Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: Xn4ZReAABpZh2O2pob2D0nNgCUdF/6mZRjBlPa7TVVc=
Subject key identifier: 07:B1:AD:73:20:58:29:AA:8E:95:AF:FA:96:E6:EA:FC:54:82:3E:06
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019846D22AD912751E6820CBC53546ACF14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 0710
Signing time: Sat 26 Jul 2025 13:00:35 +0000
Manifest this update: Sat 26 Jul 2025 13:00:35 +0000
Manifest next update: Sun 27 Jul 2025 13:00:35 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: VoU9I1kl7pYWiLwru/jOe/ITo1x1BmNhcNcDfL6tfz0=)
2: K7A7C17ACPryQjif4dPHFWCYnmw.roa (hash: yO751NJRBOSn6gMdo40XzsiJt+C4xy6LseVpnpZi3tM=)
3: nkm_AqdgrcdDszFPZGQsvTeQ99w.roa (hash: tWZj3SfE+CRbF9Ic1OICFS30cFtSOef9JMakRYCQj78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:2a:d9:12:75:1e:68:20:cb:c5:35:46:ac:f1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Jul 26 13:00:35 2025 GMT
Not After : Jul 27 13:00:35 2025 GMT
Subject: CN=07b1ad73205829aa8e95affa96e6eafc54823e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:9b:7c:29:b5:a3:b6:ce:df:ff:95:16:d0:
06:83:05:f1:c4:de:e0:50:4a:9b:da:3b:23:30:04:
be:02:a8:b1:d0:a8:d8:c5:0f:b5:e7:ae:63:c6:c3:
d1:d6:4e:5e:29:11:1c:33:d7:1b:b9:d2:c8:81:8f:
ea:fd:6e:c4:01:06:f7:f8:2a:0c:7b:6f:95:91:0b:
21:47:a4:1f:d1:e3:b2:dd:4d:57:37:e7:fc:34:f6:
73:eb:e7:76:6f:3e:11:78:47:3a:76:ff:88:a7:e1:
d3:8b:67:eb:dc:a6:69:ba:18:bb:bf:6c:48:74:5e:
6d:09:c7:cc:6a:8c:6e:6b:54:49:6f:b7:4b:75:28:
14:b8:e5:e5:d3:12:21:06:c9:41:80:61:79:7c:2e:
95:b9:cd:89:c1:0d:ae:84:9e:ae:22:d9:f8:f5:b9:
e6:c2:48:0f:7f:91:7e:f2:b5:7a:a3:45:89:0e:11:
4f:19:e0:83:5a:b5:29:da:d6:fa:1b:3d:65:cb:e1:
ca:62:90:76:17:2c:3f:a5:ff:24:a4:94:28:af:ef:
49:1a:40:ce:c5:4c:ad:95:d7:37:85:0b:4d:7a:7a:
2c:ef:d3:fd:63:e5:86:e3:06:74:d1:52:50:aa:51:
b8:50:bd:c9:90:8c:6b:29:0c:1d:47:a9:73:09:58:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:AD:73:20:58:29:AA:8E:95:AF:FA:96:E6:EA:FC:54:82:3E:06
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4e:af:91:9a:1c:c8:80:be:59:e1:bc:c2:06:f8:0d:2b:e0:
b5:6d:2e:f9:a2:06:4f:a8:de:dd:73:d6:02:14:e9:b6:77:d6:
2c:58:64:42:19:ad:7e:49:2a:df:91:c8:df:c8:d5:48:5a:3b:
a2:d4:54:7f:ab:08:45:ea:b6:e5:24:e7:fc:de:f2:6a:c4:1d:
83:b0:a8:dd:fd:6d:d6:8b:ba:02:86:8a:f9:7f:ce:f1:3f:37:
93:68:50:78:83:fe:b1:2c:45:94:f4:18:94:18:7f:fd:a3:23:
8e:ff:dc:c7:ce:63:5e:80:58:17:e1:6e:1c:ed:09:aa:2d:22:
86:50:9b:06:0a:8b:e1:65:15:15:22:69:54:a8:10:57:22:18:
94:7d:e7:a4:d8:77:e1:b2:ae:3a:d1:11:d0:ed:26:94:c2:1d:
67:ce:f6:33:d5:12:2a:48:1f:b7:2a:95:13:29:01:3e:88:32:
9d:07:0d:14:72:66:e5:5f:a5:af:5a:32:ce:04:19:6b:f9:14:
c9:ae:fa:04:07:a2:09:59:b7:13:25:7e:ce:cd:26:2b:f3:59:
5d:db:5f:83:07:7a:87:e3:24:57:26:84:7f:89:5e:6c:2d:c0:
49:a3:27:07:83:28:99:ce:42:14:d3:ca:79:70:35:18:5b:fd:
f5:d8:69:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0irZEnUeaCDLxTVGrPFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDRlMGRhNjhjMTQ0NjY4OTQxOWQxMDM3MTFiMTkxZGVk
NTY3ZjQwHhcNMjUwNzI2MTMwMDM1WhcNMjUwNzI3MTMwMDM1WjAzMTEwLwYDVQQD
EygwN2IxYWQ3MzIwNTgyOWFhOGU5NWFmZmE5NmU2ZWFmYzU0ODIzZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WKbfCm1o7bO3/+VFtAGgwXxxN7g
UEqb2jsjMAS+Aqix0KjYxQ+1565jxsPR1k5eKREcM9cbudLIgY/q/W7EAQb3+CoM
e2+VkQshR6Qf0eOy3U1XN+f8NPZz6+d2bz4ReEc6dv+Ip+HTi2fr3KZpuhi7v2xI
dF5tCcfMaoxua1RJb7dLdSgUuOXl0xIhBslBgGF5fC6Vuc2JwQ2uhJ6uItn49bnm
wkgPf5F+8rV6o0WJDhFPGeCDWrUp2tb6Gz1ly+HKYpB2Fyw/pf8kpJQor+9JGkDO
xUytldc3hQtNenos79P9Y+WG4wZ00VJQqlG4UL3JkIxrKQwdR6lzCVj3TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAexrXMgWCmqjpWv+pbm6vxUgj4GMB8GA1UdIwQY
MBaAFNPU4NpowURmiUGdEDcRsZHe1Wf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjIt
Y2IzNDRmMTgwMGVkLzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjItY2IzNDRmMTgwMGVk
LzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ06vkZoc
yIC+WeG8wgb4DSvgtW0u+aIGT6je3XPWAhTptnfWLFhkQhmtfkkq35HI38jVSFo7
otRUf6sIReq25STn/N7yasQdg7Co3f1t1ou6AoaK+X/O8T83k2hQeIP+sSxFlPQY
lBh//aMjjv/cx85jXoBYF+FuHO0Jqi0ihlCbBgqL4WUVFSJpVKgQVyIYlH3npNh3
4bKuOtER0O0mlMIdZ872M9USKkgftyqVEykBPogynQcNFHJm5V+lr1oyzgQZa/kU
ya76BAeiCVm3EyV+zs0mK/NZXdtfgwd6h+MkVyaEf4lebC3ASaMnB4Momc5CFNPK
eXA1GFv99dhpWQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:39 2025 by rpki-client