Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: sslZT5oWYskdO+DcOkzTAN+xr4opL7+iXgMZP1lyQZQ=
Subject key identifier: 83:21:7C:25:4D:42:90:31:EB:A8:28:53:A1:C1:FA:91:06:5C:21:63
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 0199161A7B51F381AA51C86E3E32FBD91009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 13A3
Signing time: Thu 04 Sep 2025 19:00:57 +0000
Manifest this update: Thu 04 Sep 2025 19:00:57 +0000
Manifest next update: Fri 05 Sep 2025 19:00:57 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: QJVspxoY2qWGUgGd2zwKc1ocSiLFDuINIH5CzgYU9Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1a:7b:51:f3:81:aa:51:c8:6e:3e:32:fb:d9:10:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: Sep 4 19:00:57 2025 GMT
Not After : Sep 5 19:00:57 2025 GMT
Subject: CN=83217c254d429031eba82853a1c1fa91065c2163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f9:e0:09:17:06:16:3b:66:a7:7f:06:75:c0:
0b:66:39:03:d9:ab:e0:7e:30:51:20:60:2f:0a:23:
65:8e:4c:0f:3e:76:e9:13:3a:3b:23:8e:c9:0e:97:
7c:6b:66:8a:af:c2:ab:6b:fb:93:6d:67:cb:6d:5d:
04:48:f1:bf:09:ac:c8:7f:68:90:ff:02:48:14:60:
49:6d:7e:80:21:ec:38:a1:b9:69:e3:63:ce:a2:dc:
71:20:d9:ef:c4:1e:88:51:85:d1:73:ee:2f:2e:f1:
6e:0e:c6:cb:5c:29:0e:a4:d4:5c:7b:6f:c4:6e:54:
b3:4f:0a:0a:50:bc:52:19:45:6b:3e:b0:9e:28:ff:
4b:64:17:44:63:17:4c:b0:0e:55:a2:55:34:21:7a:
e4:2a:88:e7:27:67:55:eb:88:e7:dd:6c:ed:e1:cb:
b0:20:36:62:26:65:46:bc:10:95:8e:5d:ac:02:0d:
9f:ce:f8:7e:8c:b6:b2:6b:c9:45:87:35:bb:af:81:
b6:76:7f:ec:16:d2:ca:86:bb:c0:f6:68:c8:fa:35:
1a:a3:a7:f5:22:dd:67:f7:b9:4f:92:8f:f9:ef:73:
29:88:80:68:0f:39:6f:40:5d:95:e0:25:8c:6b:23:
98:57:9a:8a:99:26:67:cc:c2:f5:a0:ea:ed:ad:91:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:7C:25:4D:42:90:31:EB:A8:28:53:A1:C1:FA:91:06:5C:21:63
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:55:9a:bc:64:d4:1f:eb:ac:04:a4:14:a5:d4:9b:be:f2:
8d:9d:1e:d9:7f:c9:0e:25:50:b6:4c:0a:8e:22:65:42:87:64:
9b:ad:5b:f2:f4:1e:5e:a7:f8:94:9b:c8:f9:d0:56:00:60:44:
75:32:b7:3a:54:e2:d3:ea:82:b2:fe:b9:3b:8c:fb:f0:92:30:
4c:76:f7:7a:b9:fe:02:be:51:dc:09:86:0b:59:18:7a:2a:a3:
e5:01:44:c7:64:ed:85:1d:d2:42:a6:c8:5d:e2:66:09:ee:bf:
c1:1d:4a:a4:c3:3b:db:68:3f:4d:2f:23:e7:24:e4:1a:05:5d:
86:fc:f4:b9:bb:41:85:21:0a:1b:87:66:14:b1:10:03:e1:e3:
46:7c:14:c4:27:48:a8:49:44:20:ba:d0:c3:df:8a:6d:ab:c2:
43:5c:96:8a:cf:77:06:33:d2:8b:1d:71:30:c7:ac:15:9e:d3:
09:e9:17:6a:fa:ac:27:48:cb:3e:7e:5f:7c:a2:d1:c1:23:d0:
7d:d9:d6:98:0d:35:ce:f2:89:d9:ae:ac:db:c1:7e:98:fe:dc:
84:5c:3c:62:0e:25:35:d7:ff:2f:18:65:fe:35:9c:18:dc:32:
71:8c:0b:d0:a2:74:a6:49:ca:a1:9e:18:b4:ec:87:5c:4c:69:
0d:73:9c:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWGntR84GqUchuPjL72RAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwM2Y2ZTgxNzZjOTExZGFhMmMzNDMwNTMzMTFmZTNmMDNk
N2Q2N2YwHhcNMjUwOTA0MTkwMDU3WhcNMjUwOTA1MTkwMDU3WjAzMTEwLwYDVQQD
Eyg4MzIxN2MyNTRkNDI5MDMxZWJhODI4NTNhMWMxZmE5MTA2NWMyMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fngCRcGFjtmp38GdcALZjkD2avg
fjBRIGAvCiNljkwPPnbpEzo7I47JDpd8a2aKr8Kra/uTbWfLbV0ESPG/CazIf2iQ
/wJIFGBJbX6AIew4oblp42POotxxINnvxB6IUYXRc+4vLvFuDsbLXCkOpNRce2/E
blSzTwoKULxSGUVrPrCeKP9LZBdEYxdMsA5VolU0IXrkKojnJ2dV64jn3Wzt4cuw
IDZiJmVGvBCVjl2sAg2fzvh+jLaya8lFhzW7r4G2dn/sFtLKhrvA9mjI+jUao6f1
It1n97lPko/573MpiIBoDzlvQF2V4CWMayOYV5qKmSZnzML1oOrtrZE5EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMhfCVNQpAx66goU6HB+pEGXCFjMB8GA1UdIwQY
MBaAFIA/boF2yRHaosNDBTMR/j8D19Z/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jY2E1ZTctYWEyYS00MTVjLWEwMDMt
MGUzNDQ3ZjcxYjVmLzEvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jY2E1ZTctYWEyYS00MTVjLWEwMDMtMGUzNDQ3ZjcxYjVm
LzEvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNVVmrxk
1B/rrASkFKXUm77yjZ0e2X/JDiVQtkwKjiJlQodkm61b8vQeXqf4lJvI+dBWAGBE
dTK3OlTi0+qCsv65O4z78JIwTHb3ern+Ar5R3AmGC1kYeiqj5QFEx2TthR3SQqbI
XeJmCe6/wR1KpMM722g/TS8j5yTkGgVdhvz0ubtBhSEKG4dmFLEQA+HjRnwUxCdI
qElEILrQw9+KbavCQ1yWis93BjPSix1xMMesFZ7TCekXavqsJ0jLPn5ffKLRwSPQ
fdnWmA01zvKJ2a6s28F+mP7chFw8Yg4lNdf/Lxhl/jWcGNwycYwL0KJ0pknKoZ4Y
tOyHXExpDXOcIQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:21 2025 by rpki-client