Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
File: pO9xMrnCMYeert1cpNwysWXwx_M.mft (raw, json)
Hash identifier: YaOMO5RNyOM6ToPRUL3D2L40FGsuuJcPq314ar3arG0=
Subject key identifier: 9A:46:37:CE:9D:5D:6D:6D:05:4B:0F:0E:7B:20:3C:B7:E0:61:76:F5
Authority key identifier: A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Certificate issuer: /CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Certificate serial: 0199225555180532FB1E5B2D13B0F44C3395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
Manifest number: 0DAA
Signing time: Sun 07 Sep 2025 04:00:41 +0000
Manifest this update: Sun 07 Sep 2025 04:00:41 +0000
Manifest next update: Mon 08 Sep 2025 04:00:41 +0000
Files and hashes: 1: pO9xMrnCMYeert1cpNwysWXwx_M.crl (hash: 8JxE5q6r4w0s//PNfgfVuxnxf7x7s3R3TD5e2SdBDqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:55:18:05:32:fb:1e:5b:2d:13:b0:f4:4c:33:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Validity
Not Before: Sep 7 04:00:41 2025 GMT
Not After : Sep 8 04:00:41 2025 GMT
Subject: CN=9a4637ce9d5d6d6d054b0f0e7b203cb7e06176f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:61:d6:cd:8f:93:09:76:8e:67:40:80:76:
0c:f5:c0:4a:2a:02:2d:c1:3b:37:d8:d6:ae:66:3d:
bb:c5:75:9b:43:a2:56:24:4f:9d:b6:30:d5:9d:f0:
45:8b:02:aa:42:84:8c:09:26:11:15:48:0b:68:19:
ea:97:b0:5f:0d:61:74:05:01:aa:dd:ba:42:2a:66:
15:80:a4:2a:3b:ae:69:65:a3:43:b1:4d:ce:67:00:
e5:25:84:6a:70:ec:23:a5:6b:19:84:0c:3f:f5:d3:
eb:b2:d2:46:6d:30:d8:0a:cc:83:6d:f1:92:62:bb:
f4:ec:10:5e:40:09:16:30:62:91:6b:5e:0d:ba:64:
55:6e:03:be:5d:46:9b:aa:f9:c4:5c:30:cb:24:c4:
ac:de:ed:8b:91:f9:a6:b5:6a:d5:f1:bd:c0:21:06:
e6:3a:d5:f3:53:92:76:db:40:b2:d6:02:0d:87:2c:
08:fa:34:b0:42:69:e5:73:9b:b7:33:b1:b1:d9:a2:
b7:45:2b:20:82:0d:e9:20:f3:eb:c0:8a:26:11:18:
7b:45:83:bc:88:f3:3e:53:a1:1f:d4:f4:f0:d2:8b:
b8:ee:0f:f1:cb:67:ac:50:35:a1:f7:b5:cc:01:42:
71:df:63:db:d7:5d:ca:b3:20:fa:1d:ac:8e:91:5f:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:46:37:CE:9D:5D:6D:6D:05:4B:0F:0E:7B:20:3C:B7:E0:61:76:F5
X509v3 Authority Key Identifier:
keyid:A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4a:47:c9:cb:fe:0c:74:48:e9:c3:0a:a6:ec:bb:f3:16:d2:
e8:40:93:b1:84:7f:0e:bb:97:ef:32:89:a6:9b:ee:dc:09:69:
98:b7:1e:32:fa:f8:a1:3b:00:5b:99:e4:91:d8:3a:5e:0e:26:
c1:f7:3b:4c:c4:f6:55:2f:a3:d3:6e:5b:d0:e1:cb:8a:ca:c4:
82:a3:d7:a8:12:84:81:b9:58:71:39:e7:a5:30:34:c6:d6:d4:
1b:86:dd:97:4a:38:14:f1:50:50:cb:11:dd:2a:8c:b4:cb:74:
f4:96:99:da:6b:61:a7:97:48:3d:66:70:f3:8f:f9:db:d7:eb:
ef:dd:dd:ba:d8:c6:12:60:f8:14:64:b9:0a:c9:11:59:87:38:
85:d9:80:4f:f0:ca:51:48:17:d5:db:b1:38:15:4e:7a:44:67:
47:45:7b:1e:94:94:f9:7d:29:a3:a4:74:69:89:bf:c3:44:70:
8f:aa:66:c8:f8:9c:da:89:b5:b8:3c:f1:33:52:5c:85:84:e1:
6b:41:1b:43:ca:34:39:36:f4:76:e7:dc:cb:44:2d:e9:34:9d:
7d:e7:e0:bd:fe:11:c4:09:24:36:73:1e:06:c1:a7:70:11:c2:
89:1f:02:6e:a1:06:62:f6:78:5c:dd:ae:a8:e1:a9:10:61:95:
e9:14:be:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVVUYBTL7HlstE7D0TDOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWY3MTMyYjljMjMxODc5ZWFlZGQ1Y2E0ZGMzMmIxNjVm
MGM3ZjMwHhcNMjUwOTA3MDQwMDQxWhcNMjUwOTA4MDQwMDQxWjAzMTEwLwYDVQQD
Eyg5YTQ2MzdjZTlkNWQ2ZDZkMDU0YjBmMGU3YjIwM2NiN2UwNjE3NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Zh1s2Pkwl2jmdAgHYM9cBKKgIt
wTs32NauZj27xXWbQ6JWJE+dtjDVnfBFiwKqQoSMCSYRFUgLaBnql7BfDWF0BQGq
3bpCKmYVgKQqO65pZaNDsU3OZwDlJYRqcOwjpWsZhAw/9dPrstJGbTDYCsyDbfGS
Yrv07BBeQAkWMGKRa14NumRVbgO+XUabqvnEXDDLJMSs3u2LkfmmtWrV8b3AIQbm
OtXzU5J220Cy1gINhywI+jSwQmnlc5u3M7Gx2aK3RSsggg3pIPPrwIomERh7RYO8
iPM+U6Ef1PTw0ou47g/xy2esUDWh97XMAUJx32Pb113KsyD6HayOkV/MJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpGN86dXW1tBUsPDnsgPLfgYXb1MB8GA1UdIwQY
MBaAFKTvcTK5wjGHnq7dXKTcMrFl8MfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE85eE1ybkNNWWVlcnQxY3BOd3lzV1h3eF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MGU4ZGUtMDYzMi00OWFhLThiMzIt
YmM0NzJiNzg2NjUzLzEvcE85eE1ybkNNWWVlcnQxY3BOd3lzV1h3eF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81MGU4ZGUtMDYzMi00OWFhLThiMzItYmM0NzJiNzg2NjUz
LzEvcE85eE1ybkNNWWVlcnQxY3BOd3lzV1h3eF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEpHycv+
DHRI6cMKpuy78xbS6ECTsYR/DruX7zKJppvu3AlpmLceMvr4oTsAW5nkkdg6Xg4m
wfc7TMT2VS+j025b0OHLisrEgqPXqBKEgblYcTnnpTA0xtbUG4bdl0o4FPFQUMsR
3SqMtMt09JaZ2mthp5dIPWZw84/529fr793dutjGEmD4FGS5CskRWYc4hdmAT/DK
UUgX1duxOBVOekRnR0V7HpSU+X0po6R0aYm/w0Rwj6pmyPic2om1uDzxM1JchYTh
a0EbQ8o0OTb0dufcy0Qt6TSdfefgvf4RxAkkNnMeBsGncBHCiR8CbqEGYvZ4XN2u
qOGpEGGV6RS+0w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:44 2025 by rpki-client