Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: rnCunnE1yl1yCffY2RR7kM2PSON6A5howEzz8Jq2DRA=
Subject key identifier: 7E:6A:85:6C:9D:4B:D8:24:31:64:38:79:6C:0E:6D:DB:B3:11:17:23
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 01975EA6A9F87605DD14DBE6F90F32D3A9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 09CC
Signing time: Wed 11 Jun 2025 11:01:10 +0000
Manifest this update: Wed 11 Jun 2025 11:01:10 +0000
Manifest next update: Thu 12 Jun 2025 11:01:10 +0000
Files and hashes: 1: Pbu77IMqgBIggCHuoPCgPeA-JYI.roa (hash: MfbYLWDGe0vBfVw8/15weNnWm0f+1AXVR3Lu2ooMJ2Q=)
2: SJ31osOZq8GAkUzTcgDMle6L-Ko.roa (hash: OpBd6e9+J397K48R0gJPVRSyhgNBftdRPHKKbxpf8EI=)
3: TLegbcgI8kzdZX0LyaY_jBKsLjM.roa (hash: jfnT8EG89ibu6lVDZPQfuHKOWHv4n9hSUWRGapOkR0I=)
4: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: EpGOlijYSJA5gJXt6dD1vqXNmMrd+Mb/xQa+8d2KfRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a6:a9:f8:76:05:dd:14:db:e6:f9:0f:32:d3:a9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Jun 11 11:01:10 2025 GMT
Not After : Jun 12 11:01:10 2025 GMT
Subject: CN=7e6a856c9d4bd824316438796c0e6ddbb3111723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:57:45:47:d7:14:9a:ef:56:94:c2:b8:e5:
47:a4:15:4c:ad:43:d1:b1:3c:2e:04:af:f5:29:c9:
10:5c:1d:55:dd:fe:b4:d2:93:a1:d7:e8:af:61:b9:
5a:a7:fc:ed:49:f6:1a:b3:10:b7:5e:40:2c:77:bc:
9f:fa:0c:11:94:6e:87:07:2b:c8:38:ca:4a:7b:72:
df:90:c2:56:d1:85:f3:c3:bd:40:b0:8f:3f:7f:38:
2e:01:ba:9e:60:f5:ba:18:21:cb:0f:c3:a2:7f:a0:
3c:d8:5a:5b:a6:1f:ea:99:2e:04:09:cc:7f:58:96:
8c:a8:ff:c8:af:4a:fa:08:e4:f8:52:ac:dc:a4:68:
c1:22:cb:a9:ef:6e:e0:82:fb:42:86:f7:3a:a0:07:
1a:58:7b:1e:c3:79:bb:b4:d5:fa:13:b8:b6:d8:fa:
2d:2b:af:0b:f3:d3:38:8f:83:b9:e2:9f:d8:50:94:
a3:74:11:36:85:79:9e:10:b1:76:c6:09:d0:0d:d2:
7a:25:3c:8f:f7:85:c9:03:84:2b:bd:45:0f:3c:a2:
9a:84:18:b3:e7:a9:00:0a:3d:9c:13:be:ac:27:b0:
1c:8e:25:c8:0c:13:b4:03:6b:06:68:a7:a2:cf:69:
90:46:9e:b4:15:c1:c5:b9:6f:54:05:c2:c1:1d:41:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6A:85:6C:9D:4B:D8:24:31:64:38:79:6C:0E:6D:DB:B3:11:17:23
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:00:20:34:be:57:15:22:39:61:ac:1b:79:57:2a:86:61:1a:
93:b1:56:ae:3c:7a:bb:d4:ba:6d:08:36:28:0e:b9:ba:1f:be:
8b:3d:d2:d9:7d:f4:4c:e6:47:49:c8:e0:6a:52:5e:42:17:35:
af:34:dd:2d:e7:ac:19:a3:aa:f5:cc:27:8e:ee:3e:f5:e6:99:
b7:cb:3a:a8:45:f1:aa:bc:6d:ec:0a:73:a3:34:33:35:69:b4:
12:77:e5:57:1c:cc:d7:9d:6c:d6:03:e4:c4:25:59:12:eb:93:
1d:f6:a0:35:93:cf:f8:a1:95:76:b7:a9:67:b4:c4:60:95:2f:
bc:0c:90:30:c2:95:a9:80:0a:2a:6d:f2:ac:7d:b2:e8:ab:d1:
bd:b0:3e:9c:c7:df:a5:10:f3:88:d8:09:e9:f0:b9:41:16:24:
e7:ea:13:f4:0b:99:30:25:e1:0d:fb:d1:5e:31:61:e4:50:85:
6e:ed:ce:62:21:06:96:04:54:62:e8:ed:65:55:99:c0:0b:cc:
35:de:df:01:5f:98:e8:b6:b2:73:fd:8a:66:b7:11:e7:78:37:
6a:aa:e8:a2:86:51:39:0a:5f:7a:24:4e:0e:bb:1b:62:0c:f3:
03:b5:fa:76:e2:1b:7e:aa:41:6a:dd:f6:a6:e8:9d:fb:cc:b2:
57:f0:68:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdepqn4dgXdFNvm+Q8y06m6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmY0MTk2NTlmNTRkZjM3ODc5MmI2MDJjMDA5MmMzNTM5
ODhlYzgwHhcNMjUwNjExMTEwMTEwWhcNMjUwNjEyMTEwMTEwWjAzMTEwLwYDVQQD
Eyg3ZTZhODU2YzlkNGJkODI0MzE2NDM4Nzk2YzBlNmRkYmIzMTExNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLlXRUfXFJrvVpTCuOVHpBVMrUPR
sTwuBK/1KckQXB1V3f600pOh1+ivYblap/ztSfYasxC3XkAsd7yf+gwRlG6HByvI
OMpKe3LfkMJW0YXzw71AsI8/fzguAbqeYPW6GCHLD8Oif6A82Fpbph/qmS4ECcx/
WJaMqP/Ir0r6COT4UqzcpGjBIsup727ggvtChvc6oAcaWHsew3m7tNX6E7i22Pot
K68L89M4j4O54p/YUJSjdBE2hXmeELF2xgnQDdJ6JTyP94XJA4QrvUUPPKKahBiz
56kACj2cE76sJ7AcjiXIDBO0A2sGaKeiz2mQRp60FcHFuW9UBcLBHUETCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5qhWydS9gkMWQ4eWwObduzERcjMB8GA1UdIwQY
MBaAFL//QZZZ9U3zeHkrYCwAksNTmI7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEt
NzBiZGYxNWRkNjE5LzEvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEtNzBiZGYxNWRkNjE5
LzEvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAAgNL5X
FSI5YawbeVcqhmEak7FWrjx6u9S6bQg2KA65uh++iz3S2X30TOZHScjgalJeQhc1
rzTdLeesGaOq9cwnju4+9eaZt8s6qEXxqrxt7ApzozQzNWm0EnflVxzM151s1gPk
xCVZEuuTHfagNZPP+KGVdrepZ7TEYJUvvAyQMMKVqYAKKm3yrH2y6KvRvbA+nMff
pRDziNgJ6fC5QRYk5+oT9AuZMCXhDfvRXjFh5FCFbu3OYiEGlgRUYujtZVWZwAvM
Nd7fAV+Y6Layc/2KZrcR53g3aqroooZROQpfeiRODrsbYgzzA7X6duIbfqpBat32
puid+8yyV/BoNQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 14:00:48 2025 by rpki-client