Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: fY4yjcKiGwVQSWhIHCKPe4/JwEQynppdOT6rygVmuTU=
Subject key identifier: 4F:A0:9C:05:04:10:82:38:A0:11:32:B8:67:16:D5:02:CD:2D:AB:4A
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 01974AE8AD215672D7723AC38FBD0A411B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 07D0
Signing time: Sat 07 Jun 2025 15:00:51 +0000
Manifest this update: Sat 07 Jun 2025 15:00:51 +0000
Manifest next update: Sun 08 Jun 2025 15:00:51 +0000
Files and hashes: 1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: fz/SJ5g705IlsTaw6ba+ir1pmdaVfenvd8sG782cauM=)
3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:ad:21:56:72:d7:72:3a:c3:8f:bd:0a:41:1b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Jun 7 15:00:51 2025 GMT
Not After : Jun 8 15:00:51 2025 GMT
Subject: CN=4fa09c0504108238a01132b86716d502cd2dab4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:26:ed:d8:b3:52:31:80:05:8c:1b:1e:af:92:
25:03:9c:63:e3:dc:98:1c:29:06:a0:fd:ff:05:76:
df:8e:84:03:31:a9:62:70:f2:e9:dc:d5:a2:9e:8d:
ce:76:aa:8f:af:a8:ab:c9:c3:cb:67:b6:77:df:8b:
05:0d:be:aa:a8:a4:91:b9:06:8b:01:44:c6:b5:48:
25:40:94:e5:ce:bb:d7:f2:b1:1b:f5:9c:a5:56:42:
dd:f7:e1:0d:df:b8:e7:f4:33:9f:74:b7:f1:d9:ca:
83:d8:43:63:f0:78:f9:55:d3:08:bb:7a:d8:1f:ed:
0a:56:01:49:55:43:93:c8:79:f8:d5:8c:f4:5c:f5:
51:e2:e1:ef:96:9d:3a:b4:84:4b:68:c8:3f:cd:0a:
6d:e0:60:4b:0a:48:92:9f:8e:90:a1:54:20:78:db:
f5:3f:d1:67:c5:a2:83:e6:38:9c:94:84:b8:ee:fd:
09:21:3c:fe:d0:3b:8f:f4:73:bb:d7:ba:ed:11:04:
3f:6b:27:2a:7c:a8:bd:9b:d0:a5:e8:1a:87:d0:b1:
2f:18:33:12:f1:50:19:25:fd:19:7f:6d:c9:1c:c5:
06:62:67:2b:26:e4:0c:27:02:72:61:01:03:8d:34:
6d:be:3c:34:ab:45:50:60:a1:51:a9:61:8a:3b:62:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:9C:05:04:10:82:38:A0:11:32:B8:67:16:D5:02:CD:2D:AB:4A
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ce:e4:38:78:eb:dc:84:42:5a:7e:f7:53:de:88:4c:b5:77:
b0:93:2d:f2:05:ec:53:47:7f:7e:d9:c9:2a:64:c5:cb:d3:67:
61:4f:1d:39:7d:19:71:b7:3d:c2:41:1a:bd:ea:b5:62:f4:02:
4f:da:94:05:a7:98:19:91:1e:79:c0:7d:22:d0:43:85:5e:40:
08:2d:a5:29:60:56:09:60:37:0b:15:36:da:84:ac:d2:c4:6a:
59:d4:fd:b6:df:92:ac:ff:92:9a:31:e4:9b:0f:aa:d7:b3:9c:
1f:84:9d:e6:d5:8c:2d:8a:59:f5:86:a9:a5:6b:c1:52:c3:a5:
6f:8a:32:f7:67:3f:46:59:09:47:20:2b:98:47:40:a6:40:4a:
42:47:66:23:37:f2:df:8b:9e:7c:b6:15:79:97:88:27:5b:f4:
17:95:bc:8a:e1:74:54:f4:f9:a4:b5:96:1b:01:f4:be:5d:87:
c6:56:33:b6:7c:1c:a9:5e:f1:e0:59:01:a6:e6:db:76:26:02:
dd:32:ed:bd:1e:01:ac:88:97:20:a5:5e:fe:ab:83:0f:e1:b1:
e5:46:83:3a:03:cc:49:0c:e7:3f:de:61:b0:7e:95:30:c2:81:
b2:4f:7d:cb:1a:39:61:d9:67:77:53:ec:82:25:79:24:9d:b0:
f9:f1:dd:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6K0hVnLXcjrDj70KQRtyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE1NTU0OGVjOWFiZTExZWYzYmU3MDYwNmE0Yjk4N2Vh
ZTM4MjUwHhcNMjUwNjA3MTUwMDUxWhcNMjUwNjA4MTUwMDUxWjAzMTEwLwYDVQQD
Eyg0ZmEwOWMwNTA0MTA4MjM4YTAxMTMyYjg2NzE2ZDUwMmNkMmRhYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhybt2LNSMYAFjBser5IlA5xj49yY
HCkGoP3/BXbfjoQDMalicPLp3NWino3OdqqPr6irycPLZ7Z334sFDb6qqKSRuQaL
AUTGtUglQJTlzrvX8rEb9ZylVkLd9+EN37jn9DOfdLfx2cqD2ENj8Hj5VdMIu3rY
H+0KVgFJVUOTyHn41Yz0XPVR4uHvlp06tIRLaMg/zQpt4GBLCkiSn46QoVQgeNv1
P9FnxaKD5jiclIS47v0JITz+0DuP9HO717rtEQQ/aycqfKi9m9Cl6BqH0LEvGDMS
8VAZJf0Zf23JHMUGYmcrJuQMJwJyYQEDjTRtvjw0q0VQYKFRqWGKO2KVkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+gnAUEEII4oBEyuGcW1QLNLatKMB8GA1UdIwQY
MBaAFPThVVSOyavhHvO+cGBqS5h+rjglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMt
YzlmMTZlODBiM2M0LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMtYzlmMTZlODBiM2M0
LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ87kOHjr
3IRCWn73U96ITLV3sJMt8gXsU0d/ftnJKmTFy9NnYU8dOX0Zcbc9wkEaveq1YvQC
T9qUBaeYGZEeecB9ItBDhV5ACC2lKWBWCWA3CxU22oSs0sRqWdT9tt+SrP+SmjHk
mw+q17OcH4Sd5tWMLYpZ9YappWvBUsOlb4oy92c/RlkJRyArmEdApkBKQkdmIzfy
34uefLYVeZeIJ1v0F5W8iuF0VPT5pLWWGwH0vl2HxlYztnwcqV7x4FkBpubbdiYC
3TLtvR4BrIiXIKVe/quDD+Gx5UaDOgPMSQznP95hsH6VMMKBsk99yxo5Ydlnd1Ps
giV5JJ2w+fHdRA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:05 2025 by rpki-client