Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
File: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft (raw, json)
Hash identifier: pHONXiGqUOMSGF1DJ+gF2wlfhMhnKvaqPQ8hgm2Rm5w=
Subject key identifier: 8A:91:CB:FA:54:08:CB:C6:C2:C3:A8:A9:D8:8C:DE:BC:FC:21:79:73
Authority key identifier: E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
Certificate issuer: /CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Certificate serial: 0199239FC2120D0B628FC9D0213ADD5A7686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
Manifest number: 03D3
Signing time: Sun 07 Sep 2025 10:01:36 +0000
Manifest this update: Sun 07 Sep 2025 10:01:36 +0000
Manifest next update: Mon 08 Sep 2025 10:01:36 +0000
Files and hashes: 1: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl (hash: IPJ+Dbd3lm/WSk+wtQ/crFFplzj6b8dU49ISEF805vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c2:12:0d:0b:62:8f:c9:d0:21:3a:dd:5a:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Validity
Not Before: Sep 7 10:01:36 2025 GMT
Not After : Sep 8 10:01:36 2025 GMT
Subject: CN=8a91cbfa5408cbc6c2c3a8a9d88cdebcfc217973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:b4:c7:20:7c:08:ab:5f:bc:e4:f7:1f:93:
6a:fc:af:80:80:67:37:30:d5:da:33:b1:32:7a:5e:
95:05:f8:f9:ff:aa:5a:24:0a:ea:53:c1:38:bf:d5:
53:56:65:a6:da:62:25:d3:ca:d6:2b:b4:73:d6:53:
61:ba:74:24:b3:02:4a:74:e8:50:8f:d4:90:d7:7f:
65:a9:77:a0:0e:53:cb:f1:12:c3:d8:ae:e9:b6:15:
81:d4:09:6f:83:1f:33:bd:6e:1e:81:c9:0b:81:31:
32:c9:44:f8:12:62:2b:6b:a7:85:0f:1d:a7:8a:5f:
1e:74:98:0d:c8:04:3f:7a:c5:6d:20:c7:e8:b3:ad:
46:11:a4:b5:c4:b6:8a:cc:4e:a8:e9:7d:7e:1a:41:
0b:a0:52:23:88:ca:ca:58:2d:da:fd:b5:73:75:3d:
c3:37:21:9a:58:f1:b8:22:21:a2:85:d2:94:33:ed:
a6:c5:34:6a:7d:7a:f5:a1:0e:00:fd:8d:a6:ba:f5:
30:24:8a:2b:87:2f:c3:d3:b8:c1:73:93:59:5d:70:
a2:0d:9f:a9:50:62:2e:01:62:4b:e4:c6:6e:ec:96:
08:21:fc:f4:b2:de:73:c6:4b:ee:fb:97:ec:44:1e:
5b:99:43:23:3b:04:dd:f8:b0:04:32:62:fe:da:f2:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:91:CB:FA:54:08:CB:C6:C2:C3:A8:A9:D8:8C:DE:BC:FC:21:79:73
X509v3 Authority Key Identifier:
keyid:E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:95:ff:05:26:6e:27:8c:99:d1:f7:21:7a:2c:6a:f6:91:44:
fb:7c:bc:9e:14:6f:10:ea:f1:e1:c7:d6:51:8d:f9:04:45:39:
7f:0c:a6:d7:25:8c:16:71:be:c7:a5:1d:e0:5d:1a:83:28:dd:
0b:05:88:c8:2b:fb:c8:d2:71:58:d9:9f:60:0b:1a:06:e0:c4:
38:af:b7:1b:6b:64:8e:38:2f:21:52:2a:62:2c:67:15:28:f8:
22:57:e5:c8:78:be:28:9b:a5:95:0e:39:d2:b8:34:35:50:3a:
de:7f:cc:4c:aa:4e:9d:bc:18:12:d9:db:4c:f5:d1:26:f3:2c:
a2:24:46:98:ab:ba:2d:d3:52:38:12:4f:09:56:25:8d:70:21:
23:62:fd:f2:59:38:ee:de:b1:8c:ff:7c:30:07:ab:ad:fe:fb:
9f:d9:f5:23:de:60:40:de:d8:1d:d9:8e:a1:8e:cc:c4:c6:de:
7b:89:9a:58:23:d1:a4:f4:02:95:cf:0e:02:66:ca:fd:3e:3d:
65:55:d2:5e:e4:5d:8b:84:81:c8:d8:c4:28:b8:6d:8b:16:4b:
78:8a:27:3c:c5:bc:b9:ad:0b:c8:0a:45:7d:d8:4a:4f:7c:4a:
13:ec:cf:f8:38:b4:52:3b:dd:db:ff:2c:0a:a6:07:82:ff:81:
73:80:2e:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn8ISDQtij8nQITrdWnaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMjY4MWNmZDk3YzE2NDRlZmY3NTFlMGYxZTBhYTA1M2Mw
NWMwMGYwHhcNMjUwOTA3MTAwMTM2WhcNMjUwOTA4MTAwMTM2WjAzMTEwLwYDVQQD
Eyg4YTkxY2JmYTU0MDhjYmM2YzJjM2E4YTlkODhjZGViY2ZjMjE3OTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+i0xyB8CKtfvOT3H5Nq/K+AgGc3
MNXaM7Eyel6VBfj5/6paJArqU8E4v9VTVmWm2mIl08rWK7Rz1lNhunQkswJKdOhQ
j9SQ139lqXegDlPL8RLD2K7pthWB1Alvgx8zvW4egckLgTEyyUT4EmIra6eFDx2n
il8edJgNyAQ/esVtIMfos61GEaS1xLaKzE6o6X1+GkELoFIjiMrKWC3a/bVzdT3D
NyGaWPG4IiGihdKUM+2mxTRqfXr1oQ4A/Y2muvUwJIorhy/D07jBc5NZXXCiDZ+p
UGIuAWJL5MZu7JYIIfz0st5zxkvu+5fsRB5bmUMjOwTd+LAEMmL+2vKXxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqRy/pUCMvGwsOoqdiM3rz8IXlzMB8GA1UdIwQY
MBaAFOMmgc/ZfBZE7/dR4PHgqgU8BcAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jY2Y2M2YtZGU1Yi00OGNhLWFmMTUt
ZGMwZmU5ZDllMDk5LzEvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jY2Y2M2YtZGU1Yi00OGNhLWFmMTUtZGMwZmU5ZDllMDk5
LzEvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5X/BSZu
J4yZ0fcheixq9pFE+3y8nhRvEOrx4cfWUY35BEU5fwym1yWMFnG+x6Ud4F0agyjd
CwWIyCv7yNJxWNmfYAsaBuDEOK+3G2tkjjgvIVIqYixnFSj4IlflyHi+KJullQ45
0rg0NVA63n/MTKpOnbwYEtnbTPXRJvMsoiRGmKu6LdNSOBJPCVYljXAhI2L98lk4
7t6xjP98MAerrf77n9n1I95gQN7YHdmOoY7MxMbee4maWCPRpPQClc8OAmbK/T49
ZVXSXuRdi4SByNjEKLhtixZLeIonPMW8ua0LyApFfdhKT3xKE+zP+Di0Ujvd2/8s
CqYHgv+Bc4AugQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:25 2025 by rpki-client