Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: EBdSCM7sbEO/SxcvbDGWLJrj0LpnUMT2ScIBB4nijik=
Subject key identifier: CE:CB:DE:CB:6D:EF:50:7C:E7:BF:9F:75:B5:8B:A8:76:5B:3E:76:7B
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 0198537B99B10160CA0183C1F3B3B93B7A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 00:01:05 +0000
Manifest this update: Tue 29 Jul 2025 00:01:05 +0000
Manifest next update: Wed 30 Jul 2025 00:01:05 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: ByV4nW2+T/9f0TcvSX5aO7O0R2db6ZJCpT6Xd2+2kzw=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:99:b1:01:60:ca:01:83:c1:f3:b3:b9:3b:7a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Jul 29 00:01:05 2025 GMT
Not After : Jul 30 00:01:05 2025 GMT
Subject: CN=cecbdecb6def507ce7bf9f75b58ba8765b3e767b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:95:c4:71:91:4a:7f:d6:e1:fb:dd:78:e4:
38:1a:f2:b8:5e:60:dc:23:1c:b3:59:39:81:b5:1d:
13:d9:a1:b2:14:7f:79:31:92:50:61:8d:12:13:bf:
5c:33:c3:75:19:cb:34:79:50:3f:ef:8d:3a:96:e5:
0b:a1:2d:ae:2a:f2:50:98:9e:cf:e3:59:89:76:c4:
bd:e9:fa:fe:33:3d:e2:e2:fd:84:2a:5b:74:90:df:
a4:2b:cc:30:ae:23:ec:98:68:fc:87:1d:84:04:9e:
f7:c2:f1:38:98:76:19:ff:1c:b9:b2:20:d2:fd:d1:
01:54:53:96:c0:c4:00:99:88:5b:6c:d2:9a:eb:39:
48:9f:ab:70:ec:99:41:30:09:03:24:09:a5:f5:65:
4c:ce:e0:de:4e:41:97:d1:c8:05:0c:2f:c1:cc:40:
ab:84:f6:04:93:be:2c:ef:57:06:2f:b5:b2:c3:06:
2b:a6:ec:bb:d5:16:99:74:de:d4:e1:23:8e:cd:52:
bf:14:29:d2:51:ab:d5:9a:7d:2a:95:7a:7f:69:60:
9a:5f:e0:8e:94:81:58:80:b5:af:94:fd:09:23:e5:
34:32:16:4c:fd:50:0a:63:59:25:85:a5:c6:ee:4e:
0f:ca:cb:53:76:3b:a5:8d:de:21:ca:93:84:02:90:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CB:DE:CB:6D:EF:50:7C:E7:BF:9F:75:B5:8B:A8:76:5B:3E:76:7B
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9a:10:cf:0c:a9:d6:f8:c7:38:2d:55:ae:a6:10:5f:b5:17:
7e:cc:0f:49:3c:b6:8b:da:25:fd:0a:ca:3b:e2:a9:0e:17:4f:
ba:d0:c4:2a:24:17:c5:1a:ee:97:50:cf:07:9f:64:c5:73:e1:
22:be:24:60:68:4a:1c:6d:73:6e:ed:9a:b2:00:bf:1b:c6:40:
6a:8f:a3:63:4d:5c:68:5c:a5:10:2a:13:54:f1:4f:ff:15:3a:
9d:e0:2e:73:e1:ec:80:82:78:05:4d:f4:78:0a:1b:dd:d3:40:
df:d9:0b:37:2f:48:4c:c9:90:d2:51:29:3e:d4:86:d3:3b:7c:
80:f2:c9:df:10:eb:95:3f:58:4f:56:a8:27:b5:c6:bc:5d:ed:
16:93:b9:82:d4:d3:35:e4:c5:c0:20:30:36:80:ee:da:13:09:
f9:e9:75:bc:d3:c3:e9:2e:e9:bc:47:a8:6a:72:6c:31:69:14:
bd:3f:b6:c5:b8:fe:70:71:10:5a:70:5b:f3:38:5b:15:30:7f:
7e:95:f6:cf:71:52:3c:2d:46:9e:51:19:ae:22:c6:20:69:33:
de:03:4a:a9:9b:4c:37:b4:a6:30:1c:44:5a:bb:06:2b:6e:f0:
1e:5c:96:b0:91:70:1d:01:68:47:81:3c:be:17:78:c1:61:89:
a8:6c:17:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTe5mxAWDKAYPB87O5O3oIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1
M2E1ZTkwHhcNMjUwNzI5MDAwMTA1WhcNMjUwNzMwMDAwMTA1WjAzMTEwLwYDVQQD
EyhjZWNiZGVjYjZkZWY1MDdjZTdiZjlmNzViNThiYTg3NjViM2U3NjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRiVxHGRSn/W4fvdeOQ4GvK4XmDc
IxyzWTmBtR0T2aGyFH95MZJQYY0SE79cM8N1Gcs0eVA/7406luULoS2uKvJQmJ7P
41mJdsS96fr+Mz3i4v2EKlt0kN+kK8wwriPsmGj8hx2EBJ73wvE4mHYZ/xy5siDS
/dEBVFOWwMQAmYhbbNKa6zlIn6tw7JlBMAkDJAml9WVMzuDeTkGX0cgFDC/BzECr
hPYEk74s71cGL7WywwYrpuy71RaZdN7U4SOOzVK/FCnSUavVmn0qlXp/aWCaX+CO
lIFYgLWvlP0JI+U0MhZM/VAKY1klhaXG7k4PystTdjuljd4hypOEApDjgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7L3stt71B857+fdbWLqHZbPnZ7MB8GA1UdIwQY
MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt
MjQwMWI3NDIwNmYzLzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz
LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZoQzwyp
1vjHOC1VrqYQX7UXfswPSTy2i9ol/QrKO+KpDhdPutDEKiQXxRrul1DPB59kxXPh
Ir4kYGhKHG1zbu2asgC/G8ZAao+jY01caFylECoTVPFP/xU6neAuc+HsgIJ4BU30
eAob3dNA39kLNy9ITMmQ0lEpPtSG0zt8gPLJ3xDrlT9YT1aoJ7XGvF3tFpO5gtTT
NeTFwCAwNoDu2hMJ+el1vNPD6S7pvEeoanJsMWkUvT+2xbj+cHEQWnBb8zhbFTB/
fpX2z3FSPC1GnlEZriLGIGkz3gNKqZtMN7SmMBxEWrsGK27wHlyWsJFwHQFoR4E8
vhd4wWGJqGwXXQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:32 2025 by rpki-client