Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: t9HjX6wMUw5txdDi4134wNZ4IYPj/cuw3kzV1SL2nlw=
Subject key identifier: B0:8E:70:DF:6E:1A:8F:BA:1D:15:EF:57:42:E8:9B:41:F4:F8:29:78
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 0198462DA4DFAFDC86E2D94E188CA75EC16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 10:00:53 +0000
Manifest this update: Sat 26 Jul 2025 10:00:53 +0000
Manifest next update: Sun 27 Jul 2025 10:00:53 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: c50gdrW6zmyG4NecvdSV5u0XT4LVqiPL6BebMboRPZ0=)
2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:a4:df:af:dc:86:e2:d9:4e:18:8c:a7:5e:c1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Jul 26 10:00:53 2025 GMT
Not After : Jul 27 10:00:53 2025 GMT
Subject: CN=b08e70df6e1a8fba1d15ef5742e89b41f4f82978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:1d:b8:89:6f:bf:c2:6f:92:d2:a5:e2:8d:
4a:6d:ee:e2:4a:25:52:dd:ac:bb:15:94:5c:17:c3:
9b:2a:ab:78:92:86:10:48:9f:fa:c5:f8:83:20:69:
5f:3d:6b:e9:f0:9e:cc:cc:89:4c:b1:93:a3:5c:04:
86:d9:80:46:93:86:da:8a:a1:51:67:01:1c:7b:9b:
11:6d:4a:5e:f4:ac:1a:ba:82:dd:de:0b:f6:34:93:
5f:a5:ea:7d:84:34:6e:e2:37:bc:28:74:7a:20:4a:
38:b5:3b:c8:86:61:32:bf:38:38:cf:b6:c3:54:a1:
b2:ce:ab:a7:da:0a:b4:00:3e:9a:6c:03:d9:2e:02:
00:b1:da:5b:cc:8f:d9:e3:1e:aa:55:a9:0a:ae:df:
5a:59:a4:23:d7:af:07:5f:cf:80:ba:bb:db:89:f8:
b5:db:96:e1:a2:36:fa:3f:a8:69:88:74:27:bc:10:
cd:eb:f0:39:60:71:8b:b1:d2:c7:4d:17:8a:e8:c9:
8f:d5:0a:ad:33:02:72:ef:1e:54:cf:b9:4e:63:b6:
17:ce:6a:83:df:0c:e7:70:1b:e4:8f:90:ca:53:31:
b4:f2:6a:18:73:f8:79:c2:63:f5:3a:6e:6e:d9:3e:
96:ae:f3:aa:60:d9:97:0b:ff:8e:63:22:1a:eb:db:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8E:70:DF:6E:1A:8F:BA:1D:15:EF:57:42:E8:9B:41:F4:F8:29:78
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cb:c8:fc:e5:64:01:0c:bc:c9:34:d9:f0:1b:ad:90:ec:98:
80:fe:22:fc:51:ce:4b:a3:27:f9:ed:c1:d3:58:e6:6f:ec:39:
93:12:20:f9:99:64:83:ad:ad:1d:fc:97:87:ad:31:4a:55:a1:
0a:9d:9d:5c:7d:9b:2a:44:7c:06:10:d6:2b:6e:a6:16:d3:4c:
a7:7c:ed:31:91:48:32:8f:dd:25:6a:b9:39:62:79:68:93:eb:
93:44:33:5d:67:0a:4e:d4:00:99:2f:96:12:d7:a9:13:71:07:
b4:d5:89:a7:06:c8:c8:37:97:5c:e5:d0:42:b0:52:61:85:9a:
7c:5a:42:fe:a5:fe:7a:43:8f:a4:53:6b:67:2d:25:5f:f0:a7:
b0:8e:66:a4:f5:0b:f1:bd:c6:fe:f0:a5:a5:fa:13:2a:90:1c:
dd:02:97:d6:d6:2a:ee:82:75:25:16:68:a1:6e:70:56:d7:c4:
83:28:b4:ad:06:79:d7:1d:76:c6:65:3f:d1:e0:23:5b:d0:df:
e1:b5:db:a9:27:90:d5:f9:7d:b7:be:a5:5d:cf:ce:40:e7:5d:
7b:93:33:cd:4e:d2:9a:f9:ff:77:58:d0:0e:7d:17:26:6b:ea:
d1:70:65:0f:b2:64:40:a5:5f:03:56:fb:92:37:51:63:cb:e7:
72:d5:82:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGLaTfr9yG4tlOGIynXsFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGUyMjViZmI0NTIxOGI5OTc3MTk4MDRlYTI4N2YxNzUx
Y2YyMGUwHhcNMjUwNzI2MTAwMDUzWhcNMjUwNzI3MTAwMDUzWjAzMTEwLwYDVQQD
EyhiMDhlNzBkZjZlMWE4ZmJhMWQxNWVmNTc0MmU4OWI0MWY0ZjgyOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrcduIlvv8JvktKl4o1Kbe7iSiVS
3ay7FZRcF8ObKqt4koYQSJ/6xfiDIGlfPWvp8J7MzIlMsZOjXASG2YBGk4baiqFR
ZwEce5sRbUpe9KwauoLd3gv2NJNfpep9hDRu4je8KHR6IEo4tTvIhmEyvzg4z7bD
VKGyzqun2gq0AD6abAPZLgIAsdpbzI/Z4x6qVakKrt9aWaQj168HX8+Aurvbifi1
25bhojb6P6hpiHQnvBDN6/A5YHGLsdLHTReK6MmP1QqtMwJy7x5Uz7lOY7YXzmqD
3wzncBvkj5DKUzG08moYc/h5wmP1Om5u2T6WrvOqYNmXC/+OYyIa69tkFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCOcN9uGo+6HRXvV0Lom0H0+Cl4MB8GA1UdIwQY
MBaAFPUOIlv7RSGLmXcZgE6ih/F1HPIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8xNzIzMTAtM2NiMC00YmIwLTkxYWUt
NDQ2MmExMjZkMDdkLzEvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8xNzIzMTAtM2NiMC00YmIwLTkxYWUtNDQ2MmExMjZkMDdk
LzEvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8vI/OVk
AQy8yTTZ8ButkOyYgP4i/FHOS6Mn+e3B01jmb+w5kxIg+Zlkg62tHfyXh60xSlWh
Cp2dXH2bKkR8BhDWK26mFtNMp3ztMZFIMo/dJWq5OWJ5aJPrk0QzXWcKTtQAmS+W
EtepE3EHtNWJpwbIyDeXXOXQQrBSYYWafFpC/qX+ekOPpFNrZy0lX/CnsI5mpPUL
8b3G/vClpfoTKpAc3QKX1tYq7oJ1JRZooW5wVtfEgyi0rQZ51x12xmU/0eAjW9Df
4bXbqSeQ1fl9t76lXc/OQOdde5MzzU7Smvn/d1jQDn0XJmvq0XBlD7JkQKVfA1b7
kjdRY8vnctWCkA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:17:49 2025 by rpki-client