Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: 3TvMJS40SdrV7460AbROunRaHwqBl5I25DhidWshXNU=
Subject key identifier: A5:08:BA:82:0D:EE:BA:6F:46:60:5F:D7:11:01:16:37:DB:C8:E7:C7
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 01974E8E68E87F8A77A31126B882CA92FDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0AB1
Signing time: Sun 08 Jun 2025 08:00:45 +0000
Manifest this update: Sun 08 Jun 2025 08:00:45 +0000
Manifest next update: Mon 09 Jun 2025 08:00:45 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: xyd1GBVZq+73pfoabZtH/CpKCxJ4fcJDGzJuVbmZ7oI=)
2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:68:e8:7f:8a:77:a3:11:26:b8:82:ca:92:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Jun 8 08:00:45 2025 GMT
Not After : Jun 9 08:00:45 2025 GMT
Subject: CN=a508ba820deeba6f46605fd711011637dbc8e7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e2:d0:53:fd:f2:17:52:70:d5:aa:e5:12:9d:
d4:b9:63:dc:f4:e3:76:52:25:0d:9e:3d:40:ba:05:
02:38:60:22:24:45:98:a5:39:7b:23:a9:60:1b:36:
a4:81:6e:a3:6b:8e:b0:53:12:5d:aa:9d:6f:94:61:
a9:30:bb:67:59:9b:30:2e:72:db:d8:28:4b:c6:8b:
b9:5a:f8:e9:f9:ca:52:24:f5:9b:6f:9e:f3:c3:c0:
38:43:9f:89:42:ea:44:70:3b:43:f5:05:51:66:47:
2e:2f:52:ca:c9:69:07:17:53:c8:e5:97:74:9b:bd:
20:8c:68:93:c2:ac:a4:68:3f:54:f1:03:67:c1:8a:
4c:82:85:23:cc:f7:fd:63:14:0c:26:3a:5c:b4:15:
38:2d:0b:7c:3a:ec:bc:10:90:12:a4:53:a9:8e:50:
10:28:a8:8c:07:d7:84:4d:4d:b7:a8:04:0d:df:08:
aa:83:9b:f7:97:e3:4d:92:25:73:4c:c7:c9:ee:d1:
88:5b:59:5c:35:48:4b:33:bd:ef:7c:86:73:c1:1b:
af:44:ff:8c:da:fe:ce:95:88:30:67:59:33:cf:af:
75:85:4f:08:de:6a:df:16:f8:be:9b:c9:68:9c:f0:
79:40:3c:6c:4d:c5:79:9a:ed:dd:15:4a:91:ad:96:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:08:BA:82:0D:EE:BA:6F:46:60:5F:D7:11:01:16:37:DB:C8:E7:C7
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:94:ec:c4:68:78:7e:64:d6:11:b7:46:b0:ec:64:c5:b4:a6:
47:67:fe:a7:29:9f:d4:da:e1:9d:6d:6f:ef:5d:9d:ae:91:a0:
f8:f3:bf:38:3d:c9:37:44:ac:95:c3:65:99:29:92:3a:a9:d0:
7e:73:4a:67:2e:a0:b2:3c:ef:0c:ca:56:8f:cf:cf:48:29:7b:
a4:f6:07:00:de:54:ca:99:ef:df:27:8f:06:aa:ca:c6:e6:42:
5e:3d:d2:cc:97:dc:74:30:37:d6:cd:f6:c7:6b:bf:03:34:b5:
a0:05:bb:6d:ce:8f:13:f9:d7:44:67:1e:05:23:74:33:ee:f0:
35:c5:4d:ba:c8:f8:77:37:5f:14:bd:26:e0:bf:30:17:54:43:
0b:1a:18:af:cb:db:38:59:fa:1c:a1:ca:ad:d3:8f:56:b8:ab:
c8:bb:ad:f3:42:8b:02:89:94:ba:c6:d1:87:79:62:89:10:ce:
31:54:a4:f6:ff:1d:d5:1d:d7:c1:f6:a6:4f:ee:f1:9b:47:5d:
c6:dd:c2:59:19:82:ff:bc:c3:f1:d9:98:3c:86:a9:1a:82:ba:
73:02:1d:a0:02:2c:3c:76:28:4f:36:d4:c6:97:86:69:da:c3:
b2:1b:5f:c9:a5:3a:f1:f8:74:16:d5:23:a3:1a:2a:f8:ec:aa:
4b:56:13:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjmjof4p3oxEmuILKkv3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky
NzkyNGIwHhcNMjUwNjA4MDgwMDQ1WhcNMjUwNjA5MDgwMDQ1WjAzMTEwLwYDVQQD
EyhhNTA4YmE4MjBkZWViYTZmNDY2MDVmZDcxMTAxMTYzN2RiYzhlN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+LQU/3yF1Jw1arlEp3UuWPc9ON2
UiUNnj1AugUCOGAiJEWYpTl7I6lgGzakgW6ja46wUxJdqp1vlGGpMLtnWZswLnLb
2ChLxou5Wvjp+cpSJPWbb57zw8A4Q5+JQupEcDtD9QVRZkcuL1LKyWkHF1PI5Zd0
m70gjGiTwqykaD9U8QNnwYpMgoUjzPf9YxQMJjpctBU4LQt8Ouy8EJASpFOpjlAQ
KKiMB9eETU23qAQN3wiqg5v3l+NNkiVzTMfJ7tGIW1lcNUhLM73vfIZzwRuvRP+M
2v7OlYgwZ1kzz691hU8I3mrfFvi+m8lonPB5QDxsTcV5mu3dFUqRrZYThwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUIuoIN7rpvRmBf1xEBFjfbyOfHMB8GA1UdIwQY
MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt
OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2
LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpTsxGh4
fmTWEbdGsOxkxbSmR2f+pymf1NrhnW1v712drpGg+PO/OD3JN0SslcNlmSmSOqnQ
fnNKZy6gsjzvDMpWj8/PSCl7pPYHAN5Uypnv3yePBqrKxuZCXj3SzJfcdDA31s32
x2u/AzS1oAW7bc6PE/nXRGceBSN0M+7wNcVNusj4dzdfFL0m4L8wF1RDCxoYr8vb
OFn6HKHKrdOPVriryLut80KLAomUusbRh3liiRDOMVSk9v8d1R3XwfamT+7xm0dd
xt3CWRmC/7zD8dmYPIapGoK6cwIdoAIsPHYoTzbUxpeGadrDshtfyaU68fh0FtUj
oxoq+OyqS1YTYw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:04:24 2025 by rpki-client