Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File: rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier: IRsDPw0Lu3LPE9xl69HhQoZg99Rw1g6sa1V4gqwYs2s=
Subject key identifier: C3:41:87:67:5A:DA:C3:DB:AC:63:53:74:7D:43:B6:D9:42:DB:B8:CC
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer: /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial: 019922C38CF93941D3A01B4EAE70AA667EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number: 156D
Signing time: Sun 07 Sep 2025 06:01:04 +0000
Manifest this update: Sun 07 Sep 2025 06:01:04 +0000
Manifest next update: Mon 08 Sep 2025 06:01:04 +0000
Files and hashes: 1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: UXrPbi1krwidJV56HQfKzCgWYM/3bVAaoF/b25Cz2FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:8c:f9:39:41:d3:a0:1b:4e:ae:70:aa:66:7e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Validity
Not Before: Sep 7 06:01:04 2025 GMT
Not After : Sep 8 06:01:04 2025 GMT
Subject: CN=c34187675adac3dbac6353747d43b6d942dbb8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:7f:de:20:8c:d5:b3:07:23:51:38:3d:10:
91:91:cd:8d:75:7b:72:5f:6d:90:45:dc:20:9f:96:
34:bb:20:45:6e:8b:51:c1:b7:c2:95:17:67:0e:88:
e3:66:03:80:c9:b3:e3:00:06:23:f8:da:4a:d0:0c:
ed:e9:98:76:1a:d8:ae:f3:cc:32:11:6a:8b:31:db:
04:d7:d1:76:10:f9:91:f9:b5:c1:a5:22:60:0e:52:
ed:af:5e:34:98:0c:32:63:d1:03:b9:5e:93:52:bc:
50:65:10:99:27:04:6b:a6:b7:a5:68:85:84:c9:a4:
a8:45:3e:b9:02:0c:04:c3:2b:82:64:16:26:1c:0b:
b0:65:40:5f:71:9c:aa:42:15:11:38:7e:58:ed:d4:
07:ea:67:53:66:2e:fa:35:46:41:93:b5:14:a2:1d:
b2:10:70:2c:19:9d:80:08:9b:c3:d0:80:8f:9a:45:
e1:2b:57:9b:f9:a7:4e:16:ae:21:33:d7:1a:82:06:
d6:8e:79:ba:93:42:4e:d1:b5:51:3f:60:9f:d0:6b:
71:0c:a0:21:21:69:0b:10:8f:33:8a:5a:8d:f5:3b:
a5:64:98:c1:84:f2:49:ae:88:4f:81:7c:a9:8f:14:
44:72:b4:fc:a4:07:27:2e:56:fe:3b:d4:cb:2a:16:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:41:87:67:5A:DA:C3:DB:AC:63:53:74:7D:43:B6:D9:42:DB:B8:CC
X509v3 Authority Key Identifier:
keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:87:e9:07:55:2f:5e:d1:f9:b0:b7:ad:b8:80:dc:0e:ec:ee:
3e:f6:c4:95:0f:62:f6:d3:15:89:d4:fd:dc:94:ef:b9:d2:7e:
6d:3e:86:66:17:5f:ca:a1:00:66:41:fd:17:bb:bc:69:a6:65:
6d:40:b1:d9:23:12:50:88:20:d6:55:d6:42:81:be:de:99:3d:
60:e1:e4:b2:41:39:05:68:33:04:60:ca:ef:4b:45:3f:89:b3:
08:1b:5c:e4:b1:06:de:2e:34:f8:01:bb:7e:04:8a:ff:b0:84:
0b:e1:c1:d7:2b:24:2e:fc:7f:2b:0c:35:6a:d2:e7:62:bf:e4:
f0:c7:9b:76:c3:70:c3:bf:0f:93:e2:bd:89:fa:6d:d4:1b:ef:
f5:f7:07:90:79:6b:6e:b0:8f:80:d1:6f:c2:f7:9b:b3:84:2c:
d2:42:39:92:e7:26:6e:cf:c7:2d:56:e2:51:5a:63:f6:04:9a:
42:23:3e:c8:7a:07:36:db:8a:d7:81:3a:31:e6:ce:00:44:11:
98:16:24:73:73:b1:21:c3:c4:c3:aa:3b:de:be:c5:cb:ce:5c:
a4:e4:47:b4:67:a5:86:f0:a5:11:db:6c:f8:30:6d:b1:28:36:
a6:c6:fd:44:42:02:a7:83:56:43:70:8c:96:d9:cc:e5:e8:c6:
db:ca:be:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw4z5OUHToBtOrnCqZn6zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNlODI2ZTdlNDJlZGRkNjlkZmFkM2E1OWE5YjlhYTRl
MjgxODMwHhcNMjUwOTA3MDYwMTA0WhcNMjUwOTA4MDYwMTA0WjAzMTEwLwYDVQQD
EyhjMzQxODc2NzVhZGFjM2RiYWM2MzUzNzQ3ZDQzYjZkOTQyZGJiOGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnN/3iCM1bMHI1E4PRCRkc2NdXty
X22QRdwgn5Y0uyBFbotRwbfClRdnDojjZgOAybPjAAYj+NpK0Azt6Zh2Gtiu88wy
EWqLMdsE19F2EPmR+bXBpSJgDlLtr140mAwyY9EDuV6TUrxQZRCZJwRrprelaIWE
yaSoRT65AgwEwyuCZBYmHAuwZUBfcZyqQhUROH5Y7dQH6mdTZi76NUZBk7UUoh2y
EHAsGZ2ACJvD0ICPmkXhK1eb+adOFq4hM9caggbWjnm6k0JO0bVRP2Cf0GtxDKAh
IWkLEI8zilqN9TulZJjBhPJJrohPgXypjxREcrT8pAcnLlb+O9TLKhYl9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNBh2da2sPbrGNTdH1DttlC27jMMB8GA1UdIwQY
MBaAFK0s6Cbn5C7d1p3606Wam5qk4oGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzct
YTgzYThkNTMzMjc1LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzctYTgzYThkNTMzMjc1
LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJofpB1Uv
XtH5sLetuIDcDuzuPvbElQ9i9tMVidT93JTvudJ+bT6GZhdfyqEAZkH9F7u8aaZl
bUCx2SMSUIgg1lXWQoG+3pk9YOHkskE5BWgzBGDK70tFP4mzCBtc5LEG3i40+AG7
fgSK/7CEC+HB1yskLvx/Kww1atLnYr/k8MebdsNww78Pk+K9ifpt1Bvv9fcHkHlr
brCPgNFvwvebs4Qs0kI5kucmbs/HLVbiUVpj9gSaQiM+yHoHNtuK14E6MebOAEQR
mBYkc3OxIcPEw6o73r7Fy85cpORHtGelhvClEdts+DBtsSg2psb9REICp4NWQ3CM
ltnM5ejG28q+gg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:28 2025 by rpki-client