Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: yePph8F8OwCxdcONJ3xTxaHlSAFclMhW7/H+9hXLhUQ=
Subject key identifier: 68:77:43:49:BF:E5:29:F7:B0:05:A4:C6:B7:8C:3D:A6:EF:81:91:C1
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 01984B54112D0292DB71BFC79C3AC0524B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 0738
Signing time: Sun 27 Jul 2025 10:00:57 +0000
Manifest this update: Sun 27 Jul 2025 10:00:57 +0000
Manifest next update: Mon 28 Jul 2025 10:00:57 +0000
Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=)
2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: dcRoEY539AYUrj6VqkSuygEnRGfA8CM/HIHNgVxQikM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:11:2d:02:92:db:71:bf:c7:9c:3a:c0:52:4b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Jul 27 10:00:57 2025 GMT
Not After : Jul 28 10:00:57 2025 GMT
Subject: CN=68774349bfe529f7b005a4c6b78c3da6ef8191c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:e8:7a:c1:0a:99:1b:07:bc:e8:97:92:79:
71:ee:43:43:4e:cc:c3:14:99:15:d9:7f:cd:4f:8b:
ca:7a:c3:f0:46:5e:5b:fe:a3:fa:12:0d:ff:45:5d:
41:48:41:ee:a4:c5:08:a2:9b:35:6e:67:4d:36:33:
c6:2d:ac:5a:f5:fa:03:cf:61:23:2e:b7:d0:60:72:
f7:e5:fc:b3:d6:7c:41:52:fe:81:ae:bc:96:90:bc:
c3:33:3d:26:98:a9:de:5a:92:3d:14:8e:83:b4:ec:
24:2d:b9:62:fb:44:31:31:0b:1e:c4:e0:c9:f9:26:
2d:38:74:2c:9f:f3:81:e4:22:3f:67:fa:b9:0a:37:
fa:c0:63:40:21:27:d0:50:48:f2:49:50:c4:b5:da:
d3:9e:8d:43:de:84:37:07:da:da:c6:a5:d1:a1:3f:
e9:3b:1d:07:02:91:96:39:ce:29:c9:e2:24:ad:cf:
88:63:60:fd:8c:e4:33:1a:5a:30:25:a5:84:11:39:
c6:98:a2:6c:db:90:35:ef:53:5e:a8:db:96:bb:97:
37:c9:67:d4:f8:f2:5c:a5:8f:82:65:ae:ae:cf:cf:
1b:18:72:04:86:c5:d6:fb:50:50:d7:e3:f8:47:2e:
dc:1e:61:fd:aa:e9:cf:f0:d0:31:31:0e:22:7d:91:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:77:43:49:BF:E5:29:F7:B0:05:A4:C6:B7:8C:3D:A6:EF:81:91:C1
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1b:c3:bf:b4:79:23:86:f6:71:e6:bc:cc:f4:91:04:02:70:
b5:50:a9:7a:cf:45:46:9f:4e:0f:0a:d2:83:16:85:1c:43:71:
c8:32:a9:4d:f2:e5:ac:e8:38:95:9e:0a:e8:82:ca:8b:37:99:
ad:b8:96:e0:8e:b2:aa:a6:4f:70:7c:83:bc:0b:2c:e1:af:7a:
75:3b:0b:e9:6c:b7:f2:9b:97:1a:f1:a1:65:a2:cf:c4:db:a5:
91:63:c1:3b:41:75:a8:39:49:ce:43:ce:52:48:fd:b3:c1:8a:
66:0a:70:8b:05:a2:1c:b0:1f:78:b7:35:33:be:5e:e2:ef:08:
49:7b:95:05:f8:fa:46:4a:40:f3:95:99:98:88:ac:d9:66:c3:
90:50:6e:9d:4a:0f:f4:51:f9:99:ab:10:fe:cc:55:2f:2c:f4:
d6:92:97:2f:0b:d7:b3:e3:13:ae:fe:67:24:52:e5:d1:81:30:
87:09:bd:bb:00:6a:e3:ad:7f:e2:21:a2:6e:cc:76:ed:6e:ed:
c8:43:a0:34:0c:32:24:76:64:cc:5b:68:7f:cc:e1:18:e7:91:
55:a7:fd:2d:a2:2b:f5:c1:9b:70:30:b9:74:57:cd:ff:b1:61:
12:56:bf:31:aa:c2:18:ec:21:31:d8:06:17:29:0d:6e:7e:0d:
d4:57:97:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVBEtApLbcb/HnDrAUkuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZDE5ZDY5NzAxZjEzYTU5NzdjZDIyOTZmYTg3YTI1MmZi
ZjA1ZjcwHhcNMjUwNzI3MTAwMDU3WhcNMjUwNzI4MTAwMDU3WjAzMTEwLwYDVQQD
Eyg2ODc3NDM0OWJmZTUyOWY3YjAwNWE0YzZiNzhjM2RhNmVmODE5MWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqproesEKmRsHvOiXknlx7kNDTszD
FJkV2X/NT4vKesPwRl5b/qP6Eg3/RV1BSEHupMUIops1bmdNNjPGLaxa9foDz2Ej
LrfQYHL35fyz1nxBUv6BrryWkLzDMz0mmKneWpI9FI6DtOwkLbli+0QxMQsexODJ
+SYtOHQsn/OB5CI/Z/q5Cjf6wGNAISfQUEjySVDEtdrTno1D3oQ3B9raxqXRoT/p
Ox0HApGWOc4pyeIkrc+IY2D9jOQzGlowJaWEETnGmKJs25A171NeqNuWu5c3yWfU
+PJcpY+CZa6uz88bGHIEhsXW+1BQ1+P4Ry7cHmH9qunP8NAxMQ4ifZGfrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh3Q0m/5Sn3sAWkxreMPabvgZHBMB8GA1UdIwQY
MBaAFGvRnWlwHxOll3zSKW+oeiUvvwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUt
OGYwZDRlZWY2YWI1LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUtOGYwZDRlZWY2YWI1
LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhvDv7R5
I4b2cea8zPSRBAJwtVCpes9FRp9ODwrSgxaFHENxyDKpTfLlrOg4lZ4K6ILKizeZ
rbiW4I6yqqZPcHyDvAss4a96dTsL6Wy38puXGvGhZaLPxNulkWPBO0F1qDlJzkPO
Ukj9s8GKZgpwiwWiHLAfeLc1M75e4u8ISXuVBfj6RkpA85WZmIis2WbDkFBunUoP
9FH5masQ/sxVLyz01pKXLwvXs+MTrv5nJFLl0YEwhwm9uwBq461/4iGibsx27W7t
yEOgNAwyJHZkzFtof8zhGOeRVaf9LaIr9cGbcDC5dFfN/7FhEla/MarCGOwhMdgG
FykNbn4N1FeX9w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:24:12 2025 by rpki-client