Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier: 7R1WWWPex5D5PRuTXhkGgAdVn+H5dn5Va/cHlA5HzwY=
Subject key identifier: E8:B9:4E:AE:0D:10:CB:40:95:A2:B4:C7:53:2E:1B:16:B8:7C:3C:3B
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 01984AE600C76E1263D2F99D78ED24ED939F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number: 0C20
Signing time: Sun 27 Jul 2025 08:00:44 +0000
Manifest this update: Sun 27 Jul 2025 08:00:44 +0000
Manifest next update: Mon 28 Jul 2025 08:00:44 +0000
Files and hashes: 1: 2fQddCIl-7Oq1WuhVFDb_ItwFWs.roa (hash: G5bUTFThyurFxXPOBBEBFBWKjBkZ0p5sb4xbB9qr44M=)
2: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=)
3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: KfKggnAt6mx9kUthJssY/z+1y3j9lmZy8z3MKF7/U5E=)
4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=)
5: H6_j121nwrBmCty1wbdXDXgyav8.roa (hash: vaRQnvr04lMFV87aznhgmJYTb/5VAEUEaBeFpioyQ+k=)
6: hkqOX4mECokeZ3ChLO-NkzoKVG0.roa (hash: jDSI0Vi3uJHnivxkTcLJyUGbXo6jl9OF+5YD1t9wHog=)
7: mo1ZQeGNb6y397AsNPVU_jqzCH8.roa (hash: xvLDiC6sAtB273J1JQ2La6KkENHeWFLQMNh6wUa0JGU=)
8: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=)
9: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:00:c7:6e:12:63:d2:f9:9d:78:ed:24:ed:93:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Jul 27 08:00:44 2025 GMT
Not After : Jul 28 08:00:44 2025 GMT
Subject: CN=e8b94eae0d10cb4095a2b4c7532e1b16b87c3c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:61:92:ff:40:b0:d8:39:67:83:cd:27:d4:
58:3a:dc:05:15:d6:3c:68:17:4b:91:9b:98:41:06:
a8:74:30:3f:03:0e:2a:df:b3:70:ac:f5:67:42:61:
c9:03:94:7e:f5:50:9b:6b:10:f5:6c:44:d6:e6:6b:
f7:08:81:99:6a:3c:9e:e3:0e:88:36:75:fe:7d:ea:
d4:11:87:77:f7:f1:3b:b0:8c:e3:69:8e:22:d8:fd:
21:37:65:c3:11:16:e0:28:ac:2b:58:16:19:6a:ad:
f0:b3:f9:34:1d:d7:5f:30:71:9e:25:14:85:b6:1d:
e3:37:7c:de:73:3f:9c:04:c6:ac:7f:0e:c1:36:a8:
d4:b3:4a:f9:82:92:39:0e:6d:02:fc:ea:fb:f9:c8:
22:d2:e1:e2:9a:fb:3a:a3:aa:76:52:6f:a6:44:b6:
84:c0:9d:af:57:f3:77:34:34:f6:93:15:dd:c5:e4:
23:b9:e8:a1:3f:5a:4d:8b:85:97:4f:f6:62:19:87:
43:fe:27:92:69:92:da:4b:c8:b5:e5:c7:69:03:f5:
91:37:c5:5a:f4:f7:ff:64:3b:69:9b:dc:c3:df:7d:
4a:b8:72:6c:e8:d8:93:62:6a:9c:c1:47:02:96:4b:
a6:54:56:3f:d4:c1:47:a9:8a:80:05:db:a5:97:eb:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:4E:AE:0D:10:CB:40:95:A2:B4:C7:53:2E:1B:16:B8:7C:3C:3B
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6d:b6:93:12:6f:1e:50:44:5b:7e:c2:85:59:2b:83:78:74:
b8:8c:63:e4:89:05:4b:32:2b:1d:15:e2:df:85:2e:25:0f:35:
56:14:de:d2:a7:00:f8:f2:8b:b4:53:99:ea:ad:55:fd:77:aa:
68:9f:6e:23:b3:86:cd:20:ff:cc:7e:29:38:5b:35:16:d7:12:
b8:9d:a2:29:57:79:e5:e2:63:52:50:a6:c0:ea:30:a3:b0:b3:
18:f3:64:69:81:7f:a8:e5:20:d9:9f:c7:95:ad:c6:9f:ec:43:
0a:d8:da:1d:b0:2c:6a:5d:fd:da:50:5b:50:3f:1b:43:9d:55:
22:dd:4e:96:f7:ea:d2:aa:2e:4b:17:62:8c:d6:eb:05:8c:4f:
16:df:1f:4d:e8:1b:2b:41:c2:3b:10:c4:e5:2e:52:22:11:e7:
3e:46:00:1e:60:97:2e:56:67:78:e8:00:f1:98:4d:03:5e:c4:
e8:14:60:b6:55:6c:4d:96:ea:2e:1d:ed:06:78:ba:3f:85:fc:
24:ea:7a:21:75:b4:71:d3:1e:18:1d:e4:cf:1c:45:45:c0:e7:
ba:48:d1:ac:34:b3:fa:f2:a1:b5:a5:4d:d2:e8:42:e4:c6:ff:
64:6a:2b:d9:78:f4:fe:5a:7a:ce:ec:f8:cb:db:a7:79:79:9e:
85:06:6e:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5gDHbhJj0vmdeO0k7ZOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1
ODg4MjcwHhcNMjUwNzI3MDgwMDQ0WhcNMjUwNzI4MDgwMDQ0WjAzMTEwLwYDVQQD
EyhlOGI5NGVhZTBkMTBjYjQwOTVhMmI0Yzc1MzJlMWIxNmI4N2MzYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAFhkv9AsNg5Z4PNJ9RYOtwFFdY8
aBdLkZuYQQaodDA/Aw4q37NwrPVnQmHJA5R+9VCbaxD1bETW5mv3CIGZajye4w6I
NnX+ferUEYd39/E7sIzjaY4i2P0hN2XDERbgKKwrWBYZaq3ws/k0HddfMHGeJRSF
th3jN3zecz+cBMasfw7BNqjUs0r5gpI5Dm0C/Or7+cgi0uHimvs6o6p2Um+mRLaE
wJ2vV/N3NDT2kxXdxeQjueihP1pNi4WXT/ZiGYdD/ieSaZLaS8i15cdpA/WRN8Va
9Pf/ZDtpm9zD331KuHJs6NiTYmqcwUcClkumVFY/1MFHqYqABdull+vgkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOi5Tq4NEMtAlaK0x1MuGxa4fDw7MB8GA1UdIwQY
MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct
OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy
LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU222kxJv
HlBEW37ChVkrg3h0uIxj5IkFSzIrHRXi34UuJQ81VhTe0qcA+PKLtFOZ6q1V/Xeq
aJ9uI7OGzSD/zH4pOFs1FtcSuJ2iKVd55eJjUlCmwOowo7CzGPNkaYF/qOUg2Z/H
la3Gn+xDCtjaHbAsal392lBbUD8bQ51VIt1Olvfq0qouSxdijNbrBYxPFt8fTegb
K0HCOxDE5S5SIhHnPkYAHmCXLlZneOgA8ZhNA17E6BRgtlVsTZbqLh3tBni6P4X8
JOp6IXW0cdMeGB3kzxxFRcDnukjRrDSz+vKhtaVN0uhC5Mb/ZGor2Xj0/lp6zuz4
y9uneXmehQZuuQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:41:07 2025 by rpki-client