subject: CN=5179305e86f45e701dd8c0e37977489ba2e6abc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:04:17:35:5c:d4:8c:a1:bc:7d:39:b1:eb:7b:
c6:23:78:9d:3c:83:f4:bf:aa:45:20:18:3f:98:5e:
fa:a2:e3:37:5a:1e:0d:43:ad:86:0a:38:55:be:76:
46:dd:8c:a8:ae:4e:a5:6a:4d:0d:e3:6e:e1:01:d6:
39:de:5b:4e:d4:24:92:e7:c7:d8:3e:9c:a2:bd:05:
22:da:5d:11:1c:06:2e:92:6f:e5:85:73:a0:e1:47:
0a:e1:21:c7:83:63:2c:5c:9a:8c:b2:24:8c:e0:53:
f6:c4:7c:ae:a7:1a:fc:e9:2a:71:fd:a1:a8:47:04:
64:ae:03:af:4f:0c:f0:d1:37:ff:7f:d1:16:ef:fa:
0c:01:98:3e:88:d9:75:21:b8:51:65:16:fe:e5:79:
5b:af:a0:31:82:57:48:8e:2b:da:cd:1c:81:d8:48:
ac:12:ce:5d:1b:4a:dc:14:05:43:48:11:55:de:1c:
51:a1:8d:3c:9a:4a:84:da:6b:8d:a4:39:16:0e:c5:
e2:f2:0b:71:80:b3:49:1f:ee:d1:4f:9f:d3:63:45:
05:9b:0a:84:8f:28:4a:69:cf:63:f6:6c:02:b6:ee:
d1:f6:a0:7f:06:ed:33:0e:e1:cc:30:c7:45:1b:20:
6b:03:6d:74:8b:06:f4:8d:a7:81:f1:2e:79:5c:b2:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:79:30:5E:86:F4:5E:70:1D:D8:C0:E3:79:77:48:9B:A2:E6:AB:C9
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:84:f5:c7:43:2f:19:9f:09:7a:80:bf:1d:b4:6c:2c:3c:fa:
dd:bc:b4:a8:1f:81:64:ae:d3:f7:c6:ed:74:dd:e6:d4:8c:02:
1c:71:dd:40:f6:75:db:18:51:c9:7e:91:b9:33:f0:23:82:a9:
54:bc:6f:49:22:14:6c:d5:e9:47:30:ab:9e:b8:25:6c:74:3a:
75:91:90:80:02:d1:4d:92:bc:0f:76:15:fd:44:7b:3c:f2:9a:
d5:1e:83:65:a3:b5:5e:43:91:ea:8d:17:9f:59:15:4f:24:f3:
05:a4:81:dc:df:ae:5f:19:06:35:dd:c5:c9:83:f4:16:7d:06:
70:5f:53:53:3d:14:cc:43:21:c0:c7:55:c7:aa:a2:89:f9:b9:
7b:d8:d3:bc:c0:d7:b9:85:2c:9b:6d:06:7c:55:9e:4e:f3:fd:
3c:3e:49:b5:ff:6a:24:82:2c:c5:ff:5c:0d:e8:a0:fd:a7:15:
17:f8:2b:a7:85:a5:c2:25:ba:1f:5d:a4:39:ba:11:a9:41:d2:
03:1e:9d:55:9c:0c:b6:0c:ef:b4:99:8f:f2:f3:97:0a:0b:32:
e3:57:bd:88:9e:d7:e8:aa:01:79:4c:f0:83:5b:84:f8:db:a5:
c6:df:cf:a6:83:ea:dc:ed:f1:d5:5d:64:30:b6:ba:0a:c4:cb:
66:f6:62:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5QWXNM2Me/LwIZ+xqthkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDNmMDM1MmFkZmM5OGFjODgwMWI5NGU1YTAwN2U3MDcw
YjA3YWMwHhcNMjUwNzI2MTgwMDQ4WhcNMjUwNzI3MTgwMDQ4WjAzMTEwLwYDVQQD
Eyg1MTc5MzA1ZTg2ZjQ1ZTcwMWRkOGMwZTM3OTc3NDg5YmEyZTZhYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gQXNVzUjKG8fTmx63vGI3idPIP0
v6pFIBg/mF76ouM3Wh4NQ62GCjhVvnZG3Yyork6lak0N427hAdY53ltO1CSS58fY
PpyivQUi2l0RHAYukm/lhXOg4UcK4SHHg2MsXJqMsiSM4FP2xHyupxr86Spx/aGo
RwRkrgOvTwzw0Tf/f9EW7/oMAZg+iNl1IbhRZRb+5Xlbr6AxgldIjivazRyB2Eis
Es5dG0rcFAVDSBFV3hxRoY08mkqE2muNpDkWDsXi8gtxgLNJH+7RT5/TY0UFmwqE
jyhKac9j9mwCtu7R9qB/Bu0zDuHMMMdFGyBrA210iwb0jaeB8S55XLKGaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF5MF6G9F5wHdjA43l3SJui5qvJMB8GA1UdIwQY
MBaAFPZD8DUq38mKyIAblOWgB+cHCwesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEt
MDA1ZmMwN2NlZGM4LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEtMDA1ZmMwN2NlZGM4
LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIT1x0Mv
GZ8JeoC/HbRsLDz63by0qB+BZK7T98btdN3m1IwCHHHdQPZ12xhRyX6RuTPwI4Kp
VLxvSSIUbNXpRzCrnrglbHQ6dZGQgALRTZK8D3YV/UR7PPKa1R6DZaO1XkOR6o0X
n1kVTyTzBaSB3N+uXxkGNd3FyYP0Fn0GcF9TUz0UzEMhwMdVx6qiifm5e9jTvMDX
uYUsm20GfFWeTvP9PD5Jtf9qJIIsxf9cDeig/acVF/grp4WlwiW6H12kOboRqUHS
Ax6dVZwMtgzvtJmP8vOXCgsy41e9iJ7X6KoBeUzwg1uE+Nulxt/PpoPq3O3x1V1k
MLa6CsTLZvZiUA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:49 2025 by rpki-client