Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
File: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft (raw, json)
Hash identifier: cJiB/IwqDdKzHZ4Kvmz2iuqxxbbYYQZSpip5BvLQgBU=
Subject key identifier: 5C:80:C2:3D:2B:83:0E:B5:D5:F4:56:10:24:DE:C5:CC:3A:A2:05:0A
Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Certificate serial: 019921E7E0B337FD689A5C26C22E090EA268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:01:08 +0000
Manifest this update: Sun 07 Sep 2025 02:01:08 +0000
Manifest next update: Mon 08 Sep 2025 02:01:08 +0000
Files and hashes: 1: EtKR-kQx-fQIYWuQ-lYzi3aG73M.roa (hash: Tv2U/xkIvhOtN5S9AYeK8bEvblqxzhCnqAMAXe7i/DA=)
2: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl (hash: WEll3ObW4nk7rA7KBXCI+0yALlazR7qbjdTLIRLP+eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e0:b3:37:fd:68:9a:5c:26:c2:2e:09:0e:a2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Validity
Not Before: Sep 7 02:01:08 2025 GMT
Not After : Sep 8 02:01:08 2025 GMT
Subject: CN=5c80c23d2b830eb5d5f4561024dec5cc3aa2050a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:76:b6:89:30:28:45:96:32:ca:5c:f6:7e:
40:90:fd:18:6d:85:af:34:81:b2:58:43:b0:f3:1f:
86:1a:56:5f:71:8f:c1:02:05:18:b0:23:3f:60:7e:
a8:36:72:37:a2:05:94:5c:13:cb:b8:e3:43:15:9c:
84:62:f8:7a:66:d8:7c:3f:2c:1d:46:a8:d4:2a:98:
5a:3f:10:8b:51:5f:3d:a6:5e:21:55:78:c4:1c:48:
91:4d:53:fb:fb:92:cb:a0:11:a2:53:ec:63:89:86:
21:f7:0c:59:2b:a2:aa:dd:e6:6d:16:c5:83:ac:c4:
90:d0:69:5c:85:3c:cd:0d:d8:36:62:bc:a7:0a:f0:
16:5f:8b:c7:20:cc:d2:26:90:d2:2e:3d:e4:51:a4:
83:79:c0:c9:39:4c:c7:64:79:84:da:5d:c9:83:e1:
0c:f4:20:49:f3:7a:08:4d:f1:51:85:61:15:a0:e9:
04:1f:4a:33:c2:bc:72:fe:38:a3:54:48:ab:3d:89:
23:05:4f:be:b5:10:81:70:0c:1f:b6:ae:bf:e7:45:
44:d6:a3:7d:ba:4f:5d:19:31:c2:c7:7f:e0:e0:73:
b1:08:7c:ef:59:46:8a:3e:8d:44:b9:00:e1:64:01:
fe:75:50:33:29:5c:41:78:e7:42:22:28:38:d3:5d:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:80:C2:3D:2B:83:0E:B5:D5:F4:56:10:24:DE:C5:CC:3A:A2:05:0A
X509v3 Authority Key Identifier:
keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f7:5b:25:60:82:4e:f2:c7:18:f7:15:40:23:05:44:27:cb:
55:f5:b0:f0:96:93:2d:9a:1b:ca:a1:0b:02:97:a0:e5:7d:99:
18:13:b7:31:3d:09:bf:fd:3c:b3:46:3b:bd:af:c7:b1:44:6f:
55:97:be:6c:6b:d7:ca:eb:f1:5a:d7:6d:24:55:81:8c:86:8b:
b9:2c:d0:88:c7:83:26:bb:5d:7c:33:6f:76:2a:2c:ed:f5:0a:
73:b2:37:d5:c3:27:46:13:31:86:aa:22:1a:c2:99:35:d4:ca:
f2:d4:86:46:8c:dc:f1:85:9e:20:87:7d:d3:52:83:14:f7:1b:
8c:3c:a1:81:a2:61:69:f1:49:38:94:ab:3e:96:38:b0:a2:a7:
e8:5a:9c:39:52:fb:0a:9a:c4:07:ed:98:f1:c5:98:9c:2f:26:
7e:5d:86:0b:20:5a:32:64:91:80:ca:15:98:90:9a:60:34:05:
a8:5a:41:d6:35:74:aa:f3:95:eb:4e:6d:97:7e:4a:2c:c9:44:
8a:f8:75:43:1c:ff:52:29:e9:e3:c0:40:11:2d:74:24:75:43:
43:37:a9:28:84:21:6e:05:9c:e1:ff:69:5c:8c:99:1b:75:da:
74:c8:55:d7:2f:d7:1d:e7:01:d2:ea:d6:de:19:26:90:68:cc:
c1:37:59:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5+CzN/1omlwmwi4JDqJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZDYwZDliOTQzYjA4YzQ0N2NmN2U1NDk4OWY1MmIwZGVj
NWY3ZTcwHhcNMjUwOTA3MDIwMTA4WhcNMjUwOTA4MDIwMTA4WjAzMTEwLwYDVQQD
Eyg1YzgwYzIzZDJiODMwZWI1ZDVmNDU2MTAyNGRlYzVjYzNhYTIwNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QV2tokwKEWWMspc9n5AkP0YbYWv
NIGyWEOw8x+GGlZfcY/BAgUYsCM/YH6oNnI3ogWUXBPLuONDFZyEYvh6Zth8Pywd
RqjUKphaPxCLUV89pl4hVXjEHEiRTVP7+5LLoBGiU+xjiYYh9wxZK6Kq3eZtFsWD
rMSQ0GlchTzNDdg2YrynCvAWX4vHIMzSJpDSLj3kUaSDecDJOUzHZHmE2l3Jg+EM
9CBJ83oITfFRhWEVoOkEH0ozwrxy/jijVEirPYkjBU++tRCBcAwftq6/50VE1qN9
uk9dGTHCx3/g4HOxCHzvWUaKPo1EuQDhZAH+dVAzKVxBeOdCIig4013nFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyAwj0rgw611fRWECTexcw6ogUKMB8GA1UdIwQY
MBaAFG/WDZuUOwjER89+VJifUrDexffnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wZGY1NmMtNjhhOS00ZmViLWJmNTMt
ZDdmMTFkNjg0NzM3LzEvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wZGY1NmMtNjhhOS00ZmViLWJmNTMtZDdmMTFkNjg0NzM3
LzEvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/dbJWCC
TvLHGPcVQCMFRCfLVfWw8JaTLZobyqELApeg5X2ZGBO3MT0Jv/08s0Y7va/HsURv
VZe+bGvXyuvxWtdtJFWBjIaLuSzQiMeDJrtdfDNvdios7fUKc7I31cMnRhMxhqoi
GsKZNdTK8tSGRozc8YWeIId901KDFPcbjDyhgaJhafFJOJSrPpY4sKKn6FqcOVL7
CprEB+2Y8cWYnC8mfl2GCyBaMmSRgMoVmJCaYDQFqFpB1jV0qvOV605tl35KLMlE
ivh1Qxz/Uinp48BAES10JHVDQzepKIQhbgWc4f9pXIyZG3XadMhV1y/XHecB0urW
3hkmkGjMwTdZBg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:49:51 2025 by rpki-client