Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: mp3KWUHOoWIkVp9WLVk/y/rYCZm9WRggOCIp5On8Pag=
Subject key identifier: 45:2A:FB:77:76:77:D4:C3:90:6D:E8:DE:3D:24:19:30:3D:F4:E8:CC
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 019830B84E3EDBB53A70DD696970C26C0A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 05AB
Signing time: Tue 22 Jul 2025 06:00:41 +0000
Manifest this update: Tue 22 Jul 2025 06:00:41 +0000
Manifest next update: Wed 23 Jul 2025 06:00:41 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: nCT6D6xSSQ/8IFPrCD4aymii+y1i+3Pra59moVMJt8U=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:b8:4e:3e:db:b5:3a:70:dd:69:69:70:c2:6c:0a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Jul 22 06:00:41 2025 GMT
Not After : Jul 23 06:00:41 2025 GMT
Subject: CN=452afb777677d4c3906de8de3d2419303df4e8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:d6:7d:87:10:16:52:73:56:35:2a:22:21:
f7:ca:a9:b5:f9:5b:b9:6a:de:66:6a:f2:aa:af:1f:
a6:01:1f:dc:2c:27:a3:d5:d8:14:ec:9d:31:d4:e7:
02:b8:a5:d6:c8:01:e3:bc:c2:61:c7:cd:7a:54:c4:
30:e7:36:f2:15:71:78:01:a2:73:cf:d2:7e:c5:df:
39:fd:d2:1d:b8:06:32:7a:62:34:26:41:26:ed:16:
38:05:6c:30:2b:5f:5e:da:78:da:b5:ff:3c:3e:1e:
b1:43:14:0a:b4:ab:51:c6:ed:1c:42:a8:fa:71:70:
9b:5b:4d:ff:45:28:e2:07:1b:df:57:bc:6f:5f:3b:
d1:50:16:79:56:58:33:00:57:55:4b:74:e0:16:72:
22:5f:a9:c4:30:18:f9:19:04:6c:15:75:24:cf:47:
00:15:0e:9a:9a:65:33:6d:87:41:96:61:77:ab:4e:
83:d3:ef:fd:b3:01:7e:30:bb:ca:53:6d:41:82:34:
d8:14:bf:af:e9:4a:9c:47:af:81:e3:13:89:65:ff:
4c:71:8d:94:df:41:b8:d1:1c:c0:a0:d7:56:a7:2c:
d8:7b:92:2a:54:42:2c:56:57:1d:8d:a0:80:58:fc:
c8:0e:05:df:87:ca:15:00:e2:bc:1b:df:07:fc:44:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2A:FB:77:76:77:D4:C3:90:6D:E8:DE:3D:24:19:30:3D:F4:E8:CC
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4f:33:5a:81:27:40:9a:f4:d8:78:52:dc:e2:19:77:a2:9a:
1a:3e:97:0a:f6:6b:ca:3e:bd:9a:53:d4:b7:0e:17:4e:3d:5f:
01:71:cc:97:c8:33:47:59:dd:3d:53:1d:46:5a:32:b3:12:2f:
09:2f:62:5e:f8:0b:78:b5:1d:05:7a:bc:f3:58:f4:b0:3f:1e:
42:61:8c:f5:53:42:d2:e3:fc:eb:04:76:13:b7:56:a1:de:c6:
43:e3:23:cd:8e:79:35:2a:21:8b:ee:a2:84:5c:25:33:30:53:
ab:e7:e3:dc:c9:41:a6:68:f0:3e:90:fa:45:54:ff:07:00:d3:
07:c1:99:59:50:6f:d2:c4:d0:94:91:4a:8f:dc:55:2a:ac:7c:
81:59:f6:01:68:43:77:87:09:56:97:8f:1a:25:56:73:b0:40:
5f:8c:49:b8:f3:61:1d:71:ef:ca:a9:2e:a2:08:3d:88:e7:35:
02:fb:82:76:33:31:57:c1:df:34:11:db:56:30:8c:df:66:8f:
bd:2d:5b:c8:e3:68:a1:76:d1:88:29:86:80:b4:3d:c3:e9:8f:
45:53:bb:47:9a:1c:a4:bb:07:99:4d:fe:49:8e:bd:e2:52:07:
0a:44:0d:e5:bf:a1:95:8e:84:ad:3b:b1:f9:07:08:6f:b5:16:
24:6e:76:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgwuE4+27U6cN1paXDCbAoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Mzg5NDdkZGI4OTJmNWYzYTQ4YTY5YWY5N2E4ZmI1MjEw
M2EwZDYwHhcNMjUwNzIyMDYwMDQxWhcNMjUwNzIzMDYwMDQxWjAzMTEwLwYDVQQD
Eyg0NTJhZmI3Nzc2NzdkNGMzOTA2ZGU4ZGUzZDI0MTkzMDNkZjRlOGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSfWfYcQFlJzVjUqIiH3yqm1+Vu5
at5mavKqrx+mAR/cLCej1dgU7J0x1OcCuKXWyAHjvMJhx816VMQw5zbyFXF4AaJz
z9J+xd85/dIduAYyemI0JkEm7RY4BWwwK19e2njatf88Ph6xQxQKtKtRxu0cQqj6
cXCbW03/RSjiBxvfV7xvXzvRUBZ5VlgzAFdVS3TgFnIiX6nEMBj5GQRsFXUkz0cA
FQ6ammUzbYdBlmF3q06D0+/9swF+MLvKU21BgjTYFL+v6UqcR6+B4xOJZf9McY2U
30G40RzAoNdWpyzYe5IqVEIsVlcdjaCAWPzIDgXfh8oVAOK8G98H/ESChQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUq+3d2d9TDkG3o3j0kGTA99OjMMB8GA1UdIwQY
MBaAFPY4lH3biS9fOkimmvl6j7UhA6DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMt
NjFkMjY2MDNjMzdjLzEvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMtNjFkMjY2MDNjMzdj
LzEvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmk8zWoEn
QJr02HhS3OIZd6KaGj6XCvZryj69mlPUtw4XTj1fAXHMl8gzR1ndPVMdRloysxIv
CS9iXvgLeLUdBXq881j0sD8eQmGM9VNC0uP86wR2E7dWod7GQ+MjzY55NSohi+6i
hFwlMzBTq+fj3MlBpmjwPpD6RVT/BwDTB8GZWVBv0sTQlJFKj9xVKqx8gVn2AWhD
d4cJVpePGiVWc7BAX4xJuPNhHXHvyqkuogg9iOc1AvuCdjMxV8HfNBHbVjCM32aP
vS1byONooXbRiCmGgLQ9w+mPRVO7R5ocpLsHmU3+SY694lIHCkQN5b+hlY6ErTux
+QcIb7UWJG52EQ==
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:57:02 2025 by rpki-client