Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: L+ue31/3DGri5NrG0pEEdWv85uvJIwUCi82WetWb7Kk=
Subject key identifier: E4:31:D3:A8:58:DD:3F:06:54:B2:BE:AD:A7:E0:D8:17:8F:44:80:95
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 01974CD73E6341BEED3836B4587300A0E2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 08E7
Signing time: Sun 08 Jun 2025 00:01:03 +0000
Manifest this update: Sun 08 Jun 2025 00:01:03 +0000
Manifest next update: Mon 09 Jun 2025 00:01:03 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: txFhcnSY8WZWXFoAr4Ir8p1EXyA0Oqq5JHVmLoOb8GM=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:3e:63:41:be:ed:38:36:b4:58:73:00:a0:e2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Jun 8 00:01:03 2025 GMT
Not After : Jun 9 00:01:03 2025 GMT
Subject: CN=e431d3a858dd3f0654b2beada7e0d8178f448095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:f5:35:7a:c4:56:15:87:85:94:32:06:7a:
41:27:75:38:ae:9f:a8:be:f8:d9:ca:4e:57:09:d9:
d3:c7:a0:7d:9a:b7:32:7f:f2:95:95:d8:65:35:27:
df:9d:0e:24:62:16:87:98:8c:75:c2:a2:60:ce:d6:
40:2b:0e:ee:9a:82:9b:9b:93:70:65:42:54:36:ab:
46:3e:31:57:21:b9:f3:8a:88:a3:bd:dd:52:3b:8e:
18:b9:6f:33:b6:23:b3:2c:d2:43:56:9e:2a:50:b1:
ea:e9:d3:87:15:0b:6b:ec:7e:50:b0:e2:a1:95:62:
c1:5b:ad:86:4c:94:1b:05:55:23:69:7a:e1:1c:0d:
0a:d6:c6:43:18:27:d4:11:40:26:fe:e2:78:c0:55:
fe:91:be:e6:d7:67:b8:de:8d:6c:50:1f:15:db:38:
f2:b4:17:5f:c4:3b:95:76:27:d2:4d:55:8f:b3:f0:
2b:b4:e9:ab:02:42:5b:32:6a:85:e3:9a:9a:b6:0c:
4c:74:2d:e5:c8:2a:dd:f8:a5:84:4b:bf:2c:b8:9c:
6b:3c:1d:69:16:6c:66:02:0e:72:e4:88:d2:d8:32:
b9:5b:60:cc:e0:fe:c9:79:8e:f0:7c:b1:97:14:f6:
43:20:3e:36:8a:23:b6:61:df:b4:13:2a:28:9f:a5:
a8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:D3:A8:58:DD:3F:06:54:B2:BE:AD:A7:E0:D8:17:8F:44:80:95
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:16:d6:4f:48:c1:67:a6:a3:0e:37:46:63:f3:29:d7:81:0c:
72:ef:b7:99:ad:9f:66:2c:3b:fe:c5:8c:a9:18:1d:b1:2d:56:
e8:d0:dc:43:0e:a7:1c:c3:5f:24:68:80:db:ab:63:1d:0d:b3:
19:80:46:fb:4a:05:4c:c5:ba:1e:84:16:c1:a4:a5:b2:63:8c:
b8:58:b0:e0:84:59:34:c9:3c:cb:59:52:09:79:6a:1c:01:01:
ca:7c:07:ea:c7:74:a3:de:7d:ac:d0:55:1b:7b:d8:be:50:87:
b9:be:79:ec:7f:da:6f:1e:9d:69:75:a8:9f:bd:9c:6c:eb:3d:
c6:47:fb:84:b4:1c:2d:72:c6:b4:03:aa:37:39:69:24:d5:a0:
38:2c:3f:2c:6b:59:64:4c:1b:63:a3:e8:54:98:ea:f5:7b:ae:
4a:84:6c:76:33:fb:76:d0:8f:d3:41:81:53:9a:be:07:ab:e8:
3b:62:25:14:02:09:27:63:3b:d1:9b:3f:8b:f2:7a:b6:f6:6b:
c9:ff:ef:82:b6:1a:6d:16:5d:ad:49:d3:ae:c1:53:c1:2e:cd:
d9:b6:73:50:dc:78:f6:50:3a:c1:c9:cf:05:82:18:fe:d7:1f:
4f:de:27:07:0d:53:49:59:48:ea:3f:f6:e2:20:f5:c9:bf:c5:
3c:da:96:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1z5jQb7tODa0WHMAoOLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzE0YzFmOWUxMTkzYzIwMjVjYjY3MmI1MjM1NzM5Nzhk
MjU0ZDkwHhcNMjUwNjA4MDAwMTAzWhcNMjUwNjA5MDAwMTAzWjAzMTEwLwYDVQQD
EyhlNDMxZDNhODU4ZGQzZjA2NTRiMmJlYWRhN2UwZDgxNzhmNDQ4MDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqf1NXrEVhWHhZQyBnpBJ3U4rp+o
vvjZyk5XCdnTx6B9mrcyf/KVldhlNSffnQ4kYhaHmIx1wqJgztZAKw7umoKbm5Nw
ZUJUNqtGPjFXIbnzioijvd1SO44YuW8ztiOzLNJDVp4qULHq6dOHFQtr7H5QsOKh
lWLBW62GTJQbBVUjaXrhHA0K1sZDGCfUEUAm/uJ4wFX+kb7m12e43o1sUB8V2zjy
tBdfxDuVdifSTVWPs/ArtOmrAkJbMmqF45qatgxMdC3lyCrd+KWES78suJxrPB1p
FmxmAg5y5IjS2DK5W2DM4P7JeY7wfLGXFPZDID42iiO2Yd+0Eyoon6WozwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQx06hY3T8GVLK+rafg2BePRICVMB8GA1UdIwQY
MBaAFPUxTB+eEZPCAly2crUjVzl40lTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMt
NzM4Yzc0OTJmNzY4LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMtNzM4Yzc0OTJmNzY4
LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRbWT0jB
Z6ajDjdGY/Mp14EMcu+3ma2fZiw7/sWMqRgdsS1W6NDcQw6nHMNfJGiA26tjHQ2z
GYBG+0oFTMW6HoQWwaSlsmOMuFiw4IRZNMk8y1lSCXlqHAEBynwH6sd0o959rNBV
G3vYvlCHub557H/abx6daXWon72cbOs9xkf7hLQcLXLGtAOqNzlpJNWgOCw/LGtZ
ZEwbY6PoVJjq9XuuSoRsdjP7dtCP00GBU5q+B6voO2IlFAIJJ2M70Zs/i/J6tvZr
yf/vgrYabRZdrUnTrsFTwS7N2bZzUNx49lA6wcnPBYIY/tcfT94nBw1TSVlI6j/2
4iD1yb/FPNqWEQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:28:14 2025 by rpki-client