Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier: d33qM0eEvO0wvLka/cTJNqcgSFvifjF+nQEPU5Bdykg=
Subject key identifier: 40:18:3F:1E:37:68:06:DA:E9:59:79:AC:DD:9E:99:D5:47:51:0B:18
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer: /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial: 0199239F5DF12CD7F6E1204D4D2C9490E9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:01:10 +0000
Manifest this update: Sun 07 Sep 2025 10:01:10 +0000
Manifest next update: Mon 08 Sep 2025 10:01:10 +0000
Files and hashes: 1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: x5dNFozM0N9mveKPOH6v75F9q9A9phwV9SoNYy5Na7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:5d:f1:2c:d7:f6:e1:20:4d:4d:2c:94:90:e9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Validity
Not Before: Sep 7 10:01:10 2025 GMT
Not After : Sep 8 10:01:10 2025 GMT
Subject: CN=40183f1e376806dae95979acdd9e99d547510b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:8e:ca:3d:bc:12:36:40:b5:11:1a:a9:97:
da:6a:ba:0e:a4:ab:ab:b1:bd:f8:0a:16:7a:00:dd:
f0:42:5f:dd:0c:d4:d3:be:84:af:f5:29:69:98:74:
4d:04:73:ba:1a:90:3f:3b:45:7b:68:72:91:71:61:
3c:f1:e4:93:71:8d:6e:6b:9f:3f:54:f2:e3:81:7f:
2d:ba:a8:3b:1c:ea:88:a7:46:0c:26:68:95:45:8b:
30:13:85:73:91:14:e4:bc:eb:93:20:dd:bf:6b:ab:
ad:4d:0e:2e:51:f9:0a:80:85:17:23:68:87:bb:71:
3b:d3:a5:9c:e2:63:11:ea:e1:1f:10:94:c8:91:10:
ae:06:58:71:0e:3b:df:15:7a:79:97:aa:c5:79:7b:
6a:02:54:16:90:81:8f:61:69:25:ea:5c:2e:c0:c1:
f0:65:d2:10:d2:be:1d:46:4e:27:b5:4e:25:b7:fb:
38:9c:b6:56:2d:a8:84:54:1b:5f:ac:da:3b:fb:de:
db:e9:62:ba:04:14:10:7e:f5:42:d9:69:1d:4e:8e:
38:50:10:0e:8f:19:7f:47:02:47:41:b2:f6:1c:bf:
53:70:f6:59:a8:63:2e:7e:79:a1:56:2d:ee:bc:9b:
c3:ab:b5:b1:2f:67:e7:49:63:2a:d9:66:e7:7b:96:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:18:3F:1E:37:68:06:DA:E9:59:79:AC:DD:9E:99:D5:47:51:0B:18
X509v3 Authority Key Identifier:
keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:75:ca:82:ab:ce:6d:c0:ef:eb:28:e7:6f:dc:64:ea:7e:fb:
59:93:5d:dd:5e:81:35:47:a7:c0:5e:f8:e8:b0:b2:8d:99:4d:
d3:15:5b:fd:52:b9:f4:f1:60:1f:9d:71:1d:c3:bd:60:9a:25:
75:e3:b5:6c:c1:1f:43:c0:59:96:e2:c6:18:45:19:6d:bc:2a:
b6:8e:8d:d4:58:66:74:b5:1c:0f:d9:77:a1:45:1c:41:a7:c5:
29:31:29:58:6d:fc:0a:8f:6b:c5:97:14:a5:b5:d1:d7:3d:37:
2c:36:8a:6c:05:5c:36:15:a2:1f:0c:7a:77:73:b0:a9:9c:8b:
92:00:d4:88:72:bc:b1:d9:99:4b:62:8a:8b:09:7c:a0:d9:5e:
e2:97:69:10:32:a3:f9:4f:6e:9a:9d:6c:52:1f:f4:56:62:de:
e9:cc:eb:35:86:a0:16:dd:71:ad:9c:11:a8:bc:12:7e:76:9f:
3f:f3:20:06:4c:2f:c9:b0:e6:bc:eb:06:71:1a:a9:2c:b9:07:
2c:20:7e:af:e0:50:b2:32:f5:d0:bc:6a:99:c9:a0:ba:10:73:
7c:c0:9b:34:73:a5:df:f3:e1:b1:83:2f:d2:6d:34:99:ca:7b:
73:4d:c9:7d:d8:10:c4:dd:43:f0:d0:86:90:23:66:1d:54:58:
47:aa:c7:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn13xLNf24SBNTSyUkOnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NGIzYWI5OWY4NjQ0YWNkNWU2OWE5YTVmMzg1NDZjZGNj
NmU5NzQwHhcNMjUwOTA3MTAwMTEwWhcNMjUwOTA4MTAwMTEwWjAzMTEwLwYDVQQD
Eyg0MDE4M2YxZTM3NjgwNmRhZTk1OTc5YWNkZDllOTlkNTQ3NTEwYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCyOyj28EjZAtREaqZfaaroOpKur
sb34ChZ6AN3wQl/dDNTTvoSv9SlpmHRNBHO6GpA/O0V7aHKRcWE88eSTcY1ua58/
VPLjgX8tuqg7HOqIp0YMJmiVRYswE4VzkRTkvOuTIN2/a6utTQ4uUfkKgIUXI2iH
u3E706Wc4mMR6uEfEJTIkRCuBlhxDjvfFXp5l6rFeXtqAlQWkIGPYWkl6lwuwMHw
ZdIQ0r4dRk4ntU4lt/s4nLZWLaiEVBtfrNo7+97b6WK6BBQQfvVC2WkdTo44UBAO
jxl/RwJHQbL2HL9TcPZZqGMufnmhVi3uvJvDq7WxL2fnSWMq2Wbne5brwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAYPx43aAba6Vl5rN2emdVHUQsYMB8GA1UdIwQY
MBaAFERLOrmfhkSs1eaaml84VGzcxul0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yODg0OWUtM2MyMy00YjdhLWI2ZmMt
ZDkxNGJiNzllZWRjLzEvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yODg0OWUtM2MyMy00YjdhLWI2ZmMtZDkxNGJiNzllZWRj
LzEvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXXKgqvO
bcDv6yjnb9xk6n77WZNd3V6BNUenwF746LCyjZlN0xVb/VK59PFgH51xHcO9YJol
deO1bMEfQ8BZluLGGEUZbbwqto6N1FhmdLUcD9l3oUUcQafFKTEpWG38Co9rxZcU
pbXR1z03LDaKbAVcNhWiHwx6d3OwqZyLkgDUiHK8sdmZS2KKiwl8oNle4pdpEDKj
+U9ump1sUh/0VmLe6czrNYagFt1xrZwRqLwSfnafP/MgBkwvybDmvOsGcRqpLLkH
LCB+r+BQsjL10LxqmcmguhBzfMCbNHOl3/PhsYMv0m00mcp7c03JfdgQxN1D8NCG
kCNmHVRYR6rHkA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:14 2025 by rpki-client