Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
File: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft (raw, json)
Hash identifier: Ys76Q98Pm1OuNC8ofxjciQuZRDknD6LJzGaXyv/Nezs=
Subject key identifier: BC:6F:E0:D4:CF:84:7C:F7:FC:18:6A:E1:4C:58:2E:FC:C5:1F:65:B5
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Certificate issuer: /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial: 01974C9FC6D7CFF5F4BCAA59E2C2D76447DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
Manifest number: 0CFB
Signing time: Sat 07 Jun 2025 23:00:28 +0000
Manifest this update: Sat 07 Jun 2025 23:00:28 +0000
Manifest next update: Sun 08 Jun 2025 23:00:28 +0000
Files and hashes: 1: DaccjHojB95-TCoADZK32YMFyKo.roa (hash: ihqtrBhocSRh86RahK6DG9qn8vgDTCS7AhN7/gul0Fs=)
2: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl (hash: 0U2PeZDa1XAJInhivUFZOBDHda0N65l0G1w/sKQtaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:c6:d7:cf:f5:f4:bc:aa:59:e2:c2:d7:64:47:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Validity
Not Before: Jun 7 23:00:28 2025 GMT
Not After : Jun 8 23:00:28 2025 GMT
Subject: CN=bc6fe0d4cf847cf7fc186ae14c582efcc51f65b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:59:4e:c4:68:95:30:2c:aa:06:41:5a:df:a2:
0e:b4:c1:4a:ef:9d:32:3a:9e:d0:b8:41:ff:0e:45:
bd:17:b2:d0:ae:19:23:b3:2b:d5:96:0a:c0:39:99:
3a:61:ce:a6:78:50:9f:05:49:70:40:ab:96:17:8f:
fa:02:94:54:bf:34:d4:06:e5:75:4a:d5:2f:27:26:
56:3d:48:f9:12:02:ca:b0:3e:8a:cc:b4:9a:d5:c1:
bf:63:e2:ee:ba:69:34:cf:6d:69:08:ff:bb:b7:17:
9f:3e:22:3c:5c:29:43:d4:1c:29:39:01:db:68:0e:
c7:08:ba:b3:61:7d:6b:91:f1:3d:43:84:43:ea:d7:
5c:51:a2:e5:0f:c9:24:bb:93:34:c3:02:6a:6a:fb:
12:1e:c7:b4:ff:af:8d:47:74:17:df:8b:c8:3c:50:
e0:a3:63:b4:73:27:6c:d2:18:62:4b:46:85:65:d0:
ad:62:03:aa:ab:a6:46:fa:a7:b6:5d:56:ab:1e:de:
d8:90:0f:85:87:98:a8:47:c7:f9:4a:8a:f3:3c:f9:
80:13:f4:ad:47:92:85:eb:0f:2d:20:39:b4:96:ab:
d7:df:d3:02:20:76:05:a7:c5:4f:b8:ac:26:46:e5:
df:9e:a9:7f:78:b2:01:dd:f5:83:1f:65:2b:dd:49:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:E0:D4:CF:84:7C:F7:FC:18:6A:E1:4C:58:2E:FC:C5:1F:65:B5
X509v3 Authority Key Identifier:
keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5a:9b:ae:70:87:6a:be:2a:6a:03:a1:5d:2b:37:42:37:6a:
6c:13:28:2b:42:b0:82:0b:4d:7c:b0:14:96:c8:c8:fc:ae:4a:
e8:d6:e1:06:68:ec:3c:ee:49:03:5f:83:16:04:7c:f7:79:8d:
48:da:9d:c5:22:b0:26:b0:d6:0d:12:ff:b1:3f:17:30:f1:2b:
69:96:45:85:d8:fb:90:d0:dc:7b:ba:85:22:a5:7b:08:c9:a9:
f7:69:72:cc:8b:f8:e2:6d:64:07:8b:02:7b:1a:83:df:96:65:
d9:12:7b:0a:62:fb:11:2f:3d:cf:da:82:2d:7c:46:32:23:7b:
f4:f2:83:b8:3d:64:84:db:27:6e:ba:c3:c5:f0:89:52:4f:a1:
30:ef:34:d3:c3:e6:77:c0:77:b2:5f:da:18:4b:cf:16:7c:40:
29:6e:76:e7:04:0d:a2:49:47:04:e7:a5:6b:61:15:13:4c:99:
65:35:9c:02:e2:b4:f6:db:fa:42:aa:35:57:96:99:8b:0c:fb:
d7:47:d8:34:00:1f:a3:cd:7b:4a:e0:a1:28:2c:0c:31:16:55:
c8:46:ed:a8:cb:81:e2:ae:d8:6d:81:dc:94:97:6f:46:9c:5f:
2e:75:8d:52:ce:f2:1a:9a:d9:6c:73:1a:f8:7f:82:02:cb:26:
f6:c5:7d:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn8bXz/X0vKpZ4sLXZEffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZGZjZjA5ODI0ODY4NjliNzFkYmRiN2NjNjEzYzRiMzgx
MzY3YzQwHhcNMjUwNjA3MjMwMDI4WhcNMjUwNjA4MjMwMDI4WjAzMTEwLwYDVQQD
EyhiYzZmZTBkNGNmODQ3Y2Y3ZmMxODZhZTE0YzU4MmVmY2M1MWY2NWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FlOxGiVMCyqBkFa36IOtMFK750y
Op7QuEH/DkW9F7LQrhkjsyvVlgrAOZk6Yc6meFCfBUlwQKuWF4/6ApRUvzTUBuV1
StUvJyZWPUj5EgLKsD6KzLSa1cG/Y+Luumk0z21pCP+7txefPiI8XClD1BwpOQHb
aA7HCLqzYX1rkfE9Q4RD6tdcUaLlD8kku5M0wwJqavsSHse0/6+NR3QX34vIPFDg
o2O0cyds0hhiS0aFZdCtYgOqq6ZG+qe2XVarHt7YkA+Fh5ioR8f5SorzPPmAE/St
R5KF6w8tIDm0lqvX39MCIHYFp8VPuKwmRuXfnql/eLIB3fWDH2Ur3UnKOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxv4NTPhHz3/Bhq4UxYLvzFH2W1MB8GA1UdIwQY
MBaAFHffzwmCSGhptx29t8xhPEs4E2fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDlfUENZSklhR20zSGIyM3pHRThTemdUWjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83YmFiOTctNDhhMy00YWU3LWExNTEt
MTUxYmYzNGY0NjhiLzEvZDlfUENZSklhR20zSGIyM3pHRThTemdUWjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83YmFiOTctNDhhMy00YWU3LWExNTEtMTUxYmYzNGY0Njhi
LzEvZDlfUENZSklhR20zSGIyM3pHRThTemdUWjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1qbrnCH
ar4qagOhXSs3QjdqbBMoK0KwggtNfLAUlsjI/K5K6NbhBmjsPO5JA1+DFgR893mN
SNqdxSKwJrDWDRL/sT8XMPEraZZFhdj7kNDce7qFIqV7CMmp92lyzIv44m1kB4sC
exqD35Zl2RJ7CmL7ES89z9qCLXxGMiN79PKDuD1khNsnbrrDxfCJUk+hMO8008Pm
d8B3sl/aGEvPFnxAKW525wQNoklHBOela2EVE0yZZTWcAuK09tv6Qqo1V5aZiwz7
10fYNAAfo817SuChKCwMMRZVyEbtqMuB4q7YbYHclJdvRpxfLnWNUs7yGprZbHMa
+H+CAssm9sV9FQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:48:30 2025 by rpki-client