Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: 98bkL6p0klOkwW9r6ALVk9WK07gw67m/AikC9AO1sU8=
Subject key identifier: F9:2B:DA:99:66:5F:4B:47:F9:FC:5B:D6:55:70:38:85:4E:39:DD:BF
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 0199240D9E5912788372F62F2345CE782CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 13B0
Signing time: Sun 07 Sep 2025 12:01:36 +0000
Manifest this update: Sun 07 Sep 2025 12:01:36 +0000
Manifest next update: Mon 08 Sep 2025 12:01:36 +0000
Files and hashes: 1: 1-NNWhK-5UZlX86GIvBS3F5KFXGM.roa (hash: ZnHYmG2JFMVQIt7lMjIb53DbqPPrkNie9D30hGqcWLQ=)
2: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: Wsj6y+tH1Nxb5xMcuYypil6PUd0Hdf28R0sPpkAEJ40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:9e:59:12:78:83:72:f6:2f:23:45:ce:78:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Sep 7 12:01:36 2025 GMT
Not After : Sep 8 12:01:36 2025 GMT
Subject: CN=f92bda99665f4b47f9fc5bd6557038854e39ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:a6:1c:e9:cd:fc:c1:19:97:39:3c:95:1c:
ac:9d:d7:f6:77:7d:46:f7:28:1b:0f:8e:23:a0:7a:
df:ef:fb:af:c6:31:9a:fd:bb:b1:64:a6:cd:53:eb:
da:39:ed:01:35:cc:87:35:f5:35:85:4f:81:db:bc:
3b:91:32:41:30:3b:da:16:cf:a7:a6:46:16:45:de:
b5:8f:cd:ae:67:f9:8c:98:45:e7:96:8d:ab:3b:af:
6d:cc:43:03:26:6c:37:87:39:0f:d7:d2:5a:bd:9c:
d7:b5:d8:cf:31:ff:85:83:12:72:5f:12:24:41:93:
f4:c6:1b:cc:06:cd:63:2e:b9:07:65:72:7c:8e:c5:
63:c5:17:d8:9f:ac:b3:4b:4a:29:3b:5e:23:73:05:
bd:49:12:ad:01:20:7e:6b:0e:17:0e:ed:82:08:19:
91:c7:e5:96:df:a5:4d:45:f1:fe:99:68:9b:d8:74:
f0:fd:9a:bd:55:33:7a:8a:9d:64:8b:0e:8a:a8:72:
44:c0:b2:2d:e3:af:7f:e8:a8:ab:ea:8b:f3:f1:ac:
28:57:51:3d:dd:a7:49:bd:6a:2b:43:03:3f:b2:0e:
a6:91:6d:61:9c:bf:e9:1c:96:42:a0:b9:00:eb:45:
0a:54:d7:c9:27:e9:3a:25:87:df:5c:72:7d:ad:c9:
6e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2B:DA:99:66:5F:4B:47:F9:FC:5B:D6:55:70:38:85:4E:39:DD:BF
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:24:24:78:69:75:ce:d6:9f:18:00:64:ae:90:ea:58:b3:fb:
4d:96:97:49:5b:91:7e:77:90:3c:91:50:07:6f:16:f4:b3:b2:
e5:73:78:a9:2f:72:66:ca:1b:b9:16:42:b4:27:23:58:38:46:
7a:39:65:ad:0b:d8:25:3a:85:a4:28:5c:71:7a:67:fe:19:62:
01:94:a0:44:62:14:ec:00:70:f0:5a:79:d1:01:99:d8:14:4b:
99:4a:47:80:b3:0b:29:97:be:b4:4e:b9:d3:27:0d:7e:66:2d:
3c:6d:08:34:16:e2:15:62:5e:c4:0d:64:d2:1c:29:79:60:d2:
10:4a:c2:fc:27:2e:b3:5e:ad:ea:29:79:c5:1a:c2:f1:33:7e:
72:79:7b:da:d3:d0:48:92:03:2e:1c:fd:6a:57:01:23:ba:28:
e0:3d:59:c6:e2:81:32:19:0d:a2:d9:c4:ed:77:6f:27:92:56:
81:f7:9c:da:6a:31:e7:93:7c:9d:49:ac:e8:c0:c6:0b:14:6f:
86:94:ca:a3:73:ed:1c:3e:cf:00:88:2b:d9:fb:14:a1:a0:16:
74:08:99:9f:dd:9a:c0:d0:66:a2:12:e9:32:24:07:f9:9b:74:
09:44:a6:75:9b:31:4d:5d:54:bd:09:b1:f5:ba:e2:99:57:98:
fd:96:67:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDZ5ZEniDcvYvI0XOeCzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZWFiYTUzZDZkZmJhYjRlOTc2MTIwYzFlMjAyNjhiYmZl
OGEwZTAwHhcNMjUwOTA3MTIwMTM2WhcNMjUwOTA4MTIwMTM2WjAzMTEwLwYDVQQD
EyhmOTJiZGE5OTY2NWY0YjQ3ZjlmYzViZDY1NTcwMzg4NTRlMzlkZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI6mHOnN/MEZlzk8lRysndf2d31G
9ygbD44joHrf7/uvxjGa/buxZKbNU+vaOe0BNcyHNfU1hU+B27w7kTJBMDvaFs+n
pkYWRd61j82uZ/mMmEXnlo2rO69tzEMDJmw3hzkP19JavZzXtdjPMf+FgxJyXxIk
QZP0xhvMBs1jLrkHZXJ8jsVjxRfYn6yzS0opO14jcwW9SRKtASB+aw4XDu2CCBmR
x+WW36VNRfH+mWib2HTw/Zq9VTN6ip1kiw6KqHJEwLIt469/6Kir6ovz8awoV1E9
3adJvWorQwM/sg6mkW1hnL/pHJZCoLkA60UKVNfJJ+k6JYffXHJ9rcluDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkr2plmX0tH+fxb1lVwOIVOOd2/MB8GA1UdIwQY
MBaAFNfqulPW37q06XYSDB4gJou/6KDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85YWZlMzUtMGUzZi00ZDcwLWIxYTQt
MmFlNzkzZGE0NzcwLzEvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85YWZlMzUtMGUzZi00ZDcwLWIxYTQtMmFlNzkzZGE0Nzcw
LzEvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyQkeGl1
ztafGABkrpDqWLP7TZaXSVuRfneQPJFQB28W9LOy5XN4qS9yZsobuRZCtCcjWDhG
ejllrQvYJTqFpChccXpn/hliAZSgRGIU7ABw8Fp50QGZ2BRLmUpHgLMLKZe+tE65
0ycNfmYtPG0INBbiFWJexA1k0hwpeWDSEErC/Ccus16t6il5xRrC8TN+cnl72tPQ
SJIDLhz9alcBI7oo4D1ZxuKBMhkNotnE7XdvJ5JWgfec2mox55N8nUms6MDGCxRv
hpTKo3PtHD7PAIgr2fsUoaAWdAiZn92awNBmohLpMiQH+Zt0CUSmdZsxTV1UvQmx
9brimVeY/ZZn6Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:21 2025 by rpki-client