Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
File: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json)
Hash identifier: tdyvGWSljL/CRLFukab3bYq5Omxn61Ud8YKPvKYw8nI=
Subject key identifier: 5E:A5:98:2E:B5:24:58:AF:C5:23:7D:C9:CC:E9:A0:B1:5B:1C:9F:D3
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial: 01993236789CA19705D3FD44A5F3CD54448F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
Manifest number: 013E
Signing time: Wed 10 Sep 2025 06:00:54 +0000
Manifest this update: Wed 10 Sep 2025 06:00:54 +0000
Manifest next update: Thu 11 Sep 2025 06:00:54 +0000
Files and hashes: 1: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: ILKEmiBbMoaambhAdU2ClHEH0jCBkC3Bljt4nSG6L5g=)
2: _R2-unRLTVoARNA84wK9QwIRcHg.roa (hash: pLbQbiX22eVdy+zNJ3CqYse/kH4/484+cWZJ4cChULA=)
3: a3SyScX72L5TkWnjrj7OuShiBm0.roa (hash: EcnC4sDg2JzNdW4ec0ThJsTXhRWMy/yu92wkqgkxq6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:78:9c:a1:97:05:d3:fd:44:a5:f3:cd:54:44:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Validity
Not Before: Sep 10 06:00:54 2025 GMT
Not After : Sep 11 06:00:54 2025 GMT
Subject: CN=5ea5982eb52458afc5237dc9cce9a0b15b1c9fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:e1:91:b4:7b:8b:c6:32:1b:a1:c2:35:d1:
43:9a:76:7b:bb:7f:54:b2:34:d0:58:40:2c:e3:4c:
5c:6a:49:16:be:9b:c7:a6:74:af:0e:42:89:ac:35:
ad:7c:79:9c:71:a6:8b:8c:84:21:4f:7a:34:85:f0:
40:99:17:6e:9c:36:54:75:92:55:29:24:8b:63:44:
17:f9:4d:19:0f:7b:c7:67:75:91:13:d2:58:80:07:
90:5d:37:8a:ed:8a:26:2e:e3:e8:61:e7:bc:b2:4d:
62:2f:0a:e1:ce:cb:19:3b:91:5c:76:69:5e:63:77:
09:0f:79:50:22:69:2f:ab:f2:63:07:fd:65:5d:8c:
55:cd:23:ef:d4:ff:5a:ee:af:7e:0d:49:a9:49:09:
8f:25:95:91:d9:9a:35:98:59:f7:01:eb:a5:20:70:
a1:18:94:c4:01:e2:95:81:a3:70:d3:0c:39:84:91:
37:f9:e2:af:4f:c7:11:e4:1a:3a:ef:e9:cf:80:bf:
fb:dc:be:3f:ba:c0:44:7b:6a:b9:da:f4:c3:a6:2c:
93:a4:c0:14:64:d4:5c:dd:1b:64:88:81:80:ec:a7:
75:f4:ef:ad:88:15:db:9e:df:d0:e0:fd:6b:81:42:
00:6a:f6:b3:a8:78:6f:d5:a1:f7:96:5e:d7:af:43:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A5:98:2E:B5:24:58:AF:C5:23:7D:C9:CC:E9:A0:B1:5B:1C:9F:D3
X509v3 Authority Key Identifier:
keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c4:3e:de:20:67:ad:b6:ac:ee:b2:d7:4a:74:0f:15:0f:27:
8e:1d:b3:d0:da:9c:3a:ac:b2:81:69:df:c2:39:e5:d1:29:ca:
63:6f:83:af:3f:e6:30:32:2f:96:32:b5:ae:fd:bc:60:40:f4:
8d:db:0d:47:21:7f:9d:73:57:5d:1e:14:73:34:c3:3e:df:40:
d1:21:f3:7a:0b:57:43:1f:51:5a:f9:19:cf:02:d0:58:41:86:
66:d7:fa:6d:85:86:d2:2b:ff:f5:59:02:bb:40:8d:d2:0b:27:
85:8f:93:37:0c:0f:07:3e:fa:2e:93:1a:43:57:c3:1f:d6:37:
8e:96:0c:18:40:8c:b0:47:18:97:b6:c6:63:f7:14:ff:6d:bf:
af:4a:9a:b5:9c:da:31:62:79:2d:52:67:75:d3:c8:16:19:df:
bd:43:71:50:d6:13:91:46:80:cd:ed:70:a6:c9:93:ab:ac:de:
03:09:2e:ec:9c:ca:e6:9e:51:f0:79:34:78:5a:22:d5:c3:5c:
b3:cf:fd:95:87:c1:79:34:94:93:6b:6d:75:4a:6f:44:be:8b:
7a:f0:4c:0c:92:d9:3a:13:fc:b3:84:56:ee:e2:96:23:f1:0a:
5c:77:5c:9d:da:e2:54:11:fd:65:92:5a:e7:d4:cd:e8:3c:2e:
2b:f4:7e:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkyNnicoZcF0/1EpfPNVESPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Y2I4NTZkNDI2OTIxOWVkM2EwYzBkYzQ3MzMzMjM2ZjE1
NTk1M2EwHhcNMjUwOTEwMDYwMDU0WhcNMjUwOTExMDYwMDU0WjAzMTEwLwYDVQQD
Eyg1ZWE1OTgyZWI1MjQ1OGFmYzUyMzdkYzljY2U5YTBiMTViMWM5ZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO7hkbR7i8YyG6HCNdFDmnZ7u39U
sjTQWEAs40xcakkWvpvHpnSvDkKJrDWtfHmccaaLjIQhT3o0hfBAmRdunDZUdZJV
KSSLY0QX+U0ZD3vHZ3WRE9JYgAeQXTeK7YomLuPoYee8sk1iLwrhzssZO5Fcdmle
Y3cJD3lQImkvq/JjB/1lXYxVzSPv1P9a7q9+DUmpSQmPJZWR2Zo1mFn3AeulIHCh
GJTEAeKVgaNw0ww5hJE3+eKvT8cR5Bo67+nPgL/73L4/usBEe2q52vTDpiyTpMAU
ZNRc3RtkiIGA7Kd19O+tiBXbnt/Q4P1rgUIAavazqHhv1aH3ll7Xr0P8xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6lmC61JFivxSN9yczpoLFbHJ/TMB8GA1UdIwQY
MBaAFPXLhW1CaSGe06DA3EczMjbxVZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt
ZDY1NjE3YmQzYjRmLzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm
LzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8Q+3iBn
rbas7rLXSnQPFQ8njh2z0NqcOqyygWnfwjnl0SnKY2+Drz/mMDIvljK1rv28YED0
jdsNRyF/nXNXXR4UczTDPt9A0SHzegtXQx9RWvkZzwLQWEGGZtf6bYWG0iv/9VkC
u0CN0gsnhY+TNwwPBz76LpMaQ1fDH9Y3jpYMGECMsEcYl7bGY/cU/22/r0qatZza
MWJ5LVJnddPIFhnfvUNxUNYTkUaAze1wpsmTq6zeAwku7JzK5p5R8Hk0eFoi1cNc
s8/9lYfBeTSUk2ttdUpvRL6LevBMDJLZOhP8s4RW7uKWI/EKXHdcndriVBH9ZZJa
59TN6DwuK/R+mQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:04:16 2025 by rpki-client