Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: KBdVhkSXnNLWDOI7Py7rfYiDcR735sL6TQpUY1y7rMs=
Subject key identifier: A7:29:AB:D8:61:58:D5:C6:69:9D:D3:FD:42:DF:48:2D:3B:AA:B7:8E
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 019921B0FD9C67905C0489F32897CADF988D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 06AD
Signing time: Sun 07 Sep 2025 01:01:11 +0000
Manifest this update: Sun 07 Sep 2025 01:01:11 +0000
Manifest next update: Mon 08 Sep 2025 01:01:11 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: VW7yrnQpy7pwoKdMXXpONmriCa9FuZUfRjmd4J9qOZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:fd:9c:67:90:5c:04:89:f3:28:97:ca:df:98:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: Sep 7 01:01:11 2025 GMT
Not After : Sep 8 01:01:11 2025 GMT
Subject: CN=a729abd86158d5c6699dd3fd42df482d3baab78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b4:ef:fa:03:9c:f5:d7:d2:fe:04:92:3f:e6:
02:1e:73:f3:16:81:e9:9a:bb:c4:30:4d:c2:7a:04:
ff:84:59:5b:fc:e3:63:e8:b4:bc:a8:bd:30:38:c6:
83:cb:c7:b1:f0:41:fe:a2:2a:f7:b7:a4:0a:44:c1:
ae:b1:df:d6:3a:4c:d7:3e:f9:f5:2e:cf:41:b6:91:
74:09:03:07:5a:b2:f0:9a:14:a0:30:d6:96:5f:6c:
d6:cd:fa:db:bc:f2:d9:36:50:d4:fc:e1:ba:3b:d1:
4d:3d:cc:02:7f:db:fd:8d:6e:2f:26:f1:d5:43:de:
83:1d:ff:9c:e6:4a:51:ed:71:ef:34:aa:6a:3a:b1:
29:66:9d:cf:62:fe:b2:68:94:01:92:ff:e0:8f:88:
88:a0:0b:13:fa:f0:b5:c7:91:11:aa:cc:87:6f:1e:
ab:d8:01:d2:2c:0f:32:c0:2b:64:cb:71:3b:0b:df:
32:37:d7:3e:a7:46:4e:0d:34:ec:a7:e3:e2:b2:12:
40:59:5d:ea:c2:35:ba:d9:7d:b7:dd:c6:0d:5f:a0:
2a:16:ea:ed:e3:7b:0c:30:b9:e0:a6:5c:2c:d7:21:
57:29:27:82:d7:b7:ab:86:6e:15:a3:ba:1e:2c:33:
ca:11:4b:bf:a1:35:27:c1:5e:25:67:49:99:db:94:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:29:AB:D8:61:58:D5:C6:69:9D:D3:FD:42:DF:48:2D:3B:AA:B7:8E
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:87:a9:4f:b4:c4:98:20:94:0d:d9:04:b8:35:47:ea:b4:3f:
8f:e9:63:c0:e2:07:be:05:f5:3b:c3:40:81:35:6a:fd:e3:44:
3a:bc:06:83:9d:50:f9:f3:f1:aa:f7:f2:81:0b:e9:0d:f9:f8:
45:08:98:56:aa:0f:2d:5e:23:70:bf:65:3e:83:13:89:75:03:
ff:99:14:91:e2:c1:6b:f1:da:10:73:1d:48:9c:d7:a6:6a:ae:
49:5c:36:0c:fc:b8:6b:4c:b9:03:a4:73:f4:d3:c4:51:cb:fd:
ba:63:ed:9c:32:0d:70:70:5f:f2:37:98:22:f6:3b:db:9d:8e:
04:8a:56:2e:c5:c7:14:4d:ee:64:6a:6b:db:22:83:e8:7d:95:
dc:37:78:9a:bb:29:a8:93:f5:ea:3d:20:24:49:16:b1:75:48:
c1:55:2e:55:a7:82:ca:10:9e:47:f9:41:e5:3d:33:c6:15:ad:
2e:9f:5f:d7:af:67:63:24:49:d4:69:42:3a:74:6e:09:81:13:
c7:b0:91:28:fa:34:ed:04:65:ff:a9:4a:ab:52:2f:6c:3f:3c:
55:9f:34:f0:9a:e3:d9:ab:5c:ad:48:17:78:6b:2a:0d:d3:b9:
f0:08:41:07:c1:9b:ac:22:fa:19:94:5a:a7:ab:2d:25:b1:ba:
75:5f:de:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsP2cZ5BcBInzKJfK35iNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4M2Y2OTgzM2VjNDc3MWYzYjBiY2U0ZjAwOTM2NTc5MzU0
NmY2YTgwHhcNMjUwOTA3MDEwMTExWhcNMjUwOTA4MDEwMTExWjAzMTEwLwYDVQQD
EyhhNzI5YWJkODYxNThkNWM2Njk5ZGQzZmQ0MmRmNDgyZDNiYWFiNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rTv+gOc9dfS/gSSP+YCHnPzFoHp
mrvEME3CegT/hFlb/ONj6LS8qL0wOMaDy8ex8EH+oir3t6QKRMGusd/WOkzXPvn1
Ls9BtpF0CQMHWrLwmhSgMNaWX2zWzfrbvPLZNlDU/OG6O9FNPcwCf9v9jW4vJvHV
Q96DHf+c5kpR7XHvNKpqOrEpZp3PYv6yaJQBkv/gj4iIoAsT+vC1x5ERqsyHbx6r
2AHSLA8ywCtky3E7C98yN9c+p0ZODTTsp+PishJAWV3qwjW62X233cYNX6AqFurt
43sMMLngplws1yFXKSeC17erhm4Vo7oeLDPKEUu/oTUnwV4lZ0mZ25SsZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcpq9hhWNXGaZ3T/ULfSC07qreOMB8GA1UdIwQY
MBaAFIg/aYM+xHcfOwvOTwCTZXk1RvaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUQ5cGd6N0VkeDg3Qzg1UEFKTmxlVFZHOXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MzQ1OTktZjM4ZS00NDRhLWEzYzAt
NmJmMmJkYmFlNWM0LzEvaUQ5cGd6N0VkeDg3Qzg1UEFKTmxlVFZHOXFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85MzQ1OTktZjM4ZS00NDRhLWEzYzAtNmJmMmJkYmFlNWM0
LzEvaUQ5cGd6N0VkeDg3Qzg1UEFKTmxlVFZHOXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYepT7TE
mCCUDdkEuDVH6rQ/j+ljwOIHvgX1O8NAgTVq/eNEOrwGg51Q+fPxqvfygQvpDfn4
RQiYVqoPLV4jcL9lPoMTiXUD/5kUkeLBa/HaEHMdSJzXpmquSVw2DPy4a0y5A6Rz
9NPEUcv9umPtnDINcHBf8jeYIvY7252OBIpWLsXHFE3uZGpr2yKD6H2V3Dd4mrsp
qJP16j0gJEkWsXVIwVUuVaeCyhCeR/lB5T0zxhWtLp9f169nYyRJ1GlCOnRuCYET
x7CRKPo07QRl/6lKq1IvbD88VZ808Jrj2atcrUgXeGsqDdO58AhBB8GbrCL6GZRa
p6stJbG6dV/eTA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:55 2025 by rpki-client