
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: kma++Us1zMQ4/R66EqHFTkVFj5lJQaOBfYXQAhNDqLA=
Subject key identifier: 0D:E0:79:13:4D:F0:C1:F3:DC:34:B9:AC:B8:8D:A6:6C:6F:D9:F8:F4
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 01974BC4976073D09CAB91220D7D0E206E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 127D
Signing time: Sat 07 Jun 2025 19:01:04 +0000
Manifest this update: Sat 07 Jun 2025 19:01:04 +0000
Manifest next update: Sun 08 Jun 2025 19:01:04 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: OFYGSQttG2rXYHcHBcs6fxy4+jeZRUp3ht71lo5qgSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:97:60:73:d0:9c:ab:91:22:0d:7d:0e:20:6e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Jun 7 19:01:04 2025 GMT
Not After : Jun 8 19:01:04 2025 GMT
Subject: CN=0de079134df0c1f3dc34b9acb88da66c6fd9f8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:87:f0:6c:d5:35:9e:1b:7a:25:66:9a:b0:
ee:c7:d3:0c:11:76:fb:88:0e:24:9c:b7:b3:d4:f7:
79:f9:e6:60:02:a5:3e:60:29:f8:7c:49:47:ed:43:
2d:3b:b7:0f:16:7b:ad:2f:e6:79:12:3c:09:77:95:
76:ea:45:5f:2d:2f:2b:c1:b4:ca:02:c5:62:6d:bd:
a5:38:fe:45:e2:3e:2a:57:32:24:92:87:79:ba:2b:
c7:c0:5d:d7:bf:be:f3:0b:b1:a2:1f:0b:80:69:85:
90:f3:b1:d2:c0:0a:a3:12:31:dd:29:45:5d:84:8a:
9e:e8:c4:f5:6b:f4:a5:70:04:25:bb:5a:73:1b:d3:
22:89:db:fc:4d:0f:68:5f:de:83:8c:42:d0:6f:d0:
24:1d:a8:e8:c0:0b:bc:7c:03:84:9e:1c:85:2e:12:
5a:64:7f:fb:73:9d:60:8d:64:ba:49:5d:3a:40:1f:
53:cb:7c:10:9d:71:89:d7:22:29:9a:73:18:ed:b6:
b9:34:e7:1c:4c:9d:56:68:d4:e9:0c:d9:09:6f:2b:
b4:50:95:1f:2c:f4:02:6b:8f:6e:8c:8f:c3:1c:b9:
9f:1d:66:6d:24:83:fb:c5:a9:87:91:24:62:6d:f4:
06:18:cf:57:81:43:01:bd:28:c7:e1:76:4e:b3:6e:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:79:13:4D:F0:C1:F3:DC:34:B9:AC:B8:8D:A6:6C:6F:D9:F8:F4
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9c:ac:a9:92:1c:63:e0:e8:c0:ae:e7:c3:75:d3:28:8a:a0:
a2:ec:07:17:ff:7f:a0:18:30:2a:6d:32:5e:10:b8:3f:39:33:
9f:16:a2:41:05:80:24:ca:94:00:21:19:aa:ae:d2:ea:26:dd:
05:2d:9b:e4:9e:e8:85:6c:e8:59:8a:7f:19:64:c1:2f:ed:84:
d6:54:ee:b8:25:79:cc:61:e8:d8:36:c5:66:57:92:96:1d:d0:
26:6e:96:2d:56:ba:44:7f:25:86:9f:5a:ae:d8:bc:02:82:26:
b9:f3:1e:56:5a:d1:45:56:b7:cb:e3:d6:3b:64:16:df:79:07:
d5:c0:5b:33:2b:60:94:08:d3:56:1f:5a:f1:7d:d4:83:65:bc:
68:40:b4:27:56:47:e7:e9:8c:6e:e6:0f:d5:24:a4:59:69:b7:
10:ec:30:f5:92:1d:1c:97:02:58:48:88:f5:3f:17:28:ff:ea:
70:1c:22:72:09:b5:df:89:e7:42:c8:4f:dc:07:2b:55:78:56:
c8:18:a6:01:10:fe:1b:15:5d:10:f2:34:53:75:ff:27:ae:8c:
5f:62:7c:2f:1b:fd:ee:42:a7:5e:c4:d8:17:51:a8:95:f2:71:
94:bc:19:42:12:cb:d7:53:03:a3:8b:d4:9b:bf:99:e0:35:8c:
1d:50:5e:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxJdgc9Ccq5EiDX0OIG4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzE4NzMzYWFkNDNlZjZhOTliZDhkOTUwNGEyMGRkODkw
MjJlOGYwHhcNMjUwNjA3MTkwMTA0WhcNMjUwNjA4MTkwMTA0WjAzMTEwLwYDVQQD
EygwZGUwNzkxMzRkZjBjMWYzZGMzNGI5YWNiODhkYTY2YzZmZDlmOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhKH8GzVNZ4beiVmmrDux9MMEXb7
iA4knLez1Pd5+eZgAqU+YCn4fElH7UMtO7cPFnutL+Z5EjwJd5V26kVfLS8rwbTK
AsVibb2lOP5F4j4qVzIkkod5uivHwF3Xv77zC7GiHwuAaYWQ87HSwAqjEjHdKUVd
hIqe6MT1a/SlcAQlu1pzG9Miidv8TQ9oX96DjELQb9AkHajowAu8fAOEnhyFLhJa
ZH/7c51gjWS6SV06QB9Ty3wQnXGJ1yIpmnMY7ba5NOccTJ1WaNTpDNkJbyu0UJUf
LPQCa49ujI/DHLmfHWZtJIP7xamHkSRibfQGGM9XgUMBvSjH4XZOs25jawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3geRNN8MHz3DS5rLiNpmxv2fj0MB8GA1UdIwQY
MBaAFPVxhzOq1D72qZvY2VBKIN2JAi6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5Yzgt
ZDcyNWZhNjczMmI2LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5YzgtZDcyNWZhNjczMmI2
LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJysqZIc
Y+DowK7nw3XTKIqgouwHF/9/oBgwKm0yXhC4PzkznxaiQQWAJMqUACEZqq7S6ibd
BS2b5J7ohWzoWYp/GWTBL+2E1lTuuCV5zGHo2DbFZleSlh3QJm6WLVa6RH8lhp9a
rti8AoImufMeVlrRRVa3y+PWO2QW33kH1cBbMytglAjTVh9a8X3Ug2W8aEC0J1ZH
5+mMbuYP1SSkWWm3EOww9ZIdHJcCWEiI9T8XKP/qcBwicgm134nnQshP3AcrVXhW
yBimARD+GxVdEPI0U3X/J66MX2J8Lxv97kKnXsTYF1GolfJxlLwZQhLL11MDo4vU
m7+Z4DWMHVBeXA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:41:03 2025 by rpki-client