Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: lrTg+1JDV9A07lJBvQpbmpUknjFi4/lUTvzKd/3P7Yo=
Subject key identifier: 13:21:C7:67:F2:CB:A8:9B:7B:11:28:58:35:62:7C:E8:C3:75:4C:03
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 01984777021222A139B72C2203451C2E13D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 158F
Signing time: Sat 26 Jul 2025 16:00:38 +0000
Manifest this update: Sat 26 Jul 2025 16:00:38 +0000
Manifest next update: Sun 27 Jul 2025 16:00:38 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: UmI8BYgijjv+Y3oVhaqzP/AVRJs/apP1K704wyyRkN4=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:02:12:22:a1:39:b7:2c:22:03:45:1c:2e:13:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Jul 26 16:00:38 2025 GMT
Not After : Jul 27 16:00:38 2025 GMT
Subject: CN=1321c767f2cba89b7b11285835627ce8c3754c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:d4:63:25:4c:a2:91:73:1d:c8:6f:a1:f4:
67:82:58:6b:07:34:1c:f4:77:5c:8c:3a:b9:76:08:
3d:58:ca:a7:bf:e4:33:e8:f2:e4:5e:1c:db:f7:31:
7c:fc:88:28:2e:98:75:1f:5d:28:2e:50:68:87:77:
18:25:29:27:65:86:5c:74:a3:3c:20:ed:77:cc:07:
84:0e:a5:d2:03:a5:3e:8b:d9:2f:6d:39:02:9d:5f:
e4:91:77:a3:2c:bc:b7:29:a4:ab:cf:1c:a4:5c:e5:
04:f3:ef:3b:28:44:a8:bd:5d:11:f7:a4:f7:71:5a:
fa:5e:a0:f9:ee:6c:ba:01:83:1c:01:f3:bd:38:b4:
a7:1e:10:84:35:02:a5:f1:f4:e5:55:e9:0d:3e:a0:
5e:44:71:6a:16:b4:e7:63:5e:b2:01:e3:8d:4b:5b:
6b:ad:83:52:e6:c6:36:a5:ba:52:2a:30:84:2f:f3:
b3:cc:27:bb:c2:f1:fc:97:e7:c0:c6:0a:d8:65:1d:
5f:df:26:d0:c2:cd:4a:b2:67:1c:da:ce:c2:59:80:
73:a1:07:88:fd:c7:31:92:79:f6:85:15:96:1b:79:
56:1b:f1:f3:4f:b9:b3:ab:75:bf:d5:1a:1e:75:57:
ce:fa:be:fb:53:8e:4d:2c:bf:c4:14:15:47:e7:57:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:21:C7:67:F2:CB:A8:9B:7B:11:28:58:35:62:7C:E8:C3:75:4C:03
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9c:93:4a:2e:1f:1c:dc:d2:19:57:3b:62:f6:13:96:23:31:
fd:8c:98:4c:87:31:b7:16:c7:6b:eb:ad:1d:88:e7:d4:10:e3:
f8:a9:50:d5:94:bb:f6:34:f4:1f:22:b8:35:d5:23:a9:bf:26:
b6:8b:d6:8e:13:ef:0b:da:ed:e8:76:30:5e:15:1b:ed:86:34:
f8:83:6d:9b:87:a4:4d:f7:8f:ad:d5:28:c2:3e:5a:37:82:4c:
dd:de:dd:f5:c5:15:eb:ad:39:65:0b:2c:10:49:e0:e0:69:f9:
d5:c7:e1:1c:9a:a6:9c:df:38:7e:30:f8:6d:a4:3c:65:35:ef:
c4:22:8c:ed:aa:44:44:27:6b:4b:08:30:ec:64:50:72:5d:bf:
23:78:5b:db:21:63:51:4a:56:1c:4b:1e:f8:00:8e:e4:20:0c:
c4:28:15:72:5e:f3:2c:6c:df:92:fc:de:25:fa:a0:22:c7:dc:
bc:af:4b:dd:52:c8:ef:c9:16:87:dc:9b:e4:8b:c0:7d:b1:a2:
31:fb:16:1a:3b:ca:a8:d8:49:90:0d:80:3e:24:5d:33:09:2e:
e1:3e:10:c3:b0:e6:11:29:b8:86:36:9b:5a:cd:e5:95:fd:45:
03:26:b3:7c:98:bd:39:d7:da:76:29:80:69:cb:c5:fd:cd:c1:
1d:6d:14:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdwISIqE5tywiA0UcLhPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx
NzkyM2EwHhcNMjUwNzI2MTYwMDM4WhcNMjUwNzI3MTYwMDM4WjAzMTEwLwYDVQQD
EygxMzIxYzc2N2YyY2JhODliN2IxMTI4NTgzNTYyN2NlOGMzNzU0YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdHUYyVMopFzHchvofRnglhrBzQc
9HdcjDq5dgg9WMqnv+Qz6PLkXhzb9zF8/IgoLph1H10oLlBoh3cYJSknZYZcdKM8
IO13zAeEDqXSA6U+i9kvbTkCnV/kkXejLLy3KaSrzxykXOUE8+87KESovV0R96T3
cVr6XqD57my6AYMcAfO9OLSnHhCENQKl8fTlVekNPqBeRHFqFrTnY16yAeONS1tr
rYNS5sY2pbpSKjCEL/OzzCe7wvH8l+fAxgrYZR1f3ybQws1Ksmcc2s7CWYBzoQeI
/ccxknn2hRWWG3lWG/HzT7mzq3W/1RoedVfO+r77U45NLL/EFBVH51c1wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMhx2fyy6ibexEoWDVifOjDdUwDMB8GA1UdIwQY
MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt
ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5
LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJyTSi4f
HNzSGVc7YvYTliMx/YyYTIcxtxbHa+utHYjn1BDj+KlQ1ZS79jT0HyK4NdUjqb8m
tovWjhPvC9rt6HYwXhUb7YY0+INtm4ekTfePrdUowj5aN4JM3d7d9cUV6605ZQss
EEng4Gn51cfhHJqmnN84fjD4baQ8ZTXvxCKM7apERCdrSwgw7GRQcl2/I3hb2yFj
UUpWHEse+ACO5CAMxCgVcl7zLGzfkvzeJfqgIsfcvK9L3VLI78kWh9yb5IvAfbGi
MfsWGjvKqNhJkA2APiRdMwku4T4Qw7DmESm4hjabWs3llf1FAyazfJi9OdfadimA
acvF/c3BHW0UkA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:39:35 2025 by rpki-client