Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File: mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier: ycTQECcxjGexKJkDCoPPPjGvSvE+oMfUygt0wvgnZl8=
Subject key identifier: D6:4F:A7:0B:41:48:BB:3B:A2:53:C0:38:AD:A8:D9:C3:65:5E:4D:71
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer: /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial: 0199221ED9AA66121C5935540F166267387D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number: 1269
Signing time: Sun 07 Sep 2025 03:01:11 +0000
Manifest this update: Sun 07 Sep 2025 03:01:11 +0000
Manifest next update: Mon 08 Sep 2025 03:01:11 +0000
Files and hashes: 1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: jiVY6PtkDSoc4BcC3aeSqJapNw6uQJTKwxjYrWFU33c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d9:aa:66:12:1c:59:35:54:0f:16:62:67:38:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
Validity
Not Before: Sep 7 03:01:11 2025 GMT
Not After : Sep 8 03:01:11 2025 GMT
Subject: CN=d64fa70b4148bb3ba253c038ada8d9c3655e4d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:85:db:38:8a:2c:96:32:da:ff:40:04:ee:
9f:07:c8:dc:95:09:cf:fe:d8:5e:9d:f0:d9:0c:4d:
a8:1e:fa:30:99:37:d5:cf:68:6d:59:54:ac:4c:e4:
b4:58:d4:de:db:7d:c9:0b:72:da:6f:66:75:24:83:
be:75:a3:cf:d6:0b:8e:c5:d8:44:f9:2d:a0:bd:c4:
75:2d:9f:7c:71:92:08:fd:f2:e3:31:76:9d:93:9a:
2f:c6:10:ab:e2:39:ef:46:f4:36:fe:8c:81:34:df:
20:16:6d:88:09:9e:7f:44:7c:c3:d1:78:d4:8d:85:
b3:53:b2:f9:cb:40:91:b6:1d:03:34:98:49:4b:d7:
27:1a:75:70:d5:c1:2c:a2:9e:a9:33:07:a5:09:e8:
ba:42:c8:01:ee:69:25:3d:44:41:cc:ad:60:44:91:
7c:81:f5:88:5b:30:ea:4e:d0:37:96:26:c0:f5:b7:
e1:03:1a:f6:76:1d:1b:ef:f2:5d:29:92:5a:df:c9:
51:96:2c:9a:72:ab:ac:74:9b:40:b1:9f:1a:f4:db:
83:0f:52:11:97:7d:2e:22:a4:25:d1:50:4e:f0:f5:
31:6d:a9:04:ae:95:58:44:fe:f3:27:25:dd:dd:39:
c8:75:7d:85:fc:a7:ab:c1:ee:57:2f:3b:1c:02:66:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:A7:0B:41:48:BB:3B:A2:53:C0:38:AD:A8:D9:C3:65:5E:4D:71
X509v3 Authority Key Identifier:
keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:05:2e:f0:22:38:9e:f9:9e:b8:e5:eb:ba:e4:a2:c8:87:25:
ec:3c:40:4a:37:13:96:81:f8:00:a3:ef:9d:4d:c5:92:8f:a8:
f8:4f:af:38:be:ee:ff:2a:04:2d:12:97:2a:1d:cf:da:5b:49:
34:11:b8:16:c1:5e:7d:ec:c7:64:cb:ba:c4:5d:c1:b0:42:39:
6e:c5:c8:46:1a:51:94:dd:7f:da:fc:8e:cb:b9:01:de:fd:b3:
30:7e:9f:23:e9:bb:d0:06:53:13:9a:58:c5:e0:61:21:26:f1:
39:f9:77:de:1b:22:7c:13:fe:db:7e:95:d4:8d:7e:a9:ca:0d:
81:87:5b:74:10:66:33:d3:41:18:8e:d7:17:a6:18:6e:2a:48:
fe:58:d4:cf:eb:ee:79:2a:37:c5:ab:8c:ad:93:6d:99:4c:89:
97:0d:34:64:a1:6a:4b:dd:20:48:bf:12:c8:0d:07:58:a7:2c:
2a:90:cd:66:7f:18:82:df:c3:fd:05:20:d7:c8:83:d1:20:54:
3d:69:71:a9:ad:d0:d0:2c:3f:29:71:65:95:d9:bf:e9:6d:14:
f4:c6:6e:3d:84:1f:08:84:36:09:9d:02:a9:56:f7:cc:0f:e9:
e4:04:bf:0d:5c:05:2f:4d:f4:99:53:61:ef:a8:be:2c:6c:7c:
7a:cf:9b:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHtmqZhIcWTVUDxZiZzh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzI3YWE2ZTY4N2I0OTJkMjEyZjQ1MWRlYjg2MWVhMDFm
MTc1MjkwHhcNMjUwOTA3MDMwMTExWhcNMjUwOTA4MDMwMTExWjAzMTEwLwYDVQQD
EyhkNjRmYTcwYjQxNDhiYjNiYTI1M2MwMzhhZGE4ZDljMzY1NWU0ZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZKF2ziKLJYy2v9ABO6fB8jclQnP
/thenfDZDE2oHvowmTfVz2htWVSsTOS0WNTe233JC3Lab2Z1JIO+daPP1guOxdhE
+S2gvcR1LZ98cZII/fLjMXadk5ovxhCr4jnvRvQ2/oyBNN8gFm2ICZ5/RHzD0XjU
jYWzU7L5y0CRth0DNJhJS9cnGnVw1cEsop6pMwelCei6QsgB7mklPURBzK1gRJF8
gfWIWzDqTtA3libA9bfhAxr2dh0b7/JdKZJa38lRliyacqusdJtAsZ8a9NuDD1IR
l30uIqQl0VBO8PUxbakErpVYRP7zJyXd3TnIdX2F/Kerwe5XLzscAmajYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZPpwtBSLs7olPAOK2o2cNlXk1xMB8GA1UdIwQY
MBaAFJpyeqbmh7SS0hL0Ud64YeoB8XUpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzY2YmYtOGY1NS00ZTdmLWFlMjct
NzA4MjE4YTY2YjhmLzEvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMzY2YmYtOGY1NS00ZTdmLWFlMjctNzA4MjE4YTY2Yjhm
LzEvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQUu8CI4
nvmeuOXruuSiyIcl7DxASjcTloH4AKPvnU3Fko+o+E+vOL7u/yoELRKXKh3P2ltJ
NBG4FsFefezHZMu6xF3BsEI5bsXIRhpRlN1/2vyOy7kB3v2zMH6fI+m70AZTE5pY
xeBhISbxOfl33hsifBP+236V1I1+qcoNgYdbdBBmM9NBGI7XF6YYbipI/ljUz+vu
eSo3xauMrZNtmUyJlw00ZKFqS90gSL8SyA0HWKcsKpDNZn8Ygt/D/QUg18iD0SBU
PWlxqa3Q0Cw/KXFlldm/6W0U9MZuPYQfCIQ2CZ0CqVb3zA/p5AS/DVwFL030mVNh
76i+LGx8es+bqw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:48 2025 by rpki-client