Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: nOXmjzWKjKrrUlQoQtjQSGycYKNptpe16fsAHnHzjes=
Subject key identifier: 9D:9C:61:B2:AA:9A:E6:E6:C5:37:4D:F5:E5:44:48:EA:F6:4E:93:A2
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 01975422CB928A7E6913EF31B8015FB0ECF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 10:00:55 +0000
Manifest this update: Mon 09 Jun 2025 10:00:55 +0000
Manifest next update: Tue 10 Jun 2025 10:00:55 +0000
Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: mJDcgqcsAPPoDhyOsc3QOdFisAK2bD6xJ+Axzj/H0MQ=)
3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:cb:92:8a:7e:69:13:ef:31:b8:01:5f:b0:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Jun 9 10:00:55 2025 GMT
Not After : Jun 10 10:00:55 2025 GMT
Subject: CN=9d9c61b2aa9ae6e6c5374df5e54448eaf64e93a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:8f:b7:ca:40:e3:81:c4:dc:d4:93:81:80:
26:d3:e1:27:0e:ab:9f:59:d9:1f:5b:2f:8d:19:43:
ea:23:09:a1:f2:2c:7e:4d:37:18:b8:fa:f3:1a:e7:
08:b0:9c:6e:a6:9d:35:8a:76:fa:b7:9b:87:0a:02:
ef:1d:74:43:f7:38:aa:42:23:27:3d:c5:9e:81:83:
b5:6a:10:5c:85:cb:d2:46:88:e3:cc:23:f4:e2:8f:
8e:ec:46:20:42:a4:f3:19:58:6e:e1:68:20:63:fb:
fe:fd:8c:c1:ff:fb:49:a3:45:73:52:ed:86:9c:83:
37:ba:5e:16:83:94:82:d5:62:94:8d:10:32:dd:0f:
2a:fa:d2:7c:ce:c8:7c:44:d3:d6:28:bd:db:57:5c:
bc:1d:86:ad:4e:85:b3:6e:c9:ef:43:95:ee:4f:65:
a2:38:2d:b3:37:96:04:51:b1:0d:4b:f0:01:0d:b2:
74:5d:a5:5d:de:aa:58:8f:08:58:c8:0e:d6:2f:d3:
e0:bd:ac:15:93:a7:dc:11:2b:00:be:d3:d8:5a:3b:
92:74:4e:bf:8f:a4:7a:fc:a1:a1:f2:5b:5d:62:f6:
49:31:65:61:a3:ca:c8:02:ff:19:32:60:f6:cc:af:
da:8e:b0:ec:36:ee:5c:25:42:23:a4:d9:e8:e5:f5:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9C:61:B2:AA:9A:E6:E6:C5:37:4D:F5:E5:44:48:EA:F6:4E:93:A2
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:16:f3:12:23:92:b1:10:88:c3:02:0b:46:a0:14:72:83:4c:
50:e6:bf:ca:bb:a9:55:1e:b7:f9:f2:43:a6:91:fb:3e:0c:ed:
97:47:8f:ac:d4:23:25:db:eb:cc:01:d8:84:b7:6a:1f:56:54:
0d:9a:08:8e:2f:6a:ea:25:ef:c0:9d:fc:40:92:d0:4e:48:be:
22:b6:18:17:3e:ad:9b:a7:bf:b2:66:5e:1b:33:11:8a:b0:1c:
35:4f:c6:e8:39:0c:9d:ad:59:c1:bd:85:42:c3:78:d3:98:bf:
72:53:5c:a4:08:f0:fb:02:f7:8d:b8:44:95:7f:fc:66:af:75:
1f:f6:8d:f5:13:3a:fe:8f:1a:04:79:8e:0d:71:23:7f:a7:9c:
ca:d0:6d:ec:e0:4a:c9:1a:24:9a:3a:0a:06:c0:3d:33:8a:2d:
a1:e3:9f:c5:cc:07:d6:28:e9:3c:8d:4d:b2:60:10:be:49:5e:
49:44:88:fa:49:52:fc:ed:62:62:8d:3f:5c:f4:6f:0e:d1:1d:
e8:a9:84:e7:e5:bd:2d:e0:19:99:72:b0:35:54:ac:7f:e8:0a:
2a:9c:c4:18:1f:2d:1f:fa:34:fb:2b:0c:86:36:14:c6:6a:dd:
4f:36:ab:99:96:25:1b:e6:6c:02:d8:34:fd:37:23:b9:77:42:
bc:4f:af:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUIsuSin5pE+8xuAFfsOzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZDljOTY5Njc1YTI3ZDUxNWQ4ZmFiMmM2M2NkZTBlZDA1
NjQ5MWUwHhcNMjUwNjA5MTAwMDU1WhcNMjUwNjEwMTAwMDU1WjAzMTEwLwYDVQQD
Eyg5ZDljNjFiMmFhOWFlNmU2YzUzNzRkZjVlNTQ0NDhlYWY2NGU5M2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uiPt8pA44HE3NSTgYAm0+EnDquf
WdkfWy+NGUPqIwmh8ix+TTcYuPrzGucIsJxupp01inb6t5uHCgLvHXRD9ziqQiMn
PcWegYO1ahBchcvSRojjzCP04o+O7EYgQqTzGVhu4WggY/v+/YzB//tJo0VzUu2G
nIM3ul4Wg5SC1WKUjRAy3Q8q+tJ8zsh8RNPWKL3bV1y8HYatToWzbsnvQ5XuT2Wi
OC2zN5YEUbENS/ABDbJ0XaVd3qpYjwhYyA7WL9PgvawVk6fcESsAvtPYWjuSdE6/
j6R6/KGh8ltdYvZJMWVho8rIAv8ZMmD2zK/ajrDsNu5cJUIjpNno5fVBUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2cYbKqmubmxTdN9eVESOr2TpOiMB8GA1UdIwQY
MBaAFFPZyWlnWifVFdj6ssY83g7QVkkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUt
Zjk1YzYwYjQ2NmEwLzEvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUtZjk1YzYwYjQ2NmEw
LzEvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBbzEiOS
sRCIwwILRqAUcoNMUOa/yrupVR63+fJDppH7Pgztl0ePrNQjJdvrzAHYhLdqH1ZU
DZoIji9q6iXvwJ38QJLQTki+IrYYFz6tm6e/smZeGzMRirAcNU/G6DkMna1Zwb2F
QsN405i/clNcpAjw+wL3jbhElX/8Zq91H/aN9RM6/o8aBHmODXEjf6ecytBt7OBK
yRokmjoKBsA9M4otoeOfxcwH1ijpPI1NsmAQvkleSUSI+klS/O1iYo0/XPRvDtEd
6KmE5+W9LeAZmXKwNVSsf+gKKpzEGB8tH/o0+ysMhjYUxmrdTzarmZYlG+ZsAtg0
/TcjuXdCvE+vJQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:27:42 2025 by rpki-client