Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: 5A9Wxzd73a8/DMYaxj2imYWfdZ9ZGjPscpdtRqDEmg8=
Subject key identifier: 30:23:ED:8C:66:FE:87:64:36:9A:05:B9:66:EF:EA:29:B0:C4:8F:B3
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 01984B1C87D469EC8E92CCA435CDF151E905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0A16
Signing time: Sun 27 Jul 2025 09:00:17 +0000
Manifest this update: Sun 27 Jul 2025 09:00:17 +0000
Manifest next update: Mon 28 Jul 2025 09:00:17 +0000
Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: D93ooRsrNs0l9AXMTRIYpzYU7KB874KKswc2iTZI1YY=)
3: XNJw0i5YROHsLdGqQV-sQNcutQk.roa (hash: jP7HL40L4UifhwI3DQuFuVlNNqWLOXwjBtyAaPoZl9M=)
4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:1c:87:d4:69:ec:8e:92:cc:a4:35:cd:f1:51:e9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jul 27 09:00:17 2025 GMT
Not After : Jul 28 09:00:17 2025 GMT
Subject: CN=3023ed8c66fe8764369a05b966efea29b0c48fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a5:41:d6:b7:81:68:c6:9d:92:e8:bb:73:89:
bb:a5:67:c3:9a:d7:3f:61:db:63:55:22:d0:0c:47:
87:19:be:db:e8:e6:ca:0c:95:ec:7e:6e:89:6a:38:
29:63:d1:72:cc:3e:e6:26:44:79:ac:f4:de:f0:c1:
a6:11:d8:a9:0f:2e:c1:36:51:6c:d5:3d:4d:f7:9f:
6f:f7:55:08:a5:50:91:2c:63:2a:b3:6e:33:ff:93:
42:01:50:f8:30:cb:dd:de:48:48:df:f0:5c:be:5e:
e5:99:e1:5f:bc:f3:71:e8:a0:f6:d3:c2:e6:90:29:
85:1c:2e:90:1b:f3:6f:94:6a:cf:4e:50:8b:e2:34:
1b:40:7b:8d:96:b9:d2:32:ae:5c:d6:90:34:04:27:
27:3d:55:5d:fc:92:27:d4:91:2d:9c:8d:67:d2:71:
cc:dd:f6:23:d7:a5:52:34:1c:1a:dc:e9:18:7b:52:
7c:a8:d6:ad:51:72:0a:1a:88:e0:40:fc:16:a2:54:
d9:e0:e0:91:e2:ec:2f:6f:36:7b:d7:9b:df:40:1a:
36:6a:32:28:13:df:a1:29:5c:88:d2:08:43:e9:de:
a6:14:d9:fd:2b:d5:2c:3a:46:c8:d9:fc:e8:5f:3e:
35:98:58:dd:52:dc:94:59:4b:b4:5e:b4:ab:83:14:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:ED:8C:66:FE:87:64:36:9A:05:B9:66:EF:EA:29:B0:C4:8F:B3
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b5:d6:d2:40:af:af:e8:1b:f0:d9:1b:d7:b7:6c:ff:bc:31:
95:5b:e2:b2:a8:f6:40:d9:ec:b1:9a:e6:f4:65:c3:5d:f4:25:
8e:a8:01:89:e8:3d:7e:49:3d:e4:cb:f0:98:bb:d0:f4:40:50:
73:aa:bd:7d:12:0a:5d:9c:37:49:2a:c8:dd:16:71:7c:25:0d:
00:5b:32:9d:ca:8a:0d:2d:bd:3f:ac:1a:f6:98:df:20:f6:67:
07:36:ef:3b:6e:ec:f3:76:50:60:78:00:0d:7c:dd:7f:1f:96:
05:e9:d6:7a:10:ab:5d:27:2b:85:cb:86:7f:b8:3c:ea:82:1c:
3a:62:fb:dc:18:88:fe:c7:f4:59:6e:39:7a:05:a9:ae:f9:8b:
46:18:c2:a9:e7:fe:b5:83:49:e7:63:d2:fd:3b:09:14:24:de:
65:6a:a6:b2:9e:ac:3c:93:c1:72:2b:d4:dd:9a:8d:53:82:5c:
0c:79:ab:3a:1a:e8:ce:b4:13:26:d7:8d:a7:61:c8:00:39:73:
78:49:d9:6d:13:66:ca:82:de:cd:ea:95:33:0b:a1:2e:09:9d:
20:58:65:09:4f:b1:b5:58:b8:46:4b:84:4f:f8:c8:1c:3a:65:
d1:3f:af:e5:3a:31:bc:c3:a7:6b:ca:3d:d9:1d:25:53:41:43:
e8:59:76:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLHIfUaeyOksykNc3xUekFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDYwMmI5ZTFkYTJiNTY4ZGY1NDRiZGE1MGU0MTU3OTli
YmIxZTIwHhcNMjUwNzI3MDkwMDE3WhcNMjUwNzI4MDkwMDE3WjAzMTEwLwYDVQQD
EygzMDIzZWQ4YzY2ZmU4NzY0MzY5YTA1Yjk2NmVmZWEyOWIwYzQ4ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36VB1reBaMadkui7c4m7pWfDmtc/
YdtjVSLQDEeHGb7b6ObKDJXsfm6JajgpY9FyzD7mJkR5rPTe8MGmEdipDy7BNlFs
1T1N959v91UIpVCRLGMqs24z/5NCAVD4MMvd3khI3/Bcvl7lmeFfvPNx6KD208Lm
kCmFHC6QG/NvlGrPTlCL4jQbQHuNlrnSMq5c1pA0BCcnPVVd/JIn1JEtnI1n0nHM
3fYj16VSNBwa3OkYe1J8qNatUXIKGojgQPwWolTZ4OCR4uwvbzZ715vfQBo2ajIo
E9+hKVyI0ghD6d6mFNn9K9UsOkbI2fzoXz41mFjdUtyUWUu0XrSrgxS5zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAj7Yxm/odkNpoFuWbv6imwxI+zMB8GA1UdIwQY
MBaAFAPWArnh2itWjfVEvaUOQVeZu7HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEt
ZmI5N2RkZDU0ODkxLzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEtZmI5N2RkZDU0ODkx
LzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbXW0kCv
r+gb8Nkb17ds/7wxlVvisqj2QNnssZrm9GXDXfQljqgBieg9fkk95MvwmLvQ9EBQ
c6q9fRIKXZw3SSrI3RZxfCUNAFsyncqKDS29P6wa9pjfIPZnBzbvO27s83ZQYHgA
DXzdfx+WBenWehCrXScrhcuGf7g86oIcOmL73BiI/sf0WW45egWprvmLRhjCqef+
tYNJ52PS/TsJFCTeZWqmsp6sPJPBcivU3ZqNU4JcDHmrOhrozrQTJteNp2HIADlz
eEnZbRNmyoLezeqVMwuhLgmdIFhlCU+xtVi4RkuET/jIHDpl0T+v5ToxvMOna8o9
2R0lU0FD6Fl2NQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:33 2025 by rpki-client