Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
File: idSzdf1Mr9XfusQG3SWmHSLdNso.mft (raw, json)
Hash identifier: zVmkmEQWqRxvyXfaSDJw4RnIjVZmf3B8fkQOXfDlci0=
Subject key identifier: 36:E8:64:B5:C8:5E:5C:D4:89:3F:20:45:DC:7A:96:13:14:95:46:1C
Authority key identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
Certificate issuer: /CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Certificate serial: 019923A074301E0D6CE9D16240585ACA72A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
Manifest number: 11EF
Signing time: Sun 07 Sep 2025 10:02:21 +0000
Manifest this update: Sun 07 Sep 2025 10:02:21 +0000
Manifest next update: Mon 08 Sep 2025 10:02:21 +0000
Files and hashes: 1: idSzdf1Mr9XfusQG3SWmHSLdNso.crl (hash: MtoRuhMvS6oJ97HDnvyWbPmRORIrtRDHVP94yQOg4YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:74:30:1e:0d:6c:e9:d1:62:40:58:5a:ca:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Validity
Not Before: Sep 7 10:02:21 2025 GMT
Not After : Sep 8 10:02:21 2025 GMT
Subject: CN=36e864b5c85e5cd4893f2045dc7a96131495461c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:6d:f5:19:87:b6:2f:ff:f5:c3:a5:b9:87:
94:0f:d8:45:5a:1a:7b:63:59:30:39:16:43:78:70:
7c:af:1d:67:47:ad:bd:33:80:cf:91:db:0d:4b:5b:
9c:a1:ae:ac:cf:f2:0b:26:f7:75:95:f7:66:93:b8:
b6:42:92:52:53:41:55:65:20:b5:b6:85:5f:f2:7c:
3a:f9:cb:62:5f:db:4f:aa:56:f6:61:29:59:8d:73:
c0:72:5c:90:52:95:9c:72:5b:4b:03:80:a0:eb:72:
b7:5f:34:2b:d4:4e:0c:00:2d:50:3a:a2:1e:45:7b:
dc:38:25:7a:d9:99:fa:37:96:e7:de:ac:60:7b:29:
f6:22:bf:c3:9f:ea:f1:20:3e:a9:e1:41:22:89:ee:
09:36:c5:cb:83:5e:e6:a7:1d:42:b5:0e:be:c9:40:
f4:73:f2:f1:c2:2c:9e:cc:a4:90:0c:fb:78:03:b7:
9b:06:42:fb:f9:47:ba:ec:ce:32:1d:04:e2:0c:a7:
a7:5e:be:1c:21:16:2d:f9:73:f9:e6:91:48:60:fb:
40:80:09:f6:50:97:bb:fb:02:b4:b7:a9:32:d9:45:
c6:d9:89:59:cd:59:34:b6:39:74:3d:ac:c4:10:35:
a3:ba:6e:76:c0:db:1b:eb:a9:35:89:a2:8d:91:1e:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E8:64:B5:C8:5E:5C:D4:89:3F:20:45:DC:7A:96:13:14:95:46:1C
X509v3 Authority Key Identifier:
keyid:89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:36:40:a7:b8:40:23:9c:36:86:16:a2:d1:d1:07:2d:07:b8:
0a:13:65:31:55:6c:e0:66:c1:8a:aa:a9:fb:d5:60:60:80:f7:
00:61:4b:f6:cd:ae:47:3a:84:a0:14:ef:d4:00:5f:de:87:fd:
f1:4f:91:34:e6:ca:7a:9e:86:d9:12:ee:a7:3c:85:48:4f:8b:
0d:5d:9c:21:1d:9b:45:fb:8b:4f:06:2d:a4:d1:c4:6e:2a:d5:
f2:39:60:e6:cf:d3:31:f5:6b:07:d8:a5:4a:fc:9b:3a:4c:c3:
a8:2e:5d:9e:49:66:31:8f:c6:cb:1a:55:b4:37:2f:1a:ea:44:
b8:d3:e9:cc:e4:a1:75:ae:8b:65:ea:87:fd:c0:ce:36:c2:64:
76:d0:df:44:4e:32:74:7f:40:b8:59:87:a3:87:91:27:da:f0:
18:96:21:23:87:fa:cf:3b:ab:03:7a:fd:90:28:69:47:2b:a7:
fc:de:7c:46:3b:7b:bf:33:e3:d7:8f:96:ff:4a:e1:95:a6:c1:
0e:10:76:19:78:c6:33:1f:aa:4c:5d:b8:ad:3a:e2:dc:53:41:
46:4f:54:82:6c:85:7f:41:ff:6c:a5:93:91:0f:a8:13:9e:9b:
84:d8:f4:24:55:24:c1:bb:38:e6:77:e6:25:f8:8d:4c:e8:bc:
a6:60:a2:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoHQwHg1s6dFiQFhaynKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZDRiMzc1ZmQ0Y2FmZDVkZmJhYzQwNmRkMjVhNjFkMjJk
ZDM2Y2EwHhcNMjUwOTA3MTAwMjIxWhcNMjUwOTA4MTAwMjIxWjAzMTEwLwYDVQQD
EygzNmU4NjRiNWM4NWU1Y2Q0ODkzZjIwNDVkYzdhOTYxMzE0OTU0NjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDpt9RmHti//9cOluYeUD9hFWhp7
Y1kwORZDeHB8rx1nR629M4DPkdsNS1ucoa6sz/ILJvd1lfdmk7i2QpJSU0FVZSC1
toVf8nw6+ctiX9tPqlb2YSlZjXPAclyQUpWccltLA4Cg63K3XzQr1E4MAC1QOqIe
RXvcOCV62Zn6N5bn3qxgeyn2Ir/Dn+rxID6p4UEiie4JNsXLg17mpx1CtQ6+yUD0
c/LxwiyezKSQDPt4A7ebBkL7+Ue67M4yHQTiDKenXr4cIRYt+XP55pFIYPtAgAn2
UJe7+wK0t6ky2UXG2YlZzVk0tjl0PazEEDWjum52wNsb66k1iaKNkR7SIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDboZLXIXlzUiT8gRdx6lhMUlUYcMB8GA1UdIwQY
MBaAFInUs3X9TK/V37rEBt0lph0i3TbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRTemRmMU1yOVhmdXNRRzNTV21IU0xkTnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iY2FkOGQtOGU1NS00YTgxLWIzOTMt
Mjc0MjUxMjUyMDc3LzEvaWRTemRmMU1yOVhmdXNRRzNTV21IU0xkTnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iY2FkOGQtOGU1NS00YTgxLWIzOTMtMjc0MjUxMjUyMDc3
LzEvaWRTemRmMU1yOVhmdXNRRzNTV21IU0xkTnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzZAp7hA
I5w2hhai0dEHLQe4ChNlMVVs4GbBiqqp+9VgYID3AGFL9s2uRzqEoBTv1ABf3of9
8U+RNObKep6G2RLupzyFSE+LDV2cIR2bRfuLTwYtpNHEbirV8jlg5s/TMfVrB9il
SvybOkzDqC5dnklmMY/GyxpVtDcvGupEuNPpzOShda6LZeqH/cDONsJkdtDfRE4y
dH9AuFmHo4eRJ9rwGJYhI4f6zzurA3r9kChpRyun/N58Rjt7vzPj14+W/0rhlabB
DhB2GXjGMx+qTF24rTri3FNBRk9UgmyFf0H/bKWTkQ+oE56bhNj0JFUkwbs45nfm
JfiNTOi8pmCiMw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:12 2025 by rpki-client