Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
File: x9CAN66dCrMNEA0U2WFLeNY5Srw.mft (raw, json)
Hash identifier: dCpytlaZGb2YxgP6HBqr1U78ucEMohVRLizsCYu4GIQ=
Subject key identifier: AA:4A:34:C2:4E:E4:14:0F:2A:09:18:1F:12:AC:56:C1:5E:29:6A:64
Authority key identifier: C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
Certificate issuer: /CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Certificate serial: 019922FA2EA07ADE9AFA742215DD642B4274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
Manifest number: 0220
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: x9CAN66dCrMNEA0U2WFLeNY5Srw.crl (hash: QLpET6ifv/RjR+FSpNIbtk76xggjIB1ZSlmS/cMrA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2e:a0:7a:de:9a:fa:74:22:15:dd:64:2b:42:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=aa4a34c24ee4140f2a09181f12ac56c15e296a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:04:7d:be:e8:60:49:81:43:ac:24:53:54:
bf:cd:b8:0a:05:45:a1:31:18:03:9f:eb:81:2c:4f:
fe:8d:3e:61:e2:a4:89:d0:7e:01:d7:63:d0:7d:0c:
a9:95:a3:a6:ca:ea:16:71:40:70:22:d9:79:28:fb:
2c:70:04:39:2c:1c:50:00:db:01:64:22:e4:61:0f:
85:86:40:9e:92:d0:3f:c2:7b:19:fa:3e:1c:8c:91:
b2:8e:6f:c2:2d:7b:6c:86:f7:72:28:a5:15:8a:77:
3c:fe:ea:c8:56:f6:e1:b2:a7:2a:e0:8b:ca:a4:c3:
48:87:5b:f0:25:d4:da:5b:48:4d:64:59:7d:5d:4e:
2c:c2:57:38:84:e1:46:4a:f6:ef:e9:4e:cf:7b:c9:
8d:27:25:57:be:77:c1:f8:a3:ca:8b:77:57:18:bc:
0f:3d:8d:4b:b4:44:40:09:d1:d8:62:7d:47:ee:a6:
82:7c:7b:cb:44:3a:32:40:40:0d:5c:85:8c:bf:46:
fb:a3:f0:76:fb:4a:86:f6:4d:c4:bb:a7:8a:3a:59:
5f:ad:b7:6f:0b:b9:3e:7c:4d:4f:9b:b6:5b:e6:2f:
4c:3c:b7:32:b6:7e:32:7b:c5:da:eb:67:1c:fc:bd:
48:12:0b:b0:4c:da:f6:a2:99:12:59:0c:17:e7:f1:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4A:34:C2:4E:E4:14:0F:2A:09:18:1F:12:AC:56:C1:5E:29:6A:64
X509v3 Authority Key Identifier:
keyid:C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:91:56:92:2c:0b:38:37:52:0e:ba:8c:04:b4:cf:ab:ec:66:
8d:17:10:5a:7e:21:80:cb:99:aa:f6:c5:e6:7a:ad:c1:81:7e:
9f:e7:ce:38:4a:43:19:37:b8:56:09:fe:9f:e9:10:88:16:79:
b3:67:3d:4d:f9:9d:cf:4e:99:87:59:aa:3f:72:42:5c:27:7a:
3f:95:f3:a8:1b:48:c2:4c:90:e0:af:df:a6:18:06:c5:dd:48:
1e:05:e5:41:0b:09:1a:2e:c6:aa:82:4a:1f:dc:77:e6:ce:3b:
88:45:3e:bd:35:e4:d4:1d:30:a4:28:24:2e:37:ed:49:ca:2c:
98:fd:4b:00:18:60:10:b6:70:0e:26:44:ac:7b:6f:58:e0:d2:
17:9a:15:d4:39:85:f3:0b:eb:d5:a6:9a:af:a8:29:3b:1a:1e:
7a:a5:9e:78:27:9d:ff:40:f5:58:ea:6e:fc:9d:23:73:b4:12:
6a:19:a9:26:91:26:9b:3c:df:7f:14:4f:32:cd:af:34:b9:91:
d4:f7:43:a4:e6:cf:56:21:bb:4c:bb:5f:0f:a8:cf:4a:55:46:
c8:b9:52:b6:af:2a:8f:0b:bc:9b:d0:5c:15:4a:fb:74:15:5d:
9e:82:24:52:03:88:15:65:3c:c8:b0:68:29:76:6c:9c:8e:4d:
7a:70:f0:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+i6get6a+nQiFd1kK0J0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZDA4MDM3YWU5ZDBhYjMwZDEwMGQxNGQ5NjE0Yjc4ZDYz
OTRhYmMwHhcNMjUwOTA3MDcwMDQ1WhcNMjUwOTA4MDcwMDQ1WjAzMTEwLwYDVQQD
EyhhYTRhMzRjMjRlZTQxNDBmMmEwOTE4MWYxMmFjNTZjMTVlMjk2YTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI0Efb7oYEmBQ6wkU1S/zbgKBUWh
MRgDn+uBLE/+jT5h4qSJ0H4B12PQfQyplaOmyuoWcUBwItl5KPsscAQ5LBxQANsB
ZCLkYQ+FhkCektA/wnsZ+j4cjJGyjm/CLXtshvdyKKUVinc8/urIVvbhsqcq4IvK
pMNIh1vwJdTaW0hNZFl9XU4swlc4hOFGSvbv6U7Pe8mNJyVXvnfB+KPKi3dXGLwP
PY1LtERACdHYYn1H7qaCfHvLRDoyQEANXIWMv0b7o/B2+0qG9k3Eu6eKOllfrbdv
C7k+fE1Pm7Zb5i9MPLcytn4ye8Xa62cc/L1IEguwTNr2opkSWQwX5/GZ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpKNMJO5BQPKgkYHxKsVsFeKWpkMB8GA1UdIwQY
MBaAFMfQgDeunQqzDRANFNlhS3jWOUq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85MGY2MWItOTU0Mi00NDMzLTkxM2Ut
M2U5YThmYmVhYWE1LzEveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85MGY2MWItOTU0Mi00NDMzLTkxM2UtM2U5YThmYmVhYWE1
LzEveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZFWkiwL
ODdSDrqMBLTPq+xmjRcQWn4hgMuZqvbF5nqtwYF+n+fOOEpDGTe4Vgn+n+kQiBZ5
s2c9Tfmdz06Zh1mqP3JCXCd6P5XzqBtIwkyQ4K/fphgGxd1IHgXlQQsJGi7GqoJK
H9x35s47iEU+vTXk1B0wpCgkLjftScosmP1LABhgELZwDiZErHtvWODSF5oV1DmF
8wvr1aaar6gpOxoeeqWeeCed/0D1WOpu/J0jc7QSahmpJpEmmzzffxRPMs2vNLmR
1PdDpObPViG7TLtfD6jPSlVGyLlStq8qjwu8m9BcFUr7dBVdnoIkUgOIFWU8yLBo
KXZsnI5NenDwng==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:25 2025 by rpki-client