Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
File: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json)
Hash identifier: XyySNO1rEYjI5vS8BJKmgfNmVhrhnQjfGG5iKBEQVxg=
Subject key identifier: 15:10:FD:C3:6F:2D:9B:91:CE:71:06:17:9D:AE:30:9D:B1:53:9C:B7
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial: 019844ACE200367179131F38E6D7B041DB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
Manifest number: C3
Signing time: Sat 26 Jul 2025 03:00:37 +0000
Manifest this update: Sat 26 Jul 2025 03:00:37 +0000
Manifest next update: Sun 27 Jul 2025 03:00:37 +0000
Files and hashes: 1: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: KIL2RmxTK/jg4VYDFITyEV7AZruZqFLLfJrjrPR0jqM=)
2: _R2-unRLTVoARNA84wK9QwIRcHg.roa (hash: pLbQbiX22eVdy+zNJ3CqYse/kH4/484+cWZJ4cChULA=)
3: a3SyScX72L5TkWnjrj7OuShiBm0.roa (hash: EcnC4sDg2JzNdW4ec0ThJsTXhRWMy/yu92wkqgkxq6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:e2:00:36:71:79:13:1f:38:e6:d7:b0:41:db:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Validity
Not Before: Jul 26 03:00:37 2025 GMT
Not After : Jul 27 03:00:37 2025 GMT
Subject: CN=1510fdc36f2d9b91ce7106179dae309db1539cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:ed:38:10:1d:ee:3d:3e:2c:a1:f7:7e:f2:
bb:be:dd:94:2e:91:43:1b:f1:1e:d4:2e:79:c2:51:
5e:54:d0:01:9a:41:0d:db:d7:e7:e9:8a:fe:f9:7a:
46:1a:ce:5b:98:8a:97:41:73:7a:3e:e4:33:6f:54:
24:36:0e:e6:67:4b:d8:37:94:b7:da:d1:07:89:5e:
be:c8:c2:4b:76:f9:83:6f:da:c2:c2:6c:32:ca:b4:
03:22:27:7e:52:20:4e:e5:a4:0b:49:ef:78:a5:40:
de:db:15:23:e2:90:5c:da:b8:c0:db:57:88:8b:9a:
37:61:10:8e:e4:b0:ea:db:72:6a:ae:94:98:ae:dc:
35:b2:05:3d:c3:2c:7c:de:fe:6e:eb:77:98:e9:38:
65:4a:ae:6e:ea:43:cd:4e:41:22:2c:b5:bc:08:1d:
aa:8c:73:61:8b:97:f8:23:c8:2a:83:19:c2:35:ba:
37:df:ea:b7:cf:43:22:89:3f:ca:05:f0:ee:68:3c:
bd:fb:bd:47:fc:74:b4:13:b9:5a:76:55:c3:7c:8b:
a8:8e:da:0a:60:0e:6c:84:67:86:37:bc:cd:1f:90:
f3:bf:66:b0:3c:39:c4:94:1b:0d:98:53:69:c5:0a:
eb:e7:a0:95:4b:ef:4b:aa:f0:1a:31:5a:87:18:89:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:FD:C3:6F:2D:9B:91:CE:71:06:17:9D:AE:30:9D:B1:53:9C:B7
X509v3 Authority Key Identifier:
keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:83:f5:2e:79:36:80:99:e1:00:9b:40:59:6c:e1:ef:a0:3f:
74:c4:19:df:1e:c3:bf:16:4f:4e:bd:30:76:c7:f0:3c:47:3f:
77:f7:86:69:94:bd:0b:24:10:81:d7:84:dd:e2:d1:c0:87:52:
0f:6c:2f:b0:49:1a:96:e0:a9:e4:88:15:b7:00:4a:8f:16:30:
a9:e8:dc:7a:01:db:2c:38:8e:0e:bc:c0:ab:bd:dc:bf:b2:eb:
83:4c:20:fe:8c:55:4c:ba:65:68:7d:ef:48:9c:bd:49:9d:1b:
cf:ce:97:09:9f:31:c1:15:cc:0a:97:45:39:03:7e:a0:b1:2d:
89:ac:aa:1e:05:21:27:f7:c4:d2:ee:f6:9b:96:52:10:c3:2c:
f5:f7:f3:7e:cb:2d:a6:03:33:4f:37:f9:3e:1d:89:54:5f:58:
4c:b9:8c:e3:3e:3d:97:39:b9:3e:06:0f:92:5d:ea:81:c4:f9:
37:3f:fb:b1:bb:cc:c2:59:39:a1:bf:c8:0d:43:75:37:50:ba:
53:f9:01:ee:82:52:4c:b6:15:57:60:cf:e7:dc:6e:12:f3:3a:
70:36:84:d5:e3:6c:19:4b:8f:ab:a8:08:42:76:99:33:c2:d0:
10:9f:95:36:22:59:32:80:10:5e:1b:15:6e:37:0c:44:ae:77:
cf:40:03:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhErOIANnF5Ex845tewQdsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Y2I4NTZkNDI2OTIxOWVkM2EwYzBkYzQ3MzMzMjM2ZjE1
NTk1M2EwHhcNMjUwNzI2MDMwMDM3WhcNMjUwNzI3MDMwMDM3WjAzMTEwLwYDVQQD
EygxNTEwZmRjMzZmMmQ5YjkxY2U3MTA2MTc5ZGFlMzA5ZGIxNTM5Y2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcjtOBAd7j0+LKH3fvK7vt2ULpFD
G/Ee1C55wlFeVNABmkEN29fn6Yr++XpGGs5bmIqXQXN6PuQzb1QkNg7mZ0vYN5S3
2tEHiV6+yMJLdvmDb9rCwmwyyrQDIid+UiBO5aQLSe94pUDe2xUj4pBc2rjA21eI
i5o3YRCO5LDq23JqrpSYrtw1sgU9wyx83v5u63eY6ThlSq5u6kPNTkEiLLW8CB2q
jHNhi5f4I8gqgxnCNbo33+q3z0MiiT/KBfDuaDy9+71H/HS0E7ladlXDfIuojtoK
YA5shGeGN7zNH5Dzv2awPDnElBsNmFNpxQrr56CVS+9LqvAaMVqHGImxMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUQ/cNvLZuRznEGF52uMJ2xU5y3MB8GA1UdIwQY
MBaAFPXLhW1CaSGe06DA3EczMjbxVZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt
ZDY1NjE3YmQzYjRmLzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm
LzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYP1Lnk2
gJnhAJtAWWzh76A/dMQZ3x7DvxZPTr0wdsfwPEc/d/eGaZS9CyQQgdeE3eLRwIdS
D2wvsEkaluCp5IgVtwBKjxYwqejcegHbLDiODrzAq73cv7Lrg0wg/oxVTLplaH3v
SJy9SZ0bz86XCZ8xwRXMCpdFOQN+oLEtiayqHgUhJ/fE0u72m5ZSEMMs9ffzfsst
pgMzTzf5Ph2JVF9YTLmM4z49lzm5PgYPkl3qgcT5Nz/7sbvMwlk5ob/IDUN1N1C6
U/kB7oJSTLYVV2DP59xuEvM6cDaE1eNsGUuPq6gIQnaZM8LQEJ+VNiJZMoAQXhsV
bjcMRK53z0AD8w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:52 2025 by rpki-client