Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: uprDGGLbry9lWxchbVbfssZ8spZngJHMoAHr0vGqKmE=
Subject key identifier: 95:5B:95:3C:08:B8:10:9E:47:F4:9E:8E:9A:F1:38:C6:68:E2:B9:3F
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 0199228D102CBF71EF195712FC20D455D708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 10E2
Signing time: Sun 07 Sep 2025 05:01:33 +0000
Manifest this update: Sun 07 Sep 2025 05:01:33 +0000
Manifest next update: Mon 08 Sep 2025 05:01:33 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: 299+eVRA9GUKtq7WRov7QPQypHgw/zPM/s1mRTdSFWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:10:2c:bf:71:ef:19:57:12:fc:20:d4:55:d7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Sep 7 05:01:33 2025 GMT
Not After : Sep 8 05:01:33 2025 GMT
Subject: CN=955b953c08b8109e47f49e8e9af138c668e2b93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:f5:44:44:8a:a2:00:83:ed:7e:c8:8a:2e:
bd:da:83:92:7d:60:2f:7f:e5:2a:35:63:2f:7b:18:
48:50:e5:0a:eb:88:c8:b5:39:3a:4f:9b:d1:8f:61:
83:44:26:c1:03:7b:e9:a3:95:55:05:f7:70:dc:ef:
3f:25:24:11:f5:bd:3f:b6:37:7f:ba:fd:1f:80:27:
0c:a8:24:24:09:04:20:86:38:54:cb:79:44:51:34:
be:e2:2f:9c:55:5d:da:a3:38:a5:25:c3:a0:fb:5b:
67:33:20:0d:77:ee:9a:e2:09:50:eb:75:6b:b1:e5:
1b:00:3d:56:93:3e:a5:24:27:0e:74:3b:c4:dc:bf:
bf:59:b5:87:e4:fd:14:b4:3d:5f:00:49:e8:5f:c5:
30:ee:a4:d5:d0:93:3a:58:f8:1e:ca:aa:5a:34:11:
17:df:5c:83:76:33:20:ac:ed:3e:bd:60:c5:3e:de:
ff:ea:ef:44:db:45:75:37:7c:1c:86:f6:75:f4:ed:
0b:fb:8f:e6:2d:7f:e4:6a:91:40:69:4b:cd:64:5b:
c3:05:94:e1:f1:e9:90:ff:f3:4f:70:50:f2:50:20:
60:fa:9a:47:45:dd:d6:36:f0:a3:e5:f2:d6:01:4e:
ae:db:44:f4:17:0f:b5:9b:1a:f1:af:ea:33:7f:2c:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5B:95:3C:08:B8:10:9E:47:F4:9E:8E:9A:F1:38:C6:68:E2:B9:3F
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7c:95:e8:c3:d2:f5:bd:ec:5b:87:99:bf:0c:e3:44:61:c4:
73:fe:e5:ef:7f:69:c5:27:c6:88:ed:d2:b4:d5:9b:32:33:fd:
30:ef:a7:30:fc:cf:7d:e5:9e:38:75:7c:02:09:47:bf:c0:0c:
18:3f:16:0e:c6:f4:9b:5c:a2:38:1e:33:3c:82:d6:3b:58:69:
36:01:f5:0c:d6:b5:07:23:78:d1:a2:77:f6:a6:9b:13:46:fa:
4b:7f:a6:4b:f7:18:0a:59:ab:0f:f6:82:20:6b:3e:24:8d:bd:
a7:04:56:29:ab:8e:80:98:17:0c:f7:b9:67:74:54:84:24:1f:
7e:3f:b8:a8:26:d7:a6:8f:08:15:a0:52:09:8d:cf:aa:ab:dd:
a6:78:bc:78:bd:00:55:3f:43:be:cd:d1:1c:d4:9c:96:6b:eb:
5f:c5:de:3e:93:6f:e9:ba:53:a2:c8:16:4f:9f:8d:39:12:be:
dc:53:29:59:de:bf:b1:30:aa:32:df:b5:be:44:44:2a:7f:23:
29:1a:5d:37:7e:f0:62:1d:8e:b7:7e:e5:37:80:27:42:09:0a:
58:14:2d:fe:5e:19:40:38:5b:55:6f:5d:a5:72:b4:16:8e:cf:
ea:15:e1:bf:0e:ee:a5:3d:56:79:9c:8c:75:1b:ca:fc:4e:ec:
50:05:a8:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijRAsv3HvGVcS/CDUVdcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjM5ZGI1MDEyOGRiMzUwYWViYzg0MzgwODQ5OTE4YmIw
NWU3MDUwHhcNMjUwOTA3MDUwMTMzWhcNMjUwOTA4MDUwMTMzWjAzMTEwLwYDVQQD
Eyg5NTViOTUzYzA4YjgxMDllNDdmNDllOGU5YWYxMzhjNjY4ZTJiOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZT1RESKogCD7X7Iii692oOSfWAv
f+UqNWMvexhIUOUK64jItTk6T5vRj2GDRCbBA3vpo5VVBfdw3O8/JSQR9b0/tjd/
uv0fgCcMqCQkCQQghjhUy3lEUTS+4i+cVV3aozilJcOg+1tnMyANd+6a4glQ63Vr
seUbAD1Wkz6lJCcOdDvE3L+/WbWH5P0UtD1fAEnoX8Uw7qTV0JM6WPgeyqpaNBEX
31yDdjMgrO0+vWDFPt7/6u9E20V1N3wchvZ19O0L+4/mLX/kapFAaUvNZFvDBZTh
8emQ//NPcFDyUCBg+ppHRd3WNvCj5fLWAU6u20T0Fw+1mxrxr+ozfyxurwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVblTwIuBCeR/SejprxOMZo4rk/MB8GA1UdIwQY
MBaAFJuznbUBKNs1CuvIQ4CEmRi7BecFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lMWY5YzctNTkwMy00MmM4LTk4MzMt
ZTI4ZmEzOWI0YjE3LzEvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lMWY5YzctNTkwMy00MmM4LTk4MzMtZTI4ZmEzOWI0YjE3
LzEvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXyV6MPS
9b3sW4eZvwzjRGHEc/7l739pxSfGiO3StNWbMjP9MO+nMPzPfeWeOHV8AglHv8AM
GD8WDsb0m1yiOB4zPILWO1hpNgH1DNa1ByN40aJ39qabE0b6S3+mS/cYClmrD/aC
IGs+JI29pwRWKauOgJgXDPe5Z3RUhCQffj+4qCbXpo8IFaBSCY3Pqqvdpni8eL0A
VT9Dvs3RHNSclmvrX8XePpNv6bpTosgWT5+NORK+3FMpWd6/sTCqMt+1vkREKn8j
KRpdN37wYh2Ot37lN4AnQgkKWBQt/l4ZQDhbVW9dpXK0Fo7P6hXhvw7upT1WeZyM
dRvK/E7sUAWoGA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:36 2025 by rpki-client