Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
File: rrlJQmajhxkETYKaSgqPF6QHBOg.mft (raw, json)
Hash identifier: wJwi3sYr2usCev36hFl2eI/viprKRQni5bmVLU+UBgM=
Subject key identifier: F0:26:9B:F9:9B:61:37:B9:85:D3:93:59:43:DD:58:99:E5:7F:F3:6C
Authority key identifier: AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8
Certificate issuer: /CN=aeb9494266a38719044d829a4a0a8f17a40704e8
Certificate serial: 019923A0F6F2A2EB1457E69729F699CC9CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:55 +0000
Manifest this update: Sun 07 Sep 2025 10:02:55 +0000
Manifest next update: Mon 08 Sep 2025 10:02:55 +0000
Files and hashes: 1: rrlJQmajhxkETYKaSgqPF6QHBOg.crl (hash: gT7ALVEGy4EvJJOtMpLC3FnlT0wcgJZaU/mqL5XPT4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:f6:f2:a2:eb:14:57:e6:97:29:f6:99:cc:9c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb9494266a38719044d829a4a0a8f17a40704e8
Validity
Not Before: Sep 7 10:02:55 2025 GMT
Not After : Sep 8 10:02:55 2025 GMT
Subject: CN=f0269bf99b6137b985d3935943dd5899e57ff36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:7f:86:01:19:eb:0d:79:a8:d8:0f:31:dd:
1e:2c:c5:81:9e:14:b5:06:c0:d4:41:55:95:ff:e1:
c9:f0:64:be:6f:f2:d0:3e:d9:10:67:e7:63:06:2a:
07:66:f3:2b:fe:a7:dd:ab:a4:aa:8d:de:0d:07:9c:
e4:34:e9:e8:8b:03:34:d2:0c:bd:dc:09:2c:b8:e0:
b8:45:bb:8b:1c:91:08:7a:ad:95:a9:ad:2a:7e:14:
bc:60:de:96:9a:ad:63:1f:78:33:36:0b:c9:99:b3:
13:29:61:81:bf:54:43:f0:0c:58:45:c0:68:40:11:
91:2e:7a:16:bc:3e:33:da:be:50:1f:7c:69:4a:c4:
d3:7b:12:20:01:c3:bf:5d:3c:dc:b2:0e:74:be:be:
22:97:12:96:85:f8:c2:1c:7a:4f:41:b8:50:f8:91:
bc:07:d4:2d:f5:9a:06:a0:40:80:a2:b1:dd:29:e3:
24:a2:73:7b:a5:20:c3:7c:84:4c:13:b1:5d:cf:e1:
2c:8f:91:5b:78:72:0c:11:60:e6:be:6a:2b:fb:02:
59:01:7f:8a:fe:b4:e5:9b:e1:56:fc:51:75:9e:72:
1a:25:be:26:80:10:35:1b:ef:42:18:f9:4d:c3:7f:
9b:12:1e:9a:31:57:ec:a5:ba:d5:c1:7f:1a:f6:c7:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:26:9B:F9:9B:61:37:B9:85:D3:93:59:43:DD:58:99:E5:7F:F3:6C
X509v3 Authority Key Identifier:
keyid:AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:31:40:c0:d8:82:44:f0:7e:3f:7d:47:72:6b:aa:2e:3a:d1:
1e:c9:98:8f:36:24:57:35:30:81:b8:0b:e1:49:56:ad:df:2f:
13:77:ba:ce:97:f4:87:8f:86:92:48:14:55:10:45:50:de:62:
6c:66:0b:ed:a5:24:0d:fc:c7:41:db:2d:8c:28:c8:f3:8c:5c:
80:5a:93:38:09:6b:ae:ba:b7:a2:63:8c:7d:ad:1c:7f:f6:4d:
fa:7c:0c:ee:9d:89:08:04:7d:77:2a:c1:65:81:5e:71:15:13:
87:89:27:00:ce:b6:4e:e5:ea:9f:62:fa:b0:dd:94:7a:6d:9d:
cb:72:22:a6:07:c2:0e:0f:61:ad:e2:2a:38:0e:8e:20:49:d5:
a5:3c:ff:a3:51:f0:4a:d5:0d:92:a3:d7:0c:0d:61:d1:a0:08:
23:28:1a:89:a4:38:60:92:cd:1b:53:1d:b8:c6:39:4f:46:d8:
0f:93:8a:6b:f3:3f:f5:7d:67:70:8e:b2:8c:49:3f:1b:64:f5:
a7:f1:39:71:a9:ce:68:bc:5f:b9:08:48:94:81:e6:21:c0:d3:
d3:99:15:9d:72:c6:5b:80:c1:1a:80:fe:a6:3d:00:05:d6:71:
5d:b2:cc:71:0b:de:1f:4c:bf:c8:56:31:b5:b2:f4:a6:04:7a:
0b:9c:d1:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoPbyousUV+aXKfaZzJzZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjk0OTQyNjZhMzg3MTkwNDRkODI5YTRhMGE4ZjE3YTQw
NzA0ZTgwHhcNMjUwOTA3MTAwMjU1WhcNMjUwOTA4MTAwMjU1WjAzMTEwLwYDVQQD
EyhmMDI2OWJmOTliNjEzN2I5ODVkMzkzNTk0M2RkNTg5OWU1N2ZmMzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT1/hgEZ6w15qNgPMd0eLMWBnhS1
BsDUQVWV/+HJ8GS+b/LQPtkQZ+djBioHZvMr/qfdq6Sqjd4NB5zkNOnoiwM00gy9
3AksuOC4RbuLHJEIeq2Vqa0qfhS8YN6Wmq1jH3gzNgvJmbMTKWGBv1RD8AxYRcBo
QBGRLnoWvD4z2r5QH3xpSsTTexIgAcO/XTzcsg50vr4ilxKWhfjCHHpPQbhQ+JG8
B9Qt9ZoGoECAorHdKeMkonN7pSDDfIRME7Fdz+Esj5FbeHIMEWDmvmor+wJZAX+K
/rTlm+FW/FF1nnIaJb4mgBA1G+9CGPlNw3+bEh6aMVfspbrVwX8a9sfpxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAmm/mbYTe5hdOTWUPdWJnlf/NsMB8GA1UdIwQY
MBaAFK65SUJmo4cZBE2CmkoKjxekBwToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2FkYWItODA1NS00Nzg1LThkZjUt
MmE3YjU4YmRmOTQ1LzEvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lN2FkYWItODA1NS00Nzg1LThkZjUtMmE3YjU4YmRmOTQ1
LzEvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzFAwNiC
RPB+P31HcmuqLjrRHsmYjzYkVzUwgbgL4UlWrd8vE3e6zpf0h4+GkkgUVRBFUN5i
bGYL7aUkDfzHQdstjCjI84xcgFqTOAlrrrq3omOMfa0cf/ZN+nwM7p2JCAR9dyrB
ZYFecRUTh4knAM62TuXqn2L6sN2Uem2dy3IipgfCDg9hreIqOA6OIEnVpTz/o1Hw
StUNkqPXDA1h0aAIIygaiaQ4YJLNG1MduMY5T0bYD5OKa/M/9X1ncI6yjEk/G2T1
p/E5canOaLxfuQhIlIHmIcDT05kVnXLGW4DBGoD+pj0ABdZxXbLMcQveH0y/yFYx
tbL0pgR6C5zR1Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:58 2025 by rpki-client