Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: 040X5uxWqiP9jKC5Y1ZdOuB0CEcZEpBCoSyAIxqgGjQ=
Subject key identifier: E4:D9:29:AA:F6:1E:2F:CA:EA:0C:92:A9:6B:F3:D1:62:E2:B2:21:AA
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 019923A0D177C6D7556025AF39134940643B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 11E1
Signing time: Sun 07 Sep 2025 10:02:45 +0000
Manifest this update: Sun 07 Sep 2025 10:02:45 +0000
Manifest next update: Mon 08 Sep 2025 10:02:45 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: U/TRipdQ0nWT5lh/2QyaTEGBALU1p0bQypyVVgl6f+M=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d1:77:c6:d7:55:60:25:af:39:13:49:40:64:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Sep 7 10:02:45 2025 GMT
Not After : Sep 8 10:02:45 2025 GMT
Subject: CN=e4d929aaf61e2fcaea0c92a96bf3d162e2b221aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:0d:7a:df:ac:f2:a4:51:76:21:ab:99:78:
18:c3:ff:87:8c:58:36:13:50:cd:f9:69:f9:da:52:
6d:6f:c8:44:1c:44:d0:3e:6f:ff:d2:5f:bd:a0:76:
36:30:eb:b0:2e:96:12:9b:6a:3a:26:23:82:b3:18:
be:04:c9:d4:82:8f:d0:ed:30:2e:be:a4:6e:15:9e:
85:57:db:ca:e5:33:f8:2c:3e:93:31:75:85:53:21:
8f:1e:dc:d4:4a:98:97:01:33:2d:88:93:12:f8:ba:
0d:41:f2:f0:f8:22:62:76:1a:e6:09:2f:e1:95:5c:
dc:ad:ef:60:1a:19:cf:14:e8:45:4c:83:db:45:70:
a2:1a:e9:1d:4b:62:b8:d3:b5:36:38:a2:17:77:aa:
7c:c2:ca:a2:52:96:6d:78:a8:4b:d9:12:a5:07:f0:
04:1b:67:46:c7:9b:77:e9:39:4c:de:12:03:d2:b2:
ad:80:ba:27:e1:ef:72:36:3e:66:34:fc:8d:2c:69:
54:87:ec:09:d8:d3:7f:58:fa:a8:dd:64:7a:5a:49:
8d:c4:78:d5:eb:2b:f3:0a:dc:f1:38:a2:74:7a:c3:
cc:1a:c5:76:43:f8:d7:bf:d8:8d:ac:dd:ed:6c:12:
06:1b:b7:ee:c7:69:b5:c0:b2:a2:70:8c:f5:57:eb:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:29:AA:F6:1E:2F:CA:EA:0C:92:A9:6B:F3:D1:62:E2:B2:21:AA
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5e:2e:0a:06:bf:ef:56:29:d3:4a:5d:08:b9:10:c3:32:62:
a8:ce:69:3f:b1:cd:37:07:da:e3:4b:0e:75:84:56:c3:0b:04:
d6:ef:21:c0:7c:2b:d8:af:9b:04:80:16:c7:26:71:a4:a0:25:
fc:9f:9f:e1:fe:e2:78:72:a9:99:9e:b1:3f:1f:b4:9e:6b:64:
0b:f1:5d:3d:f7:2a:dc:58:12:73:46:f5:c4:4f:40:9b:ec:03:
ac:15:cb:e8:f8:84:74:ad:1d:c9:a9:07:a4:d1:3f:4b:3f:31:
88:3b:9c:e6:1b:ad:50:1d:d3:88:4a:7c:12:f4:88:ae:40:36:
3c:3b:c9:f2:27:2e:e8:b9:51:50:a3:7f:1a:82:5f:de:c9:ee:
39:81:16:94:2f:73:c1:69:8f:a1:74:8e:b3:4e:77:cf:ec:5b:
38:2e:69:71:ea:ab:82:32:7d:71:00:cc:ed:85:52:cf:ca:76:
53:63:9c:c1:98:ac:b9:5c:8d:81:3a:55:3f:62:bf:ac:d1:4a:
9f:7d:bd:5e:b0:ea:13:9f:ca:f2:05:fc:d1:e2:c3:8f:26:48:
31:3c:cb:2d:44:7c:be:d3:e7:5c:84:68:75:61:bb:ab:44:ba:
82:4c:f7:87:0a:ff:66:5b:18:e5:09:44:cc:e4:cb:f2:46:d2:
52:f3:a6:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoNF3xtdVYCWvORNJQGQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDFmNTBkZjI2M2ZlNTA5ZmM1ZGU5YzVhNDczYTI4ZTM4
MTI2MzkwHhcNMjUwOTA3MTAwMjQ1WhcNMjUwOTA4MTAwMjQ1WjAzMTEwLwYDVQQD
EyhlNGQ5MjlhYWY2MWUyZmNhZWEwYzkyYTk2YmYzZDE2MmUyYjIyMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupkNet+s8qRRdiGrmXgYw/+HjFg2
E1DN+Wn52lJtb8hEHETQPm//0l+9oHY2MOuwLpYSm2o6JiOCsxi+BMnUgo/Q7TAu
vqRuFZ6FV9vK5TP4LD6TMXWFUyGPHtzUSpiXATMtiJMS+LoNQfLw+CJidhrmCS/h
lVzcre9gGhnPFOhFTIPbRXCiGukdS2K407U2OKIXd6p8wsqiUpZteKhL2RKlB/AE
G2dGx5t36TlM3hID0rKtgLon4e9yNj5mNPyNLGlUh+wJ2NN/WPqo3WR6WkmNxHjV
6yvzCtzxOKJ0esPMGsV2Q/jXv9iNrN3tbBIGG7fux2m1wLKicIz1V+tpEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTZKar2Hi/K6gySqWvz0WLisiGqMB8GA1UdIwQY
MBaAFEvR9Q3yY/5Qn8XenFpHOijjgSY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUt
MmI2ODA5MzM5NzAyLzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUtMmI2ODA5MzM5NzAy
LzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgl4uCga/
71Yp00pdCLkQwzJiqM5pP7HNNwfa40sOdYRWwwsE1u8hwHwr2K+bBIAWxyZxpKAl
/J+f4f7ieHKpmZ6xPx+0nmtkC/FdPfcq3FgSc0b1xE9Am+wDrBXL6PiEdK0dyakH
pNE/Sz8xiDuc5hutUB3TiEp8EvSIrkA2PDvJ8icu6LlRUKN/GoJf3snuOYEWlC9z
wWmPoXSOs053z+xbOC5pceqrgjJ9cQDM7YVSz8p2U2OcwZisuVyNgTpVP2K/rNFK
n329XrDqE5/K8gX80eLDjyZIMTzLLUR8vtPnXIRodWG7q0S6gkz3hwr/ZlsY5QlE
zOTL8kbSUvOmgA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:20 2025 by rpki-client