Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
File: 1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json)
Hash identifier: jvG2JRtl219d5WJ5Mlg8GwF4uw618aRmV6K0u7kWIOE=
Subject key identifier: BB:47:0F:33:B3:D7:A4:3D:AA:59:92:58:46:43:4A:74:61:F0:1F:0D
Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Certificate issuer: /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Certificate serial: 0199228C7ED08A60BD8D6699607248AEC7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 05:00:56 +0000
Manifest this update: Sun 07 Sep 2025 05:00:56 +0000
Manifest next update: Mon 08 Sep 2025 05:00:56 +0000
Files and hashes: 1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: LSCSJmG7k7B7UTW5OL/lY1jkSA4X0jyWNwVMj31L4QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:7e:d0:8a:60:bd:8d:66:99:60:72:48:ae:c7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Validity
Not Before: Sep 7 05:00:56 2025 GMT
Not After : Sep 8 05:00:56 2025 GMT
Subject: CN=bb470f33b3d7a43daa59925846434a7461f01f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:80:98:e0:fb:66:14:9f:c9:22:7d:65:d7:
8f:e7:d3:54:9f:e3:9d:c6:21:96:6f:f1:8e:ba:b6:
f1:cc:5b:2c:98:dd:99:9f:5a:c9:82:6d:f3:64:37:
90:fb:24:52:2a:a2:bf:f4:4b:f2:27:bd:ec:53:e3:
c6:74:b7:22:7a:10:18:9b:50:1c:91:de:76:d8:7a:
dd:ea:1b:bd:40:45:e0:b3:2c:86:e8:e1:63:70:1c:
d9:d8:89:88:8d:3e:bf:0b:b7:42:26:03:00:8c:cd:
75:a4:4e:e3:77:1d:36:59:bd:4f:0a:0b:59:d4:82:
56:b7:64:6a:92:71:b9:14:48:2f:dd:c7:51:a3:2d:
a1:b1:ba:de:da:ab:3c:cd:b9:67:d2:9a:8c:b2:2c:
5e:af:1a:04:96:b8:aa:ce:58:44:23:bd:d6:21:27:
8b:05:a3:85:fb:84:b0:f6:a3:a1:23:1e:3b:94:fd:
e7:f4:55:76:3f:6b:76:36:72:a8:1f:d2:07:aa:a4:
05:72:81:ff:d6:5a:da:89:3d:1d:71:e8:10:e6:95:
51:53:bf:cd:d9:fd:e8:0b:87:aa:af:d3:7d:f5:93:
a3:3a:2f:28:60:af:05:a0:b3:d0:56:5c:ec:07:e7:
d5:3b:ce:67:37:11:e1:88:f6:73:9e:dd:9d:f0:a7:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:0F:33:B3:D7:A4:3D:AA:59:92:58:46:43:4A:74:61:F0:1F:0D
X509v3 Authority Key Identifier:
keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6d:72:0d:c6:03:9a:11:09:6f:f6:72:b4:2d:9c:41:b4:6d:
cf:6a:64:88:ba:5c:0b:f5:92:a9:a9:83:08:57:3b:93:b3:03:
e3:6d:b7:44:ba:d1:63:0a:b5:56:de:f2:74:7d:5b:4c:a7:d7:
28:6a:9a:22:d0:48:d3:29:35:99:6a:ac:bd:0e:ac:bb:9b:3e:
59:63:30:47:48:c8:8d:3a:5d:af:cd:3d:e0:e4:85:cf:8c:4a:
7e:0f:58:4f:95:f8:3f:20:5a:8f:6c:7d:4f:ae:c3:fe:50:ed:
4d:b4:e1:ee:ea:d4:6c:9e:e5:d1:50:24:ca:9f:70:22:b8:77:
f4:7e:e4:b5:82:9d:c5:16:06:2b:3f:58:83:15:22:01:9f:ef:
71:4b:dc:65:65:55:be:11:9e:ce:0d:ea:c2:a8:86:4f:4b:54:
ac:b8:84:80:0b:ba:e5:be:41:db:43:73:a3:f4:d6:5a:2d:d8:
80:1a:0d:ca:4f:d5:59:e4:46:b3:32:8c:74:e1:d8:63:2b:44:
09:d2:c8:df:ec:b9:52:5c:cc:c8:25:37:ad:ec:06:fd:1e:31:
9f:cd:19:36:62:f2:d0:e4:c6:8f:47:06:2f:82:bc:62:1a:a4:
7b:4d:b1:b4:09:bf:07:49:72:0e:9d:44:54:b0:81:dc:14:a0:
0c:17:12:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijH7QimC9jWaZYHJIrsfhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDg1Y2VkZjA5ZDgyZjc5MmMxODBkOTBhNWE5YTIzNmQ2
YTcwNWMwHhcNMjUwOTA3MDUwMDU2WhcNMjUwOTA4MDUwMDU2WjAzMTEwLwYDVQQD
EyhiYjQ3MGYzM2IzZDdhNDNkYWE1OTkyNTg0NjQzNGE3NDYxZjAxZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPeAmOD7ZhSfySJ9ZdeP59NUn+Od
xiGWb/GOurbxzFssmN2Zn1rJgm3zZDeQ+yRSKqK/9EvyJ73sU+PGdLciehAYm1Ac
kd522Hrd6hu9QEXgsyyG6OFjcBzZ2ImIjT6/C7dCJgMAjM11pE7jdx02Wb1PCgtZ
1IJWt2RqknG5FEgv3cdRoy2hsbre2qs8zbln0pqMsixerxoElriqzlhEI73WISeL
BaOF+4Sw9qOhIx47lP3n9FV2P2t2NnKoH9IHqqQFcoH/1lraiT0dcegQ5pVRU7/N
2f3oC4eqr9N99ZOjOi8oYK8FoLPQVlzsB+fVO85nNxHhiPZznt2d8KdCMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtHDzOz16Q9qlmSWEZDSnRh8B8NMB8GA1UdIwQY
MBaAFNXYXO3wnYL3ksGA2QpamiNtanBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAt
YjFmN2M3MWIyMDFiLzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAtYjFmN2M3MWIyMDFi
LzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWm1yDcYD
mhEJb/ZytC2cQbRtz2pkiLpcC/WSqamDCFc7k7MD4223RLrRYwq1Vt7ydH1bTKfX
KGqaItBI0yk1mWqsvQ6su5s+WWMwR0jIjTpdr8094OSFz4xKfg9YT5X4PyBaj2x9
T67D/lDtTbTh7urUbJ7l0VAkyp9wIrh39H7ktYKdxRYGKz9YgxUiAZ/vcUvcZWVV
vhGezg3qwqiGT0tUrLiEgAu65b5B20Nzo/TWWi3YgBoNyk/VWeRGszKMdOHYYytE
CdLI3+y5UlzMyCU3rewG/R4xn80ZNmLy0OTGj0cGL4K8Yhqke02xtAm/B0lyDp1E
VLCB3BSgDBcSEA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:49 2025 by rpki-client