Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: qWUkJeNSGH1fcbRy3UlyU70k6biJhd53yDJTxRdNLak=
Subject key identifier: 3B:B2:CC:DB:74:32:5C:DA:EF:80:D3:F8:4C:07:E6:E1:47:A3:85:4E
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 01974BC40166229BEA9D81B24EB67AE3311B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 19:00:25 +0000
Manifest this update: Sat 07 Jun 2025 19:00:25 +0000
Manifest next update: Sun 08 Jun 2025 19:00:25 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: FjnxnBb6CopK9VNHYUQXi/b38RNkpfaaAsDJl9PMuzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:01:66:22:9b:ea:9d:81:b2:4e:b6:7a:e3:31:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Jun 7 19:00:25 2025 GMT
Not After : Jun 8 19:00:25 2025 GMT
Subject: CN=3bb2ccdb74325cdaef80d3f84c07e6e147a3854e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:11:f5:1f:e0:aa:73:e9:e5:ce:45:6c:83:
c2:19:0e:30:e9:8b:ab:ee:66:30:73:9e:9e:5a:87:
4b:2a:88:db:b2:26:6e:b7:62:d3:b4:6e:7c:36:4d:
d1:3f:88:70:06:51:93:53:de:38:87:24:a9:30:f6:
35:1d:7c:ae:69:b4:27:f2:9f:a7:e0:7f:1d:45:da:
80:08:84:f4:b7:d2:fa:e3:16:0d:10:c9:1b:b8:c5:
19:91:dc:ed:8c:23:e3:b1:59:68:e9:a5:26:7e:55:
16:6e:77:9b:60:b2:e5:e9:69:1c:c2:30:3f:79:75:
f9:30:de:8e:04:94:dd:88:c3:82:6c:49:81:5c:a5:
67:97:e0:27:7e:c5:c8:c8:00:45:34:7b:d8:36:0a:
67:31:2f:67:85:06:b5:4f:b4:49:56:55:1d:be:93:
5a:b9:b2:fa:7e:64:e5:01:61:49:f1:35:5e:d7:b5:
67:8e:d0:59:44:c5:7a:5a:d5:f1:d1:9c:05:dc:c3:
c5:91:e4:4b:74:db:f2:95:5b:67:7d:8b:6d:54:56:
3e:0a:f2:45:57:01:6a:78:68:18:80:67:1f:41:b9:
ff:97:5d:cb:50:a5:f3:80:83:89:f2:10:9e:cc:39:
c8:77:b9:97:24:00:da:52:ce:93:06:f3:a1:33:62:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B2:CC:DB:74:32:5C:DA:EF:80:D3:F8:4C:07:E6:E1:47:A3:85:4E
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dc:6b:64:3a:66:dd:88:c3:f5:5b:55:fe:81:1d:e5:d6:48:
98:e9:35:ea:40:92:43:9d:c0:c2:d9:c1:74:2d:26:25:a1:75:
9b:b7:92:c5:56:1a:cf:9d:50:c3:c8:43:68:3d:44:e7:92:99:
a3:6d:b4:f1:8e:88:d1:28:38:86:7f:66:c3:cd:dc:56:72:c4:
2e:f3:58:a2:e1:4a:11:5c:50:ef:be:db:80:cc:19:db:4e:a2:
02:f7:6b:c3:b8:cb:28:db:a4:dd:ba:c6:70:5c:46:78:ca:3b:
73:25:ff:38:27:06:a7:af:12:29:e3:e2:12:1c:75:d7:f5:a2:
07:99:2a:7e:7f:56:69:f2:3d:00:cc:ec:ec:9f:51:f8:a5:a4:
47:7f:53:d9:a6:f8:40:88:a3:81:83:84:c7:ae:0d:c1:fb:6a:
8a:b2:f3:cb:e0:1f:76:31:98:12:3d:2b:2a:ea:9e:43:64:d2:
ce:e2:2b:7e:71:29:2b:06:7b:ad:52:4f:d0:46:0f:3e:76:00:
83:35:d3:c0:ca:0e:3e:94:df:88:76:88:26:13:3d:c8:b4:b5:
94:7a:85:0c:fb:16:16:d5:f4:5e:27:2e:bf:50:97:bd:d9:43:
79:91:57:6c:a4:47:b6:27:38:f7:6e:12:04:d1:3b:ae:a3:3b:
2d:a5:fe:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxAFmIpvqnYGyTrZ64zEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YTE3MjJlOGJhZGRjMzU4YTE1ODc0MjY1YjQ2Njc0M2U3
MDM2NTYwHhcNMjUwNjA3MTkwMDI1WhcNMjUwNjA4MTkwMDI1WjAzMTEwLwYDVQQD
EygzYmIyY2NkYjc0MzI1Y2RhZWY4MGQzZjg0YzA3ZTZlMTQ3YTM4NTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlYR9R/gqnPp5c5FbIPCGQ4w6Yur
7mYwc56eWodLKojbsiZut2LTtG58Nk3RP4hwBlGTU944hySpMPY1HXyuabQn8p+n
4H8dRdqACIT0t9L64xYNEMkbuMUZkdztjCPjsVlo6aUmflUWbnebYLLl6WkcwjA/
eXX5MN6OBJTdiMOCbEmBXKVnl+AnfsXIyABFNHvYNgpnMS9nhQa1T7RJVlUdvpNa
ubL6fmTlAWFJ8TVe17VnjtBZRMV6WtXx0ZwF3MPFkeRLdNvylVtnfYttVFY+CvJF
VwFqeGgYgGcfQbn/l13LUKXzgIOJ8hCezDnId7mXJADaUs6TBvOhM2Lw3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuyzNt0Mlza74DT+EwH5uFHo4VOMB8GA1UdIwQY
MBaAFPahci6Lrdw1ihWHQmW0ZnQ+cDZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2It
NmUwNzkwNjliNjViLzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2ItNmUwNzkwNjliNjVi
LzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdxrZDpm
3YjD9VtV/oEd5dZImOk16kCSQ53AwtnBdC0mJaF1m7eSxVYaz51Qw8hDaD1E55KZ
o2208Y6I0Sg4hn9mw83cVnLELvNYouFKEVxQ777bgMwZ206iAvdrw7jLKNuk3brG
cFxGeMo7cyX/OCcGp68SKePiEhx11/WiB5kqfn9WafI9AMzs7J9R+KWkR39T2ab4
QIijgYOEx64NwftqirLzy+AfdjGYEj0rKuqeQ2TSzuIrfnEpKwZ7rVJP0EYPPnYA
gzXTwMoOPpTfiHaIJhM9yLS1lHqFDPsWFtX0Xicuv1CXvdlDeZFXbKRHtic4924S
BNE7rqM7LaX+Aw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:43:35 2025 by rpki-client