Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
File: d6ssFiF5lXMJnEAq6R_8V5ada5s.mft (raw, json)
Hash identifier: 679N5Dcr94/293hH8c/52H5mY08zF3AqJljSTw1yJT4=
Subject key identifier: 7F:A9:19:77:85:16:A8:97:04:C6:DF:03:74:AB:68:11:EF:15:47:02
Authority key identifier: 77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
Certificate issuer: /CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Certificate serial: 019921E79C21A4B560F4BE7227AAB9C8DAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
Manifest number: 2D
Signing time: Sun 07 Sep 2025 02:00:50 +0000
Manifest this update: Sun 07 Sep 2025 02:00:50 +0000
Manifest next update: Mon 08 Sep 2025 02:00:50 +0000
Files and hashes: 1: d6ssFiF5lXMJnEAq6R_8V5ada5s.crl (hash: WUqMw6YdPoasuv27vcEHpsjqoiqNAlzeY1ORn0pSTks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:9c:21:a4:b5:60:f4:be:72:27:aa:b9:c8:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Validity
Not Before: Sep 7 02:00:50 2025 GMT
Not After : Sep 8 02:00:50 2025 GMT
Subject: CN=7fa919778516a89704c6df0374ab6811ef154702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:64:05:08:2f:9c:34:05:52:24:57:aa:ad:
c6:6d:fa:e1:83:0c:f0:bc:7f:7c:ec:9a:1d:62:80:
64:51:90:d8:48:ac:45:ae:b7:f7:81:4e:2c:83:62:
1a:1e:59:22:1a:57:0c:24:35:f3:f2:01:5a:f9:ae:
1e:28:8c:ae:33:b2:87:cf:2c:d3:da:09:48:32:60:
90:36:85:36:a8:9e:b6:ce:48:c2:b2:0e:83:b2:53:
fe:27:8d:e8:23:c2:21:01:3b:c6:f1:15:1d:9f:b1:
d3:b1:d1:82:43:86:8c:a4:2e:29:23:68:1e:d5:03:
bb:42:9f:c6:cb:42:d0:4c:ae:d8:82:ce:4f:b0:6f:
ee:a4:63:8d:1f:6a:3b:d4:52:85:ca:be:52:15:cf:
05:d1:33:ab:53:c3:c2:97:37:9f:0f:b0:c0:cb:04:
46:1b:5e:b3:56:9c:0b:00:0e:52:fe:ef:b0:d2:ea:
19:55:6a:db:08:2a:20:41:ef:c2:5c:b9:12:e1:06:
d7:fa:df:3b:82:6d:d5:ae:e8:61:a7:24:3b:71:8d:
47:e2:23:03:ef:00:a1:95:39:06:6a:9b:16:08:ce:
50:69:c0:c8:22:10:0e:bf:85:f2:cb:66:41:e7:3c:
e6:9d:01:10:5e:e7:81:4d:14:83:b8:a6:a9:7f:a5:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:19:77:85:16:A8:97:04:C6:DF:03:74:AB:68:11:EF:15:47:02
X509v3 Authority Key Identifier:
keyid:77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:35:c4:a8:18:5e:f0:98:7e:b8:46:a1:82:01:4a:9d:ab:d2:
dd:f7:91:25:75:06:b2:61:e9:64:7f:39:ce:ca:87:fd:af:b4:
7d:75:ff:00:1c:30:c0:55:b4:30:32:86:04:bb:8a:01:24:c5:
c3:a6:f2:ff:23:e8:7c:0d:5e:eb:3d:c3:91:03:e1:76:34:6e:
23:b2:2d:1e:5f:58:82:fb:96:0a:ba:38:41:8d:0e:b1:ca:35:
c1:8b:b6:0a:49:21:06:f9:50:d9:58:0f:0a:bd:43:de:94:e5:
70:f2:82:ff:60:29:10:4e:97:48:f3:24:dd:66:19:c4:03:cc:
9d:b9:1b:bb:54:61:fb:bb:61:19:5d:2a:d3:67:72:f3:8b:31:
04:8c:04:a5:cf:9a:f5:92:1a:01:f9:b3:28:c5:21:81:d4:5a:
10:32:40:cf:da:e0:25:d9:8e:9d:8e:5c:91:44:83:bb:d4:c5:
ea:a4:b4:6b:97:41:77:32:a9:ae:7e:e1:20:81:30:c8:f6:16:
ff:54:ee:32:20:04:5c:07:ec:6d:92:ba:4d:1d:72:30:b7:92:
d8:a1:35:ff:5c:a7:c3:75:77:27:59:e3:b0:2a:03:93:7c:b9:
c4:b1:2f:62:cc:70:84:62:38:2d:99:a8:b3:9d:1b:01:d9:7e:
df:3c:96:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh55whpLVg9L5yJ6q5yNrsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YWIyYzE2MjE3OTk1NzMwOTljNDAyYWU5MWZmYzU3OTY5
ZDZiOWIwHhcNMjUwOTA3MDIwMDUwWhcNMjUwOTA4MDIwMDUwWjAzMTEwLwYDVQQD
Eyg3ZmE5MTk3Nzg1MTZhODk3MDRjNmRmMDM3NGFiNjgxMWVmMTU0NzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry5kBQgvnDQFUiRXqq3Gbfrhgwzw
vH987JodYoBkUZDYSKxFrrf3gU4sg2IaHlkiGlcMJDXz8gFa+a4eKIyuM7KHzyzT
2glIMmCQNoU2qJ62zkjCsg6DslP+J43oI8IhATvG8RUdn7HTsdGCQ4aMpC4pI2ge
1QO7Qp/Gy0LQTK7Ygs5PsG/upGONH2o71FKFyr5SFc8F0TOrU8PClzefD7DAywRG
G16zVpwLAA5S/u+w0uoZVWrbCCogQe/CXLkS4QbX+t87gm3VruhhpyQ7cY1H4iMD
7wChlTkGapsWCM5QacDIIhAOv4Xyy2ZB5zzmnQEQXueBTRSDuKapf6XJYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+pGXeFFqiXBMbfA3SraBHvFUcCMB8GA1UdIwQY
MBaAFHerLBYheZVzCZxAKukf/FeWnWubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZzc0ZpRjVsWE1KbkVBcTZSXzhWNWFkYTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zMDY1NWYtNTljMy00ZGM1LWFiMmMt
Mzk3YmM0MDMxNTk0LzEvZDZzc0ZpRjVsWE1KbkVBcTZSXzhWNWFkYTVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zMDY1NWYtNTljMy00ZGM1LWFiMmMtMzk3YmM0MDMxNTk0
LzEvZDZzc0ZpRjVsWE1KbkVBcTZSXzhWNWFkYTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTXEqBhe
8Jh+uEahggFKnavS3feRJXUGsmHpZH85zsqH/a+0fXX/ABwwwFW0MDKGBLuKASTF
w6by/yPofA1e6z3DkQPhdjRuI7ItHl9YgvuWCro4QY0Osco1wYu2CkkhBvlQ2VgP
Cr1D3pTlcPKC/2ApEE6XSPMk3WYZxAPMnbkbu1Rh+7thGV0q02dy84sxBIwEpc+a
9ZIaAfmzKMUhgdRaEDJAz9rgJdmOnY5ckUSDu9TF6qS0a5dBdzKprn7hIIEwyPYW
/1TuMiAEXAfsbZK6TR1yMLeS2KE1/1ynw3V3J1njsCoDk3y5xLEvYsxwhGI4LZmo
s50bAdl+3zyWxQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:36 2025 by rpki-client