Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File: 9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier: cwNg0+dEW5oK5Zy5k88oBneFdCLDqkp/2otomhdyUBM=
Subject key identifier: 4E:2B:E7:B0:46:DA:DF:F4:78:D3:28:B2:E6:5E:2F:43:DA:BD:EF:9D
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer: /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial: 01974E8E3BDAEA49F9FDCA1CD8DAFB17C44E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number: 02CE
Signing time: Sun 08 Jun 2025 08:00:33 +0000
Manifest this update: Sun 08 Jun 2025 08:00:33 +0000
Manifest next update: Mon 09 Jun 2025 08:00:33 +0000
Files and hashes: 1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: wP503af9B0fpeKeeTHiGnSyrKvFSE+z4Y1YgWzY9TDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:3b:da:ea:49:f9:fd:ca:1c:d8:da:fb:17:c4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
Validity
Not Before: Jun 8 08:00:33 2025 GMT
Not After : Jun 9 08:00:33 2025 GMT
Subject: CN=4e2be7b046dadff478d328b2e65e2f43dabdef9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:84:e6:9b:48:72:5c:eb:bb:6f:d1:77:08:
fd:2f:d2:b2:0c:90:61:fc:15:a0:6a:1f:d4:f4:c1:
af:45:84:41:27:2d:03:d1:5e:b2:18:c7:52:75:e3:
c7:5b:15:ef:04:37:a1:2b:9b:a4:b3:6b:32:41:b7:
31:fc:68:19:10:29:ee:a8:f0:f4:f9:fd:66:ce:a0:
59:83:3f:29:6c:cd:1c:9b:e1:d0:fe:d7:35:c4:c9:
2e:bb:3b:12:82:fd:41:b4:36:7b:97:6d:19:dc:2e:
c2:06:49:6b:5f:24:3f:37:e5:06:48:e9:58:f1:3d:
9a:a6:2a:ef:d8:78:9e:da:2f:d5:9d:5d:7e:aa:98:
1b:7a:5e:be:2b:5c:1d:2f:00:51:b8:c5:a3:0c:9e:
d8:80:01:0a:54:58:0e:92:b2:c4:42:a9:33:bb:4f:
b3:91:bf:c1:5d:4d:de:3c:3d:6f:29:86:69:fe:05:
44:5c:e2:e2:38:75:b5:a3:aa:c7:52:40:63:d6:0b:
41:2a:8f:27:28:e2:40:69:36:83:ee:f9:29:b6:92:
f4:d9:56:25:b6:61:18:da:74:ca:b4:4d:fb:af:c4:
5c:ac:ba:41:2e:01:8f:ac:49:4b:34:2c:23:b9:c8:
87:4c:99:1d:f0:85:1f:99:a3:f1:25:f6:db:be:40:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2B:E7:B0:46:DA:DF:F4:78:D3:28:B2:E6:5E:2F:43:DA:BD:EF:9D
X509v3 Authority Key Identifier:
keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7a:b5:9d:29:e5:a9:6f:8f:16:92:be:54:80:96:b0:25:9e:
f7:9d:71:75:cf:6a:74:dc:72:a1:dc:18:4b:93:80:19:16:8c:
3c:42:28:d5:c8:87:0e:f8:4d:11:18:08:f4:0b:43:5f:65:44:
fe:27:b7:b0:5f:05:c2:5f:f9:fa:a7:5a:cf:6b:9c:6d:f7:87:
aa:5c:a6:cc:78:65:68:bd:c8:4c:24:da:5f:d9:6f:76:9f:05:
5b:23:0b:80:92:94:c6:ec:2a:50:03:41:ad:45:a7:c6:cd:e0:
ea:21:f2:ca:b2:ac:12:19:57:c8:26:2c:63:0c:c4:1c:54:dc:
14:e3:17:22:8c:64:d6:f3:6c:c7:2d:5d:90:24:90:8f:50:0e:
76:90:5b:cb:1c:80:b7:e8:7a:85:aa:11:f1:ec:55:78:f8:bd:
72:e9:88:dd:5c:57:b9:10:c2:7b:7e:f7:41:c3:6c:be:8c:ad:
b8:36:be:77:3b:30:72:0f:a3:5a:6d:32:53:d7:0b:f8:c8:23:
3f:5d:34:72:0e:b5:48:a7:46:90:41:25:0f:bf:8b:3c:93:fd:
fe:c9:32:4d:f9:8b:9f:bb:d4:eb:b2:81:e8:c1:1a:92:9c:fa:
c0:1f:4c:bd:37:15:c0:53:83:0a:5a:d8:ad:c0:ae:92:83:4f:
c2:7e:13:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjjva6kn5/coc2Nr7F8ROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODE0MjA5MDQ2M2ZlMGY0OWExMzBkMTUxODY2YTk3NzE3
ZDQ0MmEwHhcNMjUwNjA4MDgwMDMzWhcNMjUwNjA5MDgwMDMzWjAzMTEwLwYDVQQD
Eyg0ZTJiZTdiMDQ2ZGFkZmY0NzhkMzI4YjJlNjVlMmY0M2RhYmRlZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhOE5ptIclzru2/Rdwj9L9KyDJBh
/BWgah/U9MGvRYRBJy0D0V6yGMdSdePHWxXvBDehK5uks2syQbcx/GgZECnuqPD0
+f1mzqBZgz8pbM0cm+HQ/tc1xMkuuzsSgv1BtDZ7l20Z3C7CBklrXyQ/N+UGSOlY
8T2apirv2Hie2i/VnV1+qpgbel6+K1wdLwBRuMWjDJ7YgAEKVFgOkrLEQqkzu0+z
kb/BXU3ePD1vKYZp/gVEXOLiOHW1o6rHUkBj1gtBKo8nKOJAaTaD7vkptpL02VYl
tmEY2nTKtE37r8RcrLpBLgGPrElLNCwjuciHTJkd8IUfmaPxJfbbvkDs+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4r57BG2t/0eNMosuZeL0Pave+dMB8GA1UdIwQY
MBaAFPSBQgkEY/4PSaEw0VGGapdxfUQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlGQ0NRUmpfZzlKb1REUlVZWnFsM0Y5UkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84MDhlNDEtOGZlYy00ZmZkLTg4NGYt
YzJjNzQyZTEyMmNlLzEvOUlGQ0NRUmpfZzlKb1REUlVZWnFsM0Y5UkNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84MDhlNDEtOGZlYy00ZmZkLTg4NGYtYzJjNzQyZTEyMmNl
LzEvOUlGQ0NRUmpfZzlKb1REUlVZWnFsM0Y5UkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnq1nSnl
qW+PFpK+VICWsCWe951xdc9qdNxyodwYS5OAGRaMPEIo1ciHDvhNERgI9AtDX2VE
/ie3sF8Fwl/5+qdaz2ucbfeHqlymzHhlaL3ITCTaX9lvdp8FWyMLgJKUxuwqUANB
rUWnxs3g6iHyyrKsEhlXyCYsYwzEHFTcFOMXIoxk1vNsxy1dkCSQj1AOdpBbyxyA
t+h6haoR8exVePi9cumI3VxXuRDCe373QcNsvoytuDa+dzswcg+jWm0yU9cL+Mgj
P100cg61SKdGkEElD7+LPJP9/skyTfmLn7vU67KB6MEakpz6wB9MvTcVwFODClrY
rcCukoNPwn4Tuw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:58:28 2025 by rpki-client