Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
File: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft (raw, json)
Hash identifier: CDb6HYgaIfwNZnZhu3tobiuZ4t0u9l7Oy2z8aO3qrHo=
Subject key identifier: AF:70:89:22:CE:8A:A8:19:E5:83:27:F9:DD:DA:11:01:73:1A:06:73
Authority key identifier: D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
Certificate issuer: /CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Certificate serial: 0199221F03597A47378D665FC40B99637E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
Manifest number: 08BB
Signing time: Sun 07 Sep 2025 03:01:21 +0000
Manifest this update: Sun 07 Sep 2025 03:01:21 +0000
Manifest next update: Mon 08 Sep 2025 03:01:21 +0000
Files and hashes: 1: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl (hash: bm8dlbqbp0FuvQA9UAZFzhGNdQPWok+cgx7AVnGlJZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:03:59:7a:47:37:8d:66:5f:c4:0b:99:63:7e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Validity
Not Before: Sep 7 03:01:21 2025 GMT
Not After : Sep 8 03:01:21 2025 GMT
Subject: CN=af708922ce8aa819e58327f9ddda1101731a0673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:f0:2d:6e:1f:cd:67:72:e4:ab:70:77:c7:
4a:40:45:3a:6f:9f:53:33:5c:94:bf:e0:bd:37:f0:
fb:46:08:85:9a:c7:b9:7b:b7:07:44:31:2e:35:21:
0c:43:d6:4a:cc:fc:14:25:c7:97:7e:51:00:ce:4a:
5c:12:36:fb:bd:ce:cb:08:6d:51:a3:3c:60:b8:bf:
5f:c7:a1:0e:31:e8:a9:35:18:84:b7:e5:d7:e0:a2:
dd:92:70:67:53:c2:b8:a9:f3:bf:73:40:4f:59:99:
a7:ec:99:7e:00:cd:63:00:0a:54:39:7e:26:9c:34:
2a:ea:91:63:aa:8b:c9:80:d3:8e:cd:77:69:ad:d3:
bf:47:99:42:5c:68:fd:c7:79:bf:09:f9:6e:a8:08:
5a:0b:ca:2c:fc:cf:54:66:a6:4b:e9:cc:02:49:24:
80:05:fc:f4:fd:19:51:21:00:f0:70:cd:5d:7a:41:
aa:c4:48:5d:0f:07:aa:1a:64:53:ef:bb:03:59:59:
29:d7:96:4b:6b:c9:a6:29:73:28:71:a7:6b:cb:72:
85:19:19:4c:b3:62:25:b2:75:03:39:ee:4b:b9:7a:
e0:ac:4a:a4:ed:97:59:2a:f8:38:99:d2:88:34:3c:
a7:69:47:f3:f0:17:3b:cc:a0:8b:8b:e7:73:53:06:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:70:89:22:CE:8A:A8:19:E5:83:27:F9:DD:DA:11:01:73:1A:06:73
X509v3 Authority Key Identifier:
keyid:D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bb:e9:f3:4a:c5:d7:44:19:3a:8b:81:92:40:6f:00:73:af:
e4:74:e1:a5:39:01:51:39:76:fd:f4:68:8c:d7:0f:b4:a2:55:
db:78:5f:df:eb:00:b6:bb:b6:1e:e2:97:ce:d2:8e:8b:fd:e8:
da:f2:ed:e1:11:7f:fa:87:ea:65:9c:b0:e5:11:34:10:b8:1a:
2a:d0:da:ae:eb:c6:7a:be:94:66:ea:4e:cb:0f:45:35:01:bc:
04:6f:5b:be:8d:59:e3:1c:97:0e:3d:16:bb:ed:ac:25:8a:14:
fd:61:62:3b:ef:96:e1:b7:75:39:64:a1:a6:32:62:72:c8:f7:
9d:cd:36:e3:b0:35:58:01:fe:7a:f5:22:c9:92:d6:07:a2:a4:
88:7b:16:d2:26:c7:72:06:e9:34:17:0b:75:2e:28:ec:2a:4a:
ad:75:ab:22:5b:bd:10:b3:b6:f4:f4:97:b8:af:50:41:01:10:
bc:c1:f6:4e:e6:f2:cf:17:56:a0:5e:c0:de:a6:71:03:4a:d7:
95:6e:ea:a2:39:ea:fc:d4:11:91:46:a6:2c:08:76:ac:7b:ee:
eb:dc:45:22:6e:dc:3a:c5:e1:d9:0d:27:2b:fa:c7:39:34:58:
43:d4:4e:de:4e:fa:56:1b:e7:72:e3:52:ea:b4:10:8a:77:ad:
0f:3d:6e:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHwNZekc3jWZfxAuZY34aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzc3M2MyMGFjOGU0MDkzZGY2MmJiYjg3MmNhZmNkYjY4
YjU1ZGMwHhcNMjUwOTA3MDMwMTIxWhcNMjUwOTA4MDMwMTIxWjAzMTEwLwYDVQQD
EyhhZjcwODkyMmNlOGFhODE5ZTU4MzI3ZjlkZGRhMTEwMTczMWEwNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtbwLW4fzWdy5Ktwd8dKQEU6b59T
M1yUv+C9N/D7RgiFmse5e7cHRDEuNSEMQ9ZKzPwUJceXflEAzkpcEjb7vc7LCG1R
ozxguL9fx6EOMeipNRiEt+XX4KLdknBnU8K4qfO/c0BPWZmn7Jl+AM1jAApUOX4m
nDQq6pFjqovJgNOOzXdprdO/R5lCXGj9x3m/CfluqAhaC8os/M9UZqZL6cwCSSSA
Bfz0/RlRIQDwcM1dekGqxEhdDweqGmRT77sDWVkp15ZLa8mmKXMocadry3KFGRlM
s2IlsnUDOe5LuXrgrEqk7ZdZKvg4mdKINDynaUfz8Bc7zKCLi+dzUwZ+kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9wiSLOiqgZ5YMn+d3aEQFzGgZzMB8GA1UdIwQY
MBaAFNHHc8IKyOQJPfYru4csr822i1XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lZTM4MjItYWJlYS00OGQ5LTkzYTkt
ODg1NmM2NWZlMTgyLzEvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lZTM4MjItYWJlYS00OGQ5LTkzYTktODg1NmM2NWZlMTgy
LzEvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7vp80rF
10QZOouBkkBvAHOv5HThpTkBUTl2/fRojNcPtKJV23hf3+sAtru2HuKXztKOi/3o
2vLt4RF/+ofqZZyw5RE0ELgaKtDaruvGer6UZupOyw9FNQG8BG9bvo1Z4xyXDj0W
u+2sJYoU/WFiO++W4bd1OWShpjJicsj3nc0247A1WAH+evUiyZLWB6KkiHsW0ibH
cgbpNBcLdS4o7CpKrXWrIlu9ELO29PSXuK9QQQEQvMH2TubyzxdWoF7A3qZxA0rX
lW7qojnq/NQRkUamLAh2rHvu69xFIm7cOsXh2Q0nK/rHOTRYQ9RO3k76VhvncuNS
6rQQinetDz1upA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:05 2025 by rpki-client