
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File: rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier: DixhVLdgDN0uDXSsPLP367z7oJvIqiCPhK9MFJVyDBE=
Subject key identifier: 34:B7:83:04:0E:1A:DD:62:F3:CB:F8:23:17:19:31:3F:B9:AA:23:B9
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer: /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial: 0199221E3E37EFFD009AEBE101689F592EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 03:00:31 +0000
Manifest this update: Sun 07 Sep 2025 03:00:31 +0000
Manifest next update: Mon 08 Sep 2025 03:00:31 +0000
Files and hashes: 1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: wjaNTEcDclSMOtxmv7gU7YWhcdmNcQSPpPCkZq/q1No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:3e:37:ef:fd:00:9a:eb:e1:01:68:9f:59:2e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Validity
Not Before: Sep 7 03:00:31 2025 GMT
Not After : Sep 8 03:00:31 2025 GMT
Subject: CN=34b783040e1add62f3cbf8231719313fb9aa23b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:18:79:78:34:b7:3b:53:5c:31:2a:d8:c3:
9b:66:1a:ca:73:d5:80:08:fa:9a:aa:0c:82:47:d6:
2d:a0:04:02:5c:46:8c:ce:6f:89:32:5b:47:2c:a8:
44:1c:7e:d9:37:46:5e:e9:c3:bb:b9:8e:d3:f9:5c:
6d:4b:47:8a:3a:8d:42:73:90:84:6d:f5:7f:a8:df:
ce:d2:c1:77:73:6b:94:b5:04:39:bd:4b:0f:c9:90:
62:69:65:80:0e:8c:ff:c7:ac:ae:1b:64:26:77:6a:
f0:46:8b:dd:df:8e:26:d5:9f:cb:23:87:62:8d:8c:
d8:98:05:61:36:19:c2:9e:60:ff:3b:74:9a:3f:c8:
43:18:25:d7:84:d6:bb:e5:57:25:34:30:84:87:9a:
5e:19:cc:5a:c8:83:73:2a:7c:e6:34:be:3c:ce:09:
71:1c:2b:90:50:e1:54:ac:50:74:cc:91:e4:ba:c0:
aa:3f:c4:12:1b:39:78:bc:da:e2:cf:63:b4:93:ca:
04:c9:5a:fe:1c:4d:2c:34:3a:4a:cb:49:6f:94:91:
4a:00:11:a4:1d:69:27:64:61:4a:3e:f6:69:c0:aa:
d2:cf:85:b8:60:85:ca:ad:b2:d9:ab:af:ff:87:d6:
dd:b3:82:18:48:e8:23:ae:39:98:31:c0:86:64:e3:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B7:83:04:0E:1A:DD:62:F3:CB:F8:23:17:19:31:3F:B9:AA:23:B9
X509v3 Authority Key Identifier:
keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:97:ad:95:3d:92:ae:56:1e:28:f2:ae:e9:1c:c8:86:52:ab:
08:66:72:f2:40:51:ff:be:d7:75:9c:34:2d:93:49:7e:e5:4c:
73:00:e9:25:d5:57:1a:6c:ec:12:da:49:a1:49:aa:58:e6:af:
00:ae:a0:5b:82:26:0d:e5:9c:06:3a:3d:ab:19:77:53:fc:3b:
85:72:2b:d2:53:11:98:44:65:32:2a:03:92:8b:8b:3b:b5:65:
b2:78:92:53:ea:dc:80:59:0b:d3:61:d2:f9:40:ee:bb:a7:af:
18:09:84:ac:85:4e:de:4d:43:0f:7b:f8:34:cb:ee:a7:19:bb:
ab:43:85:cb:85:52:6b:84:0d:e7:c9:3e:ca:5c:30:af:35:5f:
2c:8a:ea:c1:d5:89:58:e6:14:92:fa:b9:62:d3:06:1e:19:e3:
a7:3c:21:d1:f8:b9:bc:8b:71:76:4b:c3:86:26:f5:2c:4e:c7:
28:a2:28:3f:2c:16:3c:c0:78:f6:07:7f:5b:42:08:23:4b:77:
8e:22:92:87:1f:14:a3:22:e1:0c:fd:98:b0:0d:c1:d8:be:86:
51:26:78:ff:5f:31:b9:c7:b7:f6:e6:8a:aa:00:a2:23:c4:be:
7f:24:b8:73:fd:54:65:69:5e:90:23:38:0a:1b:20:e7:45:39:
42:de:f5:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHj437/0AmuvhAWifWS6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjM2U2ZDU5ZDQ3ZTczN2VkYzMxYTY1ZjMxMDUxNGNkNGI5
NWQzODcwHhcNMjUwOTA3MDMwMDMxWhcNMjUwOTA4MDMwMDMxWjAzMTEwLwYDVQQD
EygzNGI3ODMwNDBlMWFkZDYyZjNjYmY4MjMxNzE5MzEzZmI5YWEyM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ooYeXg0tztTXDEq2MObZhrKc9WA
CPqaqgyCR9YtoAQCXEaMzm+JMltHLKhEHH7ZN0Ze6cO7uY7T+VxtS0eKOo1Cc5CE
bfV/qN/O0sF3c2uUtQQ5vUsPyZBiaWWADoz/x6yuG2Qmd2rwRovd344m1Z/LI4di
jYzYmAVhNhnCnmD/O3SaP8hDGCXXhNa75VclNDCEh5peGcxayINzKnzmNL48zglx
HCuQUOFUrFB0zJHkusCqP8QSGzl4vNriz2O0k8oEyVr+HE0sNDpKy0lvlJFKABGk
HWknZGFKPvZpwKrSz4W4YIXKrbLZq6//h9bds4IYSOgjrjmYMcCGZOODwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS3gwQOGt1i88v4IxcZMT+5qiO5MB8GA1UdIwQY
MBaAFKw+bVnUfnN+3DGmXzEFFM1LldOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZTEwMDMtODE5YS00MzkyLTkzOGEt
NWFlNTNjMjFiOGNkLzEvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82ZTEwMDMtODE5YS00MzkyLTkzOGEtNWFlNTNjMjFiOGNk
LzEvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJetlT2S
rlYeKPKu6RzIhlKrCGZy8kBR/77XdZw0LZNJfuVMcwDpJdVXGmzsEtpJoUmqWOav
AK6gW4ImDeWcBjo9qxl3U/w7hXIr0lMRmERlMioDkouLO7VlsniSU+rcgFkL02HS
+UDuu6evGAmErIVO3k1DD3v4NMvupxm7q0OFy4VSa4QN58k+ylwwrzVfLIrqwdWJ
WOYUkvq5YtMGHhnjpzwh0fi5vItxdkvDhib1LE7HKKIoPywWPMB49gd/W0III0t3
jiKShx8UoyLhDP2YsA3B2L6GUSZ4/18xuce39uaKqgCiI8S+fyS4c/1UZWlekCM4
Chsg50U5Qt71NQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:07 2025 by rpki-client