Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: Nmcj8WY+tXxeBLjsOvfuGyxKt6HPDk40JmkNrbmmyLk=
Subject key identifier: 13:25:11:D1:AB:52:98:FD:47:DE:E3:73:FB:A3:31:48:FF:39:17:EC
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 01974EFC7454E7529EF0402B48175C9FF3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 10:00:57 +0000
Manifest this update: Sun 08 Jun 2025 10:00:57 +0000
Manifest next update: Mon 09 Jun 2025 10:00:57 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: 29TH+FCxv1hkYIWxR3B64hO6r2B6jr/JUds6uUOpMTc=)
2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:74:54:e7:52:9e:f0:40:2b:48:17:5c:9f:f3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Jun 8 10:00:57 2025 GMT
Not After : Jun 9 10:00:57 2025 GMT
Subject: CN=132511d1ab5298fd47dee373fba33148ff3917ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:0a:62:3d:ae:dc:da:60:65:f0:fb:56:2d:
1a:1f:4e:13:b4:38:fd:8a:29:20:fb:17:28:bb:b8:
a8:48:55:21:98:aa:a4:54:5c:8a:36:70:3e:60:77:
94:66:bb:ba:f8:db:57:5e:ae:c4:33:fe:08:09:e4:
ce:16:3c:68:1c:fd:cf:45:76:32:3b:33:c8:f2:40:
2e:ff:4a:0b:cd:eb:e5:86:ef:f4:d9:72:01:78:7b:
50:d8:83:09:b0:fa:93:e6:83:fa:22:9b:d1:c5:d3:
e6:c0:55:1c:ea:82:7d:51:25:60:09:d5:16:1e:b6:
81:02:15:c9:1d:a9:8a:97:cd:e4:9e:c6:7b:54:b8:
5f:e9:80:39:79:bf:d7:ff:6d:85:84:25:7d:3d:b3:
78:f0:99:88:11:b1:3e:9e:74:e4:67:fd:2a:81:77:
6e:9d:9d:06:73:b5:fc:2b:b5:9c:ea:b0:23:e7:fa:
cd:c6:89:36:5d:be:a8:9d:00:3f:4b:e6:19:ca:c0:
66:9b:ca:b6:20:fd:b0:c1:4e:44:e2:3e:dc:9a:34:
71:d1:3e:1c:ed:68:39:5c:8e:4e:a7:c4:92:64:da:
47:29:2f:d6:0c:76:66:2b:25:e4:d5:df:4b:66:50:
80:8e:a6:41:b2:e5:9b:00:5c:ed:89:f5:cc:d4:88:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:25:11:D1:AB:52:98:FD:47:DE:E3:73:FB:A3:31:48:FF:39:17:EC
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:d9:f2:55:d1:58:6e:63:d7:41:a3:76:02:85:68:e6:07:
38:82:89:4f:fa:3a:6f:d1:9d:15:a1:b7:5f:9a:e5:1f:18:ca:
58:36:b6:18:da:5b:4a:c4:7f:3f:4f:77:67:e8:fa:a7:d9:b4:
76:52:37:de:8f:8c:93:bc:dd:5b:ab:53:ee:d9:66:ad:ce:c4:
35:5a:30:c2:1a:ca:99:be:40:d1:9f:3a:3b:f4:53:9b:55:3e:
6a:f2:47:e9:3c:93:f0:1d:3a:1e:de:22:fb:3d:fb:7c:67:14:
63:23:73:0f:2e:83:16:5c:73:fa:6c:47:b6:e8:c3:b7:d4:98:
3b:aa:67:8a:11:0f:0a:f8:ca:13:d9:12:c9:c5:15:bf:84:5c:
27:16:d0:a6:84:46:93:46:05:28:30:dd:bc:41:6a:c8:9a:b4:
d6:1f:08:41:d8:6e:88:25:43:11:e2:7a:6f:89:71:74:6d:bb:
44:80:fb:c8:2f:c1:37:ca:63:4e:7c:88:b6:18:b6:1f:9c:71:
32:6b:ff:4c:76:9f:20:14:8e:47:60:42:5b:08:9f:81:52:94:
b2:c3:93:c6:6e:23:39:b4:d1:8e:ab:a0:14:90:cb:63:97:38:
b5:22:c0:23:79:d7:c1:ac:0b:f6:47:b5:32:ec:c9:a2:42:a7:
bd:f6:6c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/HRU51Ke8EArSBdcn/PJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGUyMjViZmI0NTIxOGI5OTc3MTk4MDRlYTI4N2YxNzUx
Y2YyMGUwHhcNMjUwNjA4MTAwMDU3WhcNMjUwNjA5MTAwMDU3WjAzMTEwLwYDVQQD
EygxMzI1MTFkMWFiNTI5OGZkNDdkZWUzNzNmYmEzMzE0OGZmMzkxN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+cKYj2u3NpgZfD7Vi0aH04TtDj9
iikg+xcou7ioSFUhmKqkVFyKNnA+YHeUZru6+NtXXq7EM/4ICeTOFjxoHP3PRXYy
OzPI8kAu/0oLzevlhu/02XIBeHtQ2IMJsPqT5oP6IpvRxdPmwFUc6oJ9USVgCdUW
HraBAhXJHamKl83knsZ7VLhf6YA5eb/X/22FhCV9PbN48JmIEbE+nnTkZ/0qgXdu
nZ0Gc7X8K7Wc6rAj5/rNxok2Xb6onQA/S+YZysBmm8q2IP2wwU5E4j7cmjRx0T4c
7Wg5XI5Op8SSZNpHKS/WDHZmKyXk1d9LZlCAjqZBsuWbAFztifXM1Ii1pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMlEdGrUpj9R97jc/ujMUj/ORfsMB8GA1UdIwQY
MBaAFPUOIlv7RSGLmXcZgE6ih/F1HPIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8xNzIzMTAtM2NiMC00YmIwLTkxYWUt
NDQ2MmExMjZkMDdkLzEvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8xNzIzMTAtM2NiMC00YmIwLTkxYWUtNDQ2MmExMjZkMDdk
LzEvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQebZ8lXR
WG5j10GjdgKFaOYHOIKJT/o6b9GdFaG3X5rlHxjKWDa2GNpbSsR/P093Z+j6p9m0
dlI33o+Mk7zdW6tT7tlmrc7ENVowwhrKmb5A0Z86O/RTm1U+avJH6TyT8B06Ht4i
+z37fGcUYyNzDy6DFlxz+mxHtujDt9SYO6pnihEPCvjKE9kSycUVv4RcJxbQpoRG
k0YFKDDdvEFqyJq01h8IQdhuiCVDEeJ6b4lxdG27RID7yC/BN8pjTnyIthi2H5xx
Mmv/THafIBSOR2BCWwifgVKUssOTxm4jObTRjqugFJDLY5c4tSLAI3nXwawL9ke1
MuzJokKnvfZsmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:37 2025 by rpki-client