Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: HkGGyFTmBREMaLitQQ70ambw1kgynT7Wc6/e/ZsKVpo=
Subject key identifier: 5A:92:CE:C1:91:22:5B:D2:10:EF:43:4F:2B:31:00:32:1A:68:69:0D
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 01976EF51651870A6681F77D3EFE779DC355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0CAB
Signing time: Sat 14 Jun 2025 15:00:45 +0000
Manifest this update: Sat 14 Jun 2025 15:00:45 +0000
Manifest next update: Sun 15 Jun 2025 15:00:45 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: VHIkFjK19JRQ979aQta4dBMKRegRB6TRFu0/cdVtWG4=)
2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:16:51:87:0a:66:81:f7:7d:3e:fe:77:9d:c3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Jun 14 15:00:45 2025 GMT
Not After : Jun 15 15:00:45 2025 GMT
Subject: CN=5a92cec191225bd210ef434f2b3100321a68690d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:ee:3e:de:3f:ef:0c:e3:06:c8:1d:ff:36:
f5:09:c2:c1:39:e3:77:29:90:33:67:42:ad:31:45:
3e:cf:57:7c:97:01:9b:43:84:15:53:34:c8:b9:ed:
ce:41:e1:23:5b:8a:25:c4:d6:18:15:ac:bb:9a:88:
14:f6:55:ed:1b:a8:f4:27:1b:ef:20:f6:4e:1e:e3:
dd:af:72:d2:9b:10:0a:26:f6:5d:2f:76:7e:47:53:
03:cf:cc:fe:5a:4f:a2:dd:7c:aa:ec:a4:eb:a3:05:
26:47:09:8d:8b:05:31:7b:25:8c:2a:2f:7a:0e:34:
92:a9:69:81:d7:6b:c1:c2:2c:ff:5a:88:97:d2:8d:
cb:2a:8f:16:60:1d:6f:fe:f5:0c:7a:49:71:56:34:
76:a7:1f:5e:74:a1:29:88:1c:80:18:04:f8:0c:96:
bd:a8:06:c1:99:fb:70:68:45:0b:e2:26:6c:8f:8a:
f5:f7:5d:ad:43:b5:26:42:89:f2:98:4d:59:94:60:
44:40:45:47:c6:5b:f1:76:34:fa:9a:e5:b5:34:65:
d5:cf:71:37:c9:11:c2:12:19:67:da:75:96:ea:2e:
6d:f3:62:40:20:f9:c9:28:7f:35:15:3d:7c:e3:83:
98:9a:8e:c8:e2:11:e0:a8:9d:74:07:d1:2c:5b:f6:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:CE:C1:91:22:5B:D2:10:EF:43:4F:2B:31:00:32:1A:68:69:0D
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7b:b1:16:7a:38:ab:ed:ea:bb:93:8c:4f:13:d4:f0:0b:1d:
07:89:34:42:a9:5b:0b:30:fd:06:5a:8b:25:89:fa:89:ed:b9:
db:bf:3b:b3:c7:f7:47:57:8d:6d:18:42:2e:75:87:f0:fc:f4:
ff:e0:aa:9e:b3:a7:f9:e3:26:28:28:b9:70:af:f3:a0:e9:e0:
2a:b8:d7:b8:86:14:a6:07:bc:34:84:c6:4c:e3:05:a9:af:5b:
c4:75:ca:36:d9:79:32:86:2b:34:2d:09:cd:ab:9f:be:e3:e5:
6f:b9:67:a4:cb:3a:ba:89:09:fe:e4:87:6a:db:90:7e:79:51:
c7:d9:a1:1d:d3:4b:cb:72:35:d3:25:9e:37:f0:be:07:c8:8b:
f2:53:09:29:09:45:99:35:88:4f:c7:89:6b:f5:f9:31:4f:fe:
85:73:13:68:ef:28:a5:c5:f0:ec:c4:78:e8:e1:89:44:9c:3c:
34:a3:43:aa:52:38:9f:89:d9:d1:1f:f2:46:13:21:2a:e7:02:
bd:c6:ac:48:5a:3f:42:23:4d:11:2c:57:03:0a:7c:7c:7c:89:
e4:89:04:7e:22:84:8b:1f:00:8f:c8:17:b5:11:31:2d:73:e3:
4d:74:88:fc:9a:6c:1c:36:97:05:d4:c8:32:4e:da:16:ae:e9:
09:ae:3b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9RZRhwpmgfd9Pv53ncNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4
NDgwNzAwHhcNMjUwNjE0MTUwMDQ1WhcNMjUwNjE1MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg1YTkyY2VjMTkxMjI1YmQyMTBlZjQzNGYyYjMxMDAzMjFhNjg2OTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBTuPt4/7wzjBsgd/zb1CcLBOeN3
KZAzZ0KtMUU+z1d8lwGbQ4QVUzTIue3OQeEjW4olxNYYFay7mogU9lXtG6j0Jxvv
IPZOHuPdr3LSmxAKJvZdL3Z+R1MDz8z+Wk+i3Xyq7KTrowUmRwmNiwUxeyWMKi96
DjSSqWmB12vBwiz/WoiX0o3LKo8WYB1v/vUMeklxVjR2px9edKEpiByAGAT4DJa9
qAbBmftwaEUL4iZsj4r1912tQ7UmQonymE1ZlGBEQEVHxlvxdjT6muW1NGXVz3E3
yRHCEhln2nWW6i5t82JAIPnJKH81FT1844OYmo7I4hHgqJ10B9EsW/bUZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqSzsGRIlvSEO9DTysxADIaaGkNMB8GA1UdIwQY
MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt
ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj
LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3uxFno4
q+3qu5OMTxPU8AsdB4k0QqlbCzD9BlqLJYn6ie252787s8f3R1eNbRhCLnWH8Pz0
/+CqnrOn+eMmKCi5cK/zoOngKrjXuIYUpge8NITGTOMFqa9bxHXKNtl5MoYrNC0J
zaufvuPlb7lnpMs6uokJ/uSHatuQfnlRx9mhHdNLy3I10yWeN/C+B8iL8lMJKQlF
mTWIT8eJa/X5MU/+hXMTaO8opcXw7MR46OGJRJw8NKNDqlI4n4nZ0R/yRhMhKucC
vcasSFo/QiNNESxXAwp8fHyJ5IkEfiKEix8Aj8gXtRExLXPjTXSI/JpsHDaXBdTI
Mk7aFq7pCa47DQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:26 2025 by rpki-client