
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
File: rK67C7Ozijz0QMgf97PhaTMqpm0.mft (raw, json)
Hash identifier: j3QNRS3elpQU0lNcwCgsV04duTknvSn4RxvgOl1OZP0=
Subject key identifier: 6C:D4:03:55:6A:64:4B:33:60:30:57:DB:04:6E:22:03:68:27:32:82
Authority key identifier: AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
Certificate issuer: /CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Certificate serial: 0199239F7FF50EB96C6AC51F627BC606ED9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
Manifest number: 1279
Signing time: Sun 07 Sep 2025 10:01:19 +0000
Manifest this update: Sun 07 Sep 2025 10:01:19 +0000
Manifest next update: Mon 08 Sep 2025 10:01:19 +0000
Files and hashes: 1: rK67C7Ozijz0QMgf97PhaTMqpm0.crl (hash: iqfyERzAhUJcF2LCNDNoswpcPznN7gFDoYyI8gBHFOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:7f:f5:0e:b9:6c:6a:c5:1f:62:7b:c6:06:ed:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Validity
Not Before: Sep 7 10:01:19 2025 GMT
Not After : Sep 8 10:01:19 2025 GMT
Subject: CN=6cd403556a644b33603057db046e220368273282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:0c:fb:d5:dd:36:81:25:79:4c:f3:6d:64:
49:0a:54:92:00:db:f6:0f:a6:2e:61:6e:bd:b4:63:
72:4f:09:8b:bc:c2:00:61:c4:3e:2d:50:f0:69:dd:
b5:de:22:2f:3b:f8:49:67:83:58:dd:42:2c:05:19:
c4:c4:39:43:2d:e6:76:97:56:56:0d:bf:16:0a:a3:
f3:70:9b:43:c3:7f:20:f2:1a:a9:d2:69:58:6e:20:
fa:a6:36:11:06:cb:00:b4:84:55:48:cb:44:ec:3b:
bb:0d:12:12:c1:95:61:20:92:5b:10:9f:a4:ef:76:
d0:0e:49:89:60:70:7e:08:1d:16:dd:ca:27:44:e5:
04:ca:03:57:21:e3:59:ba:1f:98:8f:39:5a:b7:2a:
92:50:f3:30:8c:c2:54:b0:4b:67:ef:91:9b:43:ae:
3d:06:e7:f2:56:84:eb:f4:ab:f0:6b:30:fa:44:bc:
20:cf:bd:de:24:d3:15:9d:fe:01:59:97:de:88:6b:
20:ff:16:4b:e2:03:33:3a:7d:4d:bc:5a:0d:0d:15:
56:07:66:f8:e2:cd:72:7c:a1:96:48:54:a5:85:b2:
29:f9:a8:a5:35:bc:2a:81:85:58:e5:88:fa:d5:b5:
21:d7:ea:2a:49:23:67:df:1e:5b:23:61:41:7b:4c:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:03:55:6A:64:4B:33:60:30:57:DB:04:6E:22:03:68:27:32:82
X509v3 Authority Key Identifier:
keyid:AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5b:d9:dc:1d:17:0b:15:f9:86:e2:5d:fa:8e:e0:77:d3:38:
09:9c:d0:eb:96:a5:46:6b:4d:cb:45:b8:b4:f4:88:05:ae:cc:
61:0a:48:bd:00:2a:df:e2:d5:1d:c5:8a:44:c4:15:c0:f4:ac:
29:24:2f:a0:91:8c:39:93:2d:b2:24:a0:c4:68:12:33:f8:a8:
aa:01:e9:1e:86:8c:f9:11:d5:a5:3e:b3:77:5a:9d:fb:c1:69:
56:7a:9e:a8:2e:e6:9c:fe:30:3e:5d:46:68:60:9f:e4:24:1d:
8b:62:58:41:94:05:63:ab:ef:d4:c2:42:3b:7c:b8:fb:b5:d5:
fb:36:33:37:d8:17:38:df:35:db:b9:2c:4c:bc:b8:a4:7b:f1:
c6:68:0d:0e:3e:3b:64:8d:06:c9:1e:96:bd:b2:fe:13:f1:74:
f3:5f:4b:a1:87:81:00:e0:34:2e:be:3a:e1:f6:eb:19:6e:23:
2b:02:41:11:3a:19:68:7e:88:92:7e:c7:9d:6e:9d:cc:81:0a:
35:8e:db:3c:45:7b:04:99:4f:74:68:5d:c8:20:75:2c:dd:db:
f7:cf:68:ad:19:f8:17:aa:34:d7:74:49:18:05:8c:48:bb:a1:
da:48:a7:32:6a:27:37:12:cb:a0:1a:c9:3a:97:34:66:05:20:
04:69:53:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn3/1DrlsasUfYnvGBu2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYWViYjBiYjNiMzhhM2NmNDQwYzgxZmY3YjNlMTY5MzMy
YWE2NmQwHhcNMjUwOTA3MTAwMTE5WhcNMjUwOTA4MTAwMTE5WjAzMTEwLwYDVQQD
Eyg2Y2Q0MDM1NTZhNjQ0YjMzNjAzMDU3ZGIwNDZlMjIwMzY4MjczMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzMM+9XdNoEleUzzbWRJClSSANv2
D6YuYW69tGNyTwmLvMIAYcQ+LVDwad213iIvO/hJZ4NY3UIsBRnExDlDLeZ2l1ZW
Db8WCqPzcJtDw38g8hqp0mlYbiD6pjYRBssAtIRVSMtE7Du7DRISwZVhIJJbEJ+k
73bQDkmJYHB+CB0W3conROUEygNXIeNZuh+YjzlatyqSUPMwjMJUsEtn75GbQ649
BufyVoTr9KvwazD6RLwgz73eJNMVnf4BWZfeiGsg/xZL4gMzOn1NvFoNDRVWB2b4
4s1yfKGWSFSlhbIp+ailNbwqgYVY5Yj61bUh1+oqSSNn3x5bI2FBe0wn3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzUA1VqZEszYDBX2wRuIgNoJzKCMB8GA1UdIwQY
MBaAFKyuuwuzs4o89EDIH/ez4WkzKqZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDdlMzUtODhmNy00MzViLTg0YTgt
ZDE0YmQzZDc3ODIyLzEvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84MDdlMzUtODhmNy00MzViLTg0YTgtZDE0YmQzZDc3ODIy
LzEvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1vZ3B0X
CxX5huJd+o7gd9M4CZzQ65alRmtNy0W4tPSIBa7MYQpIvQAq3+LVHcWKRMQVwPSs
KSQvoJGMOZMtsiSgxGgSM/ioqgHpHoaM+RHVpT6zd1qd+8FpVnqeqC7mnP4wPl1G
aGCf5CQdi2JYQZQFY6vv1MJCO3y4+7XV+zYzN9gXON8127ksTLy4pHvxxmgNDj47
ZI0GyR6WvbL+E/F0819LoYeBAOA0Lr464fbrGW4jKwJBEToZaH6Ikn7HnW6dzIEK
NY7bPEV7BJlPdGhdyCB1LN3b989orRn4F6o013RJGAWMSLuh2kinMmonNxLLoBrJ
Opc0ZgUgBGlTFw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:40 2025 by rpki-client