Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
File: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json)
Hash identifier: VocD3seyj4tld8l/CUGkEYSi+kdc3PN1fIz3dX8kRH8=
Subject key identifier: 34:F1:C6:D1:DA:D5:BF:E4:5C:5F:24:C9:76:EA:F9:92:FC:AA:4B:D1
Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
Certificate issuer: /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Certificate serial: 0199221E4B69C5106C0BF44AFBFFD61D1F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
Manifest number: 06E5
Signing time: Sun 07 Sep 2025 03:00:34 +0000
Manifest this update: Sun 07 Sep 2025 03:00:34 +0000
Manifest next update: Mon 08 Sep 2025 03:00:34 +0000
Files and hashes: 1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: xEk0ozmcV/yI5DnRdlcrKJgfubXCgx7PM0IfdfvOmuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:4b:69:c5:10:6c:0b:f4:4a:fb:ff:d6:1d:1f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Validity
Not Before: Sep 7 03:00:34 2025 GMT
Not After : Sep 8 03:00:34 2025 GMT
Subject: CN=34f1c6d1dad5bfe45c5f24c976eaf992fcaa4bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:78:5e:09:6f:e4:78:7e:e5:b0:80:61:c8:
c5:b5:82:70:e0:ab:f8:30:e1:64:1d:f9:41:45:99:
f5:16:34:2e:b9:57:08:db:00:24:cc:1a:dd:0d:d3:
ba:71:da:00:bc:80:0c:b3:89:70:17:ba:0f:88:09:
d5:23:59:de:c9:0a:32:d5:78:16:c9:e1:f2:98:79:
2b:57:e3:a4:49:52:cc:cd:6c:eb:93:fa:06:f7:da:
41:39:1e:6c:a3:1c:32:ba:c4:05:37:bb:d2:6c:84:
4e:c6:a1:16:95:58:bf:b5:bc:b4:22:f4:2c:df:fe:
6d:39:91:dc:ea:47:74:05:93:c3:d9:19:c2:93:b5:
dd:6e:35:92:5d:de:3d:40:b9:c9:a2:37:44:20:c3:
82:82:74:1b:b3:d9:76:90:a3:ce:ec:d5:82:a9:25:
52:ee:b3:c2:6f:46:cb:79:7f:99:15:e9:23:65:7f:
c2:e7:e1:8e:d0:2d:9f:53:41:5f:07:ba:4d:23:48:
73:67:9a:c3:58:4f:05:dd:f8:e1:52:ec:85:9f:85:
b4:a1:3f:1c:82:02:01:73:48:4e:40:d9:84:45:04:
22:29:c2:fd:1c:16:e7:5f:ef:09:e7:e8:7f:ba:5e:
7a:c7:cc:a2:89:84:c7:a2:04:4b:20:89:30:d0:67:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F1:C6:D1:DA:D5:BF:E4:5C:5F:24:C9:76:EA:F9:92:FC:AA:4B:D1
X509v3 Authority Key Identifier:
keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b4:13:53:9a:6d:c7:93:35:88:8f:03:51:e6:37:f5:48:56:
7a:36:32:76:87:97:34:f6:1e:ca:54:6a:d4:e7:e1:7f:6e:b2:
88:cc:59:16:7c:a4:85:8c:91:bc:8e:ca:32:98:e3:71:3d:d6:
03:34:c5:17:81:b3:d9:ed:6b:ff:64:c6:b1:35:cc:5c:73:ae:
27:49:69:3c:98:10:ca:e1:db:f9:23:48:37:be:4d:0b:62:63:
57:5c:0b:23:20:58:99:15:88:f3:4b:e0:ff:68:66:e2:08:aa:
55:20:13:ec:48:7e:8a:fc:a6:9d:f7:a8:6b:41:00:a0:91:18:
6d:62:d7:67:af:71:63:67:a2:aa:4f:87:39:88:fd:f5:ac:6e:
03:22:31:7a:e0:d4:45:07:a2:ff:cb:2d:a1:a3:a6:60:be:f1:
83:f1:77:a0:4e:7b:cd:d2:a4:46:76:60:fe:fc:ed:79:56:c3:
f2:95:9e:9f:e2:04:ee:7b:ca:09:72:16:87:57:7f:1b:89:78:
8c:6f:7f:e8:e2:a5:34:b6:82:b7:26:98:fd:0d:b9:5c:19:ab:
54:96:f2:ea:f1:86:e0:e8:4f:a2:7c:07:0a:5b:a9:e7:64:90:
c6:ac:77:29:e5:74:c2:3c:43:7c:d8:53:65:4c:e5:36:2a:23:
9a:b4:e0:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHktpxRBsC/RK+//WHR+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTJiNzI4OGM1NTllMWVkNGEzOTA1N2UwYWUwYzJiZWM0
MmRhYTIwHhcNMjUwOTA3MDMwMDM0WhcNMjUwOTA4MDMwMDM0WjAzMTEwLwYDVQQD
EygzNGYxYzZkMWRhZDViZmU0NWM1ZjI0Yzk3NmVhZjk5MmZjYWE0YmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6J4Xglv5Hh+5bCAYcjFtYJw4Kv4
MOFkHflBRZn1FjQuuVcI2wAkzBrdDdO6cdoAvIAMs4lwF7oPiAnVI1neyQoy1XgW
yeHymHkrV+OkSVLMzWzrk/oG99pBOR5soxwyusQFN7vSbIROxqEWlVi/tby0IvQs
3/5tOZHc6kd0BZPD2RnCk7XdbjWSXd49QLnJojdEIMOCgnQbs9l2kKPO7NWCqSVS
7rPCb0bLeX+ZFekjZX/C5+GO0C2fU0FfB7pNI0hzZ5rDWE8F3fjhUuyFn4W0oT8c
ggIBc0hOQNmERQQiKcL9HBbnX+8J5+h/ul56x8yiiYTHogRLIIkw0GeEaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTxxtHa1b/kXF8kyXbq+ZL8qkvRMB8GA1UdIwQY
MBaAFHEStyiMVZ4e1KOQV+CuDCvsQtqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmIt
MTU2ZjNjZmJjMTYxLzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmItMTU2ZjNjZmJjMTYx
LzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrQTU5pt
x5M1iI8DUeY39UhWejYydoeXNPYeylRq1Ofhf26yiMxZFnykhYyRvI7KMpjjcT3W
AzTFF4Gz2e1r/2TGsTXMXHOuJ0lpPJgQyuHb+SNIN75NC2JjV1wLIyBYmRWI80vg
/2hm4giqVSAT7Eh+ivymnfeoa0EAoJEYbWLXZ69xY2eiqk+HOYj99axuAyIxeuDU
RQei/8stoaOmYL7xg/F3oE57zdKkRnZg/vzteVbD8pWen+IE7nvKCXIWh1d/G4l4
jG9/6OKlNLaCtyaY/Q25XBmrVJby6vGG4OhPonwHClup52SQxqx3KeV0wjxDfNhT
ZUzlNiojmrTgEA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:25 2025 by rpki-client