Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: AHXHIOqKeJ5jvcRO0EeNT83+OlV7dh0bUuGoXkNpM6Y=
Subject key identifier: 44:7C:62:D3:96:6C:9F:AD:42:25:79:1D:D4:87:E1:17:2E:4E:73:99
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 019849D3822035722AED45874EC21761457F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 02AC
Signing time: Sun 27 Jul 2025 03:00:54 +0000
Manifest this update: Sun 27 Jul 2025 03:00:54 +0000
Manifest next update: Mon 28 Jul 2025 03:00:54 +0000
Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: RX6F0yIWVuY8ieq0LIENNyhBqf98gq89mKnYwGQphPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:82:20:35:72:2a:ed:45:87:4e:c2:17:61:45:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Jul 27 03:00:54 2025 GMT
Not After : Jul 28 03:00:54 2025 GMT
Subject: CN=447c62d3966c9fad4225791dd487e1172e4e7399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:8b:d5:0e:54:d4:68:87:ad:4f:d8:94:ec:
e0:cb:b4:81:59:e4:f4:f0:55:b2:56:c8:3a:d2:4a:
57:05:7e:9f:af:c0:f2:3d:6a:ae:32:00:ee:2a:c3:
8b:bc:69:89:4d:16:cc:1d:9f:5c:02:27:10:d6:ee:
52:4e:0f:36:1a:61:0f:af:f9:48:db:ae:e3:3a:d2:
2f:45:bc:55:25:57:7c:64:54:88:d2:bf:dc:c5:19:
9f:07:14:f1:45:60:e9:c3:54:3d:08:45:05:ab:11:
25:9b:78:5e:81:ec:f9:a8:82:e3:97:bd:bf:df:59:
0e:5d:08:26:e2:1b:86:a4:e9:bc:e1:b9:fc:e3:03:
3e:ff:f7:92:c4:ee:3c:93:74:23:35:07:a4:fb:87:
8e:59:dd:ff:89:d3:5b:52:56:b2:95:b0:52:3c:68:
5d:32:01:a2:43:7d:18:cc:bb:93:3b:ea:b4:98:4b:
b0:64:0e:a5:d8:4b:a9:e0:73:d4:b7:be:47:4d:9a:
3e:67:83:c4:4d:ab:7a:e7:42:11:04:9b:51:e1:47:
37:1c:9e:c2:5a:99:c4:33:bd:d1:cc:cb:59:56:2d:
4b:82:8f:5b:00:b3:08:64:ba:3b:88:e8:0b:7e:b6:
ef:82:d5:be:03:43:25:44:f3:ad:7b:fc:13:f0:49:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7C:62:D3:96:6C:9F:AD:42:25:79:1D:D4:87:E1:17:2E:4E:73:99
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:54:8d:bc:1c:a8:a4:fc:26:c5:33:35:f5:4d:2b:c1:e1:eb:
ed:f6:e8:85:3d:69:e9:29:cd:de:2e:45:7e:79:9d:6e:34:ad:
91:4d:f1:a7:5f:0f:70:5f:29:a1:40:c1:46:ba:62:c3:1f:66:
26:93:2b:25:70:64:3b:d8:14:ab:b8:ae:73:e9:4d:c4:b8:6d:
49:3e:30:28:9f:44:37:64:05:f0:e3:f5:19:bf:ba:06:8d:56:
88:f2:78:26:91:3b:0c:2c:83:bb:42:0d:ad:69:16:33:fa:54:
f1:13:72:04:21:6d:42:f7:14:1f:a6:2e:02:64:79:4f:d8:76:
5f:1b:91:cd:3d:26:43:b1:a0:8d:c5:8a:58:fe:c1:98:2d:d4:
44:28:85:a7:d8:c1:b3:16:76:2b:33:b5:5a:68:06:15:d2:f4:
51:14:42:df:15:29:ec:59:83:70:95:60:bc:f8:9f:26:f2:6c:
ad:80:06:9b:4f:da:d0:d0:df:8f:91:b5:ff:4b:45:dc:d5:54:
90:52:87:ff:82:cd:77:6b:ab:ff:3a:44:01:b3:f3:f3:53:af:
69:52:cd:b9:cf:56:86:32:cb:75:89:88:6c:af:bd:86:2c:d4:
49:93:c5:43:61:5f:dc:1d:ae:39:7f:7a:54:a8:1a:e2:74:a7:
06:b7:27:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ04IgNXIq7UWHTsIXYUV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDIwN2ZjNWFkMDc3M2MzZDhlOTNlNGIzMDYxOWMxM2Jh
ODFjYjQwHhcNMjUwNzI3MDMwMDU0WhcNMjUwNzI4MDMwMDU0WjAzMTEwLwYDVQQD
Eyg0NDdjNjJkMzk2NmM5ZmFkNDIyNTc5MWRkNDg3ZTExNzJlNGU3Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNCL1Q5U1GiHrU/YlOzgy7SBWeT0
8FWyVsg60kpXBX6fr8DyPWquMgDuKsOLvGmJTRbMHZ9cAicQ1u5STg82GmEPr/lI
267jOtIvRbxVJVd8ZFSI0r/cxRmfBxTxRWDpw1Q9CEUFqxElm3hegez5qILjl72/
31kOXQgm4huGpOm84bn84wM+//eSxO48k3QjNQek+4eOWd3/idNbUlaylbBSPGhd
MgGiQ30YzLuTO+q0mEuwZA6l2Eup4HPUt75HTZo+Z4PETat650IRBJtR4Uc3HJ7C
WpnEM73RzMtZVi1Lgo9bALMIZLo7iOgLfrbvgtW+A0MlRPOte/wT8ElnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFER8YtOWbJ+tQiV5HdSH4RcuTnOZMB8GA1UdIwQY
MBaAFE/SB/xa0Hc8PY6T5LMGGcE7qBy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUt
NDdkZmRmMmIwZmQ2LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUtNDdkZmRmMmIwZmQ2
LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlSNvByo
pPwmxTM19U0rweHr7fbohT1p6SnN3i5FfnmdbjStkU3xp18PcF8poUDBRrpiwx9m
JpMrJXBkO9gUq7iuc+lNxLhtST4wKJ9EN2QF8OP1Gb+6Bo1WiPJ4JpE7DCyDu0IN
rWkWM/pU8RNyBCFtQvcUH6YuAmR5T9h2XxuRzT0mQ7GgjcWKWP7BmC3URCiFp9jB
sxZ2KzO1WmgGFdL0URRC3xUp7FmDcJVgvPifJvJsrYAGm0/a0NDfj5G1/0tF3NVU
kFKH/4LNd2ur/zpEAbPz81OvaVLNuc9WhjLLdYmIbK+9hizUSZPFQ2Ff3B2uOX96
VKga4nSnBrcnkw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:28 2025 by rpki-client