Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
File: y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft (raw, json)
Hash identifier: aelYz/hSivLSaEzczQPFarNWx6BdAtphzzhXtHvH8ZU=
Subject key identifier: 04:59:0F:1C:7F:52:03:10:4C:E0:1E:16:CD:42:02:7D:96:DC:BD:6E
Authority key identifier: CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
Certificate issuer: /CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Certificate serial: 019922554EC3ED5D7A4F326A485A6C1BFC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
Manifest number: A0
Signing time: Sun 07 Sep 2025 04:00:39 +0000
Manifest this update: Sun 07 Sep 2025 04:00:39 +0000
Manifest next update: Mon 08 Sep 2025 04:00:39 +0000
Files and hashes: 1: y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl (hash: LDegC8+ExauONs0SsK8b2sSggHBSuRSXp+eK760VLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:4e:c3:ed:5d:7a:4f:32:6a:48:5a:6c:1b:fc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Validity
Not Before: Sep 7 04:00:39 2025 GMT
Not After : Sep 8 04:00:39 2025 GMT
Subject: CN=04590f1c7f5203104ce01e16cd42027d96dcbd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:05:36:9b:35:fe:9e:80:7e:c8:38:03:4a:
44:d6:00:b8:a1:22:d8:96:cc:8f:b6:17:05:c5:fb:
e8:dd:6f:c1:14:e7:4f:0f:40:8a:48:e7:c3:10:a1:
b1:e5:13:8b:55:e9:cd:dc:40:4b:22:ea:52:a2:ac:
32:a3:3a:a8:1a:71:1b:11:6a:5e:bb:af:e2:f1:a3:
56:f0:e8:05:26:e1:a7:c1:a5:c0:a8:82:f3:43:c0:
e0:42:e7:34:29:86:82:35:2d:2a:48:a1:e5:c9:6f:
b6:1d:d9:b8:f1:7d:d5:85:bc:7d:25:c2:55:e5:42:
40:7a:d9:ff:65:7e:44:2d:24:00:98:cd:a6:62:5c:
65:37:bf:a5:12:43:98:02:36:8c:15:3f:43:42:ca:
ec:82:ec:85:70:c9:95:2c:f1:8b:6e:ab:8c:5a:9a:
2d:a9:7e:51:81:8d:03:ca:6f:a8:79:d2:e7:fa:65:
7b:bb:5c:60:21:a7:d3:0a:c4:c3:c3:fc:b1:d7:aa:
c5:9f:33:af:0e:b9:d3:6e:41:65:42:e2:d2:23:c2:
00:20:63:82:18:29:64:d0:58:bc:52:6a:84:ba:f2:
07:a0:56:1b:c6:a0:bf:06:3c:25:df:fa:eb:63:d9:
59:2f:bb:b8:e3:e0:b1:ea:93:54:64:28:f0:0c:59:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:0F:1C:7F:52:03:10:4C:E0:1E:16:CD:42:02:7D:96:DC:BD:6E
X509v3 Authority Key Identifier:
keyid:CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:27:e1:d2:7e:b9:52:e7:12:de:a4:6b:7a:82:83:75:f7:36:
8a:14:39:8e:41:2c:77:2f:6a:37:45:c8:af:53:72:d9:83:84:
d2:c7:65:d9:88:e1:59:36:73:8d:c2:b6:e8:1c:f7:6d:43:a7:
eb:bd:7a:62:7f:21:75:e4:dc:78:3c:be:5d:75:97:bd:96:2e:
14:8e:1b:f7:2c:89:5f:0b:03:0b:98:1e:a6:ae:a8:a4:26:c9:
e6:e9:fa:e5:6e:25:8f:18:a7:51:5e:82:95:c2:c5:a7:a9:d9:
cc:70:42:32:df:90:ef:d2:78:d3:04:bd:88:42:2b:7c:67:10:
51:1a:2b:8c:c0:19:ce:2c:e9:41:82:5b:5c:cd:10:b2:1d:b3:
7d:f9:91:6c:f1:be:e9:d0:04:9d:3a:69:11:69:c8:62:c5:35:
09:8d:a4:f1:c7:5a:cb:cd:94:e9:81:f9:32:f6:9d:ef:a3:ea:
a6:5a:89:0a:19:5a:50:7a:c6:61:6e:6c:36:79:67:03:4b:70:
c9:a4:1f:21:f1:6a:1c:41:98:84:33:62:f5:36:63:4d:11:d2:
d5:ce:e5:c1:25:a6:ef:f2:81:aa:3c:36:0b:ce:3d:c0:93:85:
71:87:f6:64:f4:09:39:b8:0d:47:2e:df:40:e6:4e:73:8b:c3:
70:a0:8b:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVU7D7V16TzJqSFpsG/xgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDc5NzNiNmEzYzMyMmU3MTk0NmU3ZGE3MDBmZmJkM2Iw
YTA5N2UwHhcNMjUwOTA3MDQwMDM5WhcNMjUwOTA4MDQwMDM5WjAzMTEwLwYDVQQD
EygwNDU5MGYxYzdmNTIwMzEwNGNlMDFlMTZjZDQyMDI3ZDk2ZGNiZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAursFNps1/p6Afsg4A0pE1gC4oSLY
lsyPthcFxfvo3W/BFOdPD0CKSOfDEKGx5ROLVenN3EBLIupSoqwyozqoGnEbEWpe
u6/i8aNW8OgFJuGnwaXAqILzQ8DgQuc0KYaCNS0qSKHlyW+2Hdm48X3Vhbx9JcJV
5UJAetn/ZX5ELSQAmM2mYlxlN7+lEkOYAjaMFT9DQsrsguyFcMmVLPGLbquMWpot
qX5RgY0Dym+oedLn+mV7u1xgIafTCsTDw/yx16rFnzOvDrnTbkFlQuLSI8IAIGOC
GClk0Fi8UmqEuvIHoFYbxqC/Bjwl3/rrY9lZL7u44+Cx6pNUZCjwDFnYkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARZDxx/UgMQTOAeFs1CAn2W3L1uMB8GA1UdIwQY
MBaAFMvXlztqPDIucZRufacA/707Cgl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWQ1MjAtYmIxYS00MDAxLTkyYmQt
MGRhZWQ5ODRlODQ5LzEveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYWQ1MjAtYmIxYS00MDAxLTkyYmQtMGRhZWQ5ODRlODQ5
LzEveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSfh0n65
UucS3qRreoKDdfc2ihQ5jkEsdy9qN0XIr1Ny2YOE0sdl2YjhWTZzjcK26Bz3bUOn
6716Yn8hdeTceDy+XXWXvZYuFI4b9yyJXwsDC5gepq6opCbJ5un65W4ljxinUV6C
lcLFp6nZzHBCMt+Q79J40wS9iEIrfGcQURorjMAZzizpQYJbXM0Qsh2zffmRbPG+
6dAEnTppEWnIYsU1CY2k8cday82U6YH5Mvad76PqplqJChlaUHrGYW5sNnlnA0tw
yaQfIfFqHEGYhDNi9TZjTRHS1c7lwSWm7/KBqjw2C849wJOFcYf2ZPQJObgNRy7f
QOZOc4vDcKCL1g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:29 2025 by rpki-client