
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: 1f2uHhmVJ4d33VqfjPOfOmvgfCqUunTDW2DYf7puoTk=
Subject key identifier: 65:68:A0:17:22:78:BF:97:14:6E:07:3E:AE:66:ED:F9:BC:A9:BC:FE
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 019916BF745559078E18469FD99D8408A04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 1667
Signing time: Thu 04 Sep 2025 22:01:09 +0000
Manifest this update: Thu 04 Sep 2025 22:01:09 +0000
Manifest next update: Fri 05 Sep 2025 22:01:09 +0000
Files and hashes: 1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: 3fFDhvCbqqMT/4+jU9M++AqlnST9/bfS3aPfEFIJtCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:74:55:59:07:8e:18:46:9f:d9:9d:84:08:a0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Sep 4 22:01:09 2025 GMT
Not After : Sep 5 22:01:09 2025 GMT
Subject: CN=6568a0172278bf97146e073eae66edf9bca9bcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:8b:0b:30:35:a2:f2:d0:cb:cb:6a:37:5b:
af:6d:cc:b2:ed:00:8c:e9:e1:26:b5:03:b2:34:86:
c9:2d:10:15:d2:e9:1a:51:6c:b8:f1:71:b7:a5:69:
44:4b:20:ec:f9:81:e1:6a:c9:34:80:77:1a:dd:47:
d1:06:4c:a3:9b:22:76:c9:08:e7:6b:c3:de:c4:5d:
1f:79:cf:41:15:dc:56:52:e4:94:fd:af:b9:ec:0b:
39:7d:bc:a2:cc:38:94:ef:7c:d3:e8:8c:7a:48:86:
08:82:0d:e8:42:e2:7e:d4:3d:0a:f8:11:7d:36:3d:
37:b8:6e:91:db:e1:3d:55:31:5d:96:14:4c:31:80:
98:b7:50:4b:b7:4b:da:29:84:52:1f:8e:6b:18:5b:
77:8f:76:c0:f7:26:a0:f8:95:24:01:26:69:2d:5b:
74:9b:6d:47:e1:30:2c:25:ce:9a:22:6a:12:0b:ad:
12:bf:9c:8e:12:e6:41:4e:56:16:b7:09:9c:67:42:
2e:ba:02:2e:5f:1e:02:46:9e:50:38:8b:99:e3:c9:
f0:6c:67:45:14:3b:46:85:67:a6:e3:df:6a:41:39:
7c:6c:22:35:dd:99:7e:1d:ef:6b:6b:ec:5c:d6:3a:
79:66:15:6c:32:56:36:9b:4f:7d:b9:21:dc:0b:f7:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:A0:17:22:78:BF:97:14:6E:07:3E:AE:66:ED:F9:BC:A9:BC:FE
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ef:b0:ae:f7:c5:cf:91:a5:6e:4a:c0:8d:2c:8b:4c:14:d6:
20:6f:c9:4f:47:1a:70:ac:52:bf:53:91:5a:d5:90:bb:db:df:
f3:7e:97:73:b8:30:46:79:5e:ad:ab:a4:43:06:8a:c1:60:0a:
fe:36:e7:59:93:33:45:e4:68:24:53:97:7e:f0:20:55:ca:3b:
d2:d4:d4:4d:cc:8f:6c:ef:4b:22:57:67:7f:e1:2e:4d:a4:dc:
9c:3a:25:05:56:13:26:6f:df:fc:d8:af:82:e4:41:71:0c:b2:
71:19:52:41:0d:87:55:2e:53:62:2f:e4:a9:1a:c0:2a:3f:fe:
64:bb:0e:b1:b1:9a:54:7f:f1:62:1d:3a:96:48:c4:44:9e:7f:
07:2a:fd:7f:b3:4a:c8:f0:e2:e9:b1:71:c7:4b:1a:86:4d:31:
cf:53:79:df:42:d9:75:c3:a5:fd:68:64:4a:15:dd:e9:84:b6:
e2:59:2a:d1:e7:1a:58:12:3b:72:c4:61:ba:1a:cc:3e:44:fc:
7f:db:01:c5:8f:f0:75:89:42:be:3e:52:06:6a:80:76:32:93:
01:cc:8e:9c:2e:a0:65:71:61:f3:a4:c1:e8:32:e5:8b:34:7e:
03:7c:73:c0:74:8c:08:0b:05:34:91:bc:a6:a1:b3:75:fa:68:
ac:2d:c6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWv3RVWQeOGEaf2Z2ECKBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWYzODQ0MjkzYmFkNjUxZmZkODU3YzkxYWYwYmU1NjBh
ZWNkNjEwHhcNMjUwOTA0MjIwMTA5WhcNMjUwOTA1MjIwMTA5WjAzMTEwLwYDVQQD
Eyg2NTY4YTAxNzIyNzhiZjk3MTQ2ZTA3M2VhZTY2ZWRmOWJjYTliY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGSLCzA1ovLQy8tqN1uvbcyy7QCM
6eEmtQOyNIbJLRAV0ukaUWy48XG3pWlESyDs+YHhask0gHca3UfRBkyjmyJ2yQjn
a8PexF0fec9BFdxWUuSU/a+57As5fbyizDiU73zT6Ix6SIYIgg3oQuJ+1D0K+BF9
Nj03uG6R2+E9VTFdlhRMMYCYt1BLt0vaKYRSH45rGFt3j3bA9yag+JUkASZpLVt0
m21H4TAsJc6aImoSC60Sv5yOEuZBTlYWtwmcZ0IuugIuXx4CRp5QOIuZ48nwbGdF
FDtGhWem499qQTl8bCI13Zl+He9ra+xc1jp5ZhVsMlY2m099uSHcC/ewmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVooBcieL+XFG4HPq5m7fm8qbz+MB8GA1UdIwQY
MBaAFK/vOEQpO61lH/2FfJGvC+Vgrs1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iNGE0YzAtYzUzZi00NWJiLThlODUt
YTliNDYxNGYwNzQ0LzEvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iNGE0YzAtYzUzZi00NWJiLThlODUtYTliNDYxNGYwNzQ0
LzEvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxu+wrvfF
z5GlbkrAjSyLTBTWIG/JT0cacKxSv1ORWtWQu9vf836Xc7gwRnleraukQwaKwWAK
/jbnWZMzReRoJFOXfvAgVco70tTUTcyPbO9LIldnf+EuTaTcnDolBVYTJm/f/Niv
guRBcQyycRlSQQ2HVS5TYi/kqRrAKj/+ZLsOsbGaVH/xYh06lkjERJ5/Byr9f7NK
yPDi6bFxx0sahk0xz1N530LZdcOl/WhkShXd6YS24lkq0ecaWBI7csRhuhrMPkT8
f9sBxY/wdYlCvj5SBmqAdjKTAcyOnC6gZXFh86TB6DLlizR+A3xzwHSMCAsFNJG8
pqGzdfporC3GfQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:37 2025 by rpki-client