Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: h+JsOWi9PkiNUJ79uqupCFbo54ip6gN7xFEcT48CXgc=
Subject key identifier: 7F:FD:79:30:3F:F4:85:68:EE:60:61:1F:70:FD:66:80:7E:15:F2:71
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 019748C31C2612160BC76DB5DD0215E0B291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 05:00:35 +0000
Manifest this update: Sat 07 Jun 2025 05:00:35 +0000
Manifest next update: Sun 08 Jun 2025 05:00:35 +0000
Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=)
2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: pSRvcPULkaOyqsoHAM/J1xHGM2zf3sFF2+YMSysO9Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:1c:26:12:16:0b:c7:6d:b5:dd:02:15:e0:b2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Jun 7 05:00:35 2025 GMT
Not After : Jun 8 05:00:35 2025 GMT
Subject: CN=7ffd79303ff48568ee60611f70fd66807e15f271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:3a:32:3d:2d:64:a7:7b:de:c7:ea:bb:23:
87:bf:23:71:6b:b6:41:ca:19:f6:6c:8b:2a:c9:5e:
53:7e:ea:a8:83:db:fc:1b:bb:b0:b7:f5:45:3e:90:
30:3b:4b:ad:fa:d5:8c:8a:b6:20:80:fb:b1:15:c8:
ac:01:80:76:fc:a9:5f:c5:b0:e4:7b:25:aa:01:9c:
4e:cb:37:3d:36:95:70:71:ce:11:99:9f:82:16:64:
01:68:29:34:64:ae:e0:d1:0b:2f:89:e1:bb:b9:3a:
ab:85:fc:ad:73:d4:f1:ec:51:2e:ab:33:8a:ea:dd:
46:d5:5a:e1:aa:72:96:74:b9:c3:e6:e2:7f:06:fe:
a5:a4:91:ce:cd:6a:80:ef:03:1c:07:c4:20:e8:be:
b8:58:bf:78:97:1d:6f:29:e8:dc:a0:98:dd:1d:ab:
cf:a3:dd:a0:4a:d7:8a:5d:66:75:62:31:b7:ff:4d:
14:cc:83:63:61:d3:03:f3:04:54:ca:54:03:73:02:
4c:b5:c5:5a:b8:83:10:99:cd:d9:90:1c:e3:1e:07:
b8:17:87:27:c7:5a:00:e9:4a:ea:5a:2a:5e:2a:ff:
14:ad:7b:5a:a3:7f:c8:ab:c0:35:f9:22:2b:1d:72:
3a:e4:22:75:72:d5:65:60:5b:36:25:9c:67:3e:0a:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:79:30:3F:F4:85:68:EE:60:61:1F:70:FD:66:80:7E:15:F2:71
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:af:cc:d7:24:a4:e9:13:1a:e6:24:e6:08:fe:f1:b4:e0:6c:
1d:32:99:15:d5:b3:1c:c8:61:3d:c1:a2:9e:74:1a:53:2b:c1:
5b:fd:86:ad:be:b5:5c:12:21:e8:d5:50:80:d0:90:e7:4d:71:
df:d0:62:5b:6b:24:f0:7a:ec:a6:42:6f:a6:a3:11:80:37:40:
8b:75:93:f0:18:8e:c7:a6:68:fb:73:73:99:70:45:eb:d8:dd:
03:cd:f5:9c:02:ab:75:6a:4d:c8:28:4a:12:ff:54:8b:a9:ec:
ca:6d:bc:2b:31:00:52:b0:73:49:b0:23:b0:9e:d3:e2:a1:04:
f4:69:75:0e:00:b5:ce:12:f0:69:e1:d1:1b:e6:97:99:09:dc:
7b:1d:4e:e4:aa:c5:10:a2:26:dc:11:c2:94:7c:cd:29:4b:3e:
00:89:af:ce:e2:26:86:8a:2f:99:9a:be:1c:0c:9f:8f:5e:cf:
dd:b2:e4:21:73:ad:fa:da:d0:b7:12:77:0c:ac:8f:83:74:6e:
9d:a5:7b:e5:c4:c9:67:72:11:6a:44:f8:d7:15:1d:18:2e:4f:
38:16:16:6c:81:48:cb:78:70:5f:6b:59:de:cf:41:81:66:b5:
fb:3e:b9:31:fc:53:89:a3:e9:8c:22:8c:42:0a:71:7f:ad:01:
e3:9c:84:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwxwmEhYLx2213QIV4LKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUz
ODYxYTQwHhcNMjUwNjA3MDUwMDM1WhcNMjUwNjA4MDUwMDM1WjAzMTEwLwYDVQQD
Eyg3ZmZkNzkzMDNmZjQ4NTY4ZWU2MDYxMWY3MGZkNjY4MDdlMTVmMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosg6Mj0tZKd73sfquyOHvyNxa7ZB
yhn2bIsqyV5Tfuqog9v8G7uwt/VFPpAwO0ut+tWMirYggPuxFcisAYB2/KlfxbDk
eyWqAZxOyzc9NpVwcc4RmZ+CFmQBaCk0ZK7g0QsvieG7uTqrhfytc9Tx7FEuqzOK
6t1G1VrhqnKWdLnD5uJ/Bv6lpJHOzWqA7wMcB8Qg6L64WL94lx1vKejcoJjdHavP
o92gSteKXWZ1YjG3/00UzINjYdMD8wRUylQDcwJMtcVauIMQmc3ZkBzjHge4F4cn
x1oA6UrqWipeKv8UrXtao3/Iq8A1+SIrHXI65CJ1ctVlYFs2JZxnPgqFtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/9eTA/9IVo7mBhH3D9ZoB+FfJxMB8GA1UdIwQY
MBaAFPVnaaQuRCZvA37LOQ1BFf6+OGGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2It
N2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2ItN2EzZmZiMDBiNzE2
LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFK/M1ySk
6RMa5iTmCP7xtOBsHTKZFdWzHMhhPcGinnQaUyvBW/2Grb61XBIh6NVQgNCQ501x
39BiW2sk8HrspkJvpqMRgDdAi3WT8BiOx6Zo+3NzmXBF69jdA831nAKrdWpNyChK
Ev9Ui6nsym28KzEAUrBzSbAjsJ7T4qEE9Gl1DgC1zhLwaeHRG+aXmQncex1O5KrF
EKIm3BHClHzNKUs+AImvzuImhoovmZq+HAyfj17P3bLkIXOt+trQtxJ3DKyPg3Ru
naV75cTJZ3IRakT41xUdGC5POBYWbIFIy3hwX2tZ3s9BgWa1+z65MfxTiaPpjCKM
Qgpxf60B45yEcA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:34:11 2025 by rpki-client