Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
File: aQqw79d1diHIbXtpx29gssP6w1Y.mft (raw, json)
Hash identifier: GJ1ixRpR65PxNC9hHh2su3cjofvNZ6ifbiiuIv+miLc=
Subject key identifier: 25:3F:E9:DE:78:F4:FE:28:52:8E:53:7A:5F:73:BD:A6:AD:F1:16:E0
Authority key identifier: 69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
Certificate issuer: /CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Certificate serial: 0199228C4CF426BC7C2F5356FCB298E7D984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
Manifest number: 03C0
Signing time: Sun 07 Sep 2025 05:00:44 +0000
Manifest this update: Sun 07 Sep 2025 05:00:44 +0000
Manifest next update: Mon 08 Sep 2025 05:00:44 +0000
Files and hashes: 1: aQqw79d1diHIbXtpx29gssP6w1Y.crl (hash: UelKWV69HoxCZHdSfe7/rWtofR6BkqEhwIeXr6Zs384=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:4c:f4:26:bc:7c:2f:53:56:fc:b2:98:e7:d9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Validity
Not Before: Sep 7 05:00:44 2025 GMT
Not After : Sep 8 05:00:44 2025 GMT
Subject: CN=253fe9de78f4fe28528e537a5f73bda6adf116e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:68:5b:88:d9:9f:93:ce:81:a2:45:35:b1:
6b:cc:9f:64:05:5b:9c:8b:ac:96:d2:e2:38:68:fe:
ec:50:04:b1:d3:b4:1f:44:4c:39:11:89:4c:29:5d:
69:b2:96:6b:b7:17:fb:3b:0a:c5:61:65:21:fe:8d:
44:60:83:b7:c6:82:6c:34:05:14:1f:07:7c:9d:78:
34:17:cb:a2:35:86:a3:ce:f7:db:92:ea:ef:92:30:
7e:03:da:2e:d6:b9:75:52:3a:d7:9b:5a:71:32:37:
fa:0f:1f:92:90:52:41:7e:a2:8c:7c:a0:6a:0e:b1:
2a:64:7a:45:1d:af:8d:6e:46:70:19:78:ef:08:30:
04:e0:98:ad:4e:a2:8e:2a:18:1c:b1:3a:dd:d9:12:
98:2a:70:83:2e:97:f0:f0:16:fe:7c:9c:35:ca:6f:
b4:c8:e1:ae:fe:f7:92:ed:94:54:96:73:eb:d8:f9:
47:27:86:78:fb:46:32:7a:4a:d6:68:e3:0f:11:0a:
1a:33:f3:48:44:6a:6e:8f:8e:a8:74:b8:89:75:59:
ab:0d:e1:b4:ee:6c:85:2c:8e:48:5e:cb:16:d0:f7:
93:10:c4:53:15:8c:ab:1c:60:ef:81:41:d0:6e:46:
72:bc:38:dd:6d:ac:c9:e0:20:68:21:7d:46:bd:df:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3F:E9:DE:78:F4:FE:28:52:8E:53:7A:5F:73:BD:A6:AD:F1:16:E0
X509v3 Authority Key Identifier:
keyid:69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c2:79:cf:dd:14:1b:2f:cb:c7:cf:3b:d6:eb:46:c0:94:f8:
e1:4a:35:82:10:d7:e2:f2:a2:d1:4b:f2:b4:0d:2b:09:e1:23:
bf:71:60:96:09:03:01:44:2d:83:54:71:f0:cc:b2:dc:99:58:
19:f9:f8:b0:fd:29:99:c8:30:de:4c:30:14:cc:f2:48:81:52:
c4:61:1f:83:76:06:f8:b2:fe:8f:2f:1f:6d:b4:5b:7b:23:1a:
d2:7c:04:7a:34:f4:94:25:cd:3b:5b:ad:74:00:75:a9:11:77:
34:6d:ce:6c:79:86:5a:6d:f7:47:3e:b9:e0:37:7e:0b:30:aa:
8e:81:d5:6d:09:e2:2f:25:c1:3a:6c:f3:67:a9:89:41:55:8b:
ef:d5:cb:42:9e:47:4e:02:a8:e2:69:fd:c7:f2:2b:a3:c7:99:
ba:a0:dc:d6:6e:f5:a7:16:27:b8:db:1f:18:e2:88:b1:72:12:
32:f1:53:50:f9:f9:e6:16:72:33:6b:be:2a:b9:88:a3:a9:ad:
e7:1d:1d:89:11:70:29:93:1e:8a:5e:93:ae:31:42:4a:40:01:
a2:5f:39:21:9d:21:dc:90:7b:c9:05:35:0d:b0:8f:f0:e7:f3:
e3:e2:0a:ad:5d:fb:49:25:fe:00:c3:aa:73:9b:3c:ac:22:28:
c2:d5:8f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijEz0Jrx8L1NW/LKY59mEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGFiMGVmZDc3NTc2MjFjODZkN2I2OWM3NmY2MGIyYzNm
YWMzNTYwHhcNMjUwOTA3MDUwMDQ0WhcNMjUwOTA4MDUwMDQ0WjAzMTEwLwYDVQQD
EygyNTNmZTlkZTc4ZjRmZTI4NTI4ZTUzN2E1ZjczYmRhNmFkZjExNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/NoW4jZn5POgaJFNbFrzJ9kBVuc
i6yW0uI4aP7sUASx07QfREw5EYlMKV1pspZrtxf7OwrFYWUh/o1EYIO3xoJsNAUU
Hwd8nXg0F8uiNYajzvfbkurvkjB+A9ou1rl1UjrXm1pxMjf6Dx+SkFJBfqKMfKBq
DrEqZHpFHa+NbkZwGXjvCDAE4JitTqKOKhgcsTrd2RKYKnCDLpfw8Bb+fJw1ym+0
yOGu/veS7ZRUlnPr2PlHJ4Z4+0YyekrWaOMPEQoaM/NIRGpuj46odLiJdVmrDeG0
7myFLI5IXssW0PeTEMRTFYyrHGDvgUHQbkZyvDjdbazJ4CBoIX1Gvd8JSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU/6d549P4oUo5Tel9zvaat8RbgMB8GA1UdIwQY
MBaAFGkKsO/XdXYhyG17acdvYLLD+sNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFxdzc5ZDFkaUhJYlh0cHgyOWdzc1A2dzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NWIyMjUtNjRlMy00ZDM0LTgwZDkt
MjFjODE1YTZlYjllLzEvYVFxdzc5ZDFkaUhJYlh0cHgyOWdzc1A2dzFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80NWIyMjUtNjRlMy00ZDM0LTgwZDktMjFjODE1YTZlYjll
LzEvYVFxdzc5ZDFkaUhJYlh0cHgyOWdzc1A2dzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMJ5z90U
Gy/Lx8871utGwJT44Uo1ghDX4vKi0UvytA0rCeEjv3FglgkDAUQtg1Rx8Myy3JlY
Gfn4sP0pmcgw3kwwFMzySIFSxGEfg3YG+LL+jy8fbbRbeyMa0nwEejT0lCXNO1ut
dAB1qRF3NG3ObHmGWm33Rz654Dd+CzCqjoHVbQniLyXBOmzzZ6mJQVWL79XLQp5H
TgKo4mn9x/Iro8eZuqDc1m71pxYnuNsfGOKIsXISMvFTUPn55hZyM2u+KrmIo6mt
5x0diRFwKZMeil6TrjFCSkABol85IZ0h3JB7yQU1DbCP8Ofz4+IKrV37SSX+AMOq
c5s8rCIowtWPzg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:58 2025 by rpki-client