Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: bGKlBxp60bCIQhfwJx1lB2ibN1sIn+xLhzYoPDQ7Bow=
Subject key identifier: 83:73:EE:CD:D9:25:96:06:1C:40:D2:5C:E5:89:01:CA:4E:B1:C3:56
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 01992367CA557373FEFEF6BA618395652DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 05E9
Signing time: Sun 07 Sep 2025 09:00:28 +0000
Manifest this update: Sun 07 Sep 2025 09:00:28 +0000
Manifest next update: Mon 08 Sep 2025 09:00:28 +0000
Files and hashes: 1: 7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa (hash: 37ijJqs68GCjjpypVGN9wvpiuMLosaLv3KKoBIsmUtU=)
2: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: 6FXUG8CM5bKvFbgkiBfY2menWiblTKkuzBAa+rseLQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:ca:55:73:73:fe:fe:f6:ba:61:83:95:65:2d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Sep 7 09:00:28 2025 GMT
Not After : Sep 8 09:00:28 2025 GMT
Subject: CN=8373eecdd92596061c40d25ce58901ca4eb1c356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:43:16:54:18:8b:b4:f7:ea:fa:bd:40:a3:
ec:99:fa:55:e9:9e:54:25:56:67:be:61:f5:4e:a6:
1e:3a:c3:30:8b:fa:1a:4b:b3:ef:1e:c9:13:19:bd:
97:6c:55:86:8a:14:ce:80:74:02:03:03:b0:b4:7b:
14:1d:a2:70:75:c7:80:1f:54:14:bb:be:ec:f0:8d:
ad:b1:d7:fc:c2:44:96:c9:83:09:6a:8d:f2:5a:f3:
bb:21:b3:27:ab:ed:c8:30:d8:11:f1:c4:93:1a:58:
e3:0e:d8:81:7b:71:b2:64:42:3c:1f:70:cd:8c:f3:
d0:ed:96:3f:af:9c:04:27:69:a4:8d:13:32:f9:07:
89:68:46:4a:26:c5:a3:7e:5b:d9:52:1c:eb:33:43:
67:51:86:ac:4e:11:3a:47:27:98:3e:76:17:50:e9:
13:aa:d7:0c:f2:b2:fc:88:fd:e2:26:99:cb:49:c3:
61:43:fc:55:9e:dc:a3:25:31:b4:48:e0:58:f2:c2:
7d:f0:31:cb:31:9f:17:88:8f:65:ab:a3:eb:4c:52:
c9:f7:1a:8d:1c:57:68:37:dd:05:ea:a0:cf:5a:20:
86:1b:58:ed:0f:ac:c1:8c:2b:55:23:ad:65:c8:03:
05:93:53:19:99:b4:e8:ae:14:af:5b:14:3f:6f:d6:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:73:EE:CD:D9:25:96:06:1C:40:D2:5C:E5:89:01:CA:4E:B1:C3:56
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f7:bd:45:fc:06:f1:aa:49:ea:e4:e9:54:47:8d:c6:f5:07:
c3:3b:3b:c1:50:25:5e:99:d2:8f:15:8c:45:ff:c2:10:cd:23:
ab:c7:40:5b:cd:ee:5b:dc:c1:48:78:92:06:b5:a4:90:2e:bb:
d8:01:41:67:42:fb:ff:8c:bb:75:25:a1:91:fe:3d:32:03:a3:
fb:a5:82:63:c1:ed:11:e0:cf:48:ea:07:d4:ff:ff:8c:11:ff:
e0:d8:81:4f:90:69:ef:51:bd:2d:bb:fb:69:b3:b2:26:97:00:
13:be:fb:8b:ca:67:f0:3b:2d:98:61:84:45:9b:fb:47:e0:95:
6e:19:44:23:4e:2b:dd:71:bf:89:b8:3e:9a:e8:36:41:8f:4c:
cd:d4:cc:48:a7:69:a2:29:22:5f:c8:5f:ec:f3:b0:1c:7a:14:
0e:ea:8c:42:89:38:26:e9:d8:6f:20:b0:a7:fc:33:00:19:eb:
b9:7c:75:74:8b:a2:9c:1a:f9:c8:8c:0a:5c:ad:f4:94:59:8e:
c4:9f:d2:85:4c:e7:24:8e:42:93:72:5a:7e:64:8d:96:91:83:
89:f8:b5:04:44:34:dc:18:28:a6:11:de:53:57:12:c5:79:a9:
04:6e:ef:85:5e:59:df:40:27:91:5d:9b:cc:71:fb:fe:75:f3:
0a:83:00:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjZ8pVc3P+/va6YYOVZS3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjIwN2VmODAyNDI0NGJiYjRhMDEwNmFmMTkyNzAxNTBj
OWY2MjQwHhcNMjUwOTA3MDkwMDI4WhcNMjUwOTA4MDkwMDI4WjAzMTEwLwYDVQQD
Eyg4MzczZWVjZGQ5MjU5NjA2MWM0MGQyNWNlNTg5MDFjYTRlYjFjMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCBDFlQYi7T36vq9QKPsmfpV6Z5U
JVZnvmH1TqYeOsMwi/oaS7PvHskTGb2XbFWGihTOgHQCAwOwtHsUHaJwdceAH1QU
u77s8I2tsdf8wkSWyYMJao3yWvO7IbMnq+3IMNgR8cSTGljjDtiBe3GyZEI8H3DN
jPPQ7ZY/r5wEJ2mkjRMy+QeJaEZKJsWjflvZUhzrM0NnUYasThE6RyeYPnYXUOkT
qtcM8rL8iP3iJpnLScNhQ/xVntyjJTG0SOBY8sJ98DHLMZ8XiI9lq6PrTFLJ9xqN
HFdoN90F6qDPWiCGG1jtD6zBjCtVI61lyAMFk1MZmbTorhSvWxQ/b9aQXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINz7s3ZJZYGHEDSXOWJAcpOscNWMB8GA1UdIwQY
MBaAFPSyB++AJCRLu0oBBq8ZJwFQyfYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2Mt
MzVlMDY5MzQ4ZWIzLzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2MtMzVlMDY5MzQ4ZWIz
LzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPe9RfwG
8apJ6uTpVEeNxvUHwzs7wVAlXpnSjxWMRf/CEM0jq8dAW83uW9zBSHiSBrWkkC67
2AFBZ0L7/4y7dSWhkf49MgOj+6WCY8HtEeDPSOoH1P//jBH/4NiBT5Bp71G9Lbv7
abOyJpcAE777i8pn8DstmGGERZv7R+CVbhlEI04r3XG/ibg+mug2QY9MzdTMSKdp
oikiX8hf7POwHHoUDuqMQok4JunYbyCwp/wzABnruXx1dIuinBr5yIwKXK30lFmO
xJ/ShUznJI5Ck3JafmSNlpGDifi1BEQ03BgophHeU1cSxXmpBG7vhV5Z30AnkV2b
zHH7/nXzCoMApQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:06 2025 by rpki-client