Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: KVivayIwpBT2uvsMU6K5yqVKSLUby64t3uQ86pEPlz0=
Subject key identifier: BD:5F:37:56:DC:03:9A:51:36:C1:22:AF:49:88:96:E0:61:27:46:1D
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 0197488D391B45FB345A8BDD6ED2EEA29B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0B44
Signing time: Sat 07 Jun 2025 04:01:44 +0000
Manifest this update: Sat 07 Jun 2025 04:01:44 +0000
Manifest next update: Sun 08 Jun 2025 04:01:44 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: VXvAUCpMMIZ4meUYwTr7QEw9IvT6u+/3t7qxMf61h6k=)
2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:39:1b:45:fb:34:5a:8b:dd:6e:d2:ee:a2:9b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Jun 7 04:01:44 2025 GMT
Not After : Jun 8 04:01:44 2025 GMT
Subject: CN=bd5f3756dc039a5136c122af498896e06127461d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:8f:53:bb:0d:d0:6d:59:01:48:31:6e:c0:
ad:6c:34:db:d5:6a:61:17:af:21:8d:3d:8d:06:4a:
ee:4d:56:dd:a3:b7:f2:d4:69:1a:ad:d2:c6:cb:9b:
97:7d:d3:9a:1c:b3:3b:0c:9d:ab:82:bd:8a:e8:a4:
57:07:c1:ec:97:19:11:a3:4e:f7:4f:d6:55:59:99:
17:a3:0e:23:a7:97:fc:fe:30:6c:ae:2d:e9:ca:85:
2c:e4:37:1d:d2:b3:c5:a2:27:10:69:1a:66:b2:74:
70:55:65:cf:8c:ef:82:f5:21:4a:b8:13:f4:90:a2:
30:6b:4f:6d:15:88:44:c7:61:fa:61:a3:14:ac:9b:
ad:c7:25:d1:4e:c4:fc:65:15:2b:56:a1:7b:06:24:
4c:7b:5d:fc:7a:1c:3e:20:c5:6a:5c:a2:db:9b:d0:
ba:f5:50:94:26:a8:92:4b:8b:35:62:52:8f:e9:a8:
b7:dd:99:24:89:d2:21:ba:97:dd:4c:9c:b0:57:c4:
95:5d:9e:90:de:f2:9e:a4:7c:a3:da:7c:40:04:76:
dd:e0:8b:73:8e:9d:59:3e:29:8c:da:55:19:2e:72:
d2:ff:e7:98:46:b0:ba:1b:b1:21:da:74:d3:d4:16:
4c:cf:b8:16:07:8c:b8:40:35:e8:86:81:e0:7f:ed:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5F:37:56:DC:03:9A:51:36:C1:22:AF:49:88:96:E0:61:27:46:1D
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:12:c6:da:89:49:3e:72:08:e8:70:fd:7e:0e:95:97:cf:81:
8a:3e:6f:cb:d7:eb:76:42:7f:4a:b3:47:1a:b0:10:31:af:dd:
0a:b4:e6:f6:c0:f0:d0:34:5c:a9:6c:94:28:2c:70:0d:60:e6:
73:75:76:5d:ab:a1:82:60:a1:8e:75:3f:9b:20:81:96:67:ef:
df:ab:6a:5f:20:bd:c5:18:a5:cb:20:98:b4:36:a4:36:43:2e:
6e:83:08:77:19:61:15:4e:0e:82:b3:35:ac:0e:09:67:e5:58:
6f:dd:fe:e7:58:90:b5:f5:10:47:4d:75:e1:de:b9:2a:7b:4f:
82:1d:da:d0:cf:3c:37:89:f7:72:93:cb:09:48:67:26:6b:35:
41:cb:72:c6:26:1a:36:b2:3a:3b:06:35:5f:07:67:d7:bd:a1:
f6:67:9b:65:aa:c4:02:7c:9f:2f:54:a2:52:df:b5:96:e9:cf:
b3:d3:45:f4:ab:5a:13:54:f4:9e:6e:21:f1:5b:fa:e1:bb:b7:
aa:06:0d:b4:ad:ff:76:b6:58:96:a1:69:d4:e6:2a:39:4a:81:
06:5b:0c:b9:f9:c3:30:b6:ac:45:b5:9f:79:ea:69:ea:66:e5:
15:62:85:28:90:2f:7b:c7:e9:24:8e:0e:6b:1d:85:97:e1:ea:
a9:b5:78:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjTkbRfs0WovdbtLuopt1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTUyN2EwNmEwMzVjYmNhZWNmMDBkYWNhMmZkODgzOTlj
ZjlkMTIwHhcNMjUwNjA3MDQwMTQ0WhcNMjUwNjA4MDQwMTQ0WjAzMTEwLwYDVQQD
EyhiZDVmMzc1NmRjMDM5YTUxMzZjMTIyYWY0OTg4OTZlMDYxMjc0NjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28aPU7sN0G1ZAUgxbsCtbDTb1Wph
F68hjT2NBkruTVbdo7fy1GkardLGy5uXfdOaHLM7DJ2rgr2K6KRXB8HslxkRo073
T9ZVWZkXow4jp5f8/jBsri3pyoUs5Dcd0rPFoicQaRpmsnRwVWXPjO+C9SFKuBP0
kKIwa09tFYhEx2H6YaMUrJutxyXRTsT8ZRUrVqF7BiRMe138ehw+IMVqXKLbm9C6
9VCUJqiSS4s1YlKP6ai33ZkkidIhupfdTJywV8SVXZ6Q3vKepHyj2nxABHbd4Itz
jp1ZPimM2lUZLnLS/+eYRrC6G7Eh2nTT1BZMz7gWB4y4QDXohoHgf+32PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1fN1bcA5pRNsEir0mIluBhJ0YdMB8GA1UdIwQY
MBaAFPaVJ6BqA1y8rs8A2sov2IOZz50SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYt
ODVjODU1MjI3YjIzLzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYtODVjODU1MjI3YjIz
LzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARLG2olJ
PnII6HD9fg6Vl8+Bij5vy9frdkJ/SrNHGrAQMa/dCrTm9sDw0DRcqWyUKCxwDWDm
c3V2XauhgmChjnU/myCBlmfv36tqXyC9xRilyyCYtDakNkMuboMIdxlhFU4OgrM1
rA4JZ+VYb93+51iQtfUQR0114d65KntPgh3a0M88N4n3cpPLCUhnJms1QctyxiYa
NrI6OwY1Xwdn172h9mebZarEAnyfL1SiUt+1lunPs9NF9KtaE1T0nm4h8Vv64bu3
qgYNtK3/drZYlqFp1OYqOUqBBlsMufnDMLasRbWfeepp6mblFWKFKJAve8fpJI4O
ax2Fl+HqqbV47g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:53 2025 by rpki-client