Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
File: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft (raw, json)
Hash identifier: FVkuYbMS+VVPBFTPelKEXo5kNjHTX/p5DrYaTaAHKXs=
Subject key identifier: 3A:01:08:82:3B:5D:08:62:77:E7:CE:30:68:81:EC:C1:DD:84:6D:8C
Authority key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Certificate issuer: /CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Certificate serial: 0199221EA46D2F8842294DEAF7F7EED82249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 03:00:57 +0000
Manifest this update: Sun 07 Sep 2025 03:00:57 +0000
Manifest next update: Mon 08 Sep 2025 03:00:57 +0000
Files and hashes: 1: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl (hash: lbAr9oZbpOSHBR+VPmVT47GB4uWG3+YnMkH56CIhtXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:a4:6d:2f:88:42:29:4d:ea:f7:f7:ee:d8:22:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Validity
Not Before: Sep 7 03:00:57 2025 GMT
Not After : Sep 8 03:00:57 2025 GMT
Subject: CN=3a0108823b5d086277e7ce306881ecc1dd846d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:ac:36:1d:98:25:82:88:2b:c3:92:9c:2e:
c9:3e:b3:40:4b:18:98:0b:aa:89:2f:e8:47:b5:c5:
d4:f5:49:59:ba:49:dc:27:eb:8d:30:fe:a8:d7:dd:
70:2c:d9:46:50:b4:ce:92:a6:f1:01:15:75:ab:ca:
b3:4a:16:9b:88:92:d6:e6:57:87:3b:a7:63:6f:bc:
99:b4:80:c4:70:91:dd:b2:de:24:e8:71:67:9e:30:
78:16:42:d3:33:12:70:88:09:58:0b:66:00:2b:a9:
c6:3f:79:90:a5:ee:51:2c:c0:94:0c:fe:61:bf:93:
d1:30:68:14:c3:4d:4d:cb:c9:b6:48:6a:30:c3:45:
a2:f2:05:b0:0b:4c:2a:1a:27:8f:7f:af:b7:be:02:
d6:1d:61:b1:e7:c8:0a:b7:85:f0:c6:81:b7:4e:58:
26:31:65:b9:55:8a:ef:e0:cf:72:6b:ba:fa:a8:de:
f9:26:ae:02:54:23:ca:4b:db:a7:68:7c:5a:cd:1e:
b3:f0:be:95:80:1c:c5:63:11:be:da:91:f8:5a:b0:
85:1b:ed:59:98:d8:10:aa:88:65:1e:af:bf:87:b9:
b2:e8:fd:73:c0:fe:56:06:f3:3f:15:26:31:9e:c9:
6f:a2:80:1c:df:99:0b:a5:f9:cf:be:3e:77:26:c5:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:01:08:82:3B:5D:08:62:77:E7:CE:30:68:81:EC:C1:DD:84:6D:8C
X509v3 Authority Key Identifier:
keyid:D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e3:08:45:fe:9c:fc:0c:9d:8a:5b:f6:a7:8e:71:56:8e:76:
bb:b2:8e:97:f9:5a:5c:f9:2e:84:5e:9e:ea:66:0a:37:fc:3d:
c0:de:94:51:14:a0:07:64:f3:b6:a6:75:23:78:3b:8e:7d:7c:
c1:39:f0:e0:c8:0c:58:b8:e3:8c:cc:10:fa:0c:03:8d:62:d1:
cf:40:b2:94:28:30:a1:48:ff:e4:c1:99:ed:5b:12:a9:29:db:
49:29:db:99:96:98:5f:4f:a6:44:10:93:96:18:00:b1:76:08:
94:e4:2b:68:59:b7:58:27:a6:da:37:3e:5e:61:8a:3e:44:92:
13:0f:bb:8c:0b:20:49:d7:b3:08:f6:af:50:1b:dc:3e:95:1b:
43:5f:2c:54:8c:9e:60:18:82:fc:3c:6e:8a:98:06:cf:c6:0a:
5d:3b:23:0b:25:dd:14:f0:92:7e:1e:85:9e:3b:72:01:93:4d:
df:4d:55:da:f9:43:6f:33:ee:d8:e2:04:f4:ee:f0:28:56:af:
5e:15:53:25:d2:80:b5:9d:2e:eb:9e:93:76:6a:2a:f4:51:dc:
04:57:f5:5f:2a:75:84:6d:6b:4d:62:05:f2:c3:f9:d5:f0:9c:
eb:aa:36:60:48:a9:5e:ce:1f:6d:10:65:f5:88:43:2b:1c:ee:
d6:3f:b8:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHqRtL4hCKU3q9/fu2CJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDc5NGY5OTZhYzVhM2YwMmI1NmE3NWMxNDk0OTQwM2Qw
MmFjNjQwHhcNMjUwOTA3MDMwMDU3WhcNMjUwOTA4MDMwMDU3WjAzMTEwLwYDVQQD
EygzYTAxMDg4MjNiNWQwODYyNzdlN2NlMzA2ODgxZWNjMWRkODQ2ZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NusNh2YJYKIK8OSnC7JPrNASxiY
C6qJL+hHtcXU9UlZukncJ+uNMP6o191wLNlGULTOkqbxARV1q8qzShabiJLW5leH
O6djb7yZtIDEcJHdst4k6HFnnjB4FkLTMxJwiAlYC2YAK6nGP3mQpe5RLMCUDP5h
v5PRMGgUw01Ny8m2SGoww0Wi8gWwC0wqGiePf6+3vgLWHWGx58gKt4XwxoG3Tlgm
MWW5VYrv4M9ya7r6qN75Jq4CVCPKS9unaHxazR6z8L6VgBzFYxG+2pH4WrCFG+1Z
mNgQqohlHq+/h7my6P1zwP5WBvM/FSYxnslvooAc35kLpfnPvj53JsWXNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoBCII7XQhid+fOMGiB7MHdhG2MMB8GA1UdIwQY
MBaAFNdHlPmWrFo/ArVqdcFJSUA9AqxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBlVS1aYXNXajhDdFdwMXdVbEpRRDBDckdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZDAyOTYtNDNiZS00ODlmLWE4MmYt
OGQ2YjZhYjYxYjc1LzEvMTBlVS1aYXNXajhDdFdwMXdVbEpRRDBDckdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZDAyOTYtNDNiZS00ODlmLWE4MmYtOGQ2YjZhYjYxYjc1
LzEvMTBlVS1aYXNXajhDdFdwMXdVbEpRRDBDckdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReMIRf6c
/Aydilv2p45xVo52u7KOl/laXPkuhF6e6mYKN/w9wN6UURSgB2TztqZ1I3g7jn18
wTnw4MgMWLjjjMwQ+gwDjWLRz0CylCgwoUj/5MGZ7VsSqSnbSSnbmZaYX0+mRBCT
lhgAsXYIlOQraFm3WCem2jc+XmGKPkSSEw+7jAsgSdezCPavUBvcPpUbQ18sVIye
YBiC/DxuipgGz8YKXTsjCyXdFPCSfh6FnjtyAZNN301V2vlDbzPu2OIE9O7wKFav
XhVTJdKAtZ0u656Tdmoq9FHcBFf1Xyp1hG1rTWIF8sP51fCc66o2YEipXs4fbRBl
9YhDKxzu1j+4+A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:35 2025 by rpki-client