Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: rWj3f5dVkGKDstoW4gToJetiJFLUA+Mbu7bhiZF74VU=
Subject key identifier: 80:1E:53:0C:1A:1C:D8:24:09:FC:BB:21:82:A8:2C:57:2F:92:DA:B9
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 01992CD8DDB5ABD2998D54C73864FEE699D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 017C
Signing time: Tue 09 Sep 2025 05:00:33 +0000
Manifest this update: Tue 09 Sep 2025 05:00:33 +0000
Manifest next update: Wed 10 Sep 2025 05:00:33 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: d/DqHlBL1UcGT/ghzTLUMLLRf2vZqrokSnuS7OKBA6g=)
2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d8:dd:b5:ab:d2:99:8d:54:c7:38:64:fe:e6:99:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Sep 9 05:00:33 2025 GMT
Not After : Sep 10 05:00:33 2025 GMT
Subject: CN=801e530c1a1cd82409fcbb2182a82c572f92dab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:18:8f:40:e8:ed:e3:6b:81:23:af:ac:c7:
6a:e4:12:e0:00:34:28:01:6f:bb:c2:2d:6b:98:12:
a0:03:7d:2c:09:36:93:6d:62:17:24:13:47:f0:19:
5d:60:9f:7d:f9:07:61:27:db:87:f2:fa:b7:82:0f:
e3:27:4e:78:92:3f:ad:d7:3f:05:ff:bd:81:c3:94:
1c:8d:2f:6f:21:5e:58:1d:0b:f7:fe:44:a1:c0:4f:
4b:78:4d:64:a6:d7:9e:13:19:4d:43:21:51:ac:6d:
96:ee:04:8c:0c:b2:c4:40:b9:7c:22:49:b3:40:38:
8d:eb:14:ea:63:23:67:af:e4:b4:a1:ba:49:db:a3:
b7:ba:73:2e:5d:27:c3:21:34:3a:6c:ec:99:89:57:
fe:27:3e:d7:9b:48:86:0f:c2:7b:a8:2c:e4:02:5b:
58:72:e0:c2:5d:96:aa:0a:e3:70:52:98:07:81:b8:
0a:e9:cb:21:c1:42:f3:d0:52:a3:94:46:ce:48:79:
b3:3a:7e:84:d6:68:91:d6:fb:7d:40:81:47:66:52:
42:59:16:1e:db:7d:3c:7c:9f:fb:d9:30:5a:5e:02:
2a:09:7e:58:d3:12:e6:71:c4:47:50:2c:a9:17:59:
43:a9:ff:b6:8c:f1:04:03:df:14:3d:e7:19:48:2e:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1E:53:0C:1A:1C:D8:24:09:FC:BB:21:82:A8:2C:57:2F:92:DA:B9
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fb:41:d3:f1:b9:79:fd:7c:c9:28:f5:6e:6d:fa:82:67:3e:
45:99:8b:42:da:27:d1:82:a9:75:78:bf:e3:0e:05:d9:09:88:
9b:0b:9e:4b:1f:c6:6e:c1:15:c5:76:bb:a2:4a:1e:1a:1f:45:
e6:86:0f:e5:bc:90:05:c4:15:2c:42:87:d8:53:dd:54:cf:61:
3c:fc:a4:5a:c8:68:32:58:af:3e:cc:d2:2f:f2:c9:d8:e1:f9:
35:f5:c3:f9:f6:8d:19:aa:28:b5:87:b4:dd:5c:e3:93:6a:0b:
ae:aa:54:f4:52:93:d0:43:a8:21:cd:be:4b:ad:2c:06:cf:82:
5d:ec:c0:6e:08:98:25:55:46:3e:a9:1c:69:dc:c2:14:91:9a:
0e:41:09:1f:45:01:44:18:d2:33:76:d6:3e:ab:7c:fc:a7:7f:
fa:18:c4:88:16:ff:7c:f4:13:88:cd:bd:28:8c:07:02:3c:3b:
74:5c:3b:f7:bd:8e:76:61:a6:b8:d9:d6:8e:a1:f4:c8:49:2a:
b9:14:43:25:61:04:d3:65:60:9f:96:73:ee:88:74:b8:39:54:
10:cb:d2:82:0f:25:b2:c5:0d:e2:88:7b:b5:f6:89:d7:4c:a9:
a9:0f:12:ff:13:18:bb:8f:46:e8:78:6d:dd:94:13:e8:0c:93:
b2:e8:ed:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZks2N21q9KZjVTHOGT+5pnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2Q5YzhmZmMyMDRiNmRiZGUwMTIwNTMwM2JkZjhiNTA2
MzhhYTYwHhcNMjUwOTA5MDUwMDMzWhcNMjUwOTEwMDUwMDMzWjAzMTEwLwYDVQQD
Eyg4MDFlNTMwYzFhMWNkODI0MDlmY2JiMjE4MmE4MmM1NzJmOTJkYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq70Yj0Do7eNrgSOvrMdq5BLgADQo
AW+7wi1rmBKgA30sCTaTbWIXJBNH8BldYJ99+QdhJ9uH8vq3gg/jJ054kj+t1z8F
/72Bw5QcjS9vIV5YHQv3/kShwE9LeE1kpteeExlNQyFRrG2W7gSMDLLEQLl8Ikmz
QDiN6xTqYyNnr+S0obpJ26O3unMuXSfDITQ6bOyZiVf+Jz7Xm0iGD8J7qCzkAltY
cuDCXZaqCuNwUpgHgbgK6cshwULz0FKjlEbOSHmzOn6E1miR1vt9QIFHZlJCWRYe
2308fJ/72TBaXgIqCX5Y0xLmccRHUCypF1lDqf+2jPEEA98UPecZSC7qVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAeUwwaHNgkCfy7IYKoLFcvktq5MB8GA1UdIwQY
MBaAFPV9nI/8IEttveASBTA734tQY4qmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEt
YjY3ZDMyMDk5MGM2LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEtYjY3ZDMyMDk5MGM2
LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZftB0/G5
ef18ySj1bm36gmc+RZmLQton0YKpdXi/4w4F2QmImwueSx/GbsEVxXa7okoeGh9F
5oYP5byQBcQVLEKH2FPdVM9hPPykWshoMlivPszSL/LJ2OH5NfXD+faNGaootYe0
3Vzjk2oLrqpU9FKT0EOoIc2+S60sBs+CXezAbgiYJVVGPqkcadzCFJGaDkEJH0UB
RBjSM3bWPqt8/Kd/+hjEiBb/fPQTiM29KIwHAjw7dFw7972OdmGmuNnWjqH0yEkq
uRRDJWEE02Vgn5Zz7oh0uDlUEMvSgg8lssUN4oh7tfaJ10ypqQ8S/xMYu49G6Hht
3ZQT6AyTsujtVw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:28:06 2025 by rpki-client