Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: KnlvxhIfRBr6tXzP26ySX2BP1TJZ6XakPmAUvFGS/UY=
Subject key identifier: 3A:7C:12:71:8E:CD:64:A9:D0:7A:0C:A9:14:49:5A:5B:4D:10:1F:FA
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 019752A24778B0AC431B74B64693FEDE8F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 04EB
Signing time: Mon 09 Jun 2025 03:00:56 +0000
Manifest this update: Mon 09 Jun 2025 03:00:56 +0000
Manifest next update: Tue 10 Jun 2025 03:00:56 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: NGFL2k+fU7xzlAVOyenz7JGhFXMrWW59BlvrU50EN8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:47:78:b0:ac:43:1b:74:b6:46:93:fe:de:8f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Jun 9 03:00:56 2025 GMT
Not After : Jun 10 03:00:56 2025 GMT
Subject: CN=3a7c12718ecd64a9d07a0ca914495a5b4d101ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:1a:b2:f8:24:18:a6:3e:2c:5d:0a:bb:6b:
9f:52:b3:1b:3a:0c:49:b9:5a:a7:ab:96:7e:93:f0:
21:eb:b9:3b:0a:43:99:69:a0:e0:04:fc:86:61:a2:
dc:86:7a:aa:12:6c:b4:a1:e7:56:9b:5e:99:4e:b4:
9f:a8:5f:69:b8:78:84:6a:0d:c1:53:a0:e8:14:f3:
3e:4a:4f:99:90:11:dc:a7:29:34:e9:14:51:ea:9b:
5e:6d:de:99:15:5d:75:d8:3a:38:a7:3b:9e:79:47:
6d:e0:86:1d:80:08:3f:aa:13:36:d5:b0:1b:da:6e:
b9:1a:47:1a:97:1b:b2:06:17:a1:36:6b:86:bf:11:
ff:89:ea:17:53:d1:7b:39:92:72:f5:9d:57:0b:52:
72:62:20:df:24:b3:55:4a:5d:6b:02:a3:c5:a9:db:
cf:02:9b:1b:1a:01:7e:dc:7a:a4:73:79:c8:24:a8:
e9:ee:0e:67:74:ee:60:32:4d:b2:3c:b5:09:0f:12:
7d:a9:3f:f3:d0:9d:37:be:48:14:7c:75:1c:a6:37:
7e:27:cd:eb:e4:5b:7f:1b:9b:c0:7d:13:30:24:2c:
52:5f:2f:79:56:d5:cc:0d:5c:7e:fe:32:37:08:6a:
1c:6b:0e:2a:2f:e2:8b:dc:b1:6d:f7:d7:c7:4e:49:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7C:12:71:8E:CD:64:A9:D0:7A:0C:A9:14:49:5A:5B:4D:10:1F:FA
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8f:a6:14:3f:8a:a6:3a:4f:aa:16:be:58:de:62:db:54:7f:
f5:35:78:fa:76:c6:44:8d:24:5f:35:d7:59:6e:3f:7e:97:b9:
6d:29:7a:8a:26:56:4f:53:8b:6f:44:6a:ea:39:08:ed:8e:4c:
d8:22:77:61:35:c4:71:16:52:67:4b:d7:d4:78:52:1d:6e:4e:
d3:20:1c:74:db:e0:0c:ad:66:63:30:a9:81:d0:c2:1a:d5:a0:
72:23:0a:9c:99:f0:a1:80:4e:0b:9c:60:bd:82:93:f3:4b:8c:
57:20:91:3c:06:38:a4:fb:67:1e:9d:fe:b5:79:ba:fc:3f:7b:
b3:3d:0c:e9:e5:fb:45:2f:fd:5c:5b:3d:72:28:dd:82:9b:91:
fa:ad:49:52:b9:e3:c3:28:e7:18:20:f4:d7:9f:cc:3f:41:e8:
c8:73:22:d3:58:68:0c:e6:c6:76:14:9b:ab:56:e7:39:b0:ad:
f1:79:e3:91:8f:12:fa:84:08:4d:81:c8:11:dc:dd:ff:3f:26:
18:91:ef:d1:dc:2e:96:8f:d2:39:db:6f:2e:0e:dd:79:f5:d8:
f3:c8:e6:b2:b9:30:17:74:1b:3b:c4:4f:69:99:34:93:45:6c:
8b:ea:a8:5b:fe:c7:ca:51:ca:46:28:09:27:46:9b:1c:af:5b:
de:a4:72:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSokd4sKxDG3S2RpP+3o86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWY3OTFmOWQwY2Y2Y2I2YmUzODljOTQ1NjhjODc3NDA1
ZTUxNDQwHhcNMjUwNjA5MDMwMDU2WhcNMjUwNjEwMDMwMDU2WjAzMTEwLwYDVQQD
EygzYTdjMTI3MThlY2Q2NGE5ZDA3YTBjYTkxNDQ5NWE1YjRkMTAxZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgUasvgkGKY+LF0Ku2ufUrMbOgxJ
uVqnq5Z+k/Ah67k7CkOZaaDgBPyGYaLchnqqEmy0oedWm16ZTrSfqF9puHiEag3B
U6DoFPM+Sk+ZkBHcpyk06RRR6ptebd6ZFV112Do4pzueeUdt4IYdgAg/qhM21bAb
2m65GkcalxuyBhehNmuGvxH/ieoXU9F7OZJy9Z1XC1JyYiDfJLNVSl1rAqPFqdvP
ApsbGgF+3Hqkc3nIJKjp7g5ndO5gMk2yPLUJDxJ9qT/z0J03vkgUfHUcpjd+J83r
5Ft/G5vAfRMwJCxSXy95VtXMDVx+/jI3CGocaw4qL+KL3LFt99fHTkmP1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp8EnGOzWSp0HoMqRRJWltNEB/6MB8GA1UdIwQY
MBaAFPZfeR+dDPbLa+OJyUVoyHdAXlFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAt
Y2QwMzc0MWQyNmI1LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAtY2QwMzc0MWQyNmI1
LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4+mFD+K
pjpPqha+WN5i21R/9TV4+nbGRI0kXzXXWW4/fpe5bSl6iiZWT1OLb0Rq6jkI7Y5M
2CJ3YTXEcRZSZ0vX1HhSHW5O0yAcdNvgDK1mYzCpgdDCGtWgciMKnJnwoYBOC5xg
vYKT80uMVyCRPAY4pPtnHp3+tXm6/D97sz0M6eX7RS/9XFs9cijdgpuR+q1JUrnj
wyjnGCD015/MP0HoyHMi01hoDObGdhSbq1bnObCt8XnjkY8S+oQITYHIEdzd/z8m
GJHv0dwulo/SOdtvLg7defXY88jmsrkwF3QbO8RPaZk0k0Vsi+qoW/7HylHKRigJ
J0abHK9b3qRykQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:34:05 2025 by rpki-client