Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
File: AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft (raw, json)
Hash identifier: yiGZOs7qBw7zUe9XoY6VW6fhAONVKW4M1Ekb+6mnFZc=
Subject key identifier: D7:F4:64:EA:BA:3D:D7:FD:5B:88:6A:0D:50:F0:D5:64:27:BD:37:E4
Authority key identifier: 02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
Certificate issuer: /CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Certificate serial: 019921B09DC194134496BFE195B3E7397A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
Manifest number: 07EC
Signing time: Sun 07 Sep 2025 01:00:46 +0000
Manifest this update: Sun 07 Sep 2025 01:00:46 +0000
Manifest next update: Mon 08 Sep 2025 01:00:46 +0000
Files and hashes: 1: AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl (hash: c0J8pECSBVrlrTQFYO9Ny57o4iKR1gSl/JA2X6/DvkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:9d:c1:94:13:44:96:bf:e1:95:b3:e7:39:7a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Validity
Not Before: Sep 7 01:00:46 2025 GMT
Not After : Sep 8 01:00:46 2025 GMT
Subject: CN=d7f464eaba3dd7fd5b886a0d50f0d56427bd37e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:1c:f3:62:b0:af:de:f2:d5:1f:01:67:15:
e7:2d:99:60:a4:5c:4e:b0:40:bd:12:08:54:d9:9a:
91:32:05:dd:6a:01:97:c2:5f:50:dd:87:bd:9b:bb:
df:88:3a:c3:ed:33:02:e4:f0:5b:ee:b8:79:82:62:
04:d3:57:7a:49:2e:c8:e3:86:c9:6f:cb:52:7e:b5:
b9:e0:e4:2b:bb:77:2c:e7:25:ad:fd:15:98:5d:9c:
a8:9c:03:23:65:8a:04:80:c9:7a:bc:32:d0:37:1b:
a8:92:a7:86:7f:f6:4d:80:6a:56:ac:81:a5:8e:31:
7f:1d:97:40:ac:19:8e:21:c5:33:a8:26:07:04:a8:
a2:8a:c8:8c:cb:34:6f:23:92:a8:46:c9:81:0d:64:
a8:a7:cb:d9:94:05:4d:13:9e:1e:5d:db:05:ad:7f:
d5:44:9c:2b:2b:1e:56:83:eb:c7:58:3c:ca:71:a5:
9a:25:3f:00:96:61:ff:58:c3:25:28:f1:9a:3b:2f:
9e:57:9d:a3:8d:c2:a7:be:8d:00:ef:41:98:43:82:
3e:6b:a7:d5:8c:48:21:b7:31:bf:bb:a8:f0:45:4b:
41:a8:bb:42:92:e0:f9:fa:4e:01:8f:e5:fb:02:ee:
9f:21:15:34:50:ea:5a:19:1e:dd:b9:81:52:28:cd:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F4:64:EA:BA:3D:D7:FD:5B:88:6A:0D:50:F0:D5:64:27:BD:37:E4
X509v3 Authority Key Identifier:
keyid:02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7f:33:c5:7b:7d:7a:46:0e:6b:1e:90:b4:0e:fd:90:36:59:
a3:53:41:f2:80:65:6d:c7:44:64:44:d0:6d:94:89:fe:dc:aa:
0f:3a:a4:a2:e1:c2:97:9c:8e:2d:ba:5a:86:b7:f1:d9:0d:95:
45:40:13:45:7b:e4:ab:c1:b5:26:9e:56:f7:79:6c:8c:bc:67:
eb:2c:75:24:56:73:dd:65:f6:ae:87:17:c6:01:36:c6:0b:55:
29:20:b8:93:67:d4:dc:6e:f7:e7:0b:1b:5c:21:7e:2f:2f:fd:
de:ad:f6:38:7e:97:6f:ea:12:9f:99:7f:f6:3a:ac:c7:25:30:
3c:a7:27:0e:a9:5e:f0:fc:6c:bd:f8:1f:59:70:b1:6f:6e:94:
87:8e:ea:1d:73:6d:95:7a:01:aa:a8:38:2a:77:be:9c:87:09:
e6:d9:21:f9:68:9b:59:13:68:62:e9:9b:dc:67:4e:c3:3b:a0:
81:80:d7:b2:d8:eb:39:dd:e6:f4:cf:81:24:ff:25:1f:a0:65:
15:37:ff:af:33:a7:a1:5c:e0:1b:7a:a5:df:9f:be:45:33:61:
84:8a:da:06:5d:eb:56:11:20:ac:f4:00:3d:a4:3b:ae:e7:c3:
ae:49:6d:a7:07:31:eb:62:70:29:d3:a8:0e:9d:26:f1:ed:ef:
bf:ac:9f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsJ3BlBNElr/hlbPnOXoEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzJiZDNiMzJhZWNhZjI2Y2E4ZWRiM2M4NzhmZTU3OTVm
MmFiNmYwHhcNMjUwOTA3MDEwMDQ2WhcNMjUwOTA4MDEwMDQ2WjAzMTEwLwYDVQQD
EyhkN2Y0NjRlYWJhM2RkN2ZkNWI4ODZhMGQ1MGYwZDU2NDI3YmQzN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqEc82Kwr97y1R8BZxXnLZlgpFxO
sEC9EghU2ZqRMgXdagGXwl9Q3Ye9m7vfiDrD7TMC5PBb7rh5gmIE01d6SS7I44bJ
b8tSfrW54OQru3cs5yWt/RWYXZyonAMjZYoEgMl6vDLQNxuokqeGf/ZNgGpWrIGl
jjF/HZdArBmOIcUzqCYHBKiiisiMyzRvI5KoRsmBDWSop8vZlAVNE54eXdsFrX/V
RJwrKx5Wg+vHWDzKcaWaJT8AlmH/WMMlKPGaOy+eV52jjcKnvo0A70GYQ4I+a6fV
jEghtzG/u6jwRUtBqLtCkuD5+k4Bj+X7Au6fIRU0UOpaGR7duYFSKM0sPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf0ZOq6Pdf9W4hqDVDw1WQnvTfkMB8GA1UdIwQY
MBaAFAJyvTsyrsrybKjts8h4/leV8qtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5LOU96S3V5dkpzcU8yenlIai1WNVh5cTI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZjJlNzUtZWNlZS00OGUxLThhZjYt
MTJkZWRlOWQwYzcxLzEvQW5LOU96S3V5dkpzcU8yenlIai1WNVh5cTI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9hZjJlNzUtZWNlZS00OGUxLThhZjYtMTJkZWRlOWQwYzcx
LzEvQW5LOU96S3V5dkpzcU8yenlIai1WNVh5cTI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq38zxXt9
ekYOax6QtA79kDZZo1NB8oBlbcdEZETQbZSJ/tyqDzqkouHCl5yOLbpahrfx2Q2V
RUATRXvkq8G1Jp5W93lsjLxn6yx1JFZz3WX2rocXxgE2xgtVKSC4k2fU3G735wsb
XCF+Ly/93q32OH6Xb+oSn5l/9jqsxyUwPKcnDqle8PxsvfgfWXCxb26Uh47qHXNt
lXoBqqg4Kne+nIcJ5tkh+WibWRNoYumb3GdOwzuggYDXstjrOd3m9M+BJP8lH6Bl
FTf/rzOnoVzgG3ql35++RTNhhIraBl3rVhEgrPQAPaQ7rufDrkltpwcx62JwKdOo
Dp0m8e3vv6yfQg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:41 2025 by rpki-client