Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: MTPX0B0UZEROLkTSLKptF5OZ9dfyZJwa1Zw65yOpxq8=
Subject key identifier: 92:97:C9:97:0B:39:78:A8:88:B6:68:5F:94:BE:A7:54:24:8F:C6:C6
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 019921B130D249C7C5CB42D068CDC9BBA10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 094A
Signing time: Sun 07 Sep 2025 01:01:24 +0000
Manifest this update: Sun 07 Sep 2025 01:01:24 +0000
Manifest next update: Mon 08 Sep 2025 01:01:24 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: iqcb2T+FdU/VfXbmsye9W7UMv9iqEMnrVivjwIgvN3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:30:d2:49:c7:c5:cb:42:d0:68:cd:c9:bb:a1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Sep 7 01:01:24 2025 GMT
Not After : Sep 8 01:01:24 2025 GMT
Subject: CN=9297c9970b3978a888b6685f94bea754248fc6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:bf:6f:5f:89:d7:97:71:b5:58:f3:56:27:
19:5e:c8:f6:b3:9b:61:c3:cc:99:0b:d2:3a:9b:ff:
c1:d1:4b:87:ab:3c:8b:48:bd:c3:2e:f5:05:6a:f1:
5d:9e:46:b7:03:fb:96:32:5e:88:3e:a8:1c:40:f1:
59:9e:8b:61:95:85:10:f2:ea:61:83:42:c0:55:fe:
99:87:4a:a7:d7:f6:78:b1:18:66:38:9c:e3:4e:11:
28:11:ad:25:b1:ef:c0:3c:5a:18:a1:da:ea:16:80:
be:3a:b2:01:9b:96:10:71:ad:b0:ca:64:8e:f9:87:
e3:bb:5b:89:51:3c:79:40:8e:65:de:14:de:fc:fc:
8e:06:47:41:71:4f:f7:33:61:a8:37:2b:6b:68:4d:
5a:fc:03:16:14:da:96:22:aa:28:02:4d:01:75:c7:
6f:36:da:10:60:a6:7e:b7:43:71:08:74:26:70:19:
2e:00:81:34:a6:e8:e1:42:84:61:30:ce:9c:68:9b:
12:1e:62:b0:12:e2:44:49:b4:8b:93:df:23:1b:54:
d0:2e:53:13:40:5d:f0:63:9d:b2:53:9b:2d:82:d1:
b6:01:5d:f9:6e:47:5c:06:a4:05:95:db:e2:ea:ec:
95:ca:14:f4:65:b2:92:65:b2:ab:7e:13:ac:43:7e:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:97:C9:97:0B:39:78:A8:88:B6:68:5F:94:BE:A7:54:24:8F:C6:C6
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:96:f4:b0:5b:5d:17:b3:dc:e3:2b:33:02:8c:68:ad:53:f3:
2d:4b:f0:51:cc:cb:e2:46:3b:54:d3:26:e3:b6:76:dc:ae:5a:
c2:6a:9e:8e:b1:64:d4:96:bf:c2:63:38:d0:ae:94:0e:1a:48:
c2:dc:e8:ca:9b:9d:a0:71:79:8d:6a:c8:1d:74:a4:af:5b:ff:
df:1f:e7:4a:e5:14:d7:a9:54:74:19:04:33:f8:bd:7f:15:86:
28:e7:07:d6:59:2c:4a:9c:a6:ca:2d:d0:74:01:d2:9d:ab:1d:
2c:d4:c9:6e:9b:1b:3f:39:79:69:de:02:15:64:bc:48:25:69:
2f:93:45:eb:86:f1:8e:80:fd:59:6b:c9:c7:55:87:79:96:2b:
34:47:84:06:4d:15:bb:ae:f4:ba:1b:53:8e:0b:31:b6:d2:64:
1e:af:06:69:09:89:61:2b:d1:89:95:7a:58:3c:f3:7f:c6:73:
76:16:77:58:39:b1:f0:26:74:88:e2:0a:f1:9f:73:06:e3:d6:
30:5f:47:e6:0c:e3:05:38:fc:96:14:d1:a9:5b:39:5d:67:31:
f6:d5:0d:5a:09:8e:c6:de:1f:5f:cb:89:29:83:5a:51:48:88:
a1:cf:05:d0:5d:51:41:06:2e:65:72:31:ab:30:d6:79:34:d2:
77:bc:f3:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsTDSScfFy0LQaM3Ju6EOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjYxMzBkOTlhZjkzMjA3NzVhZDYwYjBmNGM5ODllM2U1
OTc3YzkwHhcNMjUwOTA3MDEwMTI0WhcNMjUwOTA4MDEwMTI0WjAzMTEwLwYDVQQD
Eyg5Mjk3Yzk5NzBiMzk3OGE4ODhiNjY4NWY5NGJlYTc1NDI0OGZjNmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscy/b1+J15dxtVjzVicZXsj2s5th
w8yZC9I6m//B0UuHqzyLSL3DLvUFavFdnka3A/uWMl6IPqgcQPFZnothlYUQ8uph
g0LAVf6Zh0qn1/Z4sRhmOJzjThEoEa0lse/APFoYodrqFoC+OrIBm5YQca2wymSO
+Yfju1uJUTx5QI5l3hTe/PyOBkdBcU/3M2GoNytraE1a/AMWFNqWIqooAk0Bdcdv
NtoQYKZ+t0NxCHQmcBkuAIE0pujhQoRhMM6caJsSHmKwEuJESbSLk98jG1TQLlMT
QF3wY52yU5stgtG2AV35bkdcBqQFldvi6uyVyhT0ZbKSZbKrfhOsQ35/sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKXyZcLOXioiLZoX5S+p1Qkj8bGMB8GA1UdIwQY
MBaAFBX2Ew2Zr5Mgd1rWCw9MmJ4+WXfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMDY0ZTctMThlNS00YjdlLWFhMWEt
MWY4Njc2ZjRjMTdiLzEvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMDY0ZTctMThlNS00YjdlLWFhMWEtMWY4Njc2ZjRjMTdi
LzEvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5b0sFtd
F7Pc4yszAoxorVPzLUvwUczL4kY7VNMm47Z23K5awmqejrFk1Ja/wmM40K6UDhpI
wtzoypudoHF5jWrIHXSkr1v/3x/nSuUU16lUdBkEM/i9fxWGKOcH1lksSpymyi3Q
dAHSnasdLNTJbpsbPzl5ad4CFWS8SCVpL5NF64bxjoD9WWvJx1WHeZYrNEeEBk0V
u670uhtTjgsxttJkHq8GaQmJYSvRiZV6WDzzf8ZzdhZ3WDmx8CZ0iOIK8Z9zBuPW
MF9H5gzjBTj8lhTRqVs5XWcx9tUNWgmOxt4fX8uJKYNaUUiIoc8F0F1RQQYuZXIx
qzDWeTTSd7zzjg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:04 2025 by rpki-client