Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: 7LJGqHZwJTGY063kCh4K24vBTAfOffa1q970aRykYHs=
Subject key identifier: 5A:9E:94:70:4E:71:95:C1:04:4A:C9:1B:FE:A6:BB:9E:76:C8:18:03
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 0197530FF759416A5CE0BFABE038F61F6C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 0D0A
Signing time: Mon 09 Jun 2025 05:00:44 +0000
Manifest this update: Mon 09 Jun 2025 05:00:44 +0000
Manifest next update: Tue 10 Jun 2025 05:00:44 +0000
Files and hashes: 1: DYV8rTZS8uCurZHOoqW-jfWMmWg.roa (hash: oTQ/SBogFSvxJCfk7V0vkU2XYqnVHjZNfcn9byEW2aE=)
2: LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa (hash: lEUkgsAO72uMMjQemqqZ36mEX8JKjX4GaMbgSM4hzTI=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: CE+aeYMMezc7rnn3HdQkUCs3NxeL77P02H/l0sasPuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:f7:59:41:6a:5c:e0:bf:ab:e0:38:f6:1f:6c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Jun 9 05:00:44 2025 GMT
Not After : Jun 10 05:00:44 2025 GMT
Subject: CN=5a9e94704e7195c1044ac91bfea6bb9e76c81803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:eb:90:4b:d5:d4:b3:2f:f7:3d:ed:ed:75:
cf:06:14:63:b0:12:ed:0b:f3:fe:46:eb:eb:45:69:
08:66:2b:f9:8e:27:54:67:38:ab:8d:9f:24:cc:cc:
3f:99:d7:d9:bd:b5:2b:8a:91:b7:a6:82:0a:c2:c8:
19:3d:89:ee:d3:35:19:65:ff:cf:ce:f3:c9:3f:ac:
a0:71:1a:26:0b:c4:32:25:54:be:0b:5a:c3:4a:80:
be:e1:ae:db:a7:48:34:54:b4:2d:3d:11:4b:16:3a:
56:70:26:09:21:a4:85:0b:2c:50:ee:00:e8:52:03:
23:9c:c5:fa:39:dc:64:58:9b:d2:83:63:8c:3d:59:
bb:4b:e4:3c:dd:e1:86:7a:d4:37:a6:73:0d:12:be:
65:c0:d1:82:4b:7f:6b:4c:9b:43:fa:4c:5d:94:8f:
8f:a3:25:9f:1e:99:84:c9:ab:f2:b9:a9:0b:f2:8f:
8f:ec:0b:5c:3d:f6:d2:14:3c:e2:30:53:5e:d3:41:
49:f1:e3:95:c7:00:e1:76:1a:05:b0:50:7d:c7:79:
56:b7:7c:83:65:66:58:6c:5d:15:09:55:c7:db:b7:
ae:f1:a0:2e:df:c3:77:b2:ec:97:4a:6f:d3:61:c9:
71:a1:74:af:be:5e:04:83:80:f6:a9:43:4d:da:f0:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9E:94:70:4E:71:95:C1:04:4A:C9:1B:FE:A6:BB:9E:76:C8:18:03
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c3:8f:c1:16:c9:f4:34:33:13:9b:83:2f:d8:04:35:7a:4e:
56:aa:c8:ae:dd:1a:ac:77:6a:65:af:76:b9:c8:43:9d:f5:e9:
17:d6:a7:27:76:90:e8:83:fd:2c:d5:b6:de:09:13:00:cb:21:
e0:40:67:aa:94:c3:b9:a9:e4:ae:2c:67:9e:8b:9c:07:c6:60:
aa:e2:3d:e1:b6:c1:4b:07:8b:74:07:c3:4e:2d:bd:bc:a6:04:
49:7a:aa:b8:7d:74:de:31:10:f3:d5:57:d2:ad:fb:4e:48:9a:
48:3e:13:e7:74:a9:e1:ec:32:94:d6:6c:21:9f:14:a9:51:14:
48:1c:21:da:66:44:5d:b2:3c:d1:3b:de:4a:19:0a:57:57:b0:
f0:34:23:ae:9a:75:71:04:71:3d:4e:7a:59:07:1e:09:76:b4:
47:49:e4:e2:8b:d3:ed:9c:8a:c7:92:58:2c:1e:22:a7:30:4d:
e2:13:9b:27:ba:e9:23:44:f5:63:b8:af:a8:45:77:9a:10:19:
09:4a:8d:45:d2:91:59:ec:ee:56:f9:a7:3f:3b:c2:df:52:68:
4a:93:b8:7c:d3:bc:59:ba:1f:a5:b0:56:2b:06:f7:13:8f:bc:
4d:20:47:94:4a:41:57:26:3b:4a:41:71:6c:59:18:02:9d:b6:
4c:60:65:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTD/dZQWpc4L+r4Dj2H2xBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZGRmYWYxM2I3ZGJlMDVkYWEzMmI1ODc4YjhiNjgwMjQw
NDU5NzEwHhcNMjUwNjA5MDUwMDQ0WhcNMjUwNjEwMDUwMDQ0WjAzMTEwLwYDVQQD
Eyg1YTllOTQ3MDRlNzE5NWMxMDQ0YWM5MWJmZWE2YmI5ZTc2YzgxODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyjrkEvV1LMv9z3t7XXPBhRjsBLt
C/P+RuvrRWkIZiv5jidUZzirjZ8kzMw/mdfZvbUripG3poIKwsgZPYnu0zUZZf/P
zvPJP6ygcRomC8QyJVS+C1rDSoC+4a7bp0g0VLQtPRFLFjpWcCYJIaSFCyxQ7gDo
UgMjnMX6OdxkWJvSg2OMPVm7S+Q83eGGetQ3pnMNEr5lwNGCS39rTJtD+kxdlI+P
oyWfHpmEyavyuakL8o+P7AtcPfbSFDziMFNe00FJ8eOVxwDhdhoFsFB9x3lWt3yD
ZWZYbF0VCVXH27eu8aAu38N3suyXSm/TYclxoXSvvl4Eg4D2qUNN2vAAxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqelHBOcZXBBErJG/6mu552yBgDMB8GA1UdIwQY
MBaAFKfd+vE7fb4F2qMrWHi4toAkBFlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMmIwODMtYjNiOS00YWE2LWExNDkt
ZmJiNTUzYjg0NjQxLzEvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mMmIwODMtYjNiOS00YWE2LWExNDktZmJiNTUzYjg0NjQx
LzEvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcOPwRbJ
9DQzE5uDL9gENXpOVqrIrt0arHdqZa92uchDnfXpF9anJ3aQ6IP9LNW23gkTAMsh
4EBnqpTDuankrixnnoucB8ZgquI94bbBSweLdAfDTi29vKYESXqquH103jEQ89VX
0q37TkiaSD4T53Sp4ewylNZsIZ8UqVEUSBwh2mZEXbI80TveShkKV1ew8DQjrpp1
cQRxPU56WQceCXa0R0nk4ovT7ZyKx5JYLB4ipzBN4hObJ7rpI0T1Y7ivqEV3mhAZ
CUqNRdKRWezuVvmnPzvC31JoSpO4fNO8WbofpbBWKwb3E4+8TSBHlEpBVyY7SkFx
bFkYAp22TGBlpQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:23:41 2025 by rpki-client