Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: ExE7PcET2m0mYBHFzGJF9t9939kYhJl9+OjSY2LskJw=
Subject key identifier: 10:B7:4D:72:8C:2F:2A:2D:73:10:16:5C:C8:C9:8A:B2:C2:2B:6A:1B
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 0197499F592470B4051EE121856FD6A65A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 07A0
Signing time: Sat 07 Jun 2025 09:01:09 +0000
Manifest this update: Sat 07 Jun 2025 09:01:09 +0000
Manifest next update: Sun 08 Jun 2025 09:01:09 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: 9RSYVfF5Nbog9X+HmCA125q1EQbsdXRs8jthCgvyadA=)
2: Re-MnmstUpcAurL3wCFgIhLu13s.roa (hash: vb/Pgmd/HetEo03wgkmW9gqUHrd1AuiVR8CC1XhD05w=)
3: Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa (hash: 0c/Q4ud2dbzbznUS25t1/df9lnnZpZNmLVMc8gJSoDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:59:24:70:b4:05:1e:e1:21:85:6f:d6:a6:5a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Jun 7 09:01:09 2025 GMT
Not After : Jun 8 09:01:09 2025 GMT
Subject: CN=10b74d728c2f2a2d7310165cc8c98ab2c22b6a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:19:da:4d:64:79:a6:78:6b:3a:d6:c2:12:
23:9b:69:a7:01:ec:ae:08:00:a9:12:35:24:76:b5:
a0:33:32:98:06:35:19:fb:5e:7d:38:49:e3:80:99:
e3:3c:8e:24:9a:ae:8d:ca:41:e7:b3:a1:28:1c:15:
b6:fd:b0:49:db:02:f4:de:d6:ef:f5:53:68:44:27:
bf:ca:63:02:d1:b1:bd:16:57:ea:40:5d:78:0b:93:
39:d6:43:f3:d1:96:97:e1:29:5b:21:a1:0c:99:80:
bb:31:a7:e3:6b:03:84:0e:63:06:43:f7:7e:47:a7:
c1:fd:10:cb:77:d2:82:f1:f8:27:ae:62:3d:85:33:
c5:c3:c1:2a:ae:09:37:c0:1d:9d:37:94:08:6a:47:
59:0d:10:b4:ea:4c:57:70:6c:da:25:cd:2b:da:b6:
c0:88:36:e1:61:78:e7:da:56:c2:af:7d:77:18:1f:
d6:6e:02:a5:bc:21:cb:6a:8a:38:be:08:d8:5f:16:
18:42:16:20:55:35:7c:55:09:b0:7e:46:9a:38:95:
6f:ad:e5:b8:3f:bc:53:a7:19:22:96:d7:4a:45:67:
f0:26:d0:38:53:8e:ea:35:48:9b:3f:6c:45:9e:32:
23:99:34:ee:5a:b3:37:97:6c:e2:e7:a2:da:08:22:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B7:4D:72:8C:2F:2A:2D:73:10:16:5C:C8:C9:8A:B2:C2:2B:6A:1B
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:34:65:8a:0c:e1:ab:c8:ca:6c:64:bd:f0:e9:4e:e4:a9:98:
10:28:b6:94:2f:db:59:8b:d7:f2:03:b3:1d:dd:a4:04:04:01:
f7:48:01:c1:6e:10:12:3c:02:34:bd:b5:11:4a:0b:71:ac:66:
b9:cb:fc:f6:9a:61:78:86:3c:85:61:1f:f2:34:2f:18:49:df:
4b:92:67:e2:c8:56:a1:3d:44:42:21:79:44:e5:c9:41:f5:0a:
1e:0b:0a:32:46:41:2b:c6:d2:0c:5e:0e:de:5e:bf:5c:bf:7c:
17:3d:08:21:29:ee:d0:4d:0f:d0:d8:35:9a:91:50:87:29:7b:
ec:86:e3:98:8a:d2:40:4d:66:45:f4:9f:9d:a5:58:ac:20:0a:
66:99:56:ba:6f:7c:29:54:d9:9c:46:00:42:01:de:07:76:42:
f3:6a:e6:12:f3:24:8e:37:39:77:09:5e:16:33:9a:b2:83:28:
fa:1c:4d:cd:0d:e0:34:f5:14:ca:f6:d9:5d:cc:b2:a9:89:49:
fa:b2:fb:7d:db:41:29:63:26:c9:3f:a6:8c:e9:d8:7b:79:62:
ed:2f:97:ca:e6:9d:b8:70:1d:5f:10:f1:58:d8:b2:7a:04:ed:
e8:b2:55:82:ad:38:38:e6:b9:04:aa:eb:f2:1c:77:8b:ad:2c:
52:4a:79:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1kkcLQFHuEhhW/WploRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmFjZTc4ZmM5MDI3OGQ4MmYxZTg2NjhhOGExOWVlOTk4
MmNkYzMwHhcNMjUwNjA3MDkwMTA5WhcNMjUwNjA4MDkwMTA5WjAzMTEwLwYDVQQD
EygxMGI3NGQ3MjhjMmYyYTJkNzMxMDE2NWNjOGM5OGFiMmMyMmI2YTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoYZ2k1keaZ4azrWwhIjm2mnAeyu
CACpEjUkdrWgMzKYBjUZ+159OEnjgJnjPI4kmq6NykHns6EoHBW2/bBJ2wL03tbv
9VNoRCe/ymMC0bG9FlfqQF14C5M51kPz0ZaX4SlbIaEMmYC7MafjawOEDmMGQ/d+
R6fB/RDLd9KC8fgnrmI9hTPFw8Eqrgk3wB2dN5QIakdZDRC06kxXcGzaJc0r2rbA
iDbhYXjn2lbCr313GB/WbgKlvCHLaoo4vgjYXxYYQhYgVTV8VQmwfkaaOJVvreW4
P7xTpxkiltdKRWfwJtA4U47qNUibP2xFnjIjmTTuWrM3l2zi56LaCCI3jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBC3TXKMLyotcxAWXMjJirLCK2obMB8GA1UdIwQY
MBaAFPa6znj8kCeNgvHoZoqKGe6Zgs3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjkt
ZjZkZDNiNTE2MWY1LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjktZjZkZDNiNTE2MWY1
LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDRligzh
q8jKbGS98OlO5KmYECi2lC/bWYvX8gOzHd2kBAQB90gBwW4QEjwCNL21EUoLcaxm
ucv89ppheIY8hWEf8jQvGEnfS5Jn4shWoT1EQiF5ROXJQfUKHgsKMkZBK8bSDF4O
3l6/XL98Fz0IISnu0E0P0Ng1mpFQhyl77IbjmIrSQE1mRfSfnaVYrCAKZplWum98
KVTZnEYAQgHeB3ZC82rmEvMkjjc5dwleFjOasoMo+hxNzQ3gNPUUyvbZXcyyqYlJ
+rL7fdtBKWMmyT+mjOnYe3li7S+XyuaduHAdXxDxWNiyegTt6LJVgq04OOa5BKrr
8hx3i60sUkp5eQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:37:03 2025 by rpki-client