Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: RBWlPJbaxt2mo9mo3JAlNz2/ndMYdBsSmFcBeVaBIqE=
Subject key identifier: 69:FD:5A:78:22:6C:9B:DD:DA:68:55:4A:2A:3A:8F:A7:86:4C:79:4A
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 0198469B4D4A556C7D9E2366D976928D7030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 09DF
Signing time: Sat 26 Jul 2025 12:00:39 +0000
Manifest this update: Sat 26 Jul 2025 12:00:39 +0000
Manifest next update: Sun 27 Jul 2025 12:00:39 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: d7FafUV56TZvtkxj29f/wsAgP8Z/w8r1cWuW9ttma/8=)
2: oArMezXxnppYeQKqa4Fni7TfbMc.roa (hash: qlkimcr4G31oui8MrYfktlDJ5C4NmKprfu244lU2XRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:4d:4a:55:6c:7d:9e:23:66:d9:76:92:8d:70:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Jul 26 12:00:39 2025 GMT
Not After : Jul 27 12:00:39 2025 GMT
Subject: CN=69fd5a78226c9bddda68554a2a3a8fa7864c794a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:bd:00:e8:a2:4a:08:ee:8f:58:cd:28:22:
75:d1:a1:d1:cd:d8:16:ff:ea:bc:e5:34:e7:99:4f:
55:49:e8:23:2d:92:eb:87:55:01:a8:99:c4:a5:3b:
a8:bc:1e:f3:8c:b8:c6:3c:78:ef:b5:8d:cd:5e:51:
17:c0:6e:3c:b5:96:a6:8f:98:48:5d:77:f5:c6:33:
13:55:c0:4d:5e:59:ce:e0:e8:1a:55:94:c6:dd:82:
c5:49:bc:18:ea:d2:94:31:85:29:95:21:f2:77:4a:
56:9d:05:d1:4e:ce:8f:8b:04:de:84:d2:77:0b:4d:
51:ee:35:c6:1c:bc:1c:f5:db:ed:c6:73:6a:07:c5:
29:54:b0:b6:c4:14:59:f7:82:59:80:7f:b5:92:c8:
91:d0:b3:fe:d4:a5:4d:52:6c:2e:7b:00:22:52:7f:
69:8d:e0:11:74:34:1a:15:fa:62:1f:8f:12:bd:aa:
b7:b9:81:b1:21:7c:c0:da:ae:68:9f:54:5f:26:c8:
e7:92:ec:e7:6d:fa:cb:f5:b9:8a:82:81:ef:05:74:
25:7c:d7:12:13:c0:ce:27:3a:c8:66:04:a2:43:42:
e2:8e:fc:bb:51:b9:c4:58:45:de:f7:96:75:ad:a0:
d4:f1:44:63:f5:08:8c:6b:a2:74:35:24:d4:12:2b:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FD:5A:78:22:6C:9B:DD:DA:68:55:4A:2A:3A:8F:A7:86:4C:79:4A
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ed:59:2a:ad:cd:8e:27:04:bb:e1:f9:0c:e2:8c:78:cf:95:
af:28:fe:94:eb:e9:89:37:22:f8:6d:99:0a:b7:50:cd:1d:9e:
1e:02:77:77:23:3c:1a:d7:f4:39:9c:83:f7:72:3b:5f:63:90:
27:16:13:55:72:a4:46:94:a5:68:71:8b:a1:01:d1:43:15:ee:
e3:14:87:ba:09:09:64:0c:84:c8:13:fb:d3:b2:b7:1b:7a:5f:
88:bd:41:f5:78:fb:0d:3b:c7:df:d3:fc:91:c9:f4:16:ca:83:
bc:6b:31:59:47:6d:05:14:e1:44:65:91:3a:c3:ff:12:e8:34:
a6:96:db:ed:35:37:32:0f:b4:d8:7d:93:55:1b:58:36:17:1c:
cc:d0:a1:e6:f7:a1:f5:38:11:6f:26:35:08:36:2c:8c:a3:9e:
4a:59:5e:d2:0e:b0:72:10:e8:ff:e8:62:00:96:3f:0a:d8:78:
8c:fd:4c:ad:b8:96:d7:fd:c7:2c:ad:94:93:10:6c:6a:ee:f7:
89:f1:10:4f:87:d9:c3:84:2a:43:2b:4b:8a:54:ee:6a:5c:fe:
e2:c7:33:d5:e7:7b:4c:c4:44:6a:18:35:3b:fb:6c:cf:06:f7:
3d:f8:34:89:4a:b0:c6:50:76:ed:03:6e:42:77:f9:28:1c:11:
20:4f:0a:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGm01KVWx9niNm2XaSjXAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdjMDIwY2RjMjJiNjhkYTI2YTQ2OWY2ZmZhNmI0NDgz
NzBkMWQwHhcNMjUwNzI2MTIwMDM5WhcNMjUwNzI3MTIwMDM5WjAzMTEwLwYDVQQD
Eyg2OWZkNWE3ODIyNmM5YmRkZGE2ODU1NGEyYTNhOGZhNzg2NGM3OTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ya9AOiiSgjuj1jNKCJ10aHRzdgW
/+q85TTnmU9VSegjLZLrh1UBqJnEpTuovB7zjLjGPHjvtY3NXlEXwG48tZamj5hI
XXf1xjMTVcBNXlnO4OgaVZTG3YLFSbwY6tKUMYUplSHyd0pWnQXRTs6PiwTehNJ3
C01R7jXGHLwc9dvtxnNqB8UpVLC2xBRZ94JZgH+1ksiR0LP+1KVNUmwuewAiUn9p
jeARdDQaFfpiH48Svaq3uYGxIXzA2q5on1RfJsjnkuznbfrL9bmKgoHvBXQlfNcS
E8DOJzrIZgSiQ0Lijvy7UbnEWEXe95Z1raDU8URj9QiMa6J0NSTUEivUpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn9WngibJvd2mhVSio6j6eGTHlKMB8GA1UdIwQY
MBaAFPRXwCDNwito2iakafb/prRINw0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAt
N2JhZmQ0M2U3ODYyLzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAtN2JhZmQ0M2U3ODYy
LzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIO1ZKq3N
jicEu+H5DOKMeM+Vryj+lOvpiTci+G2ZCrdQzR2eHgJ3dyM8Gtf0OZyD93I7X2OQ
JxYTVXKkRpSlaHGLoQHRQxXu4xSHugkJZAyEyBP707K3G3pfiL1B9Xj7DTvH39P8
kcn0FsqDvGsxWUdtBRThRGWROsP/Eug0ppbb7TU3Mg+02H2TVRtYNhcczNCh5veh
9TgRbyY1CDYsjKOeSlle0g6wchDo/+hiAJY/Cth4jP1MrbiW1/3HLK2UkxBsau73
ifEQT4fZw4QqQytLilTualz+4scz1ed7TMREahg1O/tszwb3Pfg0iUqwxlB27QNu
Qnf5KBwRIE8KSQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:03 2025 by rpki-client