Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
File: dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json)
Hash identifier: 8Prjm3bRLf3cXEbSSHWTlGRuGlkfOmwGdJUKPG3ZvoA=
Subject key identifier: 9D:D1:9D:48:E5:6B:D7:E5:51:54:A9:2A:0D:34:8F:C0:6A:72:4E:A7
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Certificate issuer: /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial: 019921E799D2F3CAD383696B2E20A0E00F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
Manifest number: 051B
Signing time: Sun 07 Sep 2025 02:00:50 +0000
Manifest this update: Sun 07 Sep 2025 02:00:50 +0000
Manifest next update: Mon 08 Sep 2025 02:00:50 +0000
Files and hashes: 1: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: CHE3MG/ni8bdJVq7y2uT/X9Aj58SV0pnmRBi3gBgfwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:99:d2:f3:ca:d3:83:69:6b:2e:20:a0:e0:0f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
Validity
Not Before: Sep 7 02:00:50 2025 GMT
Not After : Sep 8 02:00:50 2025 GMT
Subject: CN=9dd19d48e56bd7e55154a92a0d348fc06a724ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:0d:47:fe:c4:a7:36:24:d7:a5:e1:2f:15:
8a:8b:b7:d3:c0:43:8d:c9:4a:9e:00:d9:4d:a7:02:
a7:c6:21:82:65:2e:43:02:a7:d7:df:81:9c:fe:4f:
e8:e2:0f:31:df:b5:74:fe:87:17:54:eb:f6:4d:1c:
2a:0c:8f:bc:9e:44:9e:8d:2e:a0:7a:db:92:c1:4f:
14:80:8b:e0:ed:a1:05:a8:e0:73:32:1b:f5:f8:e5:
98:d1:dc:4f:b4:8b:bf:93:ed:29:de:db:24:41:cc:
86:40:f0:4a:b0:21:2d:04:31:43:9e:d3:71:f8:47:
5a:b9:2a:7b:79:54:8c:7d:28:b9:43:ed:07:fb:b2:
d4:4a:a0:87:c0:b1:25:31:fc:4e:7f:4d:ca:50:0d:
48:37:a0:b3:72:05:62:26:01:9f:54:2d:57:71:6c:
45:3e:a1:28:fe:d9:ad:9b:06:7e:be:fc:17:7e:4b:
87:61:a3:30:45:0f:ba:6f:95:f1:ce:80:ec:8c:ed:
92:08:c7:8e:25:06:f1:10:cf:ec:06:ce:d2:bd:fd:
1a:71:7e:36:00:a3:b4:b6:4c:f3:25:45:0a:8c:98:
11:e8:87:58:1a:95:9a:cd:c7:38:77:ad:6c:2c:9c:
f5:b6:72:9a:e7:bc:fd:ca:4b:94:7f:32:bf:4c:9c:
48:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:9D:48:E5:6B:D7:E5:51:54:A9:2A:0D:34:8F:C0:6A:72:4E:A7
X509v3 Authority Key Identifier:
keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9a:0c:d7:93:ea:44:88:c9:b3:fe:4d:ae:9c:81:f3:eb:a6:
10:7c:23:02:9a:ae:60:7d:42:35:a5:8f:81:10:e2:8f:5f:22:
f5:0b:8a:d9:b0:76:c1:d6:86:4a:fb:0d:fd:e4:29:19:9d:4d:
c3:43:3a:92:68:2a:22:d8:34:63:74:a3:e7:3e:42:cd:78:e8:
78:32:ee:e4:62:65:88:1f:4f:73:02:ac:23:b6:24:2e:19:c2:
65:77:cd:0a:62:62:31:b7:18:3c:ea:e9:49:12:aa:6a:95:d9:
c5:62:0a:1c:c6:61:61:08:ae:f4:66:62:49:26:ce:4a:45:eb:
df:ac:8c:31:91:f1:39:ee:f7:4b:85:b2:f6:cf:af:d7:c9:fd:
79:1f:35:cb:77:6a:4e:65:58:33:25:92:76:95:ed:55:3b:29:
1f:75:1b:48:4a:e8:e7:bc:51:f7:70:8b:2a:7d:28:37:1b:3d:
5a:59:4f:79:bd:b9:e1:85:37:27:7a:2f:f2:28:cb:64:de:27:
f1:56:d6:ca:0d:f8:27:f8:36:0a:aa:26:8d:5d:e2:9a:d9:6e:
45:49:e2:39:2b:3e:86:34:7f:b2:9f:dc:a6:35:5d:2e:4f:d9:
b2:fe:14:42:2c:09:bc:5b:1b:ca:ff:b3:72:00:ed:e6:60:bd:
4b:65:5b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh55nS88rTg2lrLiCg4A8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MmY2MmY3ZTg5OTgxNzQ0MTE4MDkzNWY0MmI4MmEzOTk4
MGEyZGMwHhcNMjUwOTA3MDIwMDUwWhcNMjUwOTA4MDIwMDUwWjAzMTEwLwYDVQQD
Eyg5ZGQxOWQ0OGU1NmJkN2U1NTE1NGE5MmEwZDM0OGZjMDZhNzI0ZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupsNR/7EpzYk16XhLxWKi7fTwEON
yUqeANlNpwKnxiGCZS5DAqfX34Gc/k/o4g8x37V0/ocXVOv2TRwqDI+8nkSejS6g
etuSwU8UgIvg7aEFqOBzMhv1+OWY0dxPtIu/k+0p3tskQcyGQPBKsCEtBDFDntNx
+EdauSp7eVSMfSi5Q+0H+7LUSqCHwLElMfxOf03KUA1IN6CzcgViJgGfVC1XcWxF
PqEo/tmtmwZ+vvwXfkuHYaMwRQ+6b5XxzoDsjO2SCMeOJQbxEM/sBs7Svf0acX42
AKO0tkzzJUUKjJgR6IdYGpWazcc4d61sLJz1tnKa57z9ykuUfzK/TJxIEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3RnUjla9flUVSpKg00j8Bqck6nMB8GA1UdIwQY
MBaAFHcvYvfomYF0QRgJNfQrgqOZgKLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNTBkMmItYTA4OC00MDFkLWI1NTkt
YTA2MWE4Yzc3ZjE2LzEvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xNTBkMmItYTA4OC00MDFkLWI1NTktYTA2MWE4Yzc3ZjE2
LzEvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZoM15Pq
RIjJs/5NrpyB8+umEHwjApquYH1CNaWPgRDij18i9QuK2bB2wdaGSvsN/eQpGZ1N
w0M6kmgqItg0Y3Sj5z5CzXjoeDLu5GJliB9PcwKsI7YkLhnCZXfNCmJiMbcYPOrp
SRKqapXZxWIKHMZhYQiu9GZiSSbOSkXr36yMMZHxOe73S4Wy9s+v18n9eR81y3dq
TmVYMyWSdpXtVTspH3UbSEro57xR93CLKn0oNxs9WllPeb254YU3J3ov8ijLZN4n
8VbWyg34J/g2CqomjV3imtluRUniOSs+hjR/sp/cpjVdLk/Zsv4UQiwJvFsbyv+z
cgDt5mC9S2Vbmg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:50 2025 by rpki-client