Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: oZaTsh9IdPXh8ICqBVXtJ0Y6wux6B5CA7yHam+Dwf9Y=
Subject key identifier: 70:9E:2B:E1:57:71:40:A6:C5:D8:E0:F9:F1:ED:8A:9D:BA:AE:E5:F6
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 0197469E506D75C3622E0B54EDD4111BECE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0514
Signing time: Fri 06 Jun 2025 19:01:09 +0000
Manifest this update: Fri 06 Jun 2025 19:01:09 +0000
Manifest next update: Sat 07 Jun 2025 19:01:09 +0000
Files and hashes: 1: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
2: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: Xu4rXq25KMFvz8cv/KWX+btMJ9gQEhjfiKvalVFb4AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:50:6d:75:c3:62:2e:0b:54:ed:d4:11:1b:ec:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Jun 6 19:01:09 2025 GMT
Not After : Jun 7 19:01:09 2025 GMT
Subject: CN=709e2be1577140a6c5d8e0f9f1ed8a9dbaaee5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:d1:9d:40:33:67:35:1e:70:01:c6:c9:f4:
f6:a5:4c:41:24:ca:65:e8:d9:57:1d:73:5b:9f:2f:
f4:5b:94:31:bd:d0:c1:dc:1e:72:a0:12:3b:a4:11:
59:fc:b3:1a:63:71:22:a0:5a:aa:99:c1:21:05:25:
2b:36:ec:9b:87:79:6c:77:01:e5:49:75:ef:b2:22:
5e:9a:1b:86:8c:d1:13:74:e1:93:70:84:ea:ac:34:
de:9f:f6:fc:2e:e9:f0:73:9d:c0:c8:ee:24:a7:44:
e9:80:3c:96:e5:cd:32:73:5e:86:2b:b1:1f:52:52:
ca:53:62:c9:dd:85:49:d4:87:97:7d:7e:ec:e0:58:
aa:39:01:45:47:83:35:58:5e:fe:18:f4:59:40:37:
76:22:9c:3a:ee:4b:9b:c7:21:7b:4c:b9:bf:4e:3a:
98:d1:23:9a:d4:6e:11:c6:cd:9b:fd:4e:34:44:88:
f0:cb:9f:04:56:c0:ea:64:52:c3:42:66:ee:73:27:
e6:20:37:68:39:bd:36:10:8f:11:df:0a:5c:19:42:
34:1a:30:4f:65:90:be:24:91:cd:a6:82:fa:7d:44:
3a:b9:70:0b:ce:f6:93:cb:d5:58:d0:45:ec:e6:97:
7a:d8:75:96:12:ae:79:ff:92:1b:62:3b:d4:81:28:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:2B:E1:57:71:40:A6:C5:D8:E0:F9:F1:ED:8A:9D:BA:AE:E5:F6
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:99:0d:4e:6f:26:60:96:84:e1:e1:4a:f0:a5:87:f8:35:2a:
35:ad:9a:14:84:b3:0a:5a:c3:e3:49:0c:cd:ba:10:70:dc:11:
37:02:e7:55:e5:c5:6d:27:82:81:8a:0e:a6:70:e1:ea:22:5e:
43:e9:19:cb:8b:a2:b4:b6:df:3f:91:f6:e3:f8:73:84:61:6f:
79:2b:ac:d2:27:c1:70:a3:56:32:4b:d3:30:fb:31:c9:1b:9a:
11:a4:74:39:15:e5:79:61:b6:25:21:4f:62:64:f0:c4:e3:01:
e4:71:05:0e:0f:6a:87:3f:72:c9:ba:aa:7b:24:e7:0a:19:4b:
bb:50:9e:0a:1a:6f:52:49:c3:ce:de:57:d3:8c:5e:68:c7:7a:
b8:3c:ee:61:d6:cb:99:13:d8:ad:e9:01:d2:53:73:28:8a:fe:
ce:d2:f4:75:8d:b8:ac:7e:a7:45:e7:9c:4e:74:47:1d:18:1b:
69:c5:3c:28:24:1f:66:40:cf:aa:5a:12:8e:78:b2:10:a7:3a:
52:c0:40:29:c8:99:34:87:ad:0e:a8:5a:41:32:b3:15:4d:72:
13:78:cd:7d:a7:13:fe:9b:56:c5:8f:32:81:ca:7a:95:4b:6e:
fb:29:b4:f0:77:8c:b6:7b:e1:d5:e8:ed:9b:1e:9c:e3:ba:72:
86:06:d5:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnlBtdcNiLgtU7dQRG+zmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjUwNjA2MTkwMTA5WhcNMjUwNjA3MTkwMTA5WjAzMTEwLwYDVQQD
Eyg3MDllMmJlMTU3NzE0MGE2YzVkOGUwZjlmMWVkOGE5ZGJhYWVlNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSTRnUAzZzUecAHGyfT2pUxBJMpl
6NlXHXNbny/0W5QxvdDB3B5yoBI7pBFZ/LMaY3EioFqqmcEhBSUrNuybh3lsdwHl
SXXvsiJemhuGjNETdOGTcITqrDTen/b8Lunwc53AyO4kp0TpgDyW5c0yc16GK7Ef
UlLKU2LJ3YVJ1IeXfX7s4FiqOQFFR4M1WF7+GPRZQDd2Ipw67kubxyF7TLm/TjqY
0SOa1G4Rxs2b/U40RIjwy58EVsDqZFLDQmbucyfmIDdoOb02EI8R3wpcGUI0GjBP
ZZC+JJHNpoL6fUQ6uXALzvaTy9VY0EXs5pd62HWWEq55/5IbYjvUgSjkgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCeK+FXcUCmxdjg+fHtip26ruX2MB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZkNTm8m
YJaE4eFK8KWH+DUqNa2aFISzClrD40kMzboQcNwRNwLnVeXFbSeCgYoOpnDh6iJe
Q+kZy4uitLbfP5H24/hzhGFveSus0ifBcKNWMkvTMPsxyRuaEaR0ORXleWG2JSFP
YmTwxOMB5HEFDg9qhz9yybqqeyTnChlLu1CeChpvUknDzt5X04xeaMd6uDzuYdbL
mRPYrekB0lNzKIr+ztL0dY24rH6nReecTnRHHRgbacU8KCQfZkDPqloSjniyEKc6
UsBAKciZNIetDqhaQTKzFU1yE3jNfacT/ptWxY8ygcp6lUtu+ym08HeMtnvh1ejt
mx6c47pyhgbV4w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:20:31 2025 by rpki-client