Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: h3iHLJVX1Xrddk6+zDDwv+OCwftztlCbKY2bf86imHc=
Subject key identifier: C5:28:62:60:FF:B6:CA:67:F2:C9:29:2F:55:DA:06:2E:60:3F:86:C9
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 01974E57933C67DEA3451D197439B389DFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 0DEA
Signing time: Sun 08 Jun 2025 07:00:51 +0000
Manifest this update: Sun 08 Jun 2025 07:00:51 +0000
Manifest next update: Mon 09 Jun 2025 07:00:51 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: l74I5n6hDIFFjzJ9QMY3Lrtsi2ol0dzsXOhQgXxWKVw=)
2: XI2V1xAOtuCnHnEsCZ4HB4sk5c0.roa (hash: NGuYGkHyS6sZ+OmDpCbd7Xg31/u7/ppig2sfjfcm+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:93:3c:67:de:a3:45:1d:19:74:39:b3:89:df:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Jun 8 07:00:51 2025 GMT
Not After : Jun 9 07:00:51 2025 GMT
Subject: CN=c5286260ffb6ca67f2c9292f55da062e603f86c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:42:3e:07:b1:9d:ee:8e:c6:bc:72:c8:ef:
31:2c:27:70:3d:2e:77:a0:93:25:10:bb:8e:97:35:
e2:08:f7:f7:f3:d3:9f:4c:30:11:9a:ff:a6:c6:43:
76:91:74:0d:b7:14:15:83:1e:e5:3a:a8:6f:0c:1e:
62:ca:b9:bb:68:21:0e:b1:fa:bc:5c:8a:27:4d:48:
44:02:e5:70:a0:2b:bd:c3:e3:16:f9:f9:55:fe:03:
dd:1c:98:78:de:51:17:71:fe:44:bd:a0:d1:ca:90:
8a:db:04:de:d9:13:74:a3:27:53:eb:4b:96:62:b2:
3b:3e:db:2a:82:ef:c0:6c:5d:97:b3:b5:f7:b6:98:
8d:f7:fe:83:87:e0:97:96:03:08:df:60:02:74:57:
73:0e:b1:77:66:83:d6:1d:33:e8:74:c4:f1:91:38:
0a:5a:bc:2b:86:71:6f:6f:47:44:18:c0:b0:3e:5a:
de:c7:85:7a:93:c6:fe:d5:9e:db:ee:be:75:8b:b3:
58:98:9e:d0:e7:7e:68:ef:a2:7b:9e:78:3f:fd:b6:
32:84:48:57:b4:c1:55:58:4b:b3:17:f4:7f:64:01:
53:05:01:5c:33:ab:3a:c4:0e:41:ce:d7:c1:e0:c3:
55:88:3c:99:e4:a3:2e:ec:02:01:25:28:9b:5b:a2:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:28:62:60:FF:B6:CA:67:F2:C9:29:2F:55:DA:06:2E:60:3F:86:C9
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b7:01:36:b4:6d:a6:ce:b1:43:60:e5:48:11:46:cb:87:a0:
be:c7:c7:4a:bf:98:65:3b:35:ba:75:7c:14:f0:b6:a8:cb:c7:
91:4e:26:89:50:83:f2:64:fc:ba:41:69:ea:1a:e8:38:ee:f0:
6a:74:07:44:8e:26:4c:d5:66:57:e5:0e:c9:a8:0f:9d:e0:3e:
fd:b5:66:e1:8f:37:0f:08:36:5a:23:50:75:b7:2e:8c:b4:ba:
f9:24:02:8c:59:82:02:9d:c2:57:7c:61:22:73:8a:77:3a:74:
3a:49:60:f0:52:d9:08:ef:0d:1a:3f:2c:5e:ad:3e:ee:32:a7:
38:f0:d8:70:c9:e1:9e:06:ea:f4:ae:b9:94:d8:ce:c6:72:b7:
17:0b:4c:84:32:72:44:80:16:fa:9a:0f:f6:c7:62:38:b5:69:
ad:2d:e9:d0:24:c7:a4:2f:74:0b:97:d3:24:47:ad:4e:2b:dd:
47:5b:c4:c4:b1:1f:fe:f6:85:3e:22:c9:91:64:53:ab:bc:df:
d5:a2:cc:89:92:26:8f:dd:2b:4a:28:dd:7d:77:71:28:17:e0:
c1:2b:58:c9:52:a7:78:67:ec:3c:2e:85:4e:23:7d:10:f9:4d:
76:c2:89:df:49:d1:b3:c8:3b:de:5d:cb:5a:0f:b8:12:92:44:
12:06:b3:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV5M8Z96jRR0ZdDmzid/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGMyNmM2MjZjNTFjNWRlZjZmMjQ2NmYzOGY1NWIyNTAy
OTY0MmYwHhcNMjUwNjA4MDcwMDUxWhcNMjUwNjA5MDcwMDUxWjAzMTEwLwYDVQQD
EyhjNTI4NjI2MGZmYjZjYTY3ZjJjOTI5MmY1NWRhMDYyZTYwM2Y4NmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/ZCPgexne6OxrxyyO8xLCdwPS53
oJMlELuOlzXiCPf389OfTDARmv+mxkN2kXQNtxQVgx7lOqhvDB5iyrm7aCEOsfq8
XIonTUhEAuVwoCu9w+MW+flV/gPdHJh43lEXcf5EvaDRypCK2wTe2RN0oydT60uW
YrI7Ptsqgu/AbF2Xs7X3tpiN9/6Dh+CXlgMI32ACdFdzDrF3ZoPWHTPodMTxkTgK
WrwrhnFvb0dEGMCwPlrex4V6k8b+1Z7b7r51i7NYmJ7Q535o76J7nng//bYyhEhX
tMFVWEuzF/R/ZAFTBQFcM6s6xA5BztfB4MNViDyZ5KMu7AIBJSibW6LelQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUoYmD/tspn8skpL1XaBi5gP4bJMB8GA1UdIwQY
MBaAFPTcJsYmxRxd728kZvOPVbJQKWQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODct
MjNlMWRhZGYxMDZjLzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODctMjNlMWRhZGYxMDZj
LzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLcBNrRt
ps6xQ2DlSBFGy4egvsfHSr+YZTs1unV8FPC2qMvHkU4miVCD8mT8ukFp6hroOO7w
anQHRI4mTNVmV+UOyagPneA+/bVm4Y83Dwg2WiNQdbcujLS6+SQCjFmCAp3CV3xh
InOKdzp0Oklg8FLZCO8NGj8sXq0+7jKnOPDYcMnhngbq9K65lNjOxnK3FwtMhDJy
RIAW+poP9sdiOLVprS3p0CTHpC90C5fTJEetTivdR1vExLEf/vaFPiLJkWRTq7zf
1aLMiZImj90rSijdfXdxKBfgwStYyVKneGfsPC6FTiN9EPlNdsKJ30nRs8g73l3L
Wg+4EpJEEgazTg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:46:14 2025 by rpki-client