Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
File: V9wqO2671XpOSCmt0_KgKnbld4k.mft (raw, json)
Hash identifier: F0ttKU7PxBHMtHOgZ2k6ocG6shzyq6mbNfojBgGBk9E=
Subject key identifier: B3:36:60:8F:88:C5:E5:F4:8F:3A:39:E6:2E:9A:EA:13:36:95:02:01
Authority key identifier: 57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
Certificate issuer: /CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Certificate serial: 019922C39634810DFE1D227BA05343B41B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
Manifest number: 0368
Signing time: Sun 07 Sep 2025 06:01:07 +0000
Manifest this update: Sun 07 Sep 2025 06:01:07 +0000
Manifest next update: Mon 08 Sep 2025 06:01:07 +0000
Files and hashes: 1: V9wqO2671XpOSCmt0_KgKnbld4k.crl (hash: 4yXb1pwRWSNg71doUYVvfUHWxZO0C5qhC3Tntcdo7qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:96:34:81:0d:fe:1d:22:7b:a0:53:43:b4:1b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Validity
Not Before: Sep 7 06:01:07 2025 GMT
Not After : Sep 8 06:01:07 2025 GMT
Subject: CN=b336608f88c5e5f48f3a39e62e9aea1336950201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:28:e9:4a:0e:3d:30:9e:dd:93:ca:0e:58:
3b:70:af:55:73:40:d9:bd:3c:d8:a9:b3:ca:9a:3f:
12:ad:e5:72:ec:00:92:9e:74:a6:53:12:2d:17:7e:
1f:1c:82:c5:fa:06:cf:6c:b7:3e:25:2f:ae:4c:e2:
5f:7d:3a:a2:a1:70:97:bf:3e:1f:3b:f8:dc:f7:f7:
dc:63:c1:fe:d1:1c:8b:a6:72:c9:b1:8a:d4:e7:23:
4a:1a:6b:7a:e4:c9:bd:01:e8:e4:44:b9:87:5b:81:
d6:ab:08:ca:22:dd:b5:91:66:78:e0:bf:6c:7a:21:
12:c0:89:3f:e6:bd:a8:97:51:23:d6:be:1a:14:61:
61:24:6d:0e:c1:c6:46:82:9a:00:62:dc:e6:e4:df:
d5:fa:bb:77:42:9e:e1:a7:82:97:c5:e6:d5:53:16:
2d:d3:6b:b8:b2:ac:cc:52:06:7f:b3:8a:07:16:d1:
54:8b:5b:4d:a7:dc:eb:a5:43:ce:2d:c6:d4:e4:34:
f1:94:f9:67:c9:66:97:44:00:67:05:a2:d4:60:11:
0c:90:b4:23:d5:ef:1d:ae:81:11:2c:23:96:03:3a:
43:64:4a:e3:1f:b7:d1:f2:65:9f:f5:6d:fb:a2:f6:
58:f7:5e:00:72:7b:63:20:48:15:f0:56:87:71:0c:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:60:8F:88:C5:E5:F4:8F:3A:39:E6:2E:9A:EA:13:36:95:02:01
X509v3 Authority Key Identifier:
keyid:57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d2:60:69:18:30:30:93:84:04:d0:1b:37:98:b7:59:2a:43:
b7:f3:ea:2b:9f:74:4d:24:e6:eb:5c:9e:c5:a0:e3:6a:9e:44:
28:2f:67:60:e1:7a:9c:c7:04:13:fd:5c:76:c9:e5:18:93:ca:
5e:0f:a3:0a:e5:58:55:95:4c:53:30:d2:21:4b:1c:0f:63:fa:
c0:ec:86:3d:32:1c:90:e8:91:5f:2e:4b:65:ca:00:38:2b:9a:
c6:bf:00:67:8b:9e:22:3c:f1:db:fe:40:2b:01:1d:7f:a8:6a:
3e:04:96:48:25:8d:5a:43:bd:94:51:ad:08:36:e0:5d:38:1e:
7d:27:29:60:85:7a:cf:85:b2:de:72:c1:d2:a9:5e:6d:89:26:
df:fb:b3:9c:99:6d:48:d5:79:e2:d6:a8:90:88:c5:f2:6e:e8:
17:43:86:29:f9:67:d4:0a:43:e3:f3:6a:b7:e4:be:28:48:ab:
bb:41:54:c9:fc:32:ee:c6:fa:f0:1e:60:71:8c:94:0a:2a:aa:
0c:2a:65:57:c0:58:ad:0b:62:65:02:9a:89:70:d0:0f:c1:e9:
b2:58:57:2b:25:fa:7c:b9:bb:16:de:52:cf:e8:39:7d:e2:f9:
08:34:b7:59:27:78:2f:6e:98:44:40:3b:a5:3b:f8:a8:48:a9:
4a:a5:82:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw5Y0gQ3+HSJ7oFNDtBsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZGMyYTNiNmViYmQ1N2E0ZTQ4MjlhZGQzZjJhMDJhNzZl
NTc3ODkwHhcNMjUwOTA3MDYwMTA3WhcNMjUwOTA4MDYwMTA3WjAzMTEwLwYDVQQD
EyhiMzM2NjA4Zjg4YzVlNWY0OGYzYTM5ZTYyZTlhZWExMzM2OTUwMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdUo6UoOPTCe3ZPKDlg7cK9Vc0DZ
vTzYqbPKmj8SreVy7ACSnnSmUxItF34fHILF+gbPbLc+JS+uTOJffTqioXCXvz4f
O/jc9/fcY8H+0RyLpnLJsYrU5yNKGmt65Mm9AejkRLmHW4HWqwjKIt21kWZ44L9s
eiESwIk/5r2ol1Ej1r4aFGFhJG0OwcZGgpoAYtzm5N/V+rt3Qp7hp4KXxebVUxYt
02u4sqzMUgZ/s4oHFtFUi1tNp9zrpUPOLcbU5DTxlPlnyWaXRABnBaLUYBEMkLQj
1e8droERLCOWAzpDZErjH7fR8mWf9W37ovZY914AcntjIEgV8FaHcQzZ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM2YI+IxeX0jzo55i6a6hM2lQIBMB8GA1UdIwQY
MBaAFFfcKjtuu9V6TkgprdPyoCp25XeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjIt
NDA0NTlkNjkzNGFlLzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjItNDA0NTlkNjkzNGFl
LzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItJgaRgw
MJOEBNAbN5i3WSpDt/PqK590TSTm61yexaDjap5EKC9nYOF6nMcEE/1cdsnlGJPK
Xg+jCuVYVZVMUzDSIUscD2P6wOyGPTIckOiRXy5LZcoAOCuaxr8AZ4ueIjzx2/5A
KwEdf6hqPgSWSCWNWkO9lFGtCDbgXTgefScpYIV6z4Wy3nLB0qlebYkm3/uznJlt
SNV54taokIjF8m7oF0OGKfln1ApD4/Nqt+S+KEiru0FUyfwy7sb68B5gcYyUCiqq
DCplV8BYrQtiZQKaiXDQD8HpslhXKyX6fLm7Ft5Sz+g5feL5CDS3WSd4L26YREA7
pTv4qEipSqWCnw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:28 2025 by rpki-client