Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File: 9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier: cgItlhwEA4rT/lYliCzvBAIEpz2a3MUECOTlwiQci5g=
Subject key identifier: D3:0F:DF:1D:11:2F:50:27:70:EF:1D:83:85:21:1C:70:94:FA:7A:3C
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer: /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial: 019855A0817A9F4A35861F9B5AF70AFBCDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number: 0320
Signing time: Tue 29 Jul 2025 10:00:38 +0000
Manifest this update: Tue 29 Jul 2025 10:00:38 +0000
Manifest next update: Wed 30 Jul 2025 10:00:38 +0000
Files and hashes: 1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: 3DWtwyGyV9Kv6q3XJHhSwQ/U63PnSsKACGACBfbQkws=)
2: UmpOhRez3moOZWrjBKIN45JkCE8.roa (hash: rPkye9amYErKpRGECf5NJc6OYwjs4QcPoervOMLXjak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:81:7a:9f:4a:35:86:1f:9b:5a:f7:0a:fb:cd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Validity
Not Before: Jul 29 10:00:38 2025 GMT
Not After : Jul 30 10:00:38 2025 GMT
Subject: CN=d30fdf1d112f502770ef1d8385211c7094fa7a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:2a:e8:d1:7f:68:0a:8a:e2:17:20:2e:f2:
5a:d3:86:82:23:c4:8c:f8:86:34:1d:7e:92:87:af:
aa:3b:a3:0b:95:4e:e0:1f:51:11:f2:51:40:6d:b8:
c0:f4:26:ec:79:89:5a:69:b9:14:45:90:ee:bc:16:
b4:72:b5:43:42:e8:1b:b4:fc:fc:c1:2b:51:65:45:
40:be:e9:00:b0:28:e1:e8:8d:66:39:74:9a:c7:90:
88:db:91:bc:b2:05:d0:e1:d4:ca:60:98:e4:5b:9e:
06:26:a4:83:0c:29:32:bb:5d:aa:9e:b8:f9:00:4f:
15:c8:97:28:7d:9d:4c:a0:78:bd:37:a7:fe:f0:5d:
34:b9:5b:f6:59:3a:a0:a9:22:54:93:9d:00:b1:7d:
0b:1f:a4:2e:39:4b:aa:30:4c:36:7a:04:f6:05:84:
4e:e0:0c:57:01:df:d7:d9:86:ed:0b:da:7e:a3:b2:
ce:05:e2:b3:70:1d:04:ef:da:46:8a:1b:cd:95:a6:
4a:4b:68:01:7c:60:41:10:76:97:c6:99:fd:64:03:
2e:07:38:3e:a1:4e:3e:a2:b9:fb:74:49:02:12:03:
cc:a4:58:88:39:9a:1f:83:41:c9:1c:ec:48:01:2b:
53:0b:2c:58:ea:a8:30:66:d2:2c:2b:a9:31:52:7a:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0F:DF:1D:11:2F:50:27:70:EF:1D:83:85:21:1C:70:94:FA:7A:3C
X509v3 Authority Key Identifier:
keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5c:4f:52:c8:20:3a:1e:ba:e9:83:53:c9:98:97:c3:fc:01:
46:c5:35:34:47:a8:e6:fe:bc:29:2c:e2:84:06:38:f6:c9:6e:
ef:0f:fa:c2:45:73:13:3e:87:ac:a5:7a:e0:e8:a8:b0:da:ce:
68:fa:11:80:3d:34:b1:05:8d:27:bc:27:87:9f:6c:59:34:62:
ca:14:78:da:7c:fc:97:e6:5b:7f:f7:34:a6:6a:76:21:57:76:
f7:98:00:b2:e7:2b:06:fe:c1:ed:0b:72:56:e6:72:09:4c:5c:
12:96:64:61:e5:00:49:d4:a4:d9:66:dd:d8:27:5e:d1:62:24:
32:b9:11:6b:df:12:f4:c9:3c:db:ef:5e:04:b2:d7:2e:ee:14:
9e:60:da:1d:3b:9a:a3:19:bc:1b:f9:9b:d7:1c:8c:e1:2b:43:
74:ef:9a:20:d4:cf:85:27:67:8e:59:ee:3f:31:fd:7e:23:34:
c3:03:e3:71:a8:37:ad:08:43:e6:2e:1b:85:22:dd:e3:29:24:
d8:ed:e9:e8:6e:28:04:49:2f:c3:e8:ab:12:d9:2f:74:c4:d0:
25:71:21:ae:89:46:a4:3b:8d:24:e4:79:91:b6:3e:9f:d6:33:
bc:06:09:0c:eb:09:52:75:f2:cb:76:3c:ed:f4:86:87:df:5b:
d6:bd:55:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVoIF6n0o1hh+bWvcK+83LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NGUzYjc5N2Y0YmEzN2ViZjcxODlhNGMxNGYwNTIwZDdj
ZjMwZDcwHhcNMjUwNzI5MTAwMDM4WhcNMjUwNzMwMTAwMDM4WjAzMTEwLwYDVQQD
EyhkMzBmZGYxZDExMmY1MDI3NzBlZjFkODM4NTIxMWM3MDk0ZmE3YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE8q6NF/aAqK4hcgLvJa04aCI8SM
+IY0HX6Sh6+qO6MLlU7gH1ER8lFAbbjA9CbseYlaabkURZDuvBa0crVDQugbtPz8
wStRZUVAvukAsCjh6I1mOXSax5CI25G8sgXQ4dTKYJjkW54GJqSDDCkyu12qnrj5
AE8VyJcofZ1MoHi9N6f+8F00uVv2WTqgqSJUk50AsX0LH6QuOUuqMEw2egT2BYRO
4AxXAd/X2YbtC9p+o7LOBeKzcB0E79pGihvNlaZKS2gBfGBBEHaXxpn9ZAMuBzg+
oU4+orn7dEkCEgPMpFiIOZofg0HJHOxIAStTCyxY6qgwZtIsK6kxUnpeywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMP3x0RL1AncO8dg4UhHHCU+no8MB8GA1UdIwQY
MBaAFPVOO3l/S6N+v3GJpMFPBSDXzzDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yNTk4NzktN2IxZS00NTQ0LTgwMTMt
MTVlNDFjNDBhZWM5LzEvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yNTk4NzktN2IxZS00NTQ0LTgwMTMtMTVlNDFjNDBhZWM5
LzEvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVxPUsgg
Oh666YNTyZiXw/wBRsU1NEeo5v68KSzihAY49slu7w/6wkVzEz6HrKV64OiosNrO
aPoRgD00sQWNJ7wnh59sWTRiyhR42nz8l+Zbf/c0pmp2IVd295gAsucrBv7B7Qty
VuZyCUxcEpZkYeUASdSk2Wbd2Cde0WIkMrkRa98S9Mk82+9eBLLXLu4UnmDaHTua
oxm8G/mb1xyM4StDdO+aINTPhSdnjlnuPzH9fiM0wwPjcag3rQhD5i4bhSLd4ykk
2O3p6G4oBEkvw+irEtkvdMTQJXEhrolGpDuNJOR5kbY+n9YzvAYJDOsJUnXyy3Y8
7fSGh99b1r1VIQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 16:30:20 2025 by rpki-client