Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: c4ekw7WGO2Mb9A2Nu2fJAe2DXZuNAPFnUUWiS7oyrpI=
Subject key identifier: 1B:2E:8A:1C:1E:9E:71:D7:38:8A:63:47:40:A5:09:FD:95:A3:17:EA
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 01975046B0A4A0A2114F214E635F33C040B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 027E
Signing time: Sun 08 Jun 2025 16:01:39 +0000
Manifest this update: Sun 08 Jun 2025 16:01:39 +0000
Manifest next update: Mon 09 Jun 2025 16:01:39 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: w5WYudBaGVKWE5Ho6P1VBGQckJ+YNfg2Rrtn2hc8Tpk=)
2: OHGF750j4DJGNc1Oe80dc-FWYaY.roa (hash: h+xssOn739NLfAUDZmv5GlRt0V3PO+xTJdzfH9zAWE8=)
3: _HF2gqhC9uCDDnAOpKs3WUfmbDo.roa (hash: QhESuMW1F4EzEaEsL+0TS0hEypm5aO6tHQYl52gTh58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:b0:a4:a0:a2:11:4f:21:4e:63:5f:33:c0:40:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Jun 8 16:01:39 2025 GMT
Not After : Jun 9 16:01:39 2025 GMT
Subject: CN=1b2e8a1c1e9e71d7388a634740a509fd95a317ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d6:b1:99:08:e3:56:78:89:57:41:60:39:1e:
5c:80:82:5f:fc:f1:8d:e7:8a:5b:d2:20:a1:74:8c:
ee:0e:e4:a4:90:85:74:89:2f:3a:e0:ad:9b:61:1a:
11:2d:93:16:08:a1:e7:9e:f6:65:bb:14:d2:ff:5f:
7f:f2:76:9d:28:41:fa:5a:f4:9c:20:c6:fd:b6:c7:
1f:ad:06:74:67:e6:44:3d:74:01:e5:df:97:94:8b:
73:7c:26:1e:f1:7a:81:9b:48:68:d2:e5:ad:a1:b5:
0a:46:22:75:3a:50:2a:cd:ef:ce:c9:a3:7d:1c:81:
f7:9d:21:cb:b4:f1:bb:a1:46:01:42:b6:63:e3:c9:
66:ac:5d:ed:6a:e8:76:67:97:60:d1:8f:10:15:83:
26:5e:fa:ed:6d:b8:78:49:e0:91:cc:1b:56:8c:2c:
f0:49:cb:92:b2:bb:8d:25:54:5a:4d:41:b8:74:3b:
14:ca:b1:42:07:94:d5:5a:7f:c0:3d:4b:b7:bc:65:
ef:01:20:5f:ad:04:ba:2b:7a:a9:27:5a:ef:f4:c3:
54:32:e1:75:ed:3b:e6:96:c5:0b:8e:9e:d2:a9:0c:
04:3b:46:7c:71:9a:d1:72:4d:10:ac:90:2f:0f:64:
bc:10:86:a3:dc:ae:60:2a:f6:4d:92:83:05:f1:a1:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:8A:1C:1E:9E:71:D7:38:8A:63:47:40:A5:09:FD:95:A3:17:EA
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:eb:51:e7:04:cd:e4:a5:c8:5c:97:c5:94:d4:6b:31:0c:e4:
39:24:d6:43:d9:15:f6:a9:c5:08:56:ee:0f:34:3d:6f:2c:fe:
54:31:ff:ea:b7:5b:4d:67:d6:39:63:a1:05:e0:dd:ab:67:3c:
52:8a:9f:c7:ae:42:0f:d0:96:80:72:ae:04:66:a9:22:33:e5:
a0:11:58:ae:82:e8:88:85:76:07:6a:d2:a6:0d:5f:80:ce:c4:
c2:8c:87:9c:f9:70:44:ed:81:3c:7c:26:b7:7b:7e:5a:e3:80:
3d:cd:23:36:04:d4:fa:9e:d9:06:b4:e2:2b:03:4c:1f:8b:27:
b7:38:98:53:72:fb:f2:53:ab:70:82:2b:1e:c0:2a:c4:d4:69:
0f:84:71:1e:79:07:84:13:4d:6c:09:3f:0e:a5:92:42:7b:b3:
60:0c:d8:3c:0d:33:40:4a:5d:0c:a4:77:d7:fb:6e:a9:a6:d9:
af:2d:03:2b:09:f1:2a:a7:5f:3a:80:dc:e6:30:81:1f:aa:3a:
78:4c:78:bb:19:4c:4a:75:36:f5:05:85:0d:85:4b:f1:39:ba:
c5:d0:02:b3:04:a5:b4:e0:49:27:7b:0b:ab:23:8b:77:42:15:
5f:71:a2:73:c8:4d:02:8e:f9:23:dd:eb:f6:48:7c:86:ce:c0:
24:a1:e5:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRrCkoKIRTyFOY18zwECzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MWM3ZDQ3NzE4YThhNGE5ZDhjNTBiMjYwODNlNzE4NTI1
YjZjMWIwHhcNMjUwNjA4MTYwMTM5WhcNMjUwNjA5MTYwMTM5WjAzMTEwLwYDVQQD
EygxYjJlOGExYzFlOWU3MWQ3Mzg4YTYzNDc0MGE1MDlmZDk1YTMxN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidaxmQjjVniJV0FgOR5cgIJf/PGN
54pb0iChdIzuDuSkkIV0iS864K2bYRoRLZMWCKHnnvZluxTS/19/8nadKEH6WvSc
IMb9tscfrQZ0Z+ZEPXQB5d+XlItzfCYe8XqBm0ho0uWtobUKRiJ1OlAqze/OyaN9
HIH3nSHLtPG7oUYBQrZj48lmrF3tauh2Z5dg0Y8QFYMmXvrtbbh4SeCRzBtWjCzw
ScuSsruNJVRaTUG4dDsUyrFCB5TVWn/APUu3vGXvASBfrQS6K3qpJ1rv9MNUMuF1
7TvmlsULjp7SqQwEO0Z8cZrRck0QrJAvD2S8EIaj3K5gKvZNkoMF8aGUWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsuihwennHXOIpjR0ClCf2VoxfqMB8GA1UdIwQY
MBaAFPQcfUdxiopKnYxQsmCD5xhSW2wbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUt
NjBiMmM5ODIxMDc4LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUtNjBiMmM5ODIxMDc4
LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+tR5wTN
5KXIXJfFlNRrMQzkOSTWQ9kV9qnFCFbuDzQ9byz+VDH/6rdbTWfWOWOhBeDdq2c8
Uoqfx65CD9CWgHKuBGapIjPloBFYroLoiIV2B2rSpg1fgM7EwoyHnPlwRO2BPHwm
t3t+WuOAPc0jNgTU+p7ZBrTiKwNMH4sntziYU3L78lOrcIIrHsAqxNRpD4RxHnkH
hBNNbAk/DqWSQnuzYAzYPA0zQEpdDKR31/tuqabZry0DKwnxKqdfOoDc5jCBH6o6
eEx4uxlMSnU29QWFDYVL8Tm6xdACswSltOBJJ3sLqyOLd0IVX3Gic8hNAo75I93r
9kh8hs7AJKHlAA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:46:27 2025 by rpki-client