Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: AOVCmiigo2oiolP7JvqSvDN8qXOg91PcI5CGutMuIe8=
Subject key identifier: DF:BB:ED:04:A9:7A:4D:7C:FA:45:97:35:B7:E9:B3:2C:DA:41:00:29
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 019923A0F0218434B0D1E794C7A1DDE9BAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0B40
Signing time: Sun 07 Sep 2025 10:02:53 +0000
Manifest this update: Sun 07 Sep 2025 10:02:53 +0000
Manifest next update: Mon 08 Sep 2025 10:02:53 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: Vvfo7fVabtaLX3DRwOalny0ScLxPgH2qi0AC6uMEhdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:f0:21:84:34:b0:d1:e7:94:c7:a1:dd:e9:ba:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Sep 7 10:02:53 2025 GMT
Not After : Sep 8 10:02:53 2025 GMT
Subject: CN=dfbbed04a97a4d7cfa459735b7e9b32cda410029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:5b:ac:cc:a7:81:e6:d6:9f:73:4b:4b:45:
7f:3e:55:ca:47:27:36:49:b2:e7:3f:13:b2:27:6d:
cc:05:f7:bf:c3:e1:16:14:d1:21:67:8e:19:b0:21:
5c:46:cc:11:34:c8:a2:7f:44:2b:3c:e9:a5:89:49:
46:52:dc:a9:86:a2:9d:f9:08:f6:19:3c:12:1b:20:
94:51:73:1f:7c:bb:12:82:ff:f8:42:f5:fe:ea:fb:
f9:62:45:05:63:27:e1:6e:29:50:0b:f1:47:ce:8b:
81:be:70:06:4b:d4:c3:f4:95:e6:d9:15:21:d9:55:
74:14:0c:d7:ff:ef:5d:75:f2:93:d8:67:79:2e:1d:
01:d5:c6:7a:02:31:1d:9a:b0:d4:d5:20:b1:18:2a:
c7:12:e4:89:b5:cb:90:ea:df:ab:81:a3:d0:77:a2:
10:7b:71:68:20:da:d6:04:65:8d:47:2e:16:15:0f:
fa:46:4a:0c:ce:e1:e0:8a:22:8d:46:4a:e3:06:52:
c0:5a:8f:fb:aa:77:a0:18:64:92:3e:03:60:a0:9b:
50:17:1f:42:fd:0e:75:42:7d:79:f1:b0:ed:8e:d2:
56:66:1b:5c:42:e1:7a:57:8a:cb:82:b5:8e:fd:d0:
05:5f:d3:4c:d5:ea:cd:a0:86:e5:30:46:ed:d9:87:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BB:ED:04:A9:7A:4D:7C:FA:45:97:35:B7:E9:B3:2C:DA:41:00:29
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b5:48:ff:34:a9:1f:43:a2:12:bc:0d:50:de:ae:4e:80:a0:
e1:f7:ae:26:a2:c8:1f:d7:ad:96:00:38:14:72:fc:04:4c:89:
88:22:c7:bd:77:5f:64:ee:b8:e5:47:db:23:ba:0d:33:d0:e5:
e5:06:82:ba:9b:00:8c:70:d5:ac:03:f8:c5:59:04:54:c1:78:
c2:fc:fb:ac:50:01:61:ce:0b:4f:3a:b9:ea:c0:df:d0:ee:27:
1d:44:cf:18:c6:31:9c:3c:e0:c1:53:90:01:ae:84:1a:8b:74:
68:a0:c4:00:e8:3f:6e:40:e3:8b:4d:07:db:f1:dc:d0:7c:b7:
8a:29:3c:cb:42:01:4c:64:a0:41:b5:61:a5:7f:7e:ed:a9:78:
e9:e6:2e:95:64:fb:62:5d:7b:04:37:bb:8e:06:05:4f:02:d7:
2a:c4:07:06:07:12:e9:ce:a8:82:fc:c2:d0:53:45:f7:e2:94:
74:cf:00:01:43:0c:25:49:bb:7f:de:64:da:5e:db:8d:97:26:
aa:78:7e:77:d1:f3:89:21:68:39:ef:6a:25:f5:1b:10:2c:66:
92:df:c2:d8:5a:b3:dc:5e:ac:4a:7d:e8:01:18:e8:1b:b5:97:
14:8a:6f:49:4f:95:53:07:2e:8f:a8:2b:f5:63:7f:7e:b1:02:
0f:05:36:b7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkjoPAhhDSw0eeUx6Hd6brUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDE3OGNkNjAyODk2OThiN2NkOTVkZGQ3YjE2OTE3NDkw
YjQ0MDcwHhcNMjUwOTA3MTAwMjUzWhcNMjUwOTA4MTAwMjUzWjAzMTEwLwYDVQQD
EyhkZmJiZWQwNGE5N2E0ZDdjZmE0NTk3MzViN2U5YjMyY2RhNDEwMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRhbrMyngebWn3NLS0V/PlXKRyc2
SbLnPxOyJ23MBfe/w+EWFNEhZ44ZsCFcRswRNMiif0QrPOmliUlGUtyphqKd+Qj2
GTwSGyCUUXMffLsSgv/4QvX+6vv5YkUFYyfhbilQC/FHzouBvnAGS9TD9JXm2RUh
2VV0FAzX/+9ddfKT2Gd5Lh0B1cZ6AjEdmrDU1SCxGCrHEuSJtcuQ6t+rgaPQd6IQ
e3FoINrWBGWNRy4WFQ/6RkoMzuHgiiKNRkrjBlLAWo/7qnegGGSSPgNgoJtQFx9C
/Q51Qn158bDtjtJWZhtcQuF6V4rLgrWO/dAFX9NM1erNoIblMEbt2Yd/AQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN+77QSpek18+kWXNbfpsyzaQQApMB8GA1UdIwQY
MBaAFPvReM1gKJaYt82V3dexaRdJC0QHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05RjR6V0FvbHBpM3paWGQxN0ZwRjBrTFJBYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvMjdiZjJhLTgyYTQtNDhkOS1iNGUy
LTJiNzFmYzMzMzY2My8xLzEtOUY0eldBb2xwaTN6WlhkMTdGcEYwa0xSQWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzLzI3YmYyYS04MmE0LTQ4ZDktYjRlMi0yYjcxZmMzMzM2
NjMvMS8xLTlGNHpXQW9scGkzelpYZDE3RnBGMGtMUkFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarVI
/zSpH0OiErwNUN6uToCg4feuJqLIH9etlgA4FHL8BEyJiCLHvXdfZO645UfbI7oN
M9Dl5QaCupsAjHDVrAP4xVkEVMF4wvz7rFABYc4LTzq56sDf0O4nHUTPGMYxnDzg
wVOQAa6EGot0aKDEAOg/bkDji00H2/Hc0Hy3iik8y0IBTGSgQbVhpX9+7al46eYu
lWT7Yl17BDe7jgYFTwLXKsQHBgcS6c6ogvzC0FNF9+KUdM8AAUMMJUm7f95k2l7b
jZcmqnh+d9HziSFoOe9qJfUbECxmkt/C2Fqz3F6sSn3oARjoG7WXFIpvSU+VUwcu
j6gr9WN/frECDwU2tw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:25 2025 by rpki-client