Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: SkdC0sh09nzqinzVNkDXLUFGE9fzc7lZMlqr7TWM81A=
Subject key identifier: 50:40:03:3C:CD:14:5F:2A:A3:5B:2C:E8:EC:DB:74:14:89:99:C6:5D
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 019846D2068222053040C2C8FA9788DE6FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 12FF
Signing time: Sat 26 Jul 2025 13:00:26 +0000
Manifest this update: Sat 26 Jul 2025 13:00:26 +0000
Manifest next update: Sun 27 Jul 2025 13:00:26 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: xIcdQAbsVEl/Md6DMW7Z9buRse7DFt/cdKhBHHSlLCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:06:82:22:05:30:40:c2:c8:fa:97:88:de:6f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Jul 26 13:00:26 2025 GMT
Not After : Jul 27 13:00:26 2025 GMT
Subject: CN=5040033ccd145f2aa35b2ce8ecdb74148999c65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:77:de:60:4e:40:20:fd:c5:07:84:bc:ed:
38:20:37:0a:b3:3c:2b:7e:de:9f:c6:06:14:9d:5d:
4e:e6:2e:37:1e:f8:e4:7b:71:fe:e3:7c:e2:f2:35:
a6:59:a2:35:ec:27:89:0e:84:d7:69:21:fe:99:13:
02:1e:14:d2:44:cf:4b:1b:96:6b:0b:79:17:78:38:
07:95:22:55:cf:48:3f:03:c6:c1:72:ff:65:ec:75:
08:20:75:aa:43:03:a2:a2:e6:d7:5f:cd:31:1c:fb:
bc:5f:c9:44:27:85:35:70:8e:6e:4f:ae:3f:57:fe:
a5:35:a6:32:11:e3:55:2f:f9:98:4f:f2:eb:28:c9:
e1:5b:52:65:5b:33:b5:2b:1e:3b:ba:73:ce:15:b7:
e8:03:b4:65:88:54:6f:68:09:f7:2f:a7:45:d4:08:
04:c8:64:7b:1d:2c:a0:b3:2f:85:72:2c:ed:09:91:
b6:35:cb:9e:f3:5b:bb:46:2b:a2:4b:d9:33:8b:32:
9a:ff:d1:9a:41:56:1d:96:2a:ac:db:e9:5f:81:07:
a2:b8:d9:b0:e2:95:7d:b2:35:e3:d6:24:79:40:a2:
79:9b:42:dd:b4:a5:ed:19:af:5b:86:bc:f1:1b:dc:
81:77:78:1e:47:56:c3:40:e2:46:d3:a6:be:40:d8:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:40:03:3C:CD:14:5F:2A:A3:5B:2C:E8:EC:DB:74:14:89:99:C6:5D
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f2:42:86:29:82:d0:68:bc:b5:10:a4:41:3e:fe:cb:02:d1:
4f:ab:9e:d1:e2:98:b4:a1:33:63:f4:01:dd:1f:a0:a5:22:f8:
d3:4f:1a:c9:87:e2:45:66:74:51:e2:cb:76:57:e8:e5:cb:f4:
9c:12:3a:70:94:9c:ff:af:ed:da:57:47:cd:18:2f:f7:ba:b1:
61:1a:73:44:c9:66:7c:47:2d:3a:b5:b4:e3:a6:65:72:5b:c4:
ba:05:28:1d:57:72:7f:cb:42:80:7a:38:f5:cb:6f:4c:a4:e2:
f9:1e:59:cf:48:0e:d5:87:ea:59:fe:19:d4:97:b2:9c:60:ff:
41:4d:54:f5:04:52:9b:83:da:15:be:90:7a:5c:95:01:43:d2:
d4:10:00:b9:56:b4:0c:21:84:4c:52:20:94:52:94:08:34:fd:
1c:f1:25:d7:82:20:e9:fc:1f:9e:fd:38:ac:a1:f1:46:be:23:
07:2c:28:3a:8a:b7:16:5f:2f:35:07:06:40:84:03:ba:5b:12:
5b:5a:e2:0f:1c:b1:c9:99:3f:35:a9:9e:26:dc:1b:f9:8f:ed:
e2:f9:e8:b0:e0:d4:3b:fc:27:d3:ef:22:e6:c9:ca:8e:87:7d:
6e:5a:dc:0e:60:2e:87:4e:de:55:a5:4a:36:21:77:26:1a:6c:
fe:c7:e5:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0gaCIgUwQMLI+peI3m/ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzE4NzMzYWFkNDNlZjZhOTliZDhkOTUwNGEyMGRkODkw
MjJlOGYwHhcNMjUwNzI2MTMwMDI2WhcNMjUwNzI3MTMwMDI2WjAzMTEwLwYDVQQD
Eyg1MDQwMDMzY2NkMTQ1ZjJhYTM1YjJjZThlY2RiNzQxNDg5OTljNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPd33mBOQCD9xQeEvO04IDcKszwr
ft6fxgYUnV1O5i43Hvjke3H+43zi8jWmWaI17CeJDoTXaSH+mRMCHhTSRM9LG5Zr
C3kXeDgHlSJVz0g/A8bBcv9l7HUIIHWqQwOioubXX80xHPu8X8lEJ4U1cI5uT64/
V/6lNaYyEeNVL/mYT/LrKMnhW1JlWzO1Kx47unPOFbfoA7RliFRvaAn3L6dF1AgE
yGR7HSygsy+FciztCZG2Ncue81u7RiuiS9kzizKa/9GaQVYdliqs2+lfgQeiuNmw
4pV9sjXj1iR5QKJ5m0LdtKXtGa9bhrzxG9yBd3geR1bDQOJG06a+QNgafwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBAAzzNFF8qo1ss6OzbdBSJmcZdMB8GA1UdIwQY
MBaAFPVxhzOq1D72qZvY2VBKIN2JAi6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5Yzgt
ZDcyNWZhNjczMmI2LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5YzgtZDcyNWZhNjczMmI2
LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfJChimC
0Gi8tRCkQT7+ywLRT6ue0eKYtKEzY/QB3R+gpSL4008ayYfiRWZ0UeLLdlfo5cv0
nBI6cJSc/6/t2ldHzRgv97qxYRpzRMlmfEctOrW046ZlclvEugUoHVdyf8tCgHo4
9ctvTKTi+R5Zz0gO1YfqWf4Z1JeynGD/QU1U9QRSm4PaFb6QelyVAUPS1BAAuVa0
DCGETFIglFKUCDT9HPEl14Ig6fwfnv04rKHxRr4jBywoOoq3Fl8vNQcGQIQDulsS
W1riDxyxyZk/NameJtwb+Y/t4vnosODUO/wn0+8i5snKjod9blrcDmAuh07eVaVK
NiF3Jhps/sflxA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:05:10 2025 by rpki-client