Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
File: 9MCqez48v_iCYq3ZKzOeNQUc4aA.mft (raw, json)
Hash identifier: 2DdHNg6xyf/fktBz9E7PMYQIYmX/M7PbiThRsz6rnBA=
Subject key identifier: 8A:8B:35:FF:FA:B6:39:8A:6F:8E:AB:EA:1C:01:B9:B5:2E:FB:6B:10
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 0197500EB259A39A644FCD2C3FC662916FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
Manifest number: 158C
Signing time: Sun 08 Jun 2025 15:00:29 +0000
Manifest this update: Sun 08 Jun 2025 15:00:29 +0000
Manifest next update: Mon 09 Jun 2025 15:00:29 +0000
Files and hashes: 1: 9MCqez48v_iCYq3ZKzOeNQUc4aA.crl (hash: mUIc34lvbcbfiQZGV1sxvKI4Bdmcjuh5LsF5uwOQts8=)
2: _deNM6L0-gRjzB9Oru0BeDNyfHo.roa (hash: LDo7rHt3sUV11VVSTI9bz2qFEysdcQXIsvCOfT9GJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:b2:59:a3:9a:64:4f:cd:2c:3f:c6:62:91:6f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Jun 8 15:00:29 2025 GMT
Not After : Jun 9 15:00:29 2025 GMT
Subject: CN=8a8b35fffab6398a6f8eabea1c01b9b52efb6b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:ab:2d:5c:dd:c6:03:ba:aa:0c:63:af:61:
88:82:98:4e:99:de:83:30:dc:02:cb:d3:63:79:0e:
a4:b3:fc:53:23:3f:a4:ec:28:46:b0:fd:a5:f6:1d:
81:af:f5:c5:52:5b:69:88:25:f9:ba:4b:82:79:89:
f6:b7:72:41:90:2f:97:7f:92:b1:fc:46:e6:f1:f2:
7a:97:9b:33:11:1a:17:da:7e:cc:f0:b8:67:2a:77:
c8:c9:a4:de:81:a0:0a:9f:3c:b7:c6:b2:e8:fe:d2:
ac:12:3b:81:40:50:6b:7c:ac:be:4e:cd:1f:d5:76:
28:be:a9:f9:96:c4:3a:34:54:08:42:18:51:fa:2e:
06:e9:ae:b5:a1:fa:76:26:30:c0:40:f2:85:46:36:
58:24:e7:f0:f4:2e:29:7c:01:3d:6f:fa:38:a9:4c:
0a:2b:43:6c:77:92:88:a9:a1:ed:50:ab:da:e7:77:
c1:e5:96:6f:f1:c5:ce:57:dd:2a:b4:1f:3b:49:61:
a6:21:19:5a:b2:e9:38:2b:f2:ba:6e:4a:51:4a:26:
c3:72:6c:4d:10:71:72:73:e6:82:7e:1c:94:96:67:
1d:6f:75:20:68:a0:e6:22:b9:d9:a1:ef:c2:25:42:
e3:55:19:ad:8c:9a:d9:46:1a:fd:ed:9d:3d:04:d8:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8B:35:FF:FA:B6:39:8A:6F:8E:AB:EA:1C:01:B9:B5:2E:FB:6B:10
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:08:90:27:81:ed:5d:a4:de:6b:8d:5f:df:4f:53:76:ea:ce:
61:6a:7b:ef:98:e1:b1:41:32:31:14:9f:ef:7d:54:82:e9:53:
9f:87:3a:7d:36:db:24:04:fb:e7:0f:42:66:ac:76:66:e2:ab:
d2:03:19:7f:02:16:67:93:78:83:76:f6:01:16:1e:d5:af:94:
35:a8:49:d1:75:e8:23:fa:ce:a1:85:e1:10:1c:ae:59:c9:22:
53:53:0b:2e:85:09:ea:90:ea:b7:09:b0:3a:3d:12:f7:61:ce:
71:26:8d:bd:eb:c5:08:54:e1:8c:76:84:06:76:b4:26:56:a3:
b1:21:86:39:f9:8e:97:7b:b1:ee:6d:eb:bd:e6:01:9c:a7:d7:
d1:cd:12:7b:76:e1:b2:80:19:50:9e:a9:36:85:57:8c:cd:e7:
af:1b:08:16:c4:97:11:cc:5c:5f:54:58:8a:9d:c2:f3:cd:f2:
65:f0:41:3d:7e:73:2e:d4:50:39:36:e2:f9:d7:ac:6c:62:c4:
a1:cb:29:a1:cd:40:73:4a:8d:c8:60:36:b2:80:24:1b:70:0e:
34:8d:36:02:ce:bd:05:4d:1a:c2:19:52:e6:3f:6b:c4:d3:9c:
42:77:0f:aa:b5:6e:4f:9c:fe:a8:dc:35:f0:b4:0d:cb:18:60:
75:90:3b:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDrJZo5pkT80sP8ZikW/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzBhYTdiM2UzY2JmZjg4MjYyYWRkOTJiMzM5ZTM1MDUx
Y2UxYTAwHhcNMjUwNjA4MTUwMDI5WhcNMjUwNjA5MTUwMDI5WjAzMTEwLwYDVQQD
Eyg4YThiMzVmZmZhYjYzOThhNmY4ZWFiZWExYzAxYjliNTJlZmI2YjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwCrLVzdxgO6qgxjr2GIgphOmd6D
MNwCy9NjeQ6ks/xTIz+k7ChGsP2l9h2Br/XFUltpiCX5ukuCeYn2t3JBkC+Xf5Kx
/Ebm8fJ6l5szERoX2n7M8LhnKnfIyaTegaAKnzy3xrLo/tKsEjuBQFBrfKy+Ts0f
1XYovqn5lsQ6NFQIQhhR+i4G6a61ofp2JjDAQPKFRjZYJOfw9C4pfAE9b/o4qUwK
K0Nsd5KIqaHtUKva53fB5ZZv8cXOV90qtB87SWGmIRlasuk4K/K6bkpRSibDcmxN
EHFyc+aCfhyUlmcdb3UgaKDmIrnZoe/CJULjVRmtjJrZRhr97Z09BNgcIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqLNf/6tjmKb46r6hwBubUu+2sQMB8GA1UdIwQY
MBaAFPTAqns+PL/4gmKt2SsznjUFHOGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85ZTJiMWEtMTYzYi00ODU0LTk2MWEt
ZWE3NWRkZjQ3YjRhLzEvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85ZTJiMWEtMTYzYi00ODU0LTk2MWEtZWE3NWRkZjQ3YjRh
LzEvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswiQJ4Ht
XaTea41f309TdurOYWp775jhsUEyMRSf731UgulTn4c6fTbbJAT75w9CZqx2ZuKr
0gMZfwIWZ5N4g3b2ARYe1a+UNahJ0XXoI/rOoYXhEByuWckiU1MLLoUJ6pDqtwmw
Oj0S92HOcSaNvevFCFThjHaEBna0JlajsSGGOfmOl3ux7m3rveYBnKfX0c0Se3bh
soAZUJ6pNoVXjM3nrxsIFsSXEcxcX1RYip3C883yZfBBPX5zLtRQOTbi+desbGLE
ocspoc1Ac0qNyGA2soAkG3AONI02As69BU0awhlS5j9rxNOcQncPqrVuT5z+qNw1
8LQNyxhgdZA7CQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:49:30 2025 by rpki-client