Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: Upzp7khBNxUh49cnJ9p8Bc1XgwttuaY7mGZ+Tp/Lg2c=
Subject key identifier: B5:37:45:F3:5D:52:9B:00:7A:06:F1:E8:B6:70:19:D0:71:A5:48:3A
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 01974855788E5A72F4A77C45D35778712DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 09C0
Signing time: Sat 07 Jun 2025 03:00:50 +0000
Manifest this update: Sat 07 Jun 2025 03:00:50 +0000
Manifest next update: Sun 08 Jun 2025 03:00:50 +0000
Files and hashes: 1: aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa (hash: tukb95Gwd6x2BRzhLsZA0PSUEck+o+zvt8A2/7nuQh4=)
2: aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa (hash: o539XDvH7v6Q1Bwgk0cJJENARzLE2fligJ+8v8cr/cU=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: Zbaxl4PSByaatxjZe3jZ+JjT2oNH2vwjovuIFezI6Fo=)
4: tI9ka3nY65XI0hS6cPovdv7yr60.roa (hash: +06LGDfkS/BJNhqCcOcJbY1vvOjfeeWWAoEc0fhS6DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:78:8e:5a:72:f4:a7:7c:45:d3:57:78:71:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Jun 7 03:00:50 2025 GMT
Not After : Jun 8 03:00:50 2025 GMT
Subject: CN=b53745f35d529b007a06f1e8b67019d071a5483a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d5:93:82:91:68:ba:d4:f8:fb:7f:0d:0b:41:
eb:d7:b5:21:5e:ba:d3:ba:45:5c:fa:cc:0d:b7:2e:
a2:39:45:05:e0:9c:0f:c2:18:35:48:40:3a:1f:c0:
da:a2:f6:d2:8b:0d:6b:f2:2f:86:a7:35:73:e0:05:
60:a7:fa:51:f2:6d:e0:09:46:cb:e2:81:e0:da:ce:
c0:b9:a7:a0:0a:15:a8:58:43:5a:f8:8b:57:31:54:
dd:aa:3c:f4:2c:18:db:f0:b8:c4:95:90:d4:c1:a4:
9f:45:14:61:32:47:72:16:4a:41:d7:db:1c:e7:13:
7b:6d:ab:9c:4a:f0:bb:ad:74:dc:11:29:41:fa:fa:
85:32:f0:3a:31:73:0d:9a:78:20:12:92:47:de:88:
33:b1:7f:ad:2e:8c:98:84:23:e1:06:69:96:40:74:
14:74:df:0b:5d:ac:ca:e1:17:8b:07:90:7a:f2:0f:
b5:00:7a:dd:3e:84:cf:34:27:18:0d:24:85:a9:1e:
b3:40:0f:8b:e3:fc:fd:8b:c5:51:7e:3c:4f:65:1f:
20:60:9e:a8:9e:03:ec:03:5c:56:0c:4d:36:35:08:
d8:cc:f0:0c:af:28:3e:59:93:fc:5d:90:c6:04:8f:
9d:4b:9b:e1:4c:41:b0:dc:b0:20:97:e3:44:09:b8:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:37:45:F3:5D:52:9B:00:7A:06:F1:E8:B6:70:19:D0:71:A5:48:3A
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fb:7d:bd:0c:82:30:9d:81:0a:dc:aa:c5:b4:f7:cd:4b:85:
38:49:ab:fc:7e:f8:d2:2d:3a:ab:ca:79:b9:3e:92:a0:c2:bd:
c2:8c:95:78:52:3c:49:91:63:c2:4f:04:79:b4:19:e9:70:14:
e7:e7:ae:4f:37:13:88:34:91:71:1d:80:a2:6a:18:d3:73:ee:
3e:73:97:f2:06:43:29:89:df:fe:b2:0a:76:12:bd:70:a0:65:
ed:28:54:b6:80:0d:9d:71:a5:2b:b7:48:0a:2d:8a:2a:ce:0d:
c0:7b:2c:16:df:4a:3e:80:d6:f1:7d:96:b4:e0:cd:3a:36:38:
ab:8c:9c:9b:a8:f9:72:c8:90:d4:fe:83:f9:e7:6c:d1:4e:c6:
46:c0:8a:e9:33:26:b6:ae:a0:0e:c0:0d:94:1e:aa:32:c2:aa:
65:0e:1c:9c:74:c7:89:b0:f2:64:62:b5:80:57:1c:7e:1b:f5:
66:3f:a3:c0:42:2d:fe:98:89:16:e5:48:76:95:fd:84:87:fb:
c9:1f:13:78:c3:bd:69:09:88:a8:33:a4:a7:c9:03:d7:a5:bb:
c8:d0:57:d2:96:46:56:23:f8:f7:6c:f2:7d:3d:4f:f6:46:d3:
25:f8:37:4a:74:b9:e0:b6:7f:9e:87:b2:16:fb:72:d6:34:ad:
10:e4:0d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVXiOWnL0p3xF01d4cS2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODZiZDg4MmU0NzZlNDY5ODMxOGYzNzA3MTJmNzFjMmJm
NTBkZmMwHhcNMjUwNjA3MDMwMDUwWhcNMjUwNjA4MDMwMDUwWjAzMTEwLwYDVQQD
EyhiNTM3NDVmMzVkNTI5YjAwN2EwNmYxZThiNjcwMTlkMDcxYTU0ODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69WTgpFoutT4+38NC0Hr17UhXrrT
ukVc+swNty6iOUUF4JwPwhg1SEA6H8DaovbSiw1r8i+GpzVz4AVgp/pR8m3gCUbL
4oHg2s7AuaegChWoWENa+ItXMVTdqjz0LBjb8LjElZDUwaSfRRRhMkdyFkpB19sc
5xN7baucSvC7rXTcESlB+vqFMvA6MXMNmnggEpJH3ogzsX+tLoyYhCPhBmmWQHQU
dN8LXazK4ReLB5B68g+1AHrdPoTPNCcYDSSFqR6zQA+L4/z9i8VRfjxPZR8gYJ6o
ngPsA1xWDE02NQjYzPAMryg+WZP8XZDGBI+dS5vhTEGw3LAgl+NECbjuewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU3RfNdUpsAegbx6LZwGdBxpUg6MB8GA1UdIwQY
MBaAFJuGvYguR25GmDGPNwcS9xwr9Q38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQt
YmZjNzNkZDBiYmI2LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQtYmZjNzNkZDBiYmI2
LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABft9vQyC
MJ2BCtyqxbT3zUuFOEmr/H740i06q8p5uT6SoMK9woyVeFI8SZFjwk8EebQZ6XAU
5+euTzcTiDSRcR2AomoY03PuPnOX8gZDKYnf/rIKdhK9cKBl7ShUtoANnXGlK7dI
Ci2KKs4NwHssFt9KPoDW8X2WtODNOjY4q4ycm6j5csiQ1P6D+eds0U7GRsCK6TMm
tq6gDsANlB6qMsKqZQ4cnHTHibDyZGK1gFccfhv1Zj+jwEIt/piJFuVIdpX9hIf7
yR8TeMO9aQmIqDOkp8kD16W7yNBX0pZGViP492zyfT1P9kbTJfg3SnS54LZ/noey
Fvty1jStEOQNQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:15 2025 by rpki-client