Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: HqOSSb42SlTgAFWBvOoaBfWPhgRWBq73A3BWfwLew0g=
Subject key identifier: F3:20:B1:CB:44:DC:CC:03:9E:FF:A0:B8:DB:58:89:39:EC:1B:55:97
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 019935005E9022DF438B4BD95EC17367E424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 19:00:40 +0000
Manifest this update: Wed 10 Sep 2025 19:00:40 +0000
Manifest next update: Thu 11 Sep 2025 19:00:40 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: cJbRyiawOgj7AO3k3F/nWvN2qZic0Z5Swlw8NB+O56g=)
2: lIHvPze8MhW65ATICPZrXtfvWLg.roa (hash: bg+JonT/EML15sUdW/ANznJHTOv/3C3HqVEO6q5ovAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:5e:90:22:df:43:8b:4b:d9:5e:c1:73:67:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Sep 10 19:00:40 2025 GMT
Not After : Sep 11 19:00:40 2025 GMT
Subject: CN=f320b1cb44dccc039effa0b8db588939ec1b5597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:b8:46:7c:96:42:79:54:0c:c7:80:d6:4d:
f4:07:2d:3e:4c:b3:b0:c1:65:a5:28:2e:3d:02:43:
2c:af:66:60:42:7c:f2:2e:df:08:a5:05:0d:60:49:
52:de:65:28:d6:85:e1:6c:db:eb:7e:5b:c6:0f:34:
75:66:3f:f2:b2:7e:2d:7c:8d:81:5e:b1:7d:65:0f:
09:dd:7a:d5:95:03:97:6f:45:f2:5a:34:e8:c9:bc:
6d:fe:66:4e:b5:8c:43:c8:d5:24:05:78:b5:32:e4:
fa:94:0f:49:f5:69:db:45:f0:0f:10:58:63:46:cf:
66:29:08:5a:83:52:84:ba:68:7c:47:32:66:57:91:
93:56:b5:15:4d:68:01:a2:97:29:a2:c7:32:91:40:
37:7a:f7:9c:6b:7f:5c:44:90:fe:ff:2f:64:5c:46:
d2:c2:82:4b:70:ba:87:50:fa:d9:5e:12:bb:21:9d:
ce:b7:85:24:ad:02:fd:8f:ee:9c:58:c9:63:45:bb:
fe:66:be:03:f5:ac:f1:35:27:f9:69:ac:19:d8:04:
5d:fb:d2:a5:47:8f:31:04:ab:96:79:e7:e7:1f:1b:
85:76:e3:0d:b8:3b:e9:d7:cf:05:0d:7b:86:e2:8a:
02:aa:7b:e4:61:31:13:23:0b:f0:ac:b1:83:09:86:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:20:B1:CB:44:DC:CC:03:9E:FF:A0:B8:DB:58:89:39:EC:1B:55:97
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0e:1e:3e:48:df:76:61:58:dc:ad:ed:db:d9:4f:98:1f:46:
c2:81:cc:96:99:d3:ba:9d:5a:c1:ac:e0:02:6b:c5:76:03:a0:
82:8a:74:30:d2:f2:27:24:f8:1a:0e:0a:fe:7b:52:99:5b:6b:
0e:05:da:56:9e:e7:18:ab:1f:16:68:4f:68:2c:e4:e2:92:be:
db:85:85:40:96:cb:34:66:39:22:25:6f:15:cc:d3:9d:21:36:
35:aa:01:8a:6d:71:30:06:26:7c:99:54:cd:c8:dd:e4:3f:ab:
7a:2c:6d:d4:e7:e5:b1:36:1c:92:59:ef:96:78:0c:10:83:d8:
6f:c4:69:74:ff:d7:c2:9c:5f:88:00:35:85:83:da:f0:b8:92:
b7:3f:80:70:7e:a9:cc:12:b8:ec:92:8e:d9:44:7f:9c:17:ef:
14:23:1c:88:13:b8:a7:4b:ae:5b:2c:b9:13:bb:ea:65:92:e7:
f5:3b:7b:5b:f0:8b:fa:80:e6:fc:8f:44:c0:3c:08:b3:89:ed:
47:bf:5c:2e:93:98:4b:7e:46:0c:84:56:92:9e:a5:7a:df:03:
79:f3:58:89:9b:7e:55:fb:d1:b3:4a:1d:c1:94:70:63:37:2d:
53:5d:05:01:b2:da:69:aa:5d:f9:09:a7:f3:e4:0c:2b:92:2d:
48:5e:b6:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1AF6QIt9Di0vZXsFzZ+QkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODYyN2UzNmE0ZTE2YmRjMzlmMGI1NTBkNzRmZDcxZTQ0
MmQyYzIwHhcNMjUwOTEwMTkwMDQwWhcNMjUwOTExMTkwMDQwWjAzMTEwLwYDVQQD
EyhmMzIwYjFjYjQ0ZGNjYzAzOWVmZmEwYjhkYjU4ODkzOWVjMWI1NTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsly4RnyWQnlUDMeA1k30By0+TLOw
wWWlKC49AkMsr2ZgQnzyLt8IpQUNYElS3mUo1oXhbNvrflvGDzR1Zj/ysn4tfI2B
XrF9ZQ8J3XrVlQOXb0XyWjToybxt/mZOtYxDyNUkBXi1MuT6lA9J9WnbRfAPEFhj
Rs9mKQhag1KEumh8RzJmV5GTVrUVTWgBopcposcykUA3eveca39cRJD+/y9kXEbS
woJLcLqHUPrZXhK7IZ3Ot4UkrQL9j+6cWMljRbv+Zr4D9azxNSf5aawZ2ARd+9Kl
R48xBKuWeefnHxuFduMNuDvp188FDXuG4ooCqnvkYTETIwvwrLGDCYZOQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMgsctE3MwDnv+guNtYiTnsG1WXMB8GA1UdIwQY
MBaAFPOGJ+NqTha9w58LVQ10/XHkQtLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zYThlNGMtOTIxNy00YjFmLWI2ZmQt
ODQyNDM3ZDI3Mjc5LzEvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zYThlNGMtOTIxNy00YjFmLWI2ZmQtODQyNDM3ZDI3Mjc5
LzEvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmw4ePkjf
dmFY3K3t29lPmB9GwoHMlpnTup1awazgAmvFdgOggop0MNLyJyT4Gg4K/ntSmVtr
DgXaVp7nGKsfFmhPaCzk4pK+24WFQJbLNGY5IiVvFczTnSE2NaoBim1xMAYmfJlU
zcjd5D+reixt1OflsTYcklnvlngMEIPYb8RpdP/XwpxfiAA1hYPa8LiStz+AcH6p
zBK47JKO2UR/nBfvFCMciBO4p0uuWyy5E7vqZZLn9Tt7W/CL+oDm/I9EwDwIs4nt
R79cLpOYS35GDIRWkp6let8DefNYiZt+VfvRs0odwZRwYzctU10FAbLaaapd+Qmn
8+QMK5ItSF62gw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 21:34:32 2025 by rpki-client