Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: 0487jfZbk/8OEHJruI4gp91c4oCuaLHygZEMQmkkFjc=
Subject key identifier: 08:EE:64:28:44:49:D8:BB:64:C8:8D:2D:D3:04:F2:E4:6A:CE:81:FA
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 019752D9039B90ACC9E8BCC77EE770B8F12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 12BD
Signing time: Mon 09 Jun 2025 04:00:43 +0000
Manifest this update: Mon 09 Jun 2025 04:00:43 +0000
Manifest next update: Tue 10 Jun 2025 04:00:43 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: MIPOKui9CrBBH/2PIuNrMij8RtSva5zGcBC8Ne6V7vs=)
2: VBSMUM2E1eY-HeRIXiGsI4i681A.roa (hash: 9hPqZnbB+hAnaLIqMz7J1BKYjhJ96B3SoRz8LPWNz7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:03:9b:90:ac:c9:e8:bc:c7:7e:e7:70:b8:f1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Jun 9 04:00:43 2025 GMT
Not After : Jun 10 04:00:43 2025 GMT
Subject: CN=08ee64284449d8bb64c88d2dd304f2e46ace81fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:3c:8c:5a:bd:39:e7:8f:56:b7:62:b9:d6:
7b:f4:87:6e:67:aa:fc:c5:25:6d:fc:d4:d7:d1:2d:
b8:97:a2:df:04:07:00:ef:71:e6:41:17:e6:cd:3a:
d5:8a:f8:de:8e:f6:38:ce:43:48:7c:08:fb:be:5e:
fd:17:2e:82:d4:2e:1b:ab:fd:9e:0e:ba:71:a8:cf:
33:4d:cc:0a:85:56:f2:34:54:da:7a:18:38:8d:10:
d8:b7:27:25:49:1e:0c:76:51:26:93:d4:98:47:84:
18:0a:ac:bc:10:7d:ef:73:31:cd:0b:5f:86:57:e8:
73:97:44:14:48:6b:18:73:7e:c1:cd:65:8a:37:37:
a4:86:e1:c9:ea:69:c0:bc:df:70:09:d2:38:57:16:
5b:5a:bf:b0:82:9a:e7:b4:06:2f:64:c6:5b:9f:c6:
30:a2:1c:df:89:9b:2d:51:6a:67:3c:cf:86:eb:1a:
3c:2a:16:a1:5d:b1:02:3a:4d:8e:78:59:2d:ca:6c:
09:87:3e:52:57:5a:87:93:24:f7:48:f8:07:b1:c4:
1a:b8:00:b8:ef:42:db:90:46:70:73:de:fa:43:54:
4c:1d:2f:7c:41:4d:7d:cf:5f:c0:d5:d6:5b:66:e8:
a2:05:3e:4b:48:de:55:2b:0e:66:9c:83:f1:80:af:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EE:64:28:44:49:D8:BB:64:C8:8D:2D:D3:04:F2:E4:6A:CE:81:FA
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fe:a0:85:d7:0b:1d:c8:ef:e7:73:fb:40:3a:5e:ab:eb:36:
73:7c:d6:ee:63:48:15:8a:d4:15:53:a1:6a:70:fa:d5:b9:ce:
21:44:16:35:22:1b:5e:c2:92:c3:6c:c2:37:8e:bf:3f:35:c3:
0b:de:e8:8c:aa:65:ea:96:f1:6f:40:61:84:de:e3:b1:fa:0b:
63:a6:9d:19:20:b1:97:9d:9c:09:5b:39:22:fe:62:00:0f:57:
3b:38:0e:1e:cb:01:af:51:13:5e:4a:79:52:1d:80:9c:17:c7:
33:d5:eb:5c:9a:58:a6:31:d9:08:9f:f1:f2:47:99:f2:8b:c3:
2c:76:5b:0d:21:96:02:34:51:ff:9e:6f:48:fe:f0:52:12:1c:
b0:58:3b:a3:a7:d6:0b:fd:a7:b3:aa:e8:76:83:b9:ff:0f:5a:
b9:67:e9:61:e8:24:e6:f5:62:ae:f8:42:e5:03:b6:c4:f9:55:
c0:e5:20:f1:48:ad:58:84:5f:96:b9:56:cc:c2:0d:23:ab:d6:
79:5e:80:4a:18:cf:6e:e5:41:6c:fe:5d:bc:f9:48:fb:dd:23:
ac:8a:7f:6f:51:7a:35:04:59:66:33:ea:fe:76:8a:85:e8:52:
30:a7:a4:72:06:4a:88:6a:be:71:bc:6c:f6:c7:07:7f:35:89:
3e:65:d3:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdS2QObkKzJ6LzHfudwuPEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDFiOWUyMDYxNmQ2ODZiNDA1ZGE5MDZhZmE1OTc2MzUw
NjM2NDAwHhcNMjUwNjA5MDQwMDQzWhcNMjUwNjEwMDQwMDQzWjAzMTEwLwYDVQQD
EygwOGVlNjQyODQ0NDlkOGJiNjRjODhkMmRkMzA0ZjJlNDZhY2U4MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt848jFq9OeePVrdiudZ79IduZ6r8
xSVt/NTX0S24l6LfBAcA73HmQRfmzTrVivjejvY4zkNIfAj7vl79Fy6C1C4bq/2e
DrpxqM8zTcwKhVbyNFTaehg4jRDYtyclSR4MdlEmk9SYR4QYCqy8EH3vczHNC1+G
V+hzl0QUSGsYc37BzWWKNzekhuHJ6mnAvN9wCdI4VxZbWr+wgprntAYvZMZbn8Yw
ohzfiZstUWpnPM+G6xo8KhahXbECOk2OeFktymwJhz5SV1qHkyT3SPgHscQauAC4
70LbkEZwc976Q1RMHS98QU19z1/A1dZbZuiiBT5LSN5VKw5mnIPxgK/vvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjuZChESdi7ZMiNLdME8uRqzoH6MB8GA1UdIwQY
MBaAFPUBueIGFtaGtAXakGr6WXY1BjZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWIt
NzVkNTg0M2FhNDg5LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWItNzVkNTg0M2FhNDg5
LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArv6ghdcL
Hcjv53P7QDpeq+s2c3zW7mNIFYrUFVOhanD61bnOIUQWNSIbXsKSw2zCN46/PzXD
C97ojKpl6pbxb0BhhN7jsfoLY6adGSCxl52cCVs5Iv5iAA9XOzgOHssBr1ETXkp5
Uh2AnBfHM9XrXJpYpjHZCJ/x8keZ8ovDLHZbDSGWAjRR/55vSP7wUhIcsFg7o6fW
C/2ns6rodoO5/w9auWfpYegk5vVirvhC5QO2xPlVwOUg8UitWIRflrlWzMINI6vW
eV6AShjPbuVBbP5dvPlI+90jrIp/b1F6NQRZZjPq/naKhehSMKekcgZKiGq+cbxs
9scHfzWJPmXTfQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:21:13 2025 by rpki-client