Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: yC6wSknYN94i5Zdwht5RuHv2U/KFUeikjHWULt7bLHo=
Subject key identifier: 69:F4:CA:A1:0F:9A:C3:C7:0B:6F:62:EE:48:79:00:2E:E5:99:B1:A6
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 0198545681617ACEDF318452800DA1C6B673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 0EEE
Signing time: Tue 29 Jul 2025 04:00:11 +0000
Manifest this update: Tue 29 Jul 2025 04:00:11 +0000
Manifest next update: Wed 30 Jul 2025 04:00:11 +0000
Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: Kr05fbARnLN6WPPbcuzBC0Bf9AqKen0+x0sQ3jbE5AM=)
2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:81:61:7a:ce:df:31:84:52:80:0d:a1:c6:b6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Jul 29 04:00:11 2025 GMT
Not After : Jul 30 04:00:11 2025 GMT
Subject: CN=69f4caa10f9ac3c70b6f62ee4879002ee599b1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:58:b7:48:e3:36:58:53:1f:59:df:c2:6d:
7a:98:69:2d:3b:e6:b5:e1:6f:fd:be:96:0c:1a:d8:
6f:82:95:12:d5:44:77:92:0c:00:9d:ff:71:d3:2e:
ed:96:ba:30:d4:46:81:22:46:dd:5a:3e:69:bd:7a:
98:9a:1e:fb:a8:a3:6a:ca:4b:ee:00:94:44:3e:57:
03:a2:7b:dd:18:3b:42:e7:dd:4f:f1:44:a8:59:51:
6c:0f:9b:b2:dc:ae:a7:ec:8c:a7:dc:75:06:2f:5f:
15:60:83:42:b0:24:b0:2f:19:0b:5b:71:5a:0b:93:
5d:2a:53:6e:64:5b:f6:2d:75:e4:f0:02:68:d1:97:
33:85:2c:1d:e5:0d:16:e5:06:56:f6:22:7c:a8:19:
88:47:a7:40:d2:de:d2:a1:cc:4b:74:d8:00:15:a7:
b8:e7:0e:23:7c:c6:b8:82:2a:37:ba:e0:f4:f1:d8:
49:fd:2b:e2:60:cb:61:50:1c:04:66:ff:ae:1c:6d:
cb:d7:95:a1:0f:07:6b:e2:07:aa:c6:43:7d:8c:77:
96:5f:67:3b:3d:be:b3:f1:dc:0c:c2:26:6f:0c:4d:
bc:8a:3c:6c:18:33:59:57:8e:a2:89:0a:85:64:ab:
97:54:b4:1c:89:7f:e8:9f:4b:38:b7:7f:96:8b:c2:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F4:CA:A1:0F:9A:C3:C7:0B:6F:62:EE:48:79:00:2E:E5:99:B1:A6
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0b:ca:ef:77:cc:25:7f:01:99:95:70:97:4d:a3:dd:be:eb:
87:52:2f:83:b7:eb:47:d5:5c:c3:0d:38:bc:cb:d4:64:03:d4:
3c:94:80:79:8d:c9:da:16:f0:58:6a:cb:01:23:93:70:13:5b:
27:1d:24:bb:e8:95:ef:8b:38:53:0c:e1:a9:db:22:2e:d8:72:
22:3b:80:7d:20:92:64:b9:90:82:23:17:4c:c7:f9:36:ac:af:
82:84:f5:f7:0f:d2:37:40:ec:9c:2f:20:e5:1d:d4:ed:1d:24:
ae:58:d5:ec:21:e6:b4:73:a2:52:a1:f9:b0:c7:51:6f:27:a0:
f9:ce:11:75:d2:d8:f8:d9:cb:b8:9b:46:32:cb:b4:86:a4:8c:
48:33:78:15:83:fa:f1:b6:ef:a3:e6:a7:37:05:96:1f:14:97:
1d:90:4e:ed:1b:20:6c:ad:9d:5d:b3:a1:3c:f2:9e:a8:aa:d4:
64:cf:90:90:0b:b6:f7:c1:dc:68:9c:3c:f3:ab:fd:bd:dd:cf:
c6:82:6d:4e:96:e1:4e:2d:2d:05:b5:a1:bd:e5:e8:17:d9:79:
42:fc:b0:f1:dc:34:89:da:b8:0f:93:72:45:01:9a:91:be:24:
52:bb:7c:78:65:e6:06:cf:6e:37:10:f4:53:d3:c7:1b:e5:0c:
e9:f4:4e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUVoFhes7fMYRSgA2hxrZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx
MTYzYWEwHhcNMjUwNzI5MDQwMDExWhcNMjUwNzMwMDQwMDExWjAzMTEwLwYDVQQD
Eyg2OWY0Y2FhMTBmOWFjM2M3MGI2ZjYyZWU0ODc5MDAyZWU1OTliMWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphlYt0jjNlhTH1nfwm16mGktO+a1
4W/9vpYMGthvgpUS1UR3kgwAnf9x0y7tlrow1EaBIkbdWj5pvXqYmh77qKNqykvu
AJREPlcDonvdGDtC591P8USoWVFsD5uy3K6n7Iyn3HUGL18VYINCsCSwLxkLW3Fa
C5NdKlNuZFv2LXXk8AJo0ZczhSwd5Q0W5QZW9iJ8qBmIR6dA0t7SocxLdNgAFae4
5w4jfMa4gio3uuD08dhJ/SviYMthUBwEZv+uHG3L15WhDwdr4geqxkN9jHeWX2c7
Pb6z8dwMwiZvDE28ijxsGDNZV46iiQqFZKuXVLQciX/on0s4t3+Wi8KOPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn0yqEPmsPHC29i7kh5AC7lmbGmMB8GA1UdIwQY
MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt
MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy
LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAvK73fM
JX8BmZVwl02j3b7rh1Ivg7frR9Vcww04vMvUZAPUPJSAeY3J2hbwWGrLASOTcBNb
Jx0ku+iV74s4UwzhqdsiLthyIjuAfSCSZLmQgiMXTMf5NqyvgoT19w/SN0DsnC8g
5R3U7R0krljV7CHmtHOiUqH5sMdRbyeg+c4RddLY+NnLuJtGMsu0hqSMSDN4FYP6
8bbvo+anNwWWHxSXHZBO7RsgbK2dXbOhPPKeqKrUZM+QkAu298HcaJw886v9vd3P
xoJtTpbhTi0tBbWhveXoF9l5Qvyw8dw0idq4D5NyRQGakb4kUrt8eGXmBs9uNxD0
U9PHG+UM6fROcg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:47:07 2025 by rpki-client