Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
File: in1zAecVR30mgJu6u0zQMr07Vhg.mft (raw, json)
Hash identifier: 6ASEt7j3WoDoFtNJlo13gQaYOI/1rSVi9843bh2n05w=
Subject key identifier: 57:0A:6F:64:DE:DB:61:ED:F9:0F:C2:AF:5E:CF:AC:5B:40:50:7A:12
Authority key identifier: 8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
Certificate issuer: /CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Certificate serial: 0199228D104EC6D14B47DDECC20428D55E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
Manifest number: 0320
Signing time: Sun 07 Sep 2025 05:01:34 +0000
Manifest this update: Sun 07 Sep 2025 05:01:34 +0000
Manifest next update: Mon 08 Sep 2025 05:01:34 +0000
Files and hashes: 1: in1zAecVR30mgJu6u0zQMr07Vhg.crl (hash: caHPm08F1Y8XDrKI5VN1BNm/SslDwrtywJShG6tE89Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:10:4e:c6:d1:4b:47:dd:ec:c2:04:28:d5:5e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Validity
Not Before: Sep 7 05:01:34 2025 GMT
Not After : Sep 8 05:01:34 2025 GMT
Subject: CN=570a6f64dedb61edf90fc2af5ecfac5b40507a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:b4:bb:f6:ea:e3:b2:b5:24:88:0e:3a:16:
7a:6c:28:cb:e8:d8:32:a4:fb:1f:ce:df:df:f9:92:
e0:0c:f8:78:48:4e:46:db:59:d6:9f:3b:da:bd:e5:
70:5f:c5:2a:29:19:24:05:ae:94:e9:f8:86:21:2a:
a2:ab:3c:9b:3c:de:f6:b5:c9:d0:a2:8c:6b:eb:20:
1f:5c:46:ee:04:41:75:b6:aa:18:82:a4:d6:9c:4a:
08:77:01:6c:19:ff:fa:e8:72:76:01:d5:ee:df:94:
23:4a:af:69:01:c0:31:77:75:0f:93:fd:d2:c6:f4:
ae:f5:c8:59:00:0a:77:b9:80:b4:8a:14:cd:39:73:
10:c0:96:9e:b6:c6:dc:40:19:b2:77:a5:bb:20:5d:
89:49:a9:cf:32:13:ed:3c:e2:c5:2d:06:a6:d4:a1:
f7:b2:f0:ae:6a:1f:ad:6b:43:6f:f2:6a:49:d2:fc:
4f:f9:cc:c6:73:10:34:a6:0b:2c:2d:6d:5f:b0:00:
9d:f8:39:e3:ed:a8:a8:33:90:d7:16:91:89:d7:dc:
95:01:cd:63:ce:a1:3c:8b:6f:15:ee:a1:1b:ad:f2:
0f:31:36:cb:b2:04:31:83:67:41:6d:e7:98:73:a2:
84:7c:4e:3b:bc:d0:67:83:f1:26:7c:cd:5d:59:a0:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0A:6F:64:DE:DB:61:ED:F9:0F:C2:AF:5E:CF:AC:5B:40:50:7A:12
X509v3 Authority Key Identifier:
keyid:8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:0a:63:81:57:3b:22:38:6f:f8:d3:f0:7c:98:16:d2:4f:de:
b6:b7:2f:bc:e0:bc:a6:67:c7:0b:54:09:54:97:71:3e:11:3f:
79:d4:5d:cb:b9:f3:62:04:3b:8b:d4:c3:f2:c5:a9:ac:10:f6:
e2:22:76:c9:f0:f5:92:15:2b:1f:c0:e8:e2:40:00:12:f7:94:
50:d2:4d:7c:5c:64:ec:84:d5:9c:a6:3d:02:dc:9d:8b:81:d2:
42:67:09:56:20:94:b9:90:67:79:83:92:65:c3:9d:30:c5:43:
96:9d:18:ca:e8:cd:a2:d3:c0:88:17:bf:b0:7c:d9:6d:f3:be:
97:fa:96:eb:97:d2:ce:b7:c9:67:1d:d1:a9:23:cc:8e:70:41:
19:9c:05:5a:0f:ee:ae:08:0b:8d:b6:f3:9e:ab:c0:30:fa:a9:
33:51:9e:3a:6f:0e:48:c2:5b:12:d8:0b:d5:1d:02:e5:95:98:
1d:b3:6f:25:0b:3b:bd:f2:7f:32:e9:29:c1:9f:e1:10:be:07:
f2:71:c4:b4:a3:8c:48:bf:d7:34:47:9d:45:8a:0d:b7:22:79:
5f:a5:b3:3c:1d:63:9b:50:2c:fd:ef:1b:5f:57:80:18:55:dd:
05:9c:b6:bd:34:db:f0:1a:79:d2:de:41:2d:8c:e7:e9:b7:0e:
da:57:f8:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijRBOxtFLR93swgQo1V4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2Q3MzAxZTcxNTQ3N2QyNjgwOWJiYWJiNGNkMDMyYmQz
YjU2MTgwHhcNMjUwOTA3MDUwMTM0WhcNMjUwOTA4MDUwMTM0WjAzMTEwLwYDVQQD
Eyg1NzBhNmY2NGRlZGI2MWVkZjkwZmMyYWY1ZWNmYWM1YjQwNTA3YTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I60u/bq47K1JIgOOhZ6bCjL6Ngy
pPsfzt/f+ZLgDPh4SE5G21nWnzvaveVwX8UqKRkkBa6U6fiGISqiqzybPN72tcnQ
ooxr6yAfXEbuBEF1tqoYgqTWnEoIdwFsGf/66HJ2AdXu35QjSq9pAcAxd3UPk/3S
xvSu9chZAAp3uYC0ihTNOXMQwJaetsbcQBmyd6W7IF2JSanPMhPtPOLFLQam1KH3
svCuah+ta0Nv8mpJ0vxP+czGcxA0pgssLW1fsACd+Dnj7aioM5DXFpGJ19yVAc1j
zqE8i28V7qEbrfIPMTbLsgQxg2dBbeeYc6KEfE47vNBng/EmfM1dWaDVjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcKb2Te22Ht+Q/Cr17PrFtAUHoSMB8GA1UdIwQY
MBaAFIp9cwHnFUd9JoCburtM0DK9O1YYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW4xekFlY1ZSMzBtZ0p1NnUwelFNcjA3VmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNjY5ODYtOGY2Yi00NmI5LWJjY2Qt
ZjczNjlmOWRjYzljLzEvaW4xekFlY1ZSMzBtZ0p1NnUwelFNcjA3VmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNjY5ODYtOGY2Yi00NmI5LWJjY2QtZjczNjlmOWRjYzlj
LzEvaW4xekFlY1ZSMzBtZ0p1NnUwelFNcjA3VmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2wpjgVc7
Ijhv+NPwfJgW0k/etrcvvOC8pmfHC1QJVJdxPhE/edRdy7nzYgQ7i9TD8sWprBD2
4iJ2yfD1khUrH8Do4kAAEveUUNJNfFxk7ITVnKY9Atydi4HSQmcJViCUuZBneYOS
ZcOdMMVDlp0YyujNotPAiBe/sHzZbfO+l/qW65fSzrfJZx3RqSPMjnBBGZwFWg/u
rggLjbbznqvAMPqpM1GeOm8OSMJbEtgL1R0C5ZWYHbNvJQs7vfJ/MukpwZ/hEL4H
8nHEtKOMSL/XNEedRYoNtyJ5X6WzPB1jm1As/e8bX1eAGFXdBZy2vTTb8Bp50t5B
LYzn6bcO2lf4lQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:47 2025 by rpki-client