Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: OcP4hf+cA1r2OjtwMynV5ANFwdwQVhT10FUFOTLPKy0=
Subject key identifier: 9D:0A:29:5D:4D:B9:AD:7A:D8:39:5E:64:51:32:82:4D:31:B6:8F:08
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 019921E7E3AA23CAE6EA46A73D6A0C537F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 0F65
Signing time: Sun 07 Sep 2025 02:01:09 +0000
Manifest this update: Sun 07 Sep 2025 02:01:09 +0000
Manifest next update: Mon 08 Sep 2025 02:01:09 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: qyQW7WxVgDJIF89KrFYtBL7/gNhdQkTkSzibkaQZyww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e3:aa:23:ca:e6:ea:46:a7:3d:6a:0c:53:7f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Sep 7 02:01:09 2025 GMT
Not After : Sep 8 02:01:09 2025 GMT
Subject: CN=9d0a295d4db9ad7ad8395e645132824d31b68f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:44:08:b0:83:d1:ad:06:58:c4:bf:b7:5f:b1:
fa:0f:9d:d6:d0:f9:3e:b0:17:57:a7:9f:a9:97:75:
13:d1:31:eb:71:b9:5d:a5:80:5d:92:e7:2a:83:09:
94:4a:9c:11:ee:e2:49:e0:a7:08:48:04:50:03:aa:
22:31:63:e5:b5:df:c3:11:7a:21:58:81:a9:7e:7c:
99:3c:37:3a:3e:65:ea:d6:78:d4:27:78:66:ed:07:
52:08:05:67:c1:a8:9f:cf:2c:d1:15:c0:f2:a9:e5:
27:52:ef:c5:ed:43:42:f2:c9:65:ef:0d:b1:28:10:
23:0f:d8:fa:e1:aa:1e:e9:88:40:a3:cd:ed:a4:71:
bd:1e:2a:4a:33:6f:f0:c8:2c:fb:e8:43:56:cc:76:
c5:91:ff:61:87:33:75:a1:5c:28:48:d1:68:cc:e1:
b2:03:b7:74:2e:f0:74:d6:b0:7b:cc:20:0f:36:f6:
74:b5:17:5f:78:6c:d2:84:8b:a0:22:4d:d4:f0:3d:
e6:86:0b:fe:aa:f0:ab:c6:bf:2e:0c:4a:89:4d:bd:
9f:ca:a1:ec:1e:d4:7e:ef:7f:64:68:33:fc:9e:ea:
4e:80:1e:af:85:dc:f5:a2:bb:01:80:f3:92:84:2a:
64:73:8c:5d:56:1a:85:d8:3e:71:a4:43:ff:77:cd:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0A:29:5D:4D:B9:AD:7A:D8:39:5E:64:51:32:82:4D:31:B6:8F:08
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e5:96:d1:a4:53:bc:34:b4:8e:1f:32:17:89:e0:dc:6e:d8:
3e:f0:5c:fa:54:fb:4f:30:e4:f9:4f:48:60:90:29:23:a3:04:
9a:72:50:51:71:10:67:5e:a1:3a:83:01:1f:b4:6e:bf:46:c7:
a5:44:e9:6d:21:b3:77:0d:bc:a4:5e:8d:4d:dd:0e:eb:31:06:
87:1e:f6:71:66:cf:5d:c0:c6:a6:ae:6d:49:39:95:d4:94:b2:
63:52:ac:32:80:85:2f:49:f2:7c:07:f7:1d:7c:25:47:69:66:
89:46:5e:58:50:8b:5b:ff:53:8d:a6:80:d7:23:53:8a:e3:2f:
d9:6a:18:16:0b:54:16:b8:3c:6c:3c:5d:11:76:e8:ea:26:7d:
fd:d5:84:0d:e1:ab:39:8e:d3:22:3b:79:cf:d7:2c:6b:31:8d:
64:53:d1:91:76:9c:31:60:8d:bd:73:5d:c5:c7:6e:34:46:63:
54:fc:d3:87:dd:de:0c:a9:04:9d:87:8b:7c:62:ee:bd:23:1f:
83:e3:9c:d0:22:50:50:c2:6d:34:d2:52:e1:64:29:ed:e1:29:
74:fb:21:14:36:8f:6d:c1:98:c8:81:4d:2b:c1:e0:19:d7:fd:
5b:11:64:0f:b5:98:b9:dc:c6:7d:ef:c2:79:b2:7a:d6:54:d2:
a5:84:ea:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5+OqI8rm6kanPWoMU39BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzJlYjhmODAxNWViMWJjMjllYTMxNjJmODNlNmFjZWRi
YjQyN2UwHhcNMjUwOTA3MDIwMTA5WhcNMjUwOTA4MDIwMTA5WjAzMTEwLwYDVQQD
Eyg5ZDBhMjk1ZDRkYjlhZDdhZDgzOTVlNjQ1MTMyODI0ZDMxYjY4ZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UQIsIPRrQZYxL+3X7H6D53W0Pk+
sBdXp5+pl3UT0THrcbldpYBdkucqgwmUSpwR7uJJ4KcISARQA6oiMWPltd/DEXoh
WIGpfnyZPDc6PmXq1njUJ3hm7QdSCAVnwaifzyzRFcDyqeUnUu/F7UNC8sll7w2x
KBAjD9j64aoe6YhAo83tpHG9HipKM2/wyCz76ENWzHbFkf9hhzN1oVwoSNFozOGy
A7d0LvB01rB7zCAPNvZ0tRdfeGzShIugIk3U8D3mhgv+qvCrxr8uDEqJTb2fyqHs
HtR+739kaDP8nupOgB6vhdz1orsBgPOShCpkc4xdVhqF2D5xpEP/d82/ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0KKV1Nua162DleZFEygk0xto8IMB8GA1UdIwQY
MBaAFHRy64+AFesbwp6jFi+D5qztu0J+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82NTVlMjgtMzM5MS00MGE3LTg4Y2Et
MWJmZmRhMzgyZWJlLzEvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82NTVlMjgtMzM5MS00MGE3LTg4Y2EtMWJmZmRhMzgyZWJl
LzEvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+WW0aRT
vDS0jh8yF4ng3G7YPvBc+lT7TzDk+U9IYJApI6MEmnJQUXEQZ16hOoMBH7Ruv0bH
pUTpbSGzdw28pF6NTd0O6zEGhx72cWbPXcDGpq5tSTmV1JSyY1KsMoCFL0nyfAf3
HXwlR2lmiUZeWFCLW/9TjaaA1yNTiuMv2WoYFgtUFrg8bDxdEXbo6iZ9/dWEDeGr
OY7TIjt5z9csazGNZFPRkXacMWCNvXNdxcduNEZjVPzTh93eDKkEnYeLfGLuvSMf
g+Oc0CJQUMJtNNJS4WQp7eEpdPshFDaPbcGYyIFNK8HgGdf9WxFkD7WYudzGfe/C
ebJ61lTSpYTqew==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:14 2025 by rpki-client