Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: F+qB2955aHWjgcMR7Ik7DH/WrELe8tubT35O3zCprs8=
Subject key identifier: 43:DF:FA:E1:53:18:56:12:63:DC:D0:1B:DB:8A:C4:57:E0:7A:EA:FB
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 0198451A610AA3EB5422C575512462430F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 05:00:13 +0000
Manifest this update: Sat 26 Jul 2025 05:00:13 +0000
Manifest next update: Sun 27 Jul 2025 05:00:13 +0000
Files and hashes: 1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: C/GU7+z2hFggyW6JaGY+NcAg53ND1z8PQ0mCLJz+qAg=)
2: pauhzMvpgkVgNc366YpahktJW_E.roa (hash: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:61:0a:a3:eb:54:22:c5:75:51:24:62:43:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Jul 26 05:00:13 2025 GMT
Not After : Jul 27 05:00:13 2025 GMT
Subject: CN=43dffae15318561263dcd01bdb8ac457e07aeafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:ab:56:b9:77:4a:0e:7d:1e:52:40:de:c4:
56:a8:cd:7b:44:eb:92:a3:cb:ab:f8:f2:f4:7c:e9:
a6:da:0b:ac:d2:72:4e:54:c3:8a:f4:c1:71:c3:95:
89:03:95:6e:e8:83:94:28:fc:44:a8:fc:ac:27:7f:
df:29:9a:b1:90:14:02:44:0c:96:6e:b3:13:75:f6:
68:84:da:e0:86:a6:93:68:13:03:93:a8:15:64:8d:
14:31:5b:c5:dd:a0:ab:65:50:db:04:8e:e0:63:30:
a6:e4:6f:44:ab:65:0c:98:62:17:ff:ef:9e:f8:85:
fb:ca:77:29:25:42:71:24:14:7c:5f:24:81:87:bd:
73:44:ff:32:d7:b5:6a:62:a2:1a:f6:6f:29:87:23:
a6:f6:3a:ad:ee:24:ec:99:da:1d:ae:86:46:17:ea:
8f:d8:1a:0c:87:c8:23:c6:78:6d:82:48:41:32:ab:
e0:19:cb:28:40:d3:e9:d1:18:bf:c5:bc:ec:9f:f7:
6b:03:8a:fa:e4:42:68:0d:68:de:cc:84:2b:7a:14:
e4:47:36:af:45:20:b8:60:69:43:0b:c9:4d:eb:9d:
21:73:ba:f7:39:f3:12:51:0d:2f:dd:17:5c:4f:68:
bf:2e:33:b8:d6:0c:c7:b5:29:07:f9:d8:08:5d:b3:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DF:FA:E1:53:18:56:12:63:DC:D0:1B:DB:8A:C4:57:E0:7A:EA:FB
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:73:54:fe:e9:3d:13:ea:e6:9c:f7:d0:8e:ed:7d:19:31:e8:
23:fd:21:c4:ff:fd:1f:b5:a2:ac:d4:d1:b4:20:7d:c8:66:44:
12:44:df:e7:4c:c4:21:95:2d:ca:41:da:15:3f:ca:21:5d:55:
fb:e0:d9:c0:d3:fc:71:79:59:7f:ba:75:f9:8b:e4:78:8e:51:
28:24:a8:27:cc:84:87:06:ff:63:9c:76:f7:ff:f0:de:e9:c9:
db:db:56:46:5c:fe:cf:bd:35:c9:4b:42:ea:9c:6a:97:38:82:
a2:d5:94:27:2c:86:fe:62:cd:7b:52:3d:f1:23:57:22:92:b6:
11:0c:e6:69:83:30:d2:69:b9:b0:a4:17:a5:d2:c4:81:bf:42:
4c:18:aa:82:b9:de:23:97:b8:82:e5:af:ed:fa:ac:84:d6:1a:
92:8d:0d:92:c6:42:e9:67:28:07:67:1d:c0:a9:0c:1d:62:b3:
40:85:f7:24:85:c1:ef:ce:de:da:85:7e:42:5f:f0:83:76:54:
f1:3d:f3:e6:ba:e6:3c:e5:1e:6c:48:97:05:03:5c:bd:e4:62:
de:ca:94:6e:11:15:a6:b9:e3:dd:f2:d9:0c:df:8f:25:92:c7:
c4:38:fa:77:54:09:54:c7:73:8f:2f:01:fe:e4:e3:3e:61:76:
bd:5b:c7:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGmEKo+tUIsV1USRiQw94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIyZWIyMWY2YjA2NzIxNGRjZmFkYjI5MDI1M2RhNzE3
ZDYyZTMwHhcNMjUwNzI2MDUwMDEzWhcNMjUwNzI3MDUwMDEzWjAzMTEwLwYDVQQD
Eyg0M2RmZmFlMTUzMTg1NjEyNjNkY2QwMWJkYjhhYzQ1N2UwN2FlYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx2rVrl3Sg59HlJA3sRWqM17ROuS
o8ur+PL0fOmm2gus0nJOVMOK9MFxw5WJA5Vu6IOUKPxEqPysJ3/fKZqxkBQCRAyW
brMTdfZohNrghqaTaBMDk6gVZI0UMVvF3aCrZVDbBI7gYzCm5G9Eq2UMmGIX/++e
+IX7yncpJUJxJBR8XySBh71zRP8y17VqYqIa9m8phyOm9jqt7iTsmdodroZGF+qP
2BoMh8gjxnhtgkhBMqvgGcsoQNPp0Ri/xbzsn/drA4r65EJoDWjezIQrehTkRzav
RSC4YGlDC8lN650hc7r3OfMSUQ0v3RdcT2i/LjO41gzHtSkH+dgIXbMPFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPf+uFTGFYSY9zQG9uKxFfgeur7MB8GA1UdIwQY
MBaAFPQrLrIfawZyFNz62ykCU9pxfWLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQt
MTgzMzU2NTMwMTc3LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQtMTgzMzU2NTMwMTc3
LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3NU/uk9
E+rmnPfQju19GTHoI/0hxP/9H7WirNTRtCB9yGZEEkTf50zEIZUtykHaFT/KIV1V
++DZwNP8cXlZf7p1+YvkeI5RKCSoJ8yEhwb/Y5x29//w3unJ29tWRlz+z701yUtC
6pxqlziCotWUJyyG/mLNe1I98SNXIpK2EQzmaYMw0mm5sKQXpdLEgb9CTBiqgrne
I5e4guWv7fqshNYako0NksZC6WcoB2cdwKkMHWKzQIX3JIXB787e2oV+Ql/wg3ZU
8T3z5rrmPOUebEiXBQNcveRi3sqUbhEVprnj3fLZDN+PJZLHxDj6d1QJVMdzjy8B
/uTjPmF2vVvHrg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:22:55 2025 by rpki-client