Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File: 52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier: h+v5xTaqhVGrSGE+nBNWEzw3V2JiFFVL3aeVLjGtGjU=
Subject key identifier: CE:C2:3A:C4:96:37:C2:94:90:C9:CD:A7:76:55:A7:C4:B4:7E:FB:6D
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial: 019935007AFF77A35222D07A0932B28D385B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number: 0B21
Signing time: Wed 10 Sep 2025 19:00:47 +0000
Manifest this update: Wed 10 Sep 2025 19:00:47 +0000
Manifest next update: Thu 11 Sep 2025 19:00:47 +0000
Files and hashes: 1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: 35ucddWc+A10ZiO9KrXsyF9JjNJcPgyHEB4dsVlFNSk=)
2: lxXNUCeQItpUU-WIqT27d6PPlu0.roa (hash: gRV2uGVItKOTTis9BRa/lRn5duot/VIpG4JMEM2dMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:7a:ff:77:a3:52:22:d0:7a:09:32:b2:8d:38:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Validity
Not Before: Sep 10 19:00:47 2025 GMT
Not After : Sep 11 19:00:47 2025 GMT
Subject: CN=cec23ac49637c29490c9cda77655a7c4b47efb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:8f:52:48:39:2b:b9:09:75:18:e3:5c:35:
c4:18:62:ce:fe:14:70:2f:6a:3a:37:9b:cc:85:4f:
96:41:4f:26:49:2d:ac:ae:28:cf:03:cb:d6:cb:18:
27:dd:98:ad:5c:00:fb:fb:27:68:b6:40:c4:50:43:
ba:bd:ef:68:da:43:1c:c7:08:46:9f:0b:a7:e7:d7:
2e:73:0c:f4:2d:89:f6:1b:3c:81:c0:d8:a5:6b:e3:
53:86:58:91:cc:26:93:8a:13:50:e8:23:73:9c:b9:
03:bc:62:e7:b2:9f:7f:08:c7:6b:d2:78:b7:28:b4:
df:5f:f4:4b:79:6f:eb:7b:ca:72:e2:3d:4e:b7:70:
57:ee:c2:80:36:d3:f4:4b:63:ed:6b:17:5f:fd:0f:
e6:40:47:c5:10:14:05:f3:70:0c:20:f8:c3:45:44:
c7:d8:04:ff:27:82:e9:34:47:de:98:d6:ea:1b:8b:
8d:df:0f:06:90:03:30:f5:28:99:2d:b8:ad:b5:3c:
16:ad:45:e5:e1:e7:09:5f:dc:9d:83:f5:04:0c:f8:
3c:bc:e4:3a:bb:71:fe:40:ba:23:76:7b:be:18:a5:
d4:20:33:0f:a2:b4:8b:3f:df:a5:78:76:9c:d1:d6:
b0:f3:7c:a5:8a:b1:7a:4f:69:94:0a:b2:48:46:93:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C2:3A:C4:96:37:C2:94:90:C9:CD:A7:76:55:A7:C4:B4:7E:FB:6D
X509v3 Authority Key Identifier:
keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9b:b6:7c:76:19:f4:df:af:3b:32:16:89:45:f3:6b:eb:af:
66:fb:c6:a8:69:af:4a:53:ef:ba:ff:ec:84:e7:91:0a:af:34:
70:89:ad:56:c2:54:0e:56:6b:d5:d2:9b:b2:2d:5f:fd:00:a3:
60:45:55:16:d1:7b:e5:3e:c1:27:93:a0:cf:de:59:37:8b:2f:
8f:4e:2d:7a:01:3e:bc:8c:f0:61:66:71:49:05:24:46:b5:da:
ce:cb:9c:0a:7a:1c:3b:12:74:12:58:12:fc:c3:4b:04:4b:68:
ee:46:b9:ef:d5:17:56:d2:9d:35:93:9a:2b:1c:67:a6:fa:cd:
22:50:70:75:b9:fc:02:2f:0b:b1:a1:de:05:cf:69:f3:7f:3f:
d6:60:b0:f9:5f:9d:b5:98:60:fe:c7:b0:df:cc:5c:ea:63:3c:
04:70:fa:e3:e7:02:0e:55:bd:50:7c:80:d0:df:95:4a:ec:4b:
f8:c5:fc:d8:cf:78:3f:8c:c0:4f:06:a1:4f:ac:d8:34:05:ab:
c5:aa:e2:37:61:78:2b:56:8c:b7:d1:6a:79:fd:f9:c7:8e:da:
11:71:8a:5e:77:ce:0e:f8:e5:ff:42:b2:8f:a1:df:00:6d:ae:
3e:38:c3:86:7e:e2:05:de:6d:23:4d:dd:a3:95:01:3b:12:d6:
71:f1:45:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1AHr/d6NSItB6CTKyjThbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjliYWQzMDYxODMyZGU5YjdkN2MzNzM3MzdmNDM0NmM2
YzA2ZTYwHhcNMjUwOTEwMTkwMDQ3WhcNMjUwOTExMTkwMDQ3WjAzMTEwLwYDVQQD
EyhjZWMyM2FjNDk2MzdjMjk0OTBjOWNkYTc3NjU1YTdjNGI0N2VmYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrqPUkg5K7kJdRjjXDXEGGLO/hRw
L2o6N5vMhU+WQU8mSS2srijPA8vWyxgn3ZitXAD7+ydotkDEUEO6ve9o2kMcxwhG
nwun59cucwz0LYn2GzyBwNila+NThliRzCaTihNQ6CNznLkDvGLnsp9/CMdr0ni3
KLTfX/RLeW/re8py4j1Ot3BX7sKANtP0S2Ptaxdf/Q/mQEfFEBQF83AMIPjDRUTH
2AT/J4LpNEfemNbqG4uN3w8GkAMw9SiZLbittTwWrUXl4ecJX9ydg/UEDPg8vOQ6
u3H+QLojdnu+GKXUIDMPorSLP9+leHac0daw83ylirF6T2mUCrJIRpP07wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7COsSWN8KUkMnNp3ZVp8S0fvttMB8GA1UdIwQY
MBaAFOdputMGGDLem318Nzc39DRsbAbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMWJjZGEtOTI3MC00M2EzLWJhYWUt
MmNjOGRjNGYwMjIwLzEvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMWJjZGEtOTI3MC00M2EzLWJhYWUtMmNjOGRjNGYwMjIw
LzEvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5u2fHYZ
9N+vOzIWiUXza+uvZvvGqGmvSlPvuv/shOeRCq80cImtVsJUDlZr1dKbsi1f/QCj
YEVVFtF75T7BJ5Ogz95ZN4svj04tegE+vIzwYWZxSQUkRrXazsucCnocOxJ0ElgS
/MNLBEto7ka579UXVtKdNZOaKxxnpvrNIlBwdbn8Ai8LsaHeBc9p838/1mCw+V+d
tZhg/sew38xc6mM8BHD64+cCDlW9UHyA0N+VSuxL+MX82M94P4zATwahT6zYNAWr
xariN2F4K1aMt9Fqef35x47aEXGKXnfODvjl/0Kyj6HfAG2uPjjDhn7iBd5tI03d
o5UBOxLWcfFFow==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:21:49 2025 by rpki-client