Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: UdvV3nW+NVqJ7XpeZ3KYIN8vqjPCke3EAJO2zGp3EEw=
Subject key identifier: 6F:80:D4:67:C2:BF:04:98:2E:75:9A:C6:9A:79:DC:1A:54:73:50:63
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 0199239EEF9FFD8E96336BF4C00EA81E9E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 089B
Signing time: Sun 07 Sep 2025 10:00:42 +0000
Manifest this update: Sun 07 Sep 2025 10:00:42 +0000
Manifest next update: Mon 08 Sep 2025 10:00:42 +0000
Files and hashes: 1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: PuufDGDpIbL91D777jxlJJTzIUj/3Ml5ycgQSQJ78zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:ef:9f:fd:8e:96:33:6b:f4:c0:0e:a8:1e:9e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Sep 7 10:00:42 2025 GMT
Not After : Sep 8 10:00:42 2025 GMT
Subject: CN=6f80d467c2bf04982e759ac69a79dc1a54735063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:c5:ca:7c:ec:60:6b:91:00:64:2e:ad:55:
2f:09:a7:5c:1d:ba:4e:42:e3:3d:ac:1c:be:ba:23:
2e:33:b8:07:08:4b:d7:3f:5a:e9:1a:d2:2e:f9:74:
4c:6c:bd:21:2f:bc:16:93:d7:96:a3:3e:de:67:10:
be:b9:2f:c3:d0:da:be:68:99:ca:e2:ee:6b:35:0f:
5f:6d:c4:b0:f6:b7:b9:6e:31:c7:b5:29:53:fc:a0:
05:dc:4f:d7:5a:27:23:6e:c6:83:91:86:21:5b:bc:
45:60:ad:43:ff:aa:0e:0c:92:44:ab:a4:bd:e0:14:
ea:30:53:d3:d5:c9:04:19:0e:74:81:30:1c:6d:89:
8d:87:bc:c3:f5:f0:67:1c:6d:08:65:27:fe:cf:00:
d7:ad:a9:57:b5:25:70:22:34:9f:52:13:ed:7d:90:
b1:5c:94:e6:3f:ec:7c:d0:3c:81:ba:3c:e4:f7:95:
f9:52:33:88:c7:86:49:c3:77:07:d3:2f:7a:41:f8:
8a:ee:f1:32:d5:2c:33:75:6f:75:2d:3e:30:5d:39:
2d:0a:4c:d7:85:7a:c5:c8:3d:e3:82:fc:29:cd:1f:
5d:f8:04:21:46:ff:85:1f:ba:7e:59:f4:a0:21:62:
d1:7b:9a:32:e6:53:bf:0d:73:88:1f:c4:7c:18:49:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:80:D4:67:C2:BF:04:98:2E:75:9A:C6:9A:79:DC:1A:54:73:50:63
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:23:c4:b0:9e:cd:9d:82:f4:22:c5:e6:6c:cd:6f:e8:54:c8:
87:74:97:c9:38:8d:5a:5c:88:74:70:4b:7f:4f:0f:99:b0:f7:
4f:04:dc:df:14:93:aa:f6:68:ba:5c:ae:3d:0f:f0:7c:86:1a:
dc:6a:13:20:60:8d:54:7b:61:ed:ce:a4:00:80:10:60:b5:c8:
ac:ea:c4:8a:3b:6c:17:ce:1e:5e:01:e4:11:d9:3f:8d:be:74:
82:5e:f7:a7:c6:74:3d:da:6d:19:ce:37:d3:f4:08:29:d0:16:
ef:b3:f7:e7:b7:da:33:ab:4e:92:d8:0f:fe:b1:bb:8c:da:d8:
be:ea:d7:e3:71:53:86:c3:5c:f4:1d:16:7c:7b:5c:be:cb:9d:
d1:8a:52:79:0c:31:f5:a2:a1:bc:ac:bc:6a:85:37:6f:54:6f:
83:41:88:4c:d3:8b:73:73:eb:71:69:83:86:aa:12:ea:80:94:
e4:e5:40:ff:db:89:b0:13:94:6d:94:fa:89:3a:73:7d:fb:87:
03:80:24:26:1b:4f:13:36:c6:3a:01:56:35:97:95:b8:b9:0a:
5c:8f:4e:49:69:ac:af:6d:d8:ec:ae:9d:3c:d7:71:15:ad:2f:
23:d8:15:55:57:6f:ba:e8:27:be:68:d7:20:ad:cf:55:de:ac:
94:b0:41:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnu+f/Y6WM2v0wA6oHp6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2
OGUxY2YwHhcNMjUwOTA3MTAwMDQyWhcNMjUwOTA4MTAwMDQyWjAzMTEwLwYDVQQD
Eyg2ZjgwZDQ2N2MyYmYwNDk4MmU3NTlhYzY5YTc5ZGMxYTU0NzM1MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop3FynzsYGuRAGQurVUvCadcHbpO
QuM9rBy+uiMuM7gHCEvXP1rpGtIu+XRMbL0hL7wWk9eWoz7eZxC+uS/D0Nq+aJnK
4u5rNQ9fbcSw9re5bjHHtSlT/KAF3E/XWicjbsaDkYYhW7xFYK1D/6oODJJEq6S9
4BTqMFPT1ckEGQ50gTAcbYmNh7zD9fBnHG0IZSf+zwDXralXtSVwIjSfUhPtfZCx
XJTmP+x80DyBujzk95X5UjOIx4ZJw3cH0y96QfiK7vEy1SwzdW91LT4wXTktCkzX
hXrFyD3jgvwpzR9d+AQhRv+FH7p+WfSgIWLRe5oy5lO/DXOIH8R8GEmBgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+A1GfCvwSYLnWaxpp53BpUc1BjMB8GA1UdIwQY
MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt
MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl
LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiPEsJ7N
nYL0IsXmbM1v6FTIh3SXyTiNWlyIdHBLf08PmbD3TwTc3xSTqvZoulyuPQ/wfIYa
3GoTIGCNVHth7c6kAIAQYLXIrOrEijtsF84eXgHkEdk/jb50gl73p8Z0PdptGc43
0/QIKdAW77P357faM6tOktgP/rG7jNrYvurX43FThsNc9B0WfHtcvsud0YpSeQwx
9aKhvKy8aoU3b1Rvg0GITNOLc3PrcWmDhqoS6oCU5OVA/9uJsBOUbZT6iTpzffuH
A4AkJhtPEzbGOgFWNZeVuLkKXI9OSWmsr23Y7K6dPNdxFa0vI9gVVVdvuugnvmjX
IK3PVd6slLBBrQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:48 2025 by rpki-client