Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: mHbzT29SlTOGRRX/41NCFtRGBpMuartAohcT0m9gtIc=
Subject key identifier: 29:B0:91:DA:2D:B1:A5:A6:CF:F2:4F:DF:C3:E7:6E:9B:04:BE:0C:89
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 01974666E05A5E3DA0BB6F7926B5362BFC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 0B28
Signing time: Fri 06 Jun 2025 18:00:36 +0000
Manifest this update: Fri 06 Jun 2025 18:00:36 +0000
Manifest next update: Sat 07 Jun 2025 18:00:36 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: cNIcE68sRAZUVopr5UMVa0wJIUJaMfgvfV6PO6sepJQ=)
2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:e0:5a:5e:3d:a0:bb:6f:79:26:b5:36:2b:fc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: Jun 6 18:00:36 2025 GMT
Not After : Jun 7 18:00:36 2025 GMT
Subject: CN=29b091da2db1a5a6cff24fdfc3e76e9b04be0c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:c3:21:0f:c5:58:5c:37:56:a0:db:72:cd:
8f:22:02:37:6a:e6:aa:4d:bf:cb:72:0c:04:6e:e2:
9b:11:3d:c4:a5:31:4b:b2:46:80:61:92:4d:fb:a4:
1f:92:e8:87:44:d8:f7:db:3d:c6:3d:aa:b3:10:73:
83:d9:c8:7a:c4:fb:bc:28:bc:c9:86:d5:51:3f:b4:
5d:bb:e4:82:88:6f:dd:85:0e:bc:87:d2:13:b4:c6:
94:8e:fb:8d:0e:61:7d:e0:c0:d5:d3:6d:ca:83:71:
ee:ac:95:14:da:5b:0a:7c:1e:36:94:fb:39:2d:f2:
8f:b4:dc:cf:bd:40:16:fd:94:87:e4:48:ba:6c:f7:
7e:b0:e6:3c:6c:71:70:71:b2:8f:1e:91:6c:09:45:
29:94:68:91:60:58:ce:98:3b:92:af:0d:8d:73:dd:
4d:47:9d:2e:c4:c1:e4:9a:3d:5a:dd:2a:4d:73:97:
c1:21:2a:20:b9:f6:f4:d3:df:22:6f:dc:ea:87:70:
12:3b:b3:02:4a:44:52:59:85:8c:16:8b:eb:02:71:
21:88:c1:ed:88:49:a2:6b:a9:a5:72:9d:49:8b:60:
c5:f7:ea:50:47:50:5e:c2:08:ab:e1:a4:0b:86:8f:
bc:71:eb:16:06:0e:7d:45:de:9c:07:5e:38:83:f8:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B0:91:DA:2D:B1:A5:A6:CF:F2:4F:DF:C3:E7:6E:9B:04:BE:0C:89
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:12:92:30:da:aa:fd:fd:38:20:3d:dd:15:68:4e:3b:73:0c:
fd:ce:4a:a3:92:75:a3:80:eb:9e:d5:b6:77:02:88:6c:48:b5:
54:45:66:a0:cc:5e:b9:47:b0:3f:71:fc:f2:a7:8c:60:2d:ed:
ce:ea:1a:b5:a6:fd:6f:50:00:c4:76:f2:3c:dd:8d:03:ce:4f:
87:bf:6b:fa:c0:56:8e:fe:5e:01:11:89:0f:d9:d1:bd:7e:63:
60:bb:b8:bd:27:87:43:8b:11:5a:4a:c1:e1:55:53:b1:dd:15:
1a:7b:16:39:4f:46:fb:b2:25:3f:f3:77:1f:1c:1d:cf:05:6e:
69:a3:95:90:92:2c:82:d4:08:a8:43:59:2b:3d:8e:bf:20:dc:
a0:3b:bf:03:40:48:11:9a:95:ea:58:36:5f:ae:d5:5d:cf:35:
f8:5c:f5:d2:2e:32:0b:9a:6c:57:5b:9a:cb:04:41:ca:b3:74:
62:5c:32:b7:3e:2b:31:63:01:9a:53:73:13:65:b7:fc:7d:1f:
0c:22:fb:19:27:0f:fa:b6:1b:3c:a6:58:7a:f2:99:9d:80:52:
f9:fa:5e:31:7f:e6:a2:34:83:37:c7:32:f2:b7:3d:50:5e:b1:
0e:34:8d:ee:fb:17:f2:2a:88:b5:ff:28:e0:f7:f9:7a:88:1c:
ad:e7:44:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZuBaXj2gu295JrU2K/xvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZGQ0MmNjZDEzZDdmOGE3YzNlZGE1YjU1MDJkOGQ2ZGNi
YmJlMTEwHhcNMjUwNjA2MTgwMDM2WhcNMjUwNjA3MTgwMDM2WjAzMTEwLwYDVQQD
EygyOWIwOTFkYTJkYjFhNWE2Y2ZmMjRmZGZjM2U3NmU5YjA0YmUwYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3/DIQ/FWFw3VqDbcs2PIgI3auaq
Tb/LcgwEbuKbET3EpTFLskaAYZJN+6QfkuiHRNj32z3GPaqzEHOD2ch6xPu8KLzJ
htVRP7Rdu+SCiG/dhQ68h9ITtMaUjvuNDmF94MDV023Kg3HurJUU2lsKfB42lPs5
LfKPtNzPvUAW/ZSH5Ei6bPd+sOY8bHFwcbKPHpFsCUUplGiRYFjOmDuSrw2Nc91N
R50uxMHkmj1a3SpNc5fBISogufb0098ib9zqh3ASO7MCSkRSWYWMFovrAnEhiMHt
iEmia6mlcp1Ji2DF9+pQR1Bewgir4aQLho+8cesWBg59Rd6cB144g/jT+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmwkdotsaWmz/JP38PnbpsEvgyJMB8GA1UdIwQY
MBaAFEvdQszRPX+KfD7aW1UC2Nbcu74RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mYzhlMjItOWEzYi00NjQ2LWJhYmUt
MWNhMjEyMGVlNDM2LzEvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mYzhlMjItOWEzYi00NjQ2LWJhYmUtMWNhMjEyMGVlNDM2
LzEvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxKSMNqq
/f04ID3dFWhOO3MM/c5Ko5J1o4DrntW2dwKIbEi1VEVmoMxeuUewP3H88qeMYC3t
zuoatab9b1AAxHbyPN2NA85Ph79r+sBWjv5eARGJD9nRvX5jYLu4vSeHQ4sRWkrB
4VVTsd0VGnsWOU9G+7IlP/N3HxwdzwVuaaOVkJIsgtQIqENZKz2OvyDcoDu/A0BI
EZqV6lg2X67VXc81+Fz10i4yC5psV1uaywRByrN0Ylwytz4rMWMBmlNzE2W3/H0f
DCL7GScP+rYbPKZYevKZnYBS+fpeMX/mojSDN8cy8rc9UF6xDjSN7vsX8iqItf8o
4Pf5eogcredECw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:43:35 2025 by rpki-client