Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: BGSMAq8WxvgpzXjvhPlujdLDPj/LeBWAIpfgUWwqO6g=
Subject key identifier: CC:E1:00:A5:5F:C2:CB:8B:43:7C:DE:2C:86:5E:5D:FF:A3:F3:2C:64
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 01984A40F8F751B1D2EBA95FE0A540A466EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 11D3
Signing time: Sun 27 Jul 2025 05:00:28 +0000
Manifest this update: Sun 27 Jul 2025 05:00:28 +0000
Manifest next update: Mon 28 Jul 2025 05:00:28 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: xb/c0zzVs4RVjO5+gSvMgnnKfPcQ9YA0freeQsAx8rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f8:f7:51:b1:d2:eb:a9:5f:e0:a5:40:a4:66:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Jul 27 05:00:28 2025 GMT
Not After : Jul 28 05:00:28 2025 GMT
Subject: CN=cce100a55fc2cb8b437cde2c865e5dffa3f32c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:a5:73:13:b3:18:8d:42:46:2c:17:a9:52:
07:0c:c9:84:af:5b:7d:7a:6a:10:1a:c3:78:42:75:
d3:4e:ec:28:6b:9c:6c:74:9f:e7:00:e9:74:62:5a:
94:aa:25:c5:7e:1f:0c:7a:e0:36:3b:db:88:a8:8a:
c7:be:4f:7b:db:bb:b0:e1:df:22:82:b8:95:e5:bf:
f2:3e:bd:fe:42:33:4a:8a:8a:bc:2a:f0:dd:51:39:
3c:01:df:3f:3b:a9:72:bc:5f:02:eb:48:75:c2:25:
14:7f:b1:7f:d4:6f:78:3d:a3:a4:3f:8d:ae:47:ff:
bf:a1:9f:e9:6f:67:16:2e:d3:3d:af:6b:54:fc:e1:
a5:f0:33:65:3b:9c:a2:d9:2c:f5:d8:20:41:5b:ab:
aa:db:fa:a1:ba:ba:d0:ac:03:e5:6b:6d:4e:ef:93:
00:86:a6:f2:14:86:db:0e:83:06:4a:22:86:58:4c:
71:fa:7d:9b:b0:85:2b:52:47:28:f6:fa:43:71:f6:
3e:b3:93:40:2c:2c:57:98:07:7f:40:1e:fc:1f:b4:
18:db:4b:d2:16:74:4e:53:2e:b0:a9:56:fc:d3:e7:
0b:9d:67:3b:56:a6:54:83:30:dd:08:7b:25:a6:d1:
68:b0:4a:db:b2:28:e1:7d:2a:e3:56:49:d6:a2:6f:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:00:A5:5F:C2:CB:8B:43:7C:DE:2C:86:5E:5D:FF:A3:F3:2C:64
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c4:6e:7a:fe:39:41:00:df:c4:dc:5b:8c:ab:2b:15:7a:7b:
2c:b6:cb:d8:35:12:e2:ad:fb:8d:87:82:2d:d5:3d:72:af:73:
6d:f5:b5:a7:28:75:1e:14:e0:63:b2:9c:e8:54:d0:24:f8:f7:
a6:2a:0d:f8:28:02:09:33:33:fa:d3:a6:1c:b0:2e:81:2b:fa:
39:5c:dc:09:c0:1c:cd:f3:b1:d5:35:bc:43:fd:e2:32:b8:b7:
9e:09:c6:45:e9:0d:42:9f:6a:51:86:75:03:61:36:92:28:a8:
fe:a7:f3:28:5a:dc:49:76:85:01:48:02:0c:02:01:04:ba:4c:
b8:05:80:17:c4:80:e6:8a:79:48:ec:bc:e8:fe:99:4c:e5:a2:
67:fc:49:14:99:41:57:77:4b:90:5b:ea:a8:8a:6d:e3:77:a9:
51:7a:dd:27:bd:88:6f:f9:f1:23:67:c9:57:cc:4f:31:e9:99:
9e:f9:2b:7a:4a:aa:8f:b9:00:aa:6e:90:1c:e4:75:cc:93:9c:
89:00:59:12:31:66:1d:e3:39:4f:5e:70:87:0f:fd:0f:58:18:
eb:4b:ee:86:ba:9b:62:bf:7c:b8:fb:4c:0e:80:67:3b:08:35:
86:a4:cd:07:22:e9:e7:77:0c:71:76:a2:06:56:71:9f:77:ad:
ca:dd:9a:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQPj3UbHS66lf4KVApGbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2U0YjFjOTU4NzcyNzEzM2M3ZWUwMGJiYmE4ZWM1NmVh
ZTY0MWQwHhcNMjUwNzI3MDUwMDI4WhcNMjUwNzI4MDUwMDI4WjAzMTEwLwYDVQQD
EyhjY2UxMDBhNTVmYzJjYjhiNDM3Y2RlMmM4NjVlNWRmZmEzZjMyYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvalcxOzGI1CRiwXqVIHDMmEr1t9
emoQGsN4QnXTTuwoa5xsdJ/nAOl0YlqUqiXFfh8MeuA2O9uIqIrHvk9727uw4d8i
griV5b/yPr3+QjNKioq8KvDdUTk8Ad8/O6lyvF8C60h1wiUUf7F/1G94PaOkP42u
R/+/oZ/pb2cWLtM9r2tU/OGl8DNlO5yi2Sz12CBBW6uq2/qhurrQrAPla21O75MA
hqbyFIbbDoMGSiKGWExx+n2bsIUrUkco9vpDcfY+s5NALCxXmAd/QB78H7QY20vS
FnROUy6wqVb80+cLnWc7VqZUgzDdCHslptFosErbsijhfSrjVknWom9tFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzhAKVfwsuLQ3zeLIZeXf+j8yxkMB8GA1UdIwQY
MBaAFPV+SxyVh3JxM8fuALu6jsVurmQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEt
MTg4YjkxYTllOTkwLzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEtMTg4YjkxYTllOTkw
LzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcRuev45
QQDfxNxbjKsrFXp7LLbL2DUS4q37jYeCLdU9cq9zbfW1pyh1HhTgY7Kc6FTQJPj3
pioN+CgCCTMz+tOmHLAugSv6OVzcCcAczfOx1TW8Q/3iMri3ngnGRekNQp9qUYZ1
A2E2kiio/qfzKFrcSXaFAUgCDAIBBLpMuAWAF8SA5op5SOy86P6ZTOWiZ/xJFJlB
V3dLkFvqqIpt43epUXrdJ72Ib/nxI2fJV8xPMemZnvkrekqqj7kAqm6QHOR1zJOc
iQBZEjFmHeM5T15whw/9D1gY60vuhrqbYr98uPtMDoBnOwg1hqTNByLp53cMcXai
BlZxn3etyt2a0g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:33:55 2025 by rpki-client