Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.mft
File: 0j-srhXcQXxpxcjqpKwlK94JFJk.mft (raw, json)
Hash identifier: Wxgkif9gFY42d7wVlzncCDHF2VZvIjkg/zUgDYWCi9g=
Subject key identifier: D0:43:40:80:37:50:FA:08:08:6A:29:D0:4C:D4:C5:91:BF:E5:FF:BF
Authority key identifier: D2:3F:AC:AE:15:DC:41:7C:69:C5:C8:EA:A4:AC:25:2B:DE:09:14:99
Certificate issuer: /CN=d23facae15dc417c69c5c8eaa4ac252bde091499
Certificate serial: 019922C3C0E5F71EF5384CEC3D75E9D94493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j-srhXcQXxpxcjqpKwlK94JFJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.mft
Manifest number: 35
Signing time: Sun 07 Sep 2025 06:01:18 +0000
Manifest this update: Sun 07 Sep 2025 06:01:18 +0000
Manifest next update: Mon 08 Sep 2025 06:01:18 +0000
Files and hashes: 1: 0j-srhXcQXxpxcjqpKwlK94JFJk.crl (hash: Tm2ofCfk2V3ShMeqgMz6ZRPt5JwUgCZ6/FNzJ7sSygA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j-srhXcQXxpxcjqpKwlK94JFJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:c0:e5:f7:1e:f5:38:4c:ec:3d:75:e9:d9:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23facae15dc417c69c5c8eaa4ac252bde091499
Validity
Not Before: Sep 7 06:01:18 2025 GMT
Not After : Sep 8 06:01:18 2025 GMT
Subject: CN=d04340803750fa08086a29d04cd4c591bfe5ffbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:7a:27:01:5c:b4:05:bf:f1:11:ef:f8:fe:
9d:9e:46:11:51:3e:0c:0f:a4:5e:86:b3:52:fc:f5:
94:34:ec:1f:4d:d4:0a:2c:8d:60:be:97:bc:82:3f:
ea:28:46:c6:b4:0d:0d:8a:a3:1a:62:16:ae:89:80:
9d:65:6b:2e:69:57:a1:71:67:15:0a:ef:55:bc:3f:
b6:5d:82:1f:42:fb:40:23:a8:78:ac:34:a4:0b:49:
9a:40:59:34:3d:5b:fa:dc:9e:a1:fb:ca:98:a8:ff:
f8:78:c0:9e:07:0e:42:b0:11:e5:89:4e:1f:0f:46:
60:ed:a9:d6:c4:ce:72:1a:4c:c1:8b:fd:2c:11:a3:
2a:14:03:f2:6a:bd:b1:0b:fc:46:10:93:1e:95:7b:
64:72:5a:3a:d3:8b:83:37:59:2d:ad:64:e1:6f:d7:
28:8e:3b:80:e3:4e:4c:69:4d:dd:c5:90:b1:d4:db:
3f:65:51:94:85:c3:21:25:4d:30:9e:a1:1e:c0:09:
0e:4b:05:26:e2:db:4c:a3:3b:4c:41:b0:25:8f:60:
26:64:0b:0b:8a:0c:2c:44:47:18:cd:42:95:cf:7b:
8a:3b:c4:55:c5:29:4c:2c:67:d1:ad:07:d1:6f:17:
3b:85:32:12:6a:14:11:ff:60:c3:b9:54:67:f5:4d:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:43:40:80:37:50:FA:08:08:6A:29:D0:4C:D4:C5:91:BF:E5:FF:BF
X509v3 Authority Key Identifier:
keyid:D2:3F:AC:AE:15:DC:41:7C:69:C5:C8:EA:A4:AC:25:2B:DE:09:14:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j-srhXcQXxpxcjqpKwlK94JFJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f9adb0-84d2-4600-a462-b07fa87b2471/1/0j-srhXcQXxpxcjqpKwlK94JFJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5e:63:6f:e5:8e:07:48:b0:bb:d6:cd:86:60:cf:34:7d:15:
55:a3:12:70:49:e4:b2:31:3c:8c:9c:fe:2f:86:64:d3:88:a9:
c6:3e:41:35:d4:07:f3:b9:8c:aa:1c:fe:21:11:35:b6:68:85:
fc:a4:05:07:98:9d:cb:b5:2e:eb:71:8b:88:56:38:be:be:f9:
02:b0:f2:c0:13:ab:92:ce:ba:59:39:32:64:ee:94:e9:df:8c:
a8:e3:3a:03:b0:b4:f5:cc:41:bb:21:39:b2:ef:09:e7:66:9f:
91:ff:44:99:c1:e9:1e:7e:b8:d0:1a:bb:f4:ab:2c:1a:07:c8:
42:13:2f:e5:ac:d9:af:27:02:68:55:5c:41:56:44:0d:3e:a7:
a7:41:e1:6e:f0:7b:29:fd:80:58:18:04:81:d7:f7:d3:3a:66:
08:a3:76:16:51:75:59:0a:9a:0e:87:05:cc:2b:f3:99:be:46:
b6:58:de:7d:c7:b0:3b:33:05:84:f4:81:87:9d:ba:77:4e:cb:
91:6e:d4:c5:d2:4e:34:f9:30:e3:71:05:5d:c4:9c:f0:e1:05:
87:ba:ab:38:ee:4b:f2:dd:67:a8:6b:2c:e6:a6:f3:7c:7d:15:
67:fc:0e:8e:56:19:7d:a6:80:1a:d6:88:05:77:82:56:6e:5f:
50:6b:60:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw8Dl9x71OEzsPXXp2USTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyM2ZhY2FlMTVkYzQxN2M2OWM1YzhlYWE0YWMyNTJiZGUw
OTE0OTkwHhcNMjUwOTA3MDYwMTE4WhcNMjUwOTA4MDYwMTE4WjAzMTEwLwYDVQQD
EyhkMDQzNDA4MDM3NTBmYTA4MDg2YTI5ZDA0Y2Q0YzU5MWJmZTVmZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaB6JwFctAW/8RHv+P6dnkYRUT4M
D6RehrNS/PWUNOwfTdQKLI1gvpe8gj/qKEbGtA0NiqMaYhauiYCdZWsuaVehcWcV
Cu9VvD+2XYIfQvtAI6h4rDSkC0maQFk0PVv63J6h+8qYqP/4eMCeBw5CsBHliU4f
D0Zg7anWxM5yGkzBi/0sEaMqFAPyar2xC/xGEJMelXtkclo604uDN1ktrWThb9co
jjuA405MaU3dxZCx1Ns/ZVGUhcMhJU0wnqEewAkOSwUm4ttMoztMQbAlj2AmZAsL
igwsREcYzUKVz3uKO8RVxSlMLGfRrQfRbxc7hTISahQR/2DDuVRn9U0+SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBDQIA3UPoICGop0EzUxZG/5f+/MB8GA1UdIwQY
MBaAFNI/rK4V3EF8acXI6qSsJSveCRSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGotc3JoWGNRWHhweGNqcXBLd2xLOTRKRkprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mOWFkYjAtODRkMi00NjAwLWE0NjIt
YjA3ZmE4N2IyNDcxLzEvMGotc3JoWGNRWHhweGNqcXBLd2xLOTRKRkprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mOWFkYjAtODRkMi00NjAwLWE0NjItYjA3ZmE4N2IyNDcx
LzEvMGotc3JoWGNRWHhweGNqcXBLd2xLOTRKRkprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI15jb+WO
B0iwu9bNhmDPNH0VVaMScEnksjE8jJz+L4Zk04ipxj5BNdQH87mMqhz+IRE1tmiF
/KQFB5idy7Uu63GLiFY4vr75ArDywBOrks66WTkyZO6U6d+MqOM6A7C09cxBuyE5
su8J52afkf9EmcHpHn640Bq79KssGgfIQhMv5azZrycCaFVcQVZEDT6np0HhbvB7
Kf2AWBgEgdf30zpmCKN2FlF1WQqaDocFzCvzmb5GtljefcewOzMFhPSBh526d07L
kW7UxdJONPkw43EFXcSc8OEFh7qrOO5L8t1nqGss5qbzfH0VZ/wOjlYZfaaAGtaI
BXeCVm5fUGtggw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:27 2025 by rpki-client