Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File: 7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier: RjcMo4n+haXngxpX7mYL31gZL/0ogyZiWNhxWyKauP0=
Subject key identifier: 29:D9:52:81:15:86:07:CD:03:93:E5:F4:50:A9:00:75:D1:2D:F1:BF
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer: /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial: 019921B0FDEEAAFA73BCBBA89EEB0EB37DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number: 165E
Signing time: Sun 07 Sep 2025 01:01:11 +0000
Manifest this update: Sun 07 Sep 2025 01:01:11 +0000
Manifest next update: Mon 08 Sep 2025 01:01:11 +0000
Files and hashes: 1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: pwBXk5UT/QqaiKEeHhAc+xRN6nsw4kAmDx51vsH6tWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:fd:ee:aa:fa:73:bc:bb:a8:9e:eb:0e:b3:7d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Validity
Not Before: Sep 7 01:01:11 2025 GMT
Not After : Sep 8 01:01:11 2025 GMT
Subject: CN=29d95281158607cd0393e5f450a90075d12df1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:fc:44:ec:c9:6c:df:25:aa:0c:ca:7a:41:
06:2f:79:b2:72:dc:6c:1b:51:1e:5f:f3:92:d7:51:
15:38:bf:5b:5c:b9:43:c5:cf:f2:7b:8e:2b:f4:d1:
16:2a:6c:67:ee:6c:4a:f3:93:fb:d8:af:fb:09:cd:
9f:b5:e8:9e:c0:ba:65:b5:b1:a5:f9:44:6e:10:16:
57:57:9b:43:5c:c9:9d:25:23:96:e2:d8:cb:16:65:
56:1b:94:7c:d2:01:8f:24:9b:92:f7:a2:a7:9c:3e:
20:3c:e8:a8:a9:da:ae:aa:b0:af:1c:46:39:76:16:
bd:2d:04:ff:b0:45:97:0e:b4:23:20:53:ed:0e:f8:
7c:91:cb:58:d1:2e:93:df:e9:40:fd:82:c6:13:99:
0a:e0:c1:63:f4:5f:08:3c:11:4b:e7:6c:95:5a:f2:
44:b2:86:d0:56:f4:38:64:93:c7:3f:2a:92:c0:98:
a5:77:5b:08:23:e1:59:5e:1f:6b:58:fa:0e:15:05:
98:d2:2b:ee:bd:99:29:0b:ea:ff:d4:68:c3:99:c9:
8b:16:2b:d3:e2:d3:e4:8c:34:53:a1:3c:a0:b2:20:
bf:03:f6:01:12:56:1d:ff:19:c4:38:b7:77:2e:32:
22:cc:44:dd:ce:0f:f5:8e:a0:0c:71:17:11:fe:6d:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D9:52:81:15:86:07:CD:03:93:E5:F4:50:A9:00:75:D1:2D:F1:BF
X509v3 Authority Key Identifier:
keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:71:cd:5b:42:7a:45:64:ef:53:da:12:27:e2:63:ff:24:45:
14:aa:39:56:cd:0f:b0:31:2f:2c:b0:ea:b5:e2:01:bc:79:f0:
24:24:e7:af:0a:71:0a:c2:cc:8e:2c:2f:2c:9c:54:84:7f:2f:
9e:dd:46:41:d9:19:55:d4:70:be:06:c9:32:ad:89:ab:52:16:
82:d8:89:5e:a0:61:a8:42:9a:80:d3:cc:f6:1b:34:1f:fa:74:
f6:b4:9b:cb:bc:b7:b9:d7:42:6a:d4:1a:9d:f3:f4:ef:1c:8e:
24:d4:41:33:bd:10:46:01:93:2a:42:ea:af:0f:0b:35:6b:0a:
32:ed:c2:de:64:49:7e:d2:d7:5b:06:f4:88:ef:e0:a0:3c:44:
09:47:91:c5:4b:45:e4:b2:e4:1d:a0:61:29:2b:e2:ff:8e:e9:
90:fe:95:76:80:0e:cc:01:c1:f6:e0:7a:7c:7e:a3:5d:28:d7:
2e:f8:2a:fb:73:f6:cb:3d:c0:8a:18:47:c3:e9:62:3e:ea:6a:
5f:58:6c:2b:d1:65:31:4e:ef:d9:dc:04:98:1f:b7:87:ca:47:
33:45:02:55:ef:38:e5:f3:5a:f7:36:c5:df:fe:7f:69:9e:ea:
bd:f6:5d:b1:96:7d:5d:cd:c8:fe:7a:eb:f9:b8:71:06:07:0b:
26:32:14:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsP3uqvpzvLuonusOs324MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTRjNDk3NWQyNjBkOTdiMGQzM2M0ZDZjZDBkNTg3ZjEw
YzIyYTAwHhcNMjUwOTA3MDEwMTExWhcNMjUwOTA4MDEwMTExWjAzMTEwLwYDVQQD
EygyOWQ5NTI4MTE1ODYwN2NkMDM5M2U1ZjQ1MGE5MDA3NWQxMmRmMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbb8ROzJbN8lqgzKekEGL3myctxs
G1EeX/OS11EVOL9bXLlDxc/ye44r9NEWKmxn7mxK85P72K/7Cc2fteiewLpltbGl
+URuEBZXV5tDXMmdJSOW4tjLFmVWG5R80gGPJJuS96KnnD4gPOioqdquqrCvHEY5
dha9LQT/sEWXDrQjIFPtDvh8kctY0S6T3+lA/YLGE5kK4MFj9F8IPBFL52yVWvJE
sobQVvQ4ZJPHPyqSwJild1sII+FZXh9rWPoOFQWY0ivuvZkpC+r/1GjDmcmLFivT
4tPkjDRToTygsiC/A/YBElYd/xnEOLd3LjIizETdzg/1jqAMcRcR/m2IhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnZUoEVhgfNA5Pl9FCpAHXRLfG/MB8GA1UdIwQY
MBaAFO7kxJddJg2XsNM8TWzQ1YfxDCKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2Mt
NDMyZDNmYjBmYzIyLzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2MtNDMyZDNmYjBmYzIy
LzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHHNW0J6
RWTvU9oSJ+Jj/yRFFKo5Vs0PsDEvLLDqteIBvHnwJCTnrwpxCsLMjiwvLJxUhH8v
nt1GQdkZVdRwvgbJMq2Jq1IWgtiJXqBhqEKagNPM9hs0H/p09rSby7y3uddCatQa
nfP07xyOJNRBM70QRgGTKkLqrw8LNWsKMu3C3mRJftLXWwb0iO/goDxECUeRxUtF
5LLkHaBhKSvi/47pkP6VdoAOzAHB9uB6fH6jXSjXLvgq+3P2yz3AihhHw+liPupq
X1hsK9FlMU7v2dwEmB+3h8pHM0UCVe845fNa9zbF3/5/aZ7qvfZdsZZ9Xc3I/nrr
+bhxBgcLJjIU3g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:09 2025 by rpki-client