Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier: Zn1fbE21uFPJZW89+obp+K41vpoFkZ5ECPfOrlFDmBs=
Subject key identifier: D7:A9:15:5A:D9:54:08:8B:73:A9:CB:3D:C9:17:7E:43:9D:C9:02:38
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 01975CB7CA311F4DDA8AE23E92427D239569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 02:00:38 +0000
Manifest this update: Wed 11 Jun 2025 02:00:38 +0000
Manifest next update: Thu 12 Jun 2025 02:00:38 +0000
Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: 8f3Q9+ij+qRlpe0W+nOl5oeOiv3HZS5D2bCia0QF0zY=)
2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:ca:31:1f:4d:da:8a:e2:3e:92:42:7d:23:95:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Jun 11 02:00:38 2025 GMT
Not After : Jun 12 02:00:38 2025 GMT
Subject: CN=d7a9155ad954088b73a9cb3dc9177e439dc90238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f2:82:f8:35:62:89:36:22:9c:48:c1:c0:50:
d2:48:ce:39:c8:98:0d:59:c7:15:95:2b:87:48:69:
b5:62:72:c6:07:e8:7d:da:35:ec:28:c2:db:f4:b5:
fd:4b:56:e6:aa:a8:4a:f1:1c:d5:54:59:18:83:2b:
f0:ae:39:d8:87:bc:c2:ae:ab:74:21:55:e5:73:a1:
1b:29:7c:ac:2d:86:09:1e:a5:39:10:b5:21:21:2d:
2d:e0:1f:7b:b4:96:39:19:da:0d:6e:ed:d9:e1:29:
03:7a:a6:6c:fb:11:9a:7c:d5:19:3d:73:89:d0:bb:
8f:d9:9f:ab:28:74:13:22:17:c7:bb:b8:1a:02:e5:
b3:34:4b:58:f4:f9:aa:1e:65:00:ca:96:14:e6:b9:
d6:5f:13:e8:64:94:25:d6:a9:78:9c:69:0f:0b:35:
6d:af:d6:1d:59:15:63:79:ac:ea:bd:dd:db:31:1e:
2b:97:51:42:bb:2c:ce:26:a6:f4:22:23:a3:d0:2c:
2f:b0:c7:5c:2c:b9:9d:08:90:de:e0:f5:da:38:fd:
c9:bf:68:b1:56:0b:c4:a8:9f:b6:5a:98:89:ce:c5:
ff:94:0a:31:1b:95:e5:74:34:92:f4:80:12:1c:97:
d6:9b:8a:5f:cd:7b:93:76:6e:17:8d:d9:e2:1b:3f:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A9:15:5A:D9:54:08:8B:73:A9:CB:3D:C9:17:7E:43:9D:C9:02:38
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:68:69:22:72:2e:2e:94:ee:19:ca:34:f3:e5:d3:08:11:39:
da:78:38:a3:c7:8a:f1:92:a1:18:a7:03:cc:01:82:6b:ae:ad:
5d:20:32:f7:f9:11:76:e3:45:54:f0:26:6a:a1:77:9d:18:63:
a6:f6:79:02:1c:2d:49:07:14:50:fb:88:f4:f6:54:ae:df:41:
17:c6:95:54:6e:9f:6f:b9:f4:f3:17:aa:60:da:b6:dc:db:21:
f2:35:db:c1:15:81:f4:04:8f:aa:e1:6b:bd:0c:17:78:7c:a5:
65:e2:27:69:cc:05:a8:fe:e4:43:64:10:5c:4a:70:3a:4d:75:
ed:81:13:f8:56:c9:c9:44:95:1f:3c:87:a4:6e:26:22:a3:d4:
ee:f9:51:a8:17:d1:19:19:70:03:a7:85:90:dd:05:10:0c:0d:
6a:c2:b0:b3:6b:7f:de:7d:87:28:6e:72:c2:47:d5:e9:80:c1:
36:7d:30:8d:0b:31:70:64:0a:30:ee:bb:c3:1e:27:2c:54:27:
f2:7a:6e:b9:4b:d5:0d:71:6e:73:36:db:cb:71:dc:31:2a:72:
ba:7e:26:55:38:42:df:fb:b6:7e:ce:5f:b6:7e:94:7f:94:5f:
5e:73:94:51:23:eb:41:da:10:78:56:9b:34:84:b0:c5:7e:d2:
39:f8:89:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdct8oxH03aiuI+kkJ9I5VpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTU0ZDAxMDNhN2EzZTY1MjM1NGE3NDQ4OWY4NmRhZjlh
MWE1OWQwHhcNMjUwNjExMDIwMDM4WhcNMjUwNjEyMDIwMDM4WjAzMTEwLwYDVQQD
EyhkN2E5MTU1YWQ5NTQwODhiNzNhOWNiM2RjOTE3N2U0MzlkYzkwMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPKC+DViiTYinEjBwFDSSM45yJgN
WccVlSuHSGm1YnLGB+h92jXsKMLb9LX9S1bmqqhK8RzVVFkYgyvwrjnYh7zCrqt0
IVXlc6EbKXysLYYJHqU5ELUhIS0t4B97tJY5GdoNbu3Z4SkDeqZs+xGafNUZPXOJ
0LuP2Z+rKHQTIhfHu7gaAuWzNEtY9PmqHmUAypYU5rnWXxPoZJQl1ql4nGkPCzVt
r9YdWRVjeazqvd3bMR4rl1FCuyzOJqb0IiOj0CwvsMdcLLmdCJDe4PXaOP3Jv2ix
VgvEqJ+2WpiJzsX/lAoxG5XldDSS9IASHJfWm4pfzXuTdm4XjdniGz+GwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNepFVrZVAiLc6nLPckXfkOdyQI4MB8GA1UdIwQY
MBaAFPaVTQEDp6PmUjVKdEifhtr5oaWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAt
ZjhjOWUwOTYyMzU0LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAtZjhjOWUwOTYyMzU0
LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWhpInIu
LpTuGco08+XTCBE52ng4o8eK8ZKhGKcDzAGCa66tXSAy9/kRduNFVPAmaqF3nRhj
pvZ5AhwtSQcUUPuI9PZUrt9BF8aVVG6fb7n08xeqYNq23Nsh8jXbwRWB9ASPquFr
vQwXeHylZeInacwFqP7kQ2QQXEpwOk117YET+FbJyUSVHzyHpG4mIqPU7vlRqBfR
GRlwA6eFkN0FEAwNasKws2t/3n2HKG5ywkfV6YDBNn0wjQsxcGQKMO67wx4nLFQn
8npuuUvVDXFuczbby3HcMSpyun4mVThC3/u2fs5ftn6Uf5RfXnOUUSPrQdoQeFab
NISwxX7SOfiJ5A==
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:16:22 2025 by rpki-client