Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: ERXY5294wlpA0e/kko43c9WzhUkxatuIigFZIYF/ZT0=
Subject key identifier: D2:6A:B0:45:A2:D4:0C:B7:E9:FF:68:BB:67:F5:BC:52:8A:2D:B0:7C
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 0199228C3F766D4258D9D678268900E5ADA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0C98
Signing time: Sun 07 Sep 2025 05:00:40 +0000
Manifest this update: Sun 07 Sep 2025 05:00:40 +0000
Manifest next update: Mon 08 Sep 2025 05:00:40 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: zTHly++dTDu/ss6fljeJ7ENTND3fcGmSJGFlPoTD+Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:3f:76:6d:42:58:d9:d6:78:26:89:00:e5:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Sep 7 05:00:40 2025 GMT
Not After : Sep 8 05:00:40 2025 GMT
Subject: CN=d26ab045a2d40cb7e9ff68bb67f5bc528a2db07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:f3:9d:e4:32:5e:4e:e4:d5:b8:66:1d:89:
3b:1d:f7:2c:37:aa:bb:6f:83:01:10:7e:63:fe:d5:
5d:dc:8b:a0:e5:e5:bb:39:d5:ee:a8:8d:f5:9b:d0:
1d:fd:04:f7:1e:e6:63:cd:fa:7d:50:5e:f9:e1:63:
3b:71:97:59:a5:14:05:52:bb:68:53:0e:a9:5c:f8:
40:85:4d:fc:28:78:60:1a:08:28:96:d4:0b:4f:70:
3a:db:3f:e7:58:2e:ff:c6:9a:01:44:ae:cd:7f:90:
1a:28:e4:56:1e:ce:32:3c:4b:91:f0:ba:16:e1:a9:
43:b4:3a:f5:73:c3:87:16:2e:6c:42:c3:33:3e:a0:
0a:88:12:38:7a:62:8d:12:0b:17:39:7f:9c:6d:a7:
9c:94:5a:a4:07:94:64:63:94:8f:34:61:3e:fb:8b:
46:25:44:9e:d9:5d:d9:30:ff:a2:89:22:11:77:3b:
7f:d5:7f:b6:f4:42:1d:02:36:a3:00:21:2f:e0:18:
95:e0:9b:d5:13:01:31:81:d1:c2:93:92:1e:66:a7:
a6:34:33:2d:e7:33:4a:ed:a8:ff:0c:f3:20:01:82:
9a:ed:eb:72:67:90:a6:6a:67:e7:5a:aa:a7:b6:5c:
d6:a0:4b:6a:9d:8e:09:0b:30:e2:0c:98:97:ff:0c:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6A:B0:45:A2:D4:0C:B7:E9:FF:68:BB:67:F5:BC:52:8A:2D:B0:7C
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:26:0a:e0:75:29:05:cc:b3:22:17:d9:0c:db:3d:2e:fb:07:
ad:6f:cf:29:16:ec:34:f5:97:93:40:73:1b:ce:5b:b6:58:a4:
07:0e:e3:8e:0c:1d:1f:43:d1:77:31:0f:2e:70:dd:e1:31:eb:
9c:93:14:83:31:c2:00:9b:fa:f4:7d:69:b0:ba:7a:f0:69:e3:
44:86:fc:b5:c6:e6:83:48:61:a7:92:d1:cd:9f:8a:eb:a8:cd:
07:c7:9c:c3:2e:7a:69:20:ae:2b:38:a5:f1:20:a6:3f:31:e4:
e3:a5:6a:9b:f9:32:5e:0c:9c:65:d0:73:ef:0c:2a:34:5a:53:
83:a9:66:56:73:61:d2:5c:de:71:10:c9:ec:69:3e:14:9a:2b:
5a:2e:9f:24:95:6e:de:17:e7:78:c6:1a:60:b2:4f:38:a8:ce:
29:6f:97:3f:ac:13:7e:f1:26:a4:bb:35:d3:de:b9:21:9d:93:
96:ca:ea:06:67:95:2b:7c:e0:e7:d6:b6:02:cd:4d:74:9c:7c:
b5:c1:bf:70:17:d2:e1:3f:79:1e:6b:6c:98:a5:5c:83:f4:33:
04:81:76:7c:b6:f3:2d:98:0f:99:0f:c6:88:55:34:d1:33:5b:
e4:a6:dc:e3:f0:9d:57:93:08:c6:a6:80:21:4f:28:24:bc:df:
e9:17:25:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijD92bUJY2dZ4JokA5a2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MWJiODY1OTExOGQ3NTJmMWU3MzU0NWZkOGFjNzNhN2Qx
OGIyMWMwHhcNMjUwOTA3MDUwMDQwWhcNMjUwOTA4MDUwMDQwWjAzMTEwLwYDVQQD
EyhkMjZhYjA0NWEyZDQwY2I3ZTlmZjY4YmI2N2Y1YmM1MjhhMmRiMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq23zneQyXk7k1bhmHYk7HfcsN6q7
b4MBEH5j/tVd3Iug5eW7OdXuqI31m9Ad/QT3HuZjzfp9UF754WM7cZdZpRQFUrto
Uw6pXPhAhU38KHhgGggoltQLT3A62z/nWC7/xpoBRK7Nf5AaKORWHs4yPEuR8LoW
4alDtDr1c8OHFi5sQsMzPqAKiBI4emKNEgsXOX+cbaeclFqkB5RkY5SPNGE++4tG
JUSe2V3ZMP+iiSIRdzt/1X+29EIdAjajACEv4BiV4JvVEwExgdHCk5IeZqemNDMt
5zNK7aj/DPMgAYKa7etyZ5CmamfnWqqntlzWoEtqnY4JCzDiDJiX/wwV4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJqsEWi1Ay36f9ou2f1vFKKLbB8MB8GA1UdIwQY
MBaAFNUbuGWRGNdS8ec1Rf2Kxzp9GLIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTIt
NWNmMjE1MDk0MDVlLzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTItNWNmMjE1MDk0MDVl
LzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiYK4HUp
BcyzIhfZDNs9LvsHrW/PKRbsNPWXk0BzG85btlikBw7jjgwdH0PRdzEPLnDd4THr
nJMUgzHCAJv69H1psLp68GnjRIb8tcbmg0hhp5LRzZ+K66jNB8ecwy56aSCuKzil
8SCmPzHk46Vqm/kyXgycZdBz7wwqNFpTg6lmVnNh0lzecRDJ7Gk+FJorWi6fJJVu
3hfneMYaYLJPOKjOKW+XP6wTfvEmpLs10965IZ2TlsrqBmeVK3zg59a2As1NdJx8
tcG/cBfS4T95HmtsmKVcg/QzBIF2fLbzLZgPmQ/GiFU00TNb5Kbc4/CdV5MIxqaA
IU8oJLzf6RclFw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:00 2025 by rpki-client