Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: VJdahm1GqSvgzUfDhY6N9VuUoU22ZEwZGP/woDkhZ8w=
Subject key identifier: 84:52:A0:92:EB:1B:08:80:BB:75:5F:1F:8C:3A:69:16:01:67:59:C9
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 01984A0A52323A911A3972BBF27BC6BA8C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 04:00:47 +0000
Manifest this update: Sun 27 Jul 2025 04:00:47 +0000
Manifest next update: Mon 28 Jul 2025 04:00:47 +0000
Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: sTlp89FBldETAqZJiuWbPAGiNHNHOzrunMhL5r96sks=)
3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:52:32:3a:91:1a:39:72:bb:f2:7b:c6:ba:8c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Jul 27 04:00:47 2025 GMT
Not After : Jul 28 04:00:47 2025 GMT
Subject: CN=8452a092eb1b0880bb755f1f8c3a6916016759c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:30:ba:6e:b1:69:db:d8:c4:1d:8a:a8:59:
a4:f7:20:ac:90:23:2f:7f:aa:ae:01:eb:4f:58:84:
ed:c3:46:c0:ff:e6:1a:3d:f9:e3:33:2d:5c:1b:a4:
64:60:13:15:56:44:40:5c:4d:5f:93:d3:41:49:0d:
f6:ac:41:43:a8:30:c5:02:e7:e4:4d:21:b2:2b:22:
eb:1e:95:40:ba:a3:58:56:a6:7e:67:59:0b:b4:cf:
35:a0:89:57:de:16:dc:aa:3a:17:02:3c:e3:5e:89:
3a:87:86:6c:d6:3e:0d:a8:5d:7a:a7:97:f8:b3:5d:
fb:29:74:74:bd:eb:b9:c7:06:1e:3b:80:ea:47:8a:
71:18:ef:5a:c6:45:97:d1:5d:2d:2f:28:bb:6c:df:
72:e6:0e:a1:e9:b8:21:5c:29:b8:45:7f:d0:fa:97:
ae:6d:5e:73:8a:c8:ef:f8:99:f8:fe:de:ea:b7:9d:
94:2c:ab:57:c6:cf:64:3e:b4:fc:38:4c:37:cd:7d:
d4:6b:92:fb:e7:32:ac:da:66:d1:13:b5:91:71:1b:
02:c6:bc:65:f9:d0:87:76:65:0a:36:45:c4:2c:74:
2a:02:60:59:a0:b4:09:04:b5:61:51:79:03:40:3c:
84:21:d2:8b:fd:2f:be:c3:fa:54:f8:e7:6d:0d:c9:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:52:A0:92:EB:1B:08:80:BB:75:5F:1F:8C:3A:69:16:01:67:59:C9
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c1:11:83:31:68:21:01:4b:9a:39:84:b6:a3:19:4b:37:6d:
7c:fe:48:7d:4d:9b:7f:53:93:7d:59:d8:74:64:42:f6:6d:01:
5c:e0:bb:d1:71:26:06:af:8b:61:a0:0e:60:d9:6e:e9:80:67:
e0:ba:16:8a:a3:45:e9:3c:83:e7:43:af:a4:68:5c:7c:8f:44:
b9:09:cd:d6:ec:76:f3:82:81:01:93:9d:4e:54:7f:90:d2:b8:
2e:8c:6c:15:58:7d:a5:09:0b:c2:66:8d:a1:40:c1:22:93:a5:
8e:c8:71:d5:29:b8:b6:2b:b9:dc:c8:53:97:c2:ee:1b:58:8d:
31:d4:3f:81:8a:0d:4e:5d:bd:e7:73:3e:b0:64:ab:b0:2b:66:
05:4c:91:b0:52:0e:6a:4b:a9:8a:27:5a:ad:54:5f:6b:07:72:
49:7d:75:8b:8e:ab:f9:66:72:4a:d6:13:69:e3:13:e2:70:4b:
f9:cc:5c:96:94:34:a7:5a:18:d4:28:39:c8:5f:b5:0d:f5:12:
38:21:cb:e7:a4:e5:a5:27:8c:fc:a1:0a:7b:97:f3:80:63:72:
18:b1:71:1a:a7:71:83:b7:64:5d:a3:29:8b:4e:15:c8:08:62:
2e:6f:8a:dc:21:0d:65:62:d1:ea:c5:3f:68:be:51:fc:14:37:
01:a1:60:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKClIyOpEaOXK78nvGuoxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDE0Y2UxOGE4ZjFkMDVhNmEzNTM5MGFmNGFlYzhjZTZj
YzU2ZWMwHhcNMjUwNzI3MDQwMDQ3WhcNMjUwNzI4MDQwMDQ3WjAzMTEwLwYDVQQD
Eyg4NDUyYTA5MmViMWIwODgwYmI3NTVmMWY4YzNhNjkxNjAxNjc1OWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubowum6xadvYxB2KqFmk9yCskCMv
f6quAetPWITtw0bA/+YaPfnjMy1cG6RkYBMVVkRAXE1fk9NBSQ32rEFDqDDFAufk
TSGyKyLrHpVAuqNYVqZ+Z1kLtM81oIlX3hbcqjoXAjzjXok6h4Zs1j4NqF16p5f4
s137KXR0veu5xwYeO4DqR4pxGO9axkWX0V0tLyi7bN9y5g6h6bghXCm4RX/Q+peu
bV5zisjv+Jn4/t7qt52ULKtXxs9kPrT8OEw3zX3Ua5L75zKs2mbRE7WRcRsCxrxl
+dCHdmUKNkXELHQqAmBZoLQJBLVhUXkDQDyEIdKL/S++w/pU+OdtDclJGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRSoJLrGwiAu3VfH4w6aRYBZ1nJMB8GA1UdIwQY
MBaAFLPRTOGKjx0FpqNTkK9K7IzmzFbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEt
NTJjNjk5ZDM4NmNkLzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEtNTJjNjk5ZDM4NmNk
LzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcERgzFo
IQFLmjmEtqMZSzdtfP5IfU2bf1OTfVnYdGRC9m0BXOC70XEmBq+LYaAOYNlu6YBn
4LoWiqNF6TyD50OvpGhcfI9EuQnN1ux284KBAZOdTlR/kNK4LoxsFVh9pQkLwmaN
oUDBIpOljshx1Sm4tiu53MhTl8LuG1iNMdQ/gYoNTl2953M+sGSrsCtmBUyRsFIO
akupiidarVRfawdySX11i46r+WZyStYTaeMT4nBL+cxclpQ0p1oY1Cg5yF+1DfUS
OCHL56TlpSeM/KEKe5fzgGNyGLFxGqdxg7dkXaMpi04VyAhiLm+K3CENZWLR6sU/
aL5R/BQ3AaFgCg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:40:03 2025 by rpki-client