Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: TB2xvvL+11dtGWgoia3+NhJo/eqCcf+Cb7rCIgueEDU=
Subject key identifier: FD:32:44:B6:B1:A2:01:C1:86:3D:33:AE:07:71:52:07:4B:3D:3D:B7
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 0199225512D0FF5BF535A69E36F74A36535C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 09E1
Signing time: Sun 07 Sep 2025 04:00:24 +0000
Manifest this update: Sun 07 Sep 2025 04:00:24 +0000
Manifest next update: Mon 08 Sep 2025 04:00:24 +0000
Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: YJPX0DMb61yvHX+IOn/LTm7rppRGWRmLVmmOTj4tG8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:12:d0:ff:5b:f5:35:a6:9e:36:f7:4a:36:53:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Sep 7 04:00:24 2025 GMT
Not After : Sep 8 04:00:24 2025 GMT
Subject: CN=fd3244b6b1a201c1863d33ae077152074b3d3db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:ae:c2:89:42:4a:7c:06:21:00:fa:25:b7:
f9:aa:23:e8:78:41:aa:b1:e4:06:48:61:6f:c5:0f:
85:7f:eb:9b:64:ce:6a:2a:eb:2e:3d:66:3c:1c:52:
2f:86:f9:50:88:05:0e:9b:fc:40:a7:4c:0b:e6:3e:
5b:61:2f:95:92:75:bb:7d:6d:0d:56:51:82:a6:4f:
55:86:e2:56:e6:b8:88:e9:68:0b:a6:8e:03:61:40:
eb:f9:3b:aa:14:98:a6:9c:f7:cf:3c:03:a1:c7:7a:
7e:11:26:c7:8f:05:e2:89:75:bd:09:28:45:84:bd:
e2:f9:f2:fc:e9:12:91:89:03:60:6b:4e:98:59:1e:
76:b3:c1:8d:ec:ef:56:51:4d:28:4e:10:90:c0:d3:
f4:9a:0a:6b:26:e2:14:ed:24:2d:e8:7d:ac:d4:4b:
3d:7d:5a:9d:ae:01:c4:df:ab:76:ec:ef:4c:88:a0:
54:91:87:cf:2a:12:be:34:cb:93:b0:b6:15:2e:c7:
d8:f6:c0:0d:7e:94:8b:ff:38:31:41:7b:c6:19:fc:
2b:3e:39:c2:d9:65:d2:9c:56:52:99:f0:be:6d:3f:
7b:df:75:95:7b:b5:99:99:17:e1:6a:e7:13:7d:a5:
a8:f4:07:32:16:bf:61:5d:fc:6a:ec:bc:76:bf:c8:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:32:44:B6:B1:A2:01:C1:86:3D:33:AE:07:71:52:07:4B:3D:3D:B7
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c4:1b:f9:eb:91:e1:b5:4c:b7:51:9b:8b:67:0a:f8:73:00:
de:29:fd:b3:ea:a2:19:77:81:35:6b:06:40:df:01:74:ce:6d:
58:ab:d7:0b:26:46:3f:b8:55:07:6d:0e:47:9a:6b:36:bc:c5:
0e:b3:36:fa:36:0a:23:d7:8a:e1:78:c7:b4:dc:4e:ee:2d:db:
1b:1a:7a:3a:b9:d0:11:ed:12:23:e7:cc:3d:a4:ed:8e:9a:cf:
64:6e:ba:c8:92:80:e3:8d:9b:3f:2e:d9:54:d9:42:ed:a3:17:
79:52:db:d1:8a:c4:f7:80:98:d8:23:99:dd:a1:75:d1:58:81:
f9:42:35:1e:5d:50:06:fe:f8:bb:08:d4:74:be:56:fb:df:ec:
09:32:77:ba:ae:a3:09:7d:dd:36:5f:59:bf:32:98:44:6f:d6:
4d:ac:4d:bc:01:0a:29:1b:26:3b:6b:34:35:6a:55:6e:a8:ad:
8b:a8:63:04:fc:50:11:c6:b2:06:c1:fd:b9:0e:27:7c:e8:a8:
d5:b3:91:8f:a9:0d:60:f8:a8:07:0b:44:69:b4:90:d1:79:e6:
31:e4:73:23:26:73:55:9a:d4:f4:94:77:52:72:20:6a:55:c2:
5c:b7:32:ae:10:2b:38:68:43:43:26:29:d3:01:f0:d4:d1:2f:
de:99:35:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVRLQ/1v1NaaeNvdKNlNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0
MzllYjgwHhcNMjUwOTA3MDQwMDI0WhcNMjUwOTA4MDQwMDI0WjAzMTEwLwYDVQQD
EyhmZDMyNDRiNmIxYTIwMWMxODYzZDMzYWUwNzcxNTIwNzRiM2QzZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSGuwolCSnwGIQD6Jbf5qiPoeEGq
seQGSGFvxQ+Ff+ubZM5qKusuPWY8HFIvhvlQiAUOm/xAp0wL5j5bYS+VknW7fW0N
VlGCpk9VhuJW5riI6WgLpo4DYUDr+TuqFJimnPfPPAOhx3p+ESbHjwXiiXW9CShF
hL3i+fL86RKRiQNga06YWR52s8GN7O9WUU0oThCQwNP0mgprJuIU7SQt6H2s1Es9
fVqdrgHE36t27O9MiKBUkYfPKhK+NMuTsLYVLsfY9sANfpSL/zgxQXvGGfwrPjnC
2WXSnFZSmfC+bT9733WVe7WZmRfhaucTfaWo9AcyFr9hXfxq7Lx2v8h6DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0yRLaxogHBhj0zrgdxUgdLPT23MB8GA1UdIwQY
MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt
MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3
LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcQb+euR
4bVMt1Gbi2cK+HMA3in9s+qiGXeBNWsGQN8BdM5tWKvXCyZGP7hVB20OR5prNrzF
DrM2+jYKI9eK4XjHtNxO7i3bGxp6OrnQEe0SI+fMPaTtjprPZG66yJKA442bPy7Z
VNlC7aMXeVLb0YrE94CY2COZ3aF10ViB+UI1Hl1QBv74uwjUdL5W+9/sCTJ3uq6j
CX3dNl9ZvzKYRG/WTaxNvAEKKRsmO2s0NWpVbqiti6hjBPxQEcayBsH9uQ4nfOio
1bORj6kNYPioBwtEabSQ0XnmMeRzIyZzVZrU9JR3UnIgalXCXLcyrhArOGhDQyYp
0wHw1NEv3pk1Tg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:55 2025 by rpki-client