Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: 1oCQL15Jn+cgQ+R0SguEYuuV51sI9U1BMXcvQPtar8Q=
Subject key identifier: F7:1C:DE:E6:E6:80:72:47:EB:12:D3:FA:F6:67:1D:F8:00:DE:4C:33
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 019923A091084E4D266A5544A07F04217E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 086D
Signing time: Sun 07 Sep 2025 10:02:29 +0000
Manifest this update: Sun 07 Sep 2025 10:02:29 +0000
Manifest next update: Mon 08 Sep 2025 10:02:29 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: u34hkmS+cr19Z9u8gmO7sLJSfG9u84XGNTx+ld31qe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:91:08:4e:4d:26:6a:55:44:a0:7f:04:21:7e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Sep 7 10:02:29 2025 GMT
Not After : Sep 8 10:02:29 2025 GMT
Subject: CN=f71cdee6e6807247eb12d3faf6671df800de4c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:dd:59:2e:b9:db:a0:dd:7f:be:9e:c0:8e:
1b:36:02:02:ea:97:52:87:5d:53:f8:7a:76:b6:c8:
7c:23:4f:10:fa:63:7e:f5:fe:35:05:fb:4c:73:9b:
fd:6a:16:ea:ee:7e:43:39:e5:30:3b:1f:da:da:93:
02:99:7d:e3:79:64:92:58:3c:a9:51:37:c1:49:1d:
57:98:f9:67:f3:42:e1:1a:fd:0d:05:9c:4d:b1:c4:
7f:ef:cb:94:9d:15:db:b1:07:0d:ee:63:c6:98:6a:
64:a4:c6:07:29:68:96:dd:37:d0:15:bb:cd:59:3d:
57:fa:a9:2d:74:e6:26:ef:d2:93:a9:35:f5:ea:7b:
64:19:a2:52:34:57:fb:d3:a7:03:2b:56:16:7c:e7:
33:fc:e8:6b:5a:42:e0:51:d0:67:3e:22:06:03:60:
07:b2:39:c6:f5:4c:b7:83:63:20:ee:cd:d6:34:19:
52:41:be:ea:f5:df:90:4c:08:a9:e4:c2:38:ca:7b:
37:e2:25:38:d0:54:f2:1d:dd:ee:f1:6b:d2:c6:f3:
d0:d6:60:5c:05:58:86:60:64:c7:f2:a3:ab:0f:6e:
42:95:2e:a5:4d:91:1d:59:c7:e6:c4:ab:18:ec:18:
07:8e:36:90:b6:34:e5:60:9d:c5:a9:a1:e3:e0:02:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:DE:E6:E6:80:72:47:EB:12:D3:FA:F6:67:1D:F8:00:DE:4C:33
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7f:88:4e:ea:d4:4a:b7:5e:90:d5:85:ae:e5:39:a6:f8:75:
70:87:db:52:80:26:1e:72:93:c1:07:87:45:61:95:4d:c4:73:
68:4d:9d:92:d1:ed:21:33:1e:a0:f5:32:a3:07:ce:c7:0c:80:
5f:7c:53:bb:0b:36:77:d0:1a:22:1c:cd:74:20:68:24:12:1b:
02:28:5b:3a:48:37:22:44:06:e8:9a:25:f8:9c:6c:ce:93:66:
31:37:c6:2a:f7:b6:10:f9:4c:74:ee:cf:2b:2a:2e:dd:fd:6b:
cf:10:5f:3b:f9:16:7a:11:36:3a:c4:cb:b2:90:24:e1:8b:bd:
13:4c:79:cc:e7:fc:21:5a:e5:96:51:4d:83:26:49:e6:da:b3:
58:a1:70:9c:e2:aa:db:a3:29:17:28:42:05:a9:4f:1f:da:7c:
93:86:e0:12:6f:f5:c8:7d:41:b9:74:d0:17:5f:ec:25:f6:70:
a4:0d:a2:1c:2a:d8:9c:bc:d5:c1:43:49:b0:5a:be:72:27:48:
50:c9:c4:9e:64:61:29:0b:27:0f:4c:17:c3:d1:d1:92:cd:5b:
c5:93:b0:63:9a:3c:c7:88:3a:2e:b9:62:34:23:60:25:56:89:
4b:cd:bc:1d:d0:7c:00:d2:4f:8b:02:35:f0:b2:95:74:a6:a8:
6f:68:5b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoJEITk0malVEoH8EIX5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGE5MjAzMjFjNmM4MmNlZTY5MjllNzk4ZmM5MzcyYmFj
Y2I5MjUwHhcNMjUwOTA3MTAwMjI5WhcNMjUwOTA4MTAwMjI5WjAzMTEwLwYDVQQD
EyhmNzFjZGVlNmU2ODA3MjQ3ZWIxMmQzZmFmNjY3MWRmODAwZGU0YzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqTdWS6526Ddf76ewI4bNgIC6pdS
h11T+Hp2tsh8I08Q+mN+9f41BftMc5v9ahbq7n5DOeUwOx/a2pMCmX3jeWSSWDyp
UTfBSR1XmPln80LhGv0NBZxNscR/78uUnRXbsQcN7mPGmGpkpMYHKWiW3TfQFbvN
WT1X+qktdOYm79KTqTX16ntkGaJSNFf706cDK1YWfOcz/OhrWkLgUdBnPiIGA2AH
sjnG9Uy3g2Mg7s3WNBlSQb7q9d+QTAip5MI4yns34iU40FTyHd3u8WvSxvPQ1mBc
BViGYGTH8qOrD25ClS6lTZEdWcfmxKsY7BgHjjaQtjTlYJ3FqaHj4ALO0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcc3ubmgHJH6xLT+vZnHfgA3kwzMB8GA1UdIwQY
MBaAFDHakgMhxsgs7mkp55j8k3K6zLklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTct
YTU4OTc4N2JmZjkwLzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTctYTU4OTc4N2JmZjkw
LzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3+ITurU
SrdekNWFruU5pvh1cIfbUoAmHnKTwQeHRWGVTcRzaE2dktHtITMeoPUyowfOxwyA
X3xTuws2d9AaIhzNdCBoJBIbAihbOkg3IkQG6Jol+JxszpNmMTfGKve2EPlMdO7P
Kyou3f1rzxBfO/kWehE2OsTLspAk4Yu9E0x5zOf8IVrlllFNgyZJ5tqzWKFwnOKq
26MpFyhCBalPH9p8k4bgEm/1yH1BuXTQF1/sJfZwpA2iHCrYnLzVwUNJsFq+cidI
UMnEnmRhKQsnD0wXw9HRks1bxZOwY5o8x4g6LrliNCNgJVaJS828HdB8ANJPiwI1
8LKVdKaob2hbhA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:56 2025 by rpki-client