Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: A9iaIoEviJLfFJp409fjzi1kjCrINoW3RSINX1I5p8Q=
Subject key identifier: CF:D8:05:AB:33:CC:84:C0:7C:7A:A4:E9:60:18:E3:C4:15:BE:01:31
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 01974FA0BCE128C1DC9B23CA199BD4DBAE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 13:00:23 +0000
Manifest this update: Sun 08 Jun 2025 13:00:23 +0000
Manifest next update: Mon 09 Jun 2025 13:00:23 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: OpHMMeupX7zGFtFyyAaXK6Ot8tobrbpK0vteICDky3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:bc:e1:28:c1:dc:9b:23:ca:19:9b:d4:db:ae:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Jun 8 13:00:23 2025 GMT
Not After : Jun 9 13:00:23 2025 GMT
Subject: CN=cfd805ab33cc84c07c7aa4e96018e3c415be0131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:8d:1b:44:9e:73:f5:90:99:8c:a7:55:e1:
a4:d7:bf:e3:72:c2:9b:b4:30:e7:61:dd:69:67:da:
74:aa:74:f6:31:eb:0b:6d:65:cc:50:87:33:e1:02:
2f:5b:70:d8:cb:52:82:38:df:09:6b:57:6b:f0:44:
75:f9:ae:3b:66:e9:55:5b:7d:5e:8a:29:c5:25:44:
7b:d1:6a:65:85:73:5d:6b:dc:6f:a6:7c:8b:02:7e:
fb:eb:c1:3b:34:11:41:f1:40:c0:7c:4d:86:0f:7d:
d6:60:30:71:03:fd:a6:e4:49:74:21:e9:6b:17:c4:
e0:b8:74:0c:91:06:5e:b2:59:c9:b5:69:87:f1:1d:
0b:11:82:2d:c5:b0:92:c5:52:58:77:20:01:9c:01:
12:1a:9d:21:3c:19:e1:b8:e3:f8:3f:d7:7d:88:ff:
29:8e:12:09:cc:5c:6b:5c:0d:ba:25:3a:fe:ec:25:
6c:8e:d4:0f:54:01:4b:ab:dd:6e:a0:74:32:74:09:
72:d2:1d:37:ea:bc:54:39:fb:5a:8f:4c:55:94:25:
c9:11:41:26:a1:43:ae:e6:ce:f9:c2:b8:6b:f8:9d:
a4:6a:41:5b:74:8f:97:32:a1:ba:cb:e6:84:ae:3e:
b9:10:25:3c:d4:90:c9:d6:64:55:67:89:7b:5f:3a:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D8:05:AB:33:CC:84:C0:7C:7A:A4:E9:60:18:E3:C4:15:BE:01:31
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:79:c5:8c:21:67:cc:ed:cf:fe:0e:69:fd:14:1c:a7:07:6b:
bd:35:cb:b6:45:8c:11:06:fc:dc:91:c8:6e:98:90:5f:3d:23:
d8:68:c2:a3:bf:ad:01:13:77:f9:09:e5:c0:4b:ea:6d:e4:f0:
54:88:ee:66:2b:7b:5e:9b:f0:d6:32:c1:74:8e:c4:0e:55:78:
89:a2:18:54:28:8a:39:6c:a8:28:a9:d1:f1:da:3f:61:e7:65:
01:bb:7f:c7:64:88:43:49:30:6b:85:58:1b:24:74:35:e0:b0:
4f:98:a0:24:4d:e3:f4:8f:93:b0:75:50:c9:8f:68:cd:87:13:
db:83:c1:b5:a4:a6:5d:06:34:22:af:04:91:7c:fa:e2:21:80:
89:2b:21:ab:31:39:3a:26:af:88:92:b3:ef:8c:e1:c3:cb:e6:
2a:41:db:07:c5:ca:1d:8a:2f:ba:41:c8:24:6e:6b:3b:6d:d3:
5e:f6:a4:2b:30:17:22:45:b8:e3:e7:1d:f2:96:ff:5a:ae:64:
00:a6:ae:47:9c:45:64:9d:a4:49:64:ad:f1:ad:e3:32:64:ae:
11:7e:a0:04:52:73:2b:de:78:95:d8:80:24:4f:46:dc:be:87:
96:fb:2d:3d:85:95:13:a5:0c:b1:bb:c7:a9:b4:55:4d:c9:20:
93:ed:be:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoLzhKMHcmyPKGZvU264PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjQ3NWIwNjRkZThhODlmMTUwM2VhZWZjN2Q3MmFkY2Nm
MzhhMTYwHhcNMjUwNjA4MTMwMDIzWhcNMjUwNjA5MTMwMDIzWjAzMTEwLwYDVQQD
EyhjZmQ4MDVhYjMzY2M4NGMwN2M3YWE0ZTk2MDE4ZTNjNDE1YmUwMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuemNG0Sec/WQmYynVeGk17/jcsKb
tDDnYd1pZ9p0qnT2MesLbWXMUIcz4QIvW3DYy1KCON8Ja1dr8ER1+a47ZulVW31e
iinFJUR70WplhXNda9xvpnyLAn7768E7NBFB8UDAfE2GD33WYDBxA/2m5El0Ielr
F8TguHQMkQZeslnJtWmH8R0LEYItxbCSxVJYdyABnAESGp0hPBnhuOP4P9d9iP8p
jhIJzFxrXA26JTr+7CVsjtQPVAFLq91uoHQydAly0h036rxUOftaj0xVlCXJEUEm
oUOu5s75wrhr+J2kakFbdI+XMqG6y+aErj65ECU81JDJ1mRVZ4l7XzqVXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/YBaszzITAfHqk6WAY48QVvgExMB8GA1UdIwQY
MBaAFPckdbBk3oqJ8VA+rvx9cq3M84oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWIt
MjgzMjBhNWMwNzdiLzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWItMjgzMjBhNWMwNzdi
LzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnnFjCFn
zO3P/g5p/RQcpwdrvTXLtkWMEQb83JHIbpiQXz0j2GjCo7+tARN3+QnlwEvqbeTw
VIjuZit7Xpvw1jLBdI7EDlV4iaIYVCiKOWyoKKnR8do/YedlAbt/x2SIQ0kwa4VY
GyR0NeCwT5igJE3j9I+TsHVQyY9ozYcT24PBtaSmXQY0Iq8EkXz64iGAiSshqzE5
OiaviJKz74zhw8vmKkHbB8XKHYovukHIJG5rO23TXvakKzAXIkW44+cd8pb/Wq5k
AKauR5xFZJ2kSWSt8a3jMmSuEX6gBFJzK954ldiAJE9G3L6HlvstPYWVE6UMsbvH
qbRVTckgk+2+jQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:24 2025 by rpki-client