
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: y6Ty3OylmMriMsp3qkH1kIRVdfzeYR29uuHYieBhQWU=
Subject key identifier: 70:86:40:BE:93:A4:21:A3:3F:B0:79:35:01:D4:2A:69:58:EA:4A:02
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 019921B18F1670F7EB94F0D920FF641326C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 0937
Signing time: Sun 07 Sep 2025 01:01:48 +0000
Manifest this update: Sun 07 Sep 2025 01:01:48 +0000
Manifest next update: Mon 08 Sep 2025 01:01:48 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: CrwzYT1kxEnNmOn5r8MUr42pZ1J44PtNvKKeIRoTpF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:8f:16:70:f7:eb:94:f0:d9:20:ff:64:13:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Sep 7 01:01:48 2025 GMT
Not After : Sep 8 01:01:48 2025 GMT
Subject: CN=708640be93a421a33fb0793501d42a6958ea4a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:46:85:d3:18:4a:87:94:17:7a:db:05:29:
c2:e6:d0:37:c8:9b:ee:b5:43:62:fb:1c:93:5a:df:
dd:d7:cc:ec:f2:39:06:29:9a:0b:9b:6d:52:c8:f4:
3f:c3:cf:af:47:58:f1:bb:ef:99:20:f8:94:2f:fd:
a7:60:92:c8:4e:11:28:06:05:08:7f:93:43:25:1c:
4d:c7:38:66:b0:b7:b7:96:e5:14:dc:1c:dc:f5:64:
72:00:96:40:4f:b2:c3:79:09:20:c6:ee:79:76:d5:
a2:99:40:58:87:45:8d:7a:39:14:ee:5c:ad:4e:2f:
98:2e:ef:0f:7a:a2:1d:b2:a3:8c:06:8b:60:41:80:
3c:ee:92:3d:7b:a8:ec:df:2c:42:e7:91:d5:6c:46:
fd:67:f6:44:38:47:b1:e9:a4:8b:07:20:8e:5c:76:
39:fe:43:2d:dd:27:c8:66:db:c2:61:17:08:ba:22:
aa:ba:34:52:51:f4:e9:ce:18:d7:a2:88:11:16:64:
7c:4c:c5:d8:5b:d8:e4:9a:4f:3d:df:03:2e:44:9e:
89:e6:0c:3a:af:99:be:7a:d3:ff:b9:2a:4e:41:4f:
53:de:d6:3f:2e:34:6c:c7:89:b1:66:b3:19:73:44:
d9:fa:c1:19:a0:24:b7:2e:34:a2:28:87:eb:81:12:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:86:40:BE:93:A4:21:A3:3F:B0:79:35:01:D4:2A:69:58:EA:4A:02
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6f:25:b1:59:14:3d:3a:08:ee:36:6e:59:d8:d7:91:44:02:
43:0c:f4:25:9d:95:34:56:44:6b:e0:b9:6e:5f:32:68:d9:39:
a7:b6:d8:2c:b6:4b:4d:85:f2:d6:e1:22:e3:4e:2a:23:31:a5:
c4:25:d4:33:25:50:13:61:a9:b6:63:48:21:f0:28:0d:de:b8:
63:86:9a:ca:91:59:66:33:aa:71:08:ed:34:c3:9e:47:0c:8e:
7b:50:e7:47:7d:bf:45:20:ff:08:52:05:2e:c7:33:c8:79:d8:
18:ae:45:cb:87:f2:70:f0:87:46:29:4e:bb:e7:5a:8b:60:14:
c0:9a:d7:f1:b1:d0:4b:79:0f:39:00:21:0d:cb:89:ad:39:a9:
f0:7a:ba:a3:de:53:f5:53:77:d6:ef:ca:1f:e3:05:df:e5:7f:
e2:20:da:62:30:28:5b:35:f9:8a:ae:30:f5:74:6c:69:b3:5d:
9d:9b:90:3b:be:50:7d:fa:53:7c:a3:c0:6b:6f:e5:aa:33:98:
ff:49:0a:ff:42:d2:d3:80:02:96:a7:1c:6a:17:09:6e:60:9d:
d7:87:64:50:15:4f:48:b0:4c:06:f6:6f:d6:17:e6:8b:11:91:
f5:c7:1a:11:aa:34:3f:1c:3d:73:e8:33:7b:2f:5a:5f:8c:ff:
d3:fb:04:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsY8WcPfrlPDZIP9kEybHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNzc4N2NmMmE4NzBkOTFiMTEzNjlmOWQ3NDU5MTk1NzYw
MjgxNGUwHhcNMjUwOTA3MDEwMTQ4WhcNMjUwOTA4MDEwMTQ4WjAzMTEwLwYDVQQD
Eyg3MDg2NDBiZTkzYTQyMWEzM2ZiMDc5MzUwMWQ0MmE2OTU4ZWE0YTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U9GhdMYSoeUF3rbBSnC5tA3yJvu
tUNi+xyTWt/d18zs8jkGKZoLm21SyPQ/w8+vR1jxu++ZIPiUL/2nYJLIThEoBgUI
f5NDJRxNxzhmsLe3luUU3Bzc9WRyAJZAT7LDeQkgxu55dtWimUBYh0WNejkU7lyt
Ti+YLu8PeqIdsqOMBotgQYA87pI9e6js3yxC55HVbEb9Z/ZEOEex6aSLByCOXHY5
/kMt3SfIZtvCYRcIuiKqujRSUfTpzhjXoogRFmR8TMXYW9jkmk893wMuRJ6J5gw6
r5m+etP/uSpOQU9T3tY/LjRsx4mxZrMZc0TZ+sEZoCS3LjSiKIfrgRK1QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCGQL6TpCGjP7B5NQHUKmlY6koCMB8GA1UdIwQY
MBaAFHN3h88qhw2RsRNp+ddFkZV2AoFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMt
NjJjMDg1ODM0NGU4LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMtNjJjMDg1ODM0NGU4
LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVG8lsVkU
PToI7jZuWdjXkUQCQwz0JZ2VNFZEa+C5bl8yaNk5p7bYLLZLTYXy1uEi404qIzGl
xCXUMyVQE2GptmNIIfAoDd64Y4aaypFZZjOqcQjtNMOeRwyOe1DnR32/RSD/CFIF
LsczyHnYGK5Fy4fycPCHRilOu+dai2AUwJrX8bHQS3kPOQAhDcuJrTmp8Hq6o95T
9VN31u/KH+MF3+V/4iDaYjAoWzX5iq4w9XRsabNdnZuQO75QffpTfKPAa2/lqjOY
/0kK/0LS04AClqccahcJbmCd14dkUBVPSLBMBvZv1hfmixGR9ccaEao0Pxw9c+gz
ey9aX4z/0/sELQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:38 2025 by rpki-client