Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
File: p9nJ2x4fiGAXe__cWPDvzZm5as4.mft (raw, json)
Hash identifier: Yb/TX2riGMqhZr1YKadghRof8yjJHet/WUk8T8ATQQI=
Subject key identifier: 14:D6:15:76:CB:FE:07:68:F2:25:CA:16:5A:DF:DB:DC:33:49:0B:64
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Certificate issuer: /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial: 019931FF94D547DE1C1B55B4288EF7D517EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
Manifest number: 0E52
Signing time: Wed 10 Sep 2025 05:00:57 +0000
Manifest this update: Wed 10 Sep 2025 05:00:57 +0000
Manifest next update: Thu 11 Sep 2025 05:00:57 +0000
Files and hashes: 1: lC2KQAOisVOwxCnTUOf6nl08y8o.roa (hash: /DfGXFX3mvJ80lD2tCLD0oWxnch4EP1FqZDjENG9stE=)
2: p9nJ2x4fiGAXe__cWPDvzZm5as4.crl (hash: 63eN76kkHMkNmOI4L+VktbgWWrMgKp9zzYQv9a70zFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:94:d5:47:de:1c:1b:55:b4:28:8e:f7:d5:17:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Validity
Not Before: Sep 10 05:00:57 2025 GMT
Not After : Sep 11 05:00:57 2025 GMT
Subject: CN=14d61576cbfe0768f225ca165adfdbdc33490b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:4c:8e:f2:02:00:14:13:50:ea:ba:c3:1b:
e0:27:e5:ab:40:b2:34:ba:51:30:64:04:db:db:fd:
d1:86:af:31:dc:80:3a:a7:49:13:bc:0b:64:c2:cc:
cc:af:4b:59:68:fc:8b:55:55:ff:ba:cb:56:d5:1e:
fd:cb:26:27:19:39:80:68:38:7a:22:b8:4d:fb:48:
84:10:35:72:aa:4c:50:6a:8b:4e:f6:97:32:37:c0:
cd:a1:e4:d6:33:b7:21:6c:84:7d:f9:d5:3b:f6:42:
c9:85:b8:81:c7:c8:be:8e:49:1a:09:de:7a:2b:ed:
43:e6:96:e4:29:f0:74:c0:46:e0:04:d7:cd:66:a2:
c4:38:31:d5:76:6e:fe:07:60:b4:4a:d2:4f:b6:7f:
f0:bb:20:66:a0:c6:66:d9:13:51:c9:59:60:53:c2:
a1:79:50:c3:47:2a:73:21:b1:a6:e9:50:f1:32:c0:
3a:bb:f5:b2:94:56:5a:0c:a5:6d:fa:10:62:50:e3:
9a:29:49:b3:e1:a2:c7:45:53:15:b9:be:c8:59:15:
ef:77:80:8a:92:af:d0:c8:b5:cd:0e:89:2c:62:4a:
e1:8e:c2:19:76:eb:f9:8a:34:31:89:ce:5a:7b:ca:
56:2a:55:c4:4b:4f:66:73:a8:5e:f8:b2:86:e1:b4:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D6:15:76:CB:FE:07:68:F2:25:CA:16:5A:DF:DB:DC:33:49:0B:64
X509v3 Authority Key Identifier:
keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:81:4e:a0:07:f5:f3:09:87:ae:8b:49:b5:49:7b:63:94:dd:
6f:b9:1d:6e:c5:63:ef:74:69:dd:8b:85:b9:42:a3:7c:7a:08:
5a:c9:c9:60:c7:b6:ca:61:49:29:45:d9:b9:40:9c:7a:96:6f:
45:a4:30:ec:c5:df:25:82:cf:df:88:40:32:d2:53:f1:a8:6e:
94:c3:1a:63:af:f4:3a:89:90:88:e1:70:1b:85:4c:cd:22:fd:
60:48:d2:68:5b:7c:71:46:d6:ed:c7:ed:ee:91:46:42:c5:7f:
88:cb:89:86:ae:3a:01:11:f4:48:1c:aa:3f:14:9b:82:ef:b6:
44:9e:f4:02:0c:78:0d:af:f9:32:c5:a5:27:5c:12:e7:cb:f4:
ca:09:47:43:2d:4b:99:32:d3:f4:73:2c:7b:05:97:b2:f9:7b:
f8:f7:d6:d5:f6:b8:49:55:04:95:f9:27:52:d3:3f:42:30:22:
36:0d:16:36:e2:bc:2b:d5:23:4a:6b:fa:0b:a7:8e:4f:7c:66:
4f:7e:b1:84:07:37:57:f2:b0:33:ce:c1:aa:2a:97:dc:1a:fe:
87:5d:9e:c3:95:50:c9:ac:09:f8:24:f1:02:44:d0:ea:06:1b:
13:6c:18:2f:1f:e5:6c:49:00:ce:a6:34:af:8a:fc:6f:0a:b4:
3e:a1:4f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkx/5TVR94cG1W0KI731RfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDljOWRiMWUxZjg4NjAxNzdiZmZkYzU4ZjBlZmNkOTli
OTZhY2UwHhcNMjUwOTEwMDUwMDU3WhcNMjUwOTExMDUwMDU3WjAzMTEwLwYDVQQD
EygxNGQ2MTU3NmNiZmUwNzY4ZjIyNWNhMTY1YWRmZGJkYzMzNDkwYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbhMjvICABQTUOq6wxvgJ+WrQLI0
ulEwZATb2/3Rhq8x3IA6p0kTvAtkwszMr0tZaPyLVVX/ustW1R79yyYnGTmAaDh6
IrhN+0iEEDVyqkxQaotO9pcyN8DNoeTWM7chbIR9+dU79kLJhbiBx8i+jkkaCd56
K+1D5pbkKfB0wEbgBNfNZqLEODHVdm7+B2C0StJPtn/wuyBmoMZm2RNRyVlgU8Kh
eVDDRypzIbGm6VDxMsA6u/WylFZaDKVt+hBiUOOaKUmz4aLHRVMVub7IWRXvd4CK
kq/QyLXNDoksYkrhjsIZduv5ijQxic5ae8pWKlXES09mc6he+LKG4bRTWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTWFXbL/gdo8iXKFlrf29wzSQtkMB8GA1UdIwQY
MBaAFKfZydseH4hgF3v/3Fjw782ZuWrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDluSjJ4NGZpR0FYZV9fY1dQRHZ6Wm01YXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZmZjZDYtODNlMi00YzU5LWIwYzYt
YjdkYWE2NDc4MDliLzEvcDluSjJ4NGZpR0FYZV9fY1dQRHZ6Wm01YXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZmZjZDYtODNlMi00YzU5LWIwYzYtYjdkYWE2NDc4MDli
LzEvcDluSjJ4NGZpR0FYZV9fY1dQRHZ6Wm01YXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4FOoAf1
8wmHrotJtUl7Y5Tdb7kdbsVj73Rp3YuFuUKjfHoIWsnJYMe2ymFJKUXZuUCcepZv
RaQw7MXfJYLP34hAMtJT8ahulMMaY6/0OomQiOFwG4VMzSL9YEjSaFt8cUbW7cft
7pFGQsV/iMuJhq46ARH0SByqPxSbgu+2RJ70Agx4Da/5MsWlJ1wS58v0yglHQy1L
mTLT9HMsewWXsvl7+PfW1fa4SVUElfknUtM/QjAiNg0WNuK8K9UjSmv6C6eOT3xm
T36xhAc3V/KwM87BqiqX3Br+h12ew5VQyawJ+CTxAkTQ6gYbE2wYLx/lbEkAzqY0
r4r8bwq0PqFPhg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:12:07 2025 by rpki-client