Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier: p+Y0GZjkE0hqbFcc303sg7ANatiurQpeJ58aLobWo64=
Subject key identifier: 5B:46:40:B7:55:0C:B5:4A:D6:02:8B:BC:D7:EE:37:59:1A:C9:EC:0C
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 01973A632BF6C71B8F67C0DC1B0A167B76DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number: 1572
Signing time: Wed 04 Jun 2025 10:01:07 +0000
Manifest this update: Wed 04 Jun 2025 10:01:07 +0000
Manifest next update: Thu 05 Jun 2025 10:01:07 +0000
Files and hashes: 1: 1-qQeR-EbZDs_qM5ldnB8c124Szc.roa (hash: ofMkv+rY3TqWIfaJFchO8QPgkzQdWyH95GmuYP6Ctek=)
2: 1GAA9RXUZFiO200bDHHgj0azbq4.roa (hash: tS4ee1uFzhVa+UdElOzwvh+A6ENy1LuuOQxxEe9qEtY=)
3: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: eEd/iobmrBCi2O5TBL+IcLLg6af4jfgtXy9AzY+L0Do=)
4: S8bkAVPKOZ-Wv8bcLyLv58IY5XI.roa (hash: WjxXP1OmvNWD7wvgFTcDicv8zRYqIUNqNm/DyzGISFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:63:2b:f6:c7:1b:8f:67:c0:dc:1b:0a:16:7b:76:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Jun 4 10:01:07 2025 GMT
Not After : Jun 5 10:01:07 2025 GMT
Subject: CN=5b4640b7550cb54ad6028bbcd7ee37591ac9ec0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:db:9f:4f:5a:0d:51:eb:7b:90:81:81:cc:
e9:ef:b1:94:37:85:b4:b3:ed:d8:c6:b6:b0:89:66:
63:47:23:81:d0:0a:bf:9e:7a:a1:6b:2a:2c:49:57:
25:31:eb:db:78:b4:d7:17:d2:a2:de:d0:af:dc:36:
e3:b0:84:22:a7:d7:b3:09:ef:b9:2b:3a:9b:1f:ce:
28:09:c4:38:9e:02:1f:ac:8a:1f:2a:51:63:8b:1c:
c5:d2:31:b9:9d:f8:8c:db:95:85:b9:a8:35:1c:c5:
d9:50:fc:3d:e0:32:4c:eb:0e:8a:c8:9c:0d:6b:7e:
25:48:d4:b7:5f:c2:d0:06:0f:b5:64:8e:78:b9:4a:
23:58:21:89:9e:6f:f3:9b:00:a8:f3:1c:4a:96:54:
56:33:ba:9d:bd:b4:38:c2:ca:a4:3d:19:73:b9:6c:
5a:d1:d6:22:d4:47:ae:9a:b4:d6:37:46:f8:b5:b5:
7d:a3:fe:c2:12:7a:0a:1a:d8:57:87:6c:58:a4:7f:
1c:be:d8:c9:a6:24:ad:25:92:09:10:7d:e3:31:46:
f0:a0:ce:6d:61:75:3e:f3:aa:79:12:9c:66:2f:e4:
51:18:49:a8:74:6c:67:6e:9a:45:dd:16:41:b3:d7:
c2:4e:ad:b1:2b:58:c6:a3:06:d2:ee:1d:2d:59:87:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:40:B7:55:0C:B5:4A:D6:02:8B:BC:D7:EE:37:59:1A:C9:EC:0C
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b2:6c:fb:d0:a6:c7:72:55:6b:bb:87:29:db:43:f3:cf:3b:
c8:f7:77:ed:49:39:83:42:30:f3:0c:7f:83:7d:3b:a9:75:90:
32:c9:0b:95:dc:b7:94:0a:08:00:24:c3:d7:f2:70:9b:c0:ce:
69:eb:c9:a1:a6:57:0b:1c:01:2e:33:85:f9:58:d6:ba:95:cc:
a6:59:ad:66:e2:87:bc:db:2b:34:8f:62:5c:08:c2:3f:6e:32:
9f:15:37:05:d6:f2:80:c6:17:ec:2b:13:b7:f0:a5:c0:70:43:
31:f9:1b:62:8b:8c:59:86:d3:4c:cd:fd:d2:b1:31:5c:45:9b:
74:65:4d:9c:2e:90:40:4e:0c:bd:2c:a7:d9:e4:ea:a0:e2:fb:
01:d6:ba:e0:52:2b:60:f9:1b:ea:f2:75:85:d8:06:f3:f9:bc:
b0:21:27:86:1a:b5:1e:65:4c:c3:31:4d:5a:83:bb:4c:6c:ac:
73:e3:5a:8f:2d:8a:13:bb:5d:69:d8:da:23:1c:fc:56:33:8d:
66:61:09:b6:55:56:a3:ff:0f:63:0d:90:af:11:ad:aa:5f:33:
a7:ca:52:07:52:de:45:2f:ac:1b:9b:12:b3:8e:48:13:0b:9d:
f0:ee:fc:39:f5:c3:ac:a9:38:31:77:9e:67:2a:36:43:8e:a0:
fa:4a:ab:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc6Yyv2xxuPZ8DcGwoWe3beMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZGUzNDZiNTgwNTMyN2JiYzlkZjVlNDliMTZjOTk3ZWEz
YTEyNTQwHhcNMjUwNjA0MTAwMTA3WhcNMjUwNjA1MTAwMTA3WjAzMTEwLwYDVQQD
Eyg1YjQ2NDBiNzU1MGNiNTRhZDYwMjhiYmNkN2VlMzc1OTFhYzllYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/nbn09aDVHre5CBgczp77GUN4W0
s+3YxrawiWZjRyOB0Aq/nnqhayosSVclMevbeLTXF9Ki3tCv3DbjsIQip9ezCe+5
KzqbH84oCcQ4ngIfrIofKlFjixzF0jG5nfiM25WFuag1HMXZUPw94DJM6w6KyJwN
a34lSNS3X8LQBg+1ZI54uUojWCGJnm/zmwCo8xxKllRWM7qdvbQ4wsqkPRlzuWxa
0dYi1EeumrTWN0b4tbV9o/7CEnoKGthXh2xYpH8cvtjJpiStJZIJEH3jMUbwoM5t
YXU+86p5EpxmL+RRGEmodGxnbppF3RZBs9fCTq2xK1jGowbS7h0tWYcBbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtGQLdVDLVK1gKLvNfuN1kayewMMB8GA1UdIwQY
MBaAFPbeNGtYBTJ7vJ315JsWyZfqOhJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUt
NzNhYjg1NjRiOWNhLzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUtNzNhYjg1NjRiOWNh
LzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7Js+9Cm
x3JVa7uHKdtD8887yPd37Uk5g0Iw8wx/g307qXWQMskLldy3lAoIACTD1/Jwm8DO
aevJoaZXCxwBLjOF+VjWupXMplmtZuKHvNsrNI9iXAjCP24ynxU3BdbygMYX7CsT
t/ClwHBDMfkbYouMWYbTTM390rExXEWbdGVNnC6QQE4MvSyn2eTqoOL7Ada64FIr
YPkb6vJ1hdgG8/m8sCEnhhq1HmVMwzFNWoO7TGysc+Najy2KE7tdadjaIxz8VjON
ZmEJtlVWo/8PYw2QrxGtql8zp8pSB1LeRS+sG5sSs45IEwud8O78OfXDrKk4MXee
Zyo2Q46g+kqrDA==
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:55:46 2025 by rpki-client