Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
File: bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft (raw, json)
Hash identifier: K+SmhKYBb1ZFbsVvxhxUpmWsBlw9q8O+o3oUqFbzgIs=
Subject key identifier: D6:39:61:FE:B0:63:EC:2C:F9:40:C4:37:CA:E0:92:15:5D:AB:C2:E0
Authority key identifier: 6C:0D:27:F0:D1:30:FE:E6:7D:82:D5:98:2F:7C:93:4F:87:91:CD:F0
Certificate issuer: /CN=6c0d27f0d130fee67d82d5982f7c934f8791cdf0
Certificate serial: 01992330DE24F8D973BEF759EAD5090A6E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
Manifest number: 94
Signing time: Sun 07 Sep 2025 08:00:29 +0000
Manifest this update: Sun 07 Sep 2025 08:00:29 +0000
Manifest next update: Mon 08 Sep 2025 08:00:29 +0000
Files and hashes: 1: bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl (hash: LI9F/h0QXYlelnr4MVKFm9TmdJ+K3RP5TiHVBfXETno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:de:24:f8:d9:73:be:f7:59:ea:d5:09:0a:6e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0d27f0d130fee67d82d5982f7c934f8791cdf0
Validity
Not Before: Sep 7 08:00:29 2025 GMT
Not After : Sep 8 08:00:29 2025 GMT
Subject: CN=d63961feb063ec2cf940c437cae092155dabc2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:cb:ba:ea:38:54:6b:e7:b4:2c:ef:2d:fe:
6a:62:20:b3:1d:a0:fc:74:9e:18:d3:ba:45:f7:78:
e6:da:10:59:1f:03:12:8d:86:d3:1b:14:a5:f6:3f:
28:26:4e:ec:90:2c:e3:47:cf:c8:05:1b:b3:2f:9f:
80:e2:18:39:ce:f5:0f:dd:db:48:2b:82:ed:da:95:
2c:f7:1a:a2:41:31:f6:2a:8c:78:18:bf:f0:b4:78:
34:23:cd:9a:ab:96:9a:96:ae:07:28:bd:1d:19:34:
b3:7f:4a:ad:1d:fe:2e:03:85:94:40:9c:76:bd:83:
fb:06:a1:55:40:1f:c9:24:69:39:97:3f:dc:88:ea:
ab:f2:2a:d0:11:96:f3:58:c7:bb:5e:50:b9:8e:c9:
02:dd:99:9f:fc:b6:ad:e7:4a:23:f6:88:08:3e:20:
ca:57:da:b1:40:1c:f2:e1:4a:7d:52:57:a4:11:91:
db:ac:b8:2b:44:b5:f1:23:c9:20:ec:f4:da:d3:aa:
f7:5e:54:a3:57:9d:19:b9:41:34:9b:60:93:69:f1:
5f:4b:c5:16:c8:ad:d0:28:67:da:63:4b:bf:32:d8:
c4:93:07:3c:a6:e7:92:39:74:86:ad:17:cc:16:86:
08:b1:b6:f5:1c:39:0a:34:a0:28:00:2e:f4:64:63:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:39:61:FE:B0:63:EC:2C:F9:40:C4:37:CA:E0:92:15:5D:AB:C2:E0
X509v3 Authority Key Identifier:
keyid:6C:0D:27:F0:D1:30:FE:E6:7D:82:D5:98:2F:7C:93:4F:87:91:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:20:43:e0:d7:e7:af:5b:06:3a:5f:b3:4d:76:9f:d2:9c:b9:
bf:f6:e5:ae:2d:fa:33:b3:b0:53:8c:94:ae:51:15:ba:ec:86:
f4:24:f2:e8:e1:c3:f0:c4:44:08:f3:df:9f:19:54:ea:d6:1c:
ce:7e:34:de:48:d0:d9:c3:9f:cc:2b:61:cb:02:36:66:1f:39:
41:29:7d:b7:9c:32:92:e9:e5:c7:1d:bd:6a:82:1a:bd:4b:1b:
21:18:f2:25:99:bb:fe:7d:72:53:0b:c8:82:8d:0b:f8:1d:83:
79:81:f0:6a:71:09:6f:1a:f6:f3:1b:4a:69:dc:14:0f:67:da:
d4:cd:d7:b6:ba:90:76:d9:9f:d7:10:68:1d:61:26:ef:16:ba:
81:2d:e3:24:33:8b:4d:00:de:3d:90:6a:b0:c6:21:80:b2:de:
6d:bd:24:7b:f4:15:5a:a3:83:b1:c1:cb:bc:73:49:85:22:b8:
d0:2a:e6:cc:01:db:9b:8f:ac:45:6e:22:0f:de:c3:70:18:21:
56:57:28:1e:0e:16:d2:69:cd:fa:3e:19:d1:f6:a6:d4:c7:d2:
99:45:69:34:4d:55:40:fc:75:bd:e0:4a:e5:35:86:d5:2e:99:
84:84:09:4c:b6:60:e8:51:ce:97:bf:66:b2:18:19:6d:be:f8:
40:01:2c:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMN4k+NlzvvdZ6tUJCm4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMGQyN2YwZDEzMGZlZTY3ZDgyZDU5ODJmN2M5MzRmODc5
MWNkZjAwHhcNMjUwOTA3MDgwMDI5WhcNMjUwOTA4MDgwMDI5WjAzMTEwLwYDVQQD
EyhkNjM5NjFmZWIwNjNlYzJjZjk0MGM0MzdjYWUwOTIxNTVkYWJjMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/3Luuo4VGvntCzvLf5qYiCzHaD8
dJ4Y07pF93jm2hBZHwMSjYbTGxSl9j8oJk7skCzjR8/IBRuzL5+A4hg5zvUP3dtI
K4Lt2pUs9xqiQTH2Kox4GL/wtHg0I82aq5aalq4HKL0dGTSzf0qtHf4uA4WUQJx2
vYP7BqFVQB/JJGk5lz/ciOqr8irQEZbzWMe7XlC5jskC3Zmf/Lat50oj9ogIPiDK
V9qxQBzy4Up9UlekEZHbrLgrRLXxI8kg7PTa06r3XlSjV50ZuUE0m2CTafFfS8UW
yK3QKGfaY0u/MtjEkwc8pueSOXSGrRfMFoYIsbb1HDkKNKAoAC70ZGOsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY5Yf6wY+ws+UDEN8rgkhVdq8LgMB8GA1UdIwQY
MBaAFGwNJ/DRMP7mfYLVmC98k0+Hkc3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkEwbjhORXdfdVo5Z3RXWUwzeVRUNGVSemZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MjkyYzktMjRhYi00ZGJmLWJlYmUt
ODk2M2Q1MjcxZjljLzEvYkEwbjhORXdfdVo5Z3RXWUwzeVRUNGVSemZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85MjkyYzktMjRhYi00ZGJmLWJlYmUtODk2M2Q1MjcxZjlj
LzEvYkEwbjhORXdfdVo5Z3RXWUwzeVRUNGVSemZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyBD4Nfn
r1sGOl+zTXaf0py5v/blri36M7OwU4yUrlEVuuyG9CTy6OHD8MRECPPfnxlU6tYc
zn403kjQ2cOfzCthywI2Zh85QSl9t5wykunlxx29aoIavUsbIRjyJZm7/n1yUwvI
go0L+B2DeYHwanEJbxr28xtKadwUD2fa1M3XtrqQdtmf1xBoHWEm7xa6gS3jJDOL
TQDePZBqsMYhgLLebb0ke/QVWqODscHLvHNJhSK40CrmzAHbm4+sRW4iD97DcBgh
VlcoHg4W0mnN+j4Z0fam1MfSmUVpNE1VQPx1veBK5TWG1S6ZhIQJTLZg6FHOl79m
shgZbb74QAEsiA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:45 2025 by rpki-client