Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: DAJFvo/heCCWG4XziW+mMb76BIuqttaRCyGYd+ldjOw=
Subject key identifier: C1:C5:50:66:3B:98:A9:D7:5A:2D:34:3C:15:2B:F9:AF:6F:FC:F2:E5
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 0197469D9617F8F0B9CF7BDC1266621A0F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 098F
Signing time: Fri 06 Jun 2025 19:00:22 +0000
Manifest this update: Fri 06 Jun 2025 19:00:22 +0000
Manifest next update: Sat 07 Jun 2025 19:00:22 +0000
Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: QWypI+ZwTT+upw99cboN26DfMWfo8lS2riCozR0Avjs=)
3: I8ts4VChZIvxCXnk3zghDL9Bmu4.roa (hash: Md6prX/mk6M2hIPa7lBG6X8P2VoqSBLYC0PebMg3Wr4=)
4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:96:17:f8:f0:b9:cf:7b:dc:12:66:62:1a:0f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jun 6 19:00:22 2025 GMT
Not After : Jun 7 19:00:22 2025 GMT
Subject: CN=c1c550663b98a9d75a2d343c152bf9af6ffcf2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:3a:d5:76:83:e0:fa:a3:4f:43:c7:6a:a1:
dc:4e:34:67:d7:17:36:7f:3a:4a:f7:20:81:d3:00:
32:88:a2:4b:a2:51:e9:e7:51:6c:3f:d2:bd:b8:3e:
48:ee:17:3c:78:74:ea:6a:96:27:8f:44:69:84:ae:
9e:d3:00:3b:19:ae:e0:b2:a3:21:59:f2:e4:9e:3c:
72:15:1e:f6:21:8c:55:2f:54:f0:6a:5d:ea:2d:6c:
a5:56:3e:3d:da:14:0f:a8:14:33:07:6d:c1:3a:54:
e1:70:ec:9f:d6:42:80:c6:b7:87:bb:86:7c:15:33:
a1:e4:cc:34:e1:f5:a7:5a:0b:58:3a:99:6f:65:67:
fe:a6:9a:38:7f:8b:9e:b1:bb:1b:b0:6c:6c:29:e9:
0a:20:c5:be:19:48:27:b5:c1:97:5f:1f:bf:36:04:
32:38:75:39:c2:c0:f7:5d:45:dd:15:16:60:db:c5:
92:c5:7d:34:08:4c:cc:e4:69:aa:56:ce:75:70:35:
95:f1:ba:a9:30:56:16:d6:b8:fb:c6:79:66:ea:c5:
e2:93:a5:a8:c5:eb:ee:e8:14:7e:98:55:f8:ea:67:
47:be:79:28:b4:68:b0:b5:ad:01:ff:a4:9e:87:05:
8b:23:ce:84:a5:58:f1:6d:f0:51:0d:65:82:ea:02:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C5:50:66:3B:98:A9:D7:5A:2D:34:3C:15:2B:F9:AF:6F:FC:F2:E5
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:0f:c7:5a:d2:eb:73:6c:af:7a:7b:10:42:39:59:45:90:
76:48:70:8e:00:a3:4a:aa:45:76:c1:9d:49:3d:98:aa:43:50:
d9:c3:7c:fb:81:4c:98:7d:31:5f:1e:4e:9b:20:24:55:89:c3:
4c:fc:8f:76:99:f0:c7:22:99:72:09:eb:2e:2a:0f:81:08:44:
36:33:e6:36:ef:cf:67:60:15:c1:8a:0a:e6:9d:10:37:0e:6c:
73:60:9c:3b:c7:53:ad:cc:0e:2e:24:de:4b:9d:f6:a1:2c:70:
e6:a9:51:92:08:d4:21:40:18:1d:6b:e9:19:66:50:86:c1:12:
1c:1b:af:b2:d5:5c:e0:38:38:79:f8:2c:30:16:a4:b2:66:0c:
1c:7a:4c:f8:d2:2f:83:ec:b6:69:71:a9:5f:23:fb:fd:ad:95:
a6:53:fc:b0:2f:64:04:72:55:2d:4c:b8:49:66:10:8a:6e:2f:
97:03:d0:13:cc:5e:ed:04:6d:e2:31:aa:1a:cb:cf:3f:bc:35:
23:02:7c:29:d1:88:cc:d3:d5:6a:6e:21:d7:7d:47:03:7c:79:
f3:7e:cf:f0:5a:ef:e3:69:19:f5:d6:51:2f:62:06:cb:61:02:
d3:87:94:c0:21:01:b6:6e:4d:27:28:a0:d6:d2:64:d5:99:82:
f0:e2:1b:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnZYX+PC5z3vcEmZiGg9EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDYwMmI5ZTFkYTJiNTY4ZGY1NDRiZGE1MGU0MTU3OTli
YmIxZTIwHhcNMjUwNjA2MTkwMDIyWhcNMjUwNjA3MTkwMDIyWjAzMTEwLwYDVQQD
EyhjMWM1NTA2NjNiOThhOWQ3NWEyZDM0M2MxNTJiZjlhZjZmZmNmMmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8I61XaD4PqjT0PHaqHcTjRn1xc2
fzpK9yCB0wAyiKJLolHp51FsP9K9uD5I7hc8eHTqapYnj0RphK6e0wA7Ga7gsqMh
WfLknjxyFR72IYxVL1Twal3qLWylVj492hQPqBQzB23BOlThcOyf1kKAxreHu4Z8
FTOh5Mw04fWnWgtYOplvZWf+ppo4f4uesbsbsGxsKekKIMW+GUgntcGXXx+/NgQy
OHU5wsD3XUXdFRZg28WSxX00CEzM5GmqVs51cDWV8bqpMFYW1rj7xnlm6sXik6Wo
xevu6BR+mFX46mdHvnkotGiwta0B/6SehwWLI86EpVjxbfBRDWWC6gLkYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHFUGY7mKnXWi00PBUr+a9v/PLlMB8GA1UdIwQY
MBaAFAPWArnh2itWjfVEvaUOQVeZu7HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEt
ZmI5N2RkZDU0ODkxLzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEtZmI5N2RkZDU0ODkx
LzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOocPx1rS
63Nsr3p7EEI5WUWQdkhwjgCjSqpFdsGdST2YqkNQ2cN8+4FMmH0xXx5OmyAkVYnD
TPyPdpnwxyKZcgnrLioPgQhENjPmNu/PZ2AVwYoK5p0QNw5sc2CcO8dTrcwOLiTe
S532oSxw5qlRkgjUIUAYHWvpGWZQhsESHBuvstVc4Dg4efgsMBaksmYMHHpM+NIv
g+y2aXGpXyP7/a2VplP8sC9kBHJVLUy4SWYQim4vlwPQE8xe7QRt4jGqGsvPP7w1
IwJ8KdGIzNPVam4h131HA3x5837P8Frv42kZ9dZRL2IGy2EC04eUwCEBtm5NJyig
1tJk1ZmC8OIbOQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:51 2025 by rpki-client