Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier: rXk4JkElRqSv7wNvBXe3uc1ZnTvaCWJcLa0Za5mmRac=
Subject key identifier: 56:36:67:1A:F7:36:30:98:70:C0:00:6E:5D:4A:EB:52:73:78:AB:D9
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 0199239F84EE6D638AF1FDCFD5C2238505A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number: 0AD1
Signing time: Sun 07 Sep 2025 10:01:20 +0000
Manifest this update: Sun 07 Sep 2025 10:01:20 +0000
Manifest next update: Mon 08 Sep 2025 10:01:20 +0000
Files and hashes: 1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: CabgLxFsZAUnZ65+V5NbA9NlVqXJ7i674XNGoMWc1YA=)
2: hjbzdQG0z4fmkgxJ5yW_AFN2Z3I.roa (hash: FIaXEpRqjmfrs5VrZ6nFL+BtqxgLq2lRPch8+CMAMWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:84:ee:6d:63:8a:f1:fd:cf:d5:c2:23:85:05:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Sep 7 10:01:20 2025 GMT
Not After : Sep 8 10:01:20 2025 GMT
Subject: CN=5636671af736309870c0006e5d4aeb527378abd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:29:ff:76:e5:f5:6d:28:5b:75:46:33:67:
11:94:b5:e4:0d:d6:9b:c7:44:49:66:dc:bb:3b:85:
bf:c5:8a:b4:1f:11:5d:b2:06:6c:ca:7b:57:4d:db:
8a:20:1b:5d:a5:f7:dd:e4:ca:a7:4e:4d:c4:77:9f:
af:2f:3e:61:86:be:03:f5:af:fb:e3:a6:06:46:d5:
9c:c3:ee:6e:e7:08:09:4e:ee:79:cd:92:9c:69:69:
5e:07:2e:f7:4a:8e:7e:33:72:25:29:20:1b:e4:bb:
cf:ac:97:90:66:17:00:7e:d0:42:5d:55:e3:db:e7:
9b:d6:11:bc:27:0a:9e:17:64:ee:8b:ae:04:c0:fc:
b7:4a:8b:28:ae:b3:d3:8c:70:48:02:a9:69:aa:52:
d9:de:00:5b:43:52:61:82:c5:53:3f:3a:ab:01:f6:
3e:1e:ca:5b:2b:83:86:d7:1d:7e:08:92:98:42:0a:
ae:8d:59:ad:1f:38:26:ac:a6:82:42:8c:1a:e9:32:
dc:3b:fe:24:bd:36:c5:55:95:6c:c2:a9:a6:f4:91:
13:43:bf:aa:e1:58:dd:06:53:60:3a:c1:61:67:93:
43:9d:7b:0a:fb:6e:e3:c4:98:8d:1d:3a:2a:da:e7:
78:e1:70:f6:51:06:3a:12:0a:77:86:ac:bd:8a:67:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:36:67:1A:F7:36:30:98:70:C0:00:6E:5D:4A:EB:52:73:78:AB:D9
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b9:fc:6e:62:85:d3:c3:55:83:3a:cf:77:93:64:a7:21:2e:
72:3e:77:5d:0b:36:73:89:d5:a4:35:0b:ee:5e:52:97:f0:1e:
ee:40:59:dc:2a:0f:b5:89:5b:3b:24:32:98:c1:f2:c6:aa:1c:
2b:55:76:40:13:0d:00:52:e4:29:f4:55:c7:1a:2a:48:29:fb:
d9:c2:5f:fd:43:4c:86:04:9f:d8:ee:34:36:89:5f:20:2c:06:
ca:e5:f9:26:73:4d:ce:22:95:d3:ac:38:9b:86:36:4e:c4:9c:
be:b5:8c:99:14:69:9e:4d:d2:ee:8c:2c:98:50:2e:11:0c:7e:
af:1a:bc:1f:88:8b:5d:6b:83:66:ce:52:6e:08:38:43:b9:8a:
b7:b7:e0:57:8d:d3:81:2c:da:ae:31:a4:89:d7:41:84:b5:d0:
8b:8b:09:03:c2:01:b3:5e:c5:00:ae:48:91:cc:f1:17:3c:75:
62:05:28:d2:f7:2e:c8:5c:b1:0a:67:99:96:83:38:3c:29:88:
e3:c5:c1:ec:03:84:00:a1:a0:b6:37:c9:2e:68:3c:7c:7a:5e:
07:b5:7c:e1:f1:ab:0c:d3:2c:20:82:40:fa:49:0e:51:b0:a9:
5d:d4:55:7e:b6:1d:f8:d0:59:6b:3a:57:de:23:2f:eb:87:ad:
54:d8:e2:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn4TubWOK8f3P1cIjhQWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDE5ZmRhZTljNTNkOGQyOGIxZTQxY2E5MTM5YzMzNTU2
YmE2MjUwHhcNMjUwOTA3MTAwMTIwWhcNMjUwOTA4MTAwMTIwWjAzMTEwLwYDVQQD
Eyg1NjM2NjcxYWY3MzYzMDk4NzBjMDAwNmU1ZDRhZWI1MjczNzhhYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU4p/3bl9W0oW3VGM2cRlLXkDdab
x0RJZty7O4W/xYq0HxFdsgZsyntXTduKIBtdpffd5MqnTk3Ed5+vLz5hhr4D9a/7
46YGRtWcw+5u5wgJTu55zZKcaWleBy73So5+M3IlKSAb5LvPrJeQZhcAftBCXVXj
2+eb1hG8JwqeF2Tui64EwPy3SosorrPTjHBIAqlpqlLZ3gBbQ1JhgsVTPzqrAfY+
HspbK4OG1x1+CJKYQgqujVmtHzgmrKaCQowa6TLcO/4kvTbFVZVswqmm9JETQ7+q
4VjdBlNgOsFhZ5NDnXsK+27jxJiNHToq2ud44XD2UQY6Egp3hqy9imfblwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY2Zxr3NjCYcMAAbl1K61JzeKvZMB8GA1UdIwQY
MBaAFBHRn9rpxT2NKLHkHKkTnDNVa6YlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUt
MWNjNWZkMjU0NGU5LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUtMWNjNWZkMjU0NGU5
LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbn8bmKF
08NVgzrPd5NkpyEucj53XQs2c4nVpDUL7l5Sl/Ae7kBZ3CoPtYlbOyQymMHyxqoc
K1V2QBMNAFLkKfRVxxoqSCn72cJf/UNMhgSf2O40NolfICwGyuX5JnNNziKV06w4
m4Y2TsScvrWMmRRpnk3S7owsmFAuEQx+rxq8H4iLXWuDZs5Sbgg4Q7mKt7fgV43T
gSzarjGkiddBhLXQi4sJA8IBs17FAK5IkczxFzx1YgUo0vcuyFyxCmeZloM4PCmI
48XB7AOEAKGgtjfJLmg8fHpeB7V84fGrDNMsIIJA+kkOUbCpXdRVfrYd+NBZazpX
3iMv64etVNjimQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:32:59 2025 by rpki-client