
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: Z2DKSXnou4pQ1xLdzgi8Rqma4PyLAHh6v2Y5NqsVer4=
Subject key identifier: 31:63:1F:17:9A:6C:CF:34:64:54:26:20:32:BA:04:42:56:00:C0:C9
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 019921B22A076A30DDAD0B118B34774ED40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:02:28 +0000
Manifest this update: Sun 07 Sep 2025 01:02:28 +0000
Manifest next update: Mon 08 Sep 2025 01:02:28 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: FwX+/WLOI1J0asQ03DjtdetT5/J3bQQK5P5qtU0A+3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:2a:07:6a:30:dd:ad:0b:11:8b:34:77:4e:d4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: Sep 7 01:02:28 2025 GMT
Not After : Sep 8 01:02:28 2025 GMT
Subject: CN=31631f179a6ccf346454262032ba04425600c0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:28:43:92:0d:42:2a:10:68:1b:10:40:c6:43:
51:9f:06:58:66:ff:33:7c:eb:2d:ad:54:cb:71:9f:
61:3f:47:60:74:ad:e0:bd:4f:10:b5:14:7d:e5:00:
93:a6:13:aa:30:db:e6:a9:d8:6e:44:fb:30:86:64:
30:b6:17:35:d8:9d:91:4d:55:41:47:1d:89:25:8e:
3c:96:68:bd:fc:45:3d:f6:3b:35:2e:d9:c5:dc:eb:
c0:e9:39:e3:33:af:e5:98:ab:51:07:59:6d:12:72:
26:46:92:17:20:d6:e8:ee:f1:7f:2d:98:fa:c8:2b:
05:d8:f9:c1:d0:ff:fc:c7:48:57:22:4a:8d:be:67:
98:f3:22:69:1a:6a:ca:ab:bb:31:37:15:28:b9:36:
a8:28:dd:6c:21:5e:bf:f5:76:00:cd:f0:25:59:c7:
32:3a:3e:5c:56:d1:91:38:a9:be:40:85:36:dd:b7:
a7:61:20:4f:f9:b4:03:a5:12:01:a0:22:1e:19:ce:
aa:c5:26:29:48:71:fe:cc:58:c5:59:13:59:20:61:
42:55:c0:97:70:c1:58:eb:9f:9c:40:b6:ae:f4:df:
30:4c:e3:4a:75:7f:2d:7b:25:ff:0f:f8:5e:60:6f:
5b:26:a0:cb:fa:21:63:dd:e0:02:33:04:e4:d2:08:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:63:1F:17:9A:6C:CF:34:64:54:26:20:32:BA:04:42:56:00:C0:C9
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:59:ac:cf:be:3c:38:bf:f8:94:3b:0f:14:3c:0a:78:56:59:
aa:d7:f3:dc:9e:32:ee:25:23:d7:3c:9b:b8:c4:8a:b5:81:a3:
77:d2:08:f8:68:f3:78:a5:a7:5b:30:42:5b:40:95:05:93:2e:
3c:1b:a2:9a:ee:ba:b8:22:61:f8:25:93:38:cb:92:a5:15:2e:
15:2c:82:34:97:32:87:a1:c9:02:9f:11:87:ef:da:64:aa:89:
bf:83:38:f9:91:f6:d6:d1:2c:59:9f:f8:21:05:8d:60:44:9d:
7c:ef:9e:a1:21:df:f7:45:f4:10:22:2d:f2:be:a4:87:94:bf:
3c:bd:c4:21:5b:17:6e:30:67:80:79:09:d2:d7:75:45:a4:c0:
72:c5:02:6f:2c:c1:02:fb:00:4b:45:9d:32:16:d8:a4:b7:0b:
26:eb:ea:33:17:17:42:5d:d0:28:4f:1b:e7:f5:1c:91:5f:9f:
49:88:b0:dc:fa:69:e3:fd:08:3e:7e:17:20:2d:5e:7a:6b:af:
c1:b7:e8:46:f2:ec:81:f6:fb:b9:29:f8:b6:3f:ad:09:28:71:
6c:b8:0b:c6:b8:18:8d:56:8e:92:74:e7:d1:d7:fd:7b:a3:fb:
ea:8d:87:df:1a:83:f7:17:0c:56:7b:b0:a9:39:2d:d3:14:a1:
d7:48:62:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsioHajDdrQsRizR3TtQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NWE5YjJmMjk2NDIwMTJiNDcwM2QyNDBlYmMxZWM4M2U0
N2QzN2QwHhcNMjUwOTA3MDEwMjI4WhcNMjUwOTA4MDEwMjI4WjAzMTEwLwYDVQQD
EygzMTYzMWYxNzlhNmNjZjM0NjQ1NDI2MjAzMmJhMDQ0MjU2MDBjMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ChDkg1CKhBoGxBAxkNRnwZYZv8z
fOstrVTLcZ9hP0dgdK3gvU8QtRR95QCTphOqMNvmqdhuRPswhmQwthc12J2RTVVB
Rx2JJY48lmi9/EU99js1LtnF3OvA6TnjM6/lmKtRB1ltEnImRpIXINbo7vF/LZj6
yCsF2PnB0P/8x0hXIkqNvmeY8yJpGmrKq7sxNxUouTaoKN1sIV6/9XYAzfAlWccy
Oj5cVtGROKm+QIU23benYSBP+bQDpRIBoCIeGc6qxSYpSHH+zFjFWRNZIGFCVcCX
cMFY65+cQLau9N8wTONKdX8teyX/D/heYG9bJqDL+iFj3eACMwTk0giozQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFjHxeabM80ZFQmIDK6BEJWAMDJMB8GA1UdIwQY
MBaAFFdamy8pZCAStHA9JA68Hsg+R9N9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYt
M2M0YzA1ZjE4NzMwLzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYtM2M0YzA1ZjE4NzMw
LzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVmsz748
OL/4lDsPFDwKeFZZqtfz3J4y7iUj1zybuMSKtYGjd9II+GjzeKWnWzBCW0CVBZMu
PBuimu66uCJh+CWTOMuSpRUuFSyCNJcyh6HJAp8Rh+/aZKqJv4M4+ZH21tEsWZ/4
IQWNYESdfO+eoSHf90X0ECIt8r6kh5S/PL3EIVsXbjBngHkJ0td1RaTAcsUCbyzB
AvsAS0WdMhbYpLcLJuvqMxcXQl3QKE8b5/UckV+fSYiw3Ppp4/0IPn4XIC1eemuv
wbfoRvLsgfb7uSn4tj+tCShxbLgLxrgYjVaOknTn0df9e6P76o2H3xqD9xcMVnuw
qTkt0xSh10hitg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:39 2025 by rpki-client