Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: VUHXN5m2SLF4KEwvCumLKjXUsUGFaln7UfPuyrmJC0o=
Subject key identifier: 15:D8:0A:7B:3E:E3:1B:2B:15:6E:29:29:8B:3E:F2:DB:64:F2:6A:A0
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 0197B6A1811445389953CCB9C116108C9FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 09C9
Signing time: Sat 28 Jun 2025 13:02:06 +0000
Manifest this update: Sat 28 Jun 2025 13:02:06 +0000
Manifest next update: Sun 29 Jun 2025 13:02:06 +0000
Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: pdM/Yri74MUNNXs5DRsAKyDra/WQrc+DGq7YNSmSH8Y=)
3: I8ts4VChZIvxCXnk3zghDL9Bmu4.roa (hash: Md6prX/mk6M2hIPa7lBG6X8P2VoqSBLYC0PebMg3Wr4=)
4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:81:14:45:38:99:53:cc:b9:c1:16:10:8c:9f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jun 28 13:02:06 2025 GMT
Not After : Jun 29 13:02:06 2025 GMT
Subject: CN=15d80a7b3ee31b2b156e29298b3ef2db64f26aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:d9:d0:66:bb:e8:bb:d7:97:c8:da:1d:d3:
f9:43:ca:22:c6:1f:f2:1a:2a:e8:1c:bf:b7:24:a1:
03:bc:40:9d:98:df:ed:83:d5:80:e3:fb:94:c9:1d:
ba:00:ad:26:c7:2f:ba:32:08:26:bb:f6:ad:4a:6b:
33:9d:e9:02:17:26:ae:11:c3:28:35:87:e5:a9:34:
69:03:b4:ee:67:6e:a0:9f:1c:f2:15:ff:ee:60:e3:
c4:bb:44:06:ee:24:f0:2d:65:f6:31:35:c3:8e:8f:
73:d9:bc:44:4b:5b:7f:29:64:19:62:e3:3c:a7:48:
9a:15:ef:bd:7a:00:42:db:f4:4d:d2:9d:77:8d:33:
e5:7d:b2:55:f3:d7:07:20:fb:1b:e4:b6:ae:5d:ad:
a3:7d:bc:ca:1b:47:6b:f6:3a:ef:d9:27:02:54:57:
6e:1f:eb:ad:86:57:a4:54:db:f6:b9:24:c9:3c:d4:
f8:9d:9c:25:9b:46:13:c9:00:43:72:26:a3:f5:fd:
7d:1b:dc:75:f1:74:ba:ee:e1:f3:c7:24:45:df:8d:
95:25:f3:ca:b9:79:26:f0:f9:a0:49:85:8d:ce:36:
dd:ca:3d:98:17:97:84:da:84:a7:7d:16:cf:ea:de:
58:05:77:1b:73:ef:43:95:14:23:43:5c:82:e8:43:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D8:0A:7B:3E:E3:1B:2B:15:6E:29:29:8B:3E:F2:DB:64:F2:6A:A0
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:89:3a:f2:1f:62:ba:a3:bd:92:17:8a:33:f2:75:04:12:52:
2a:68:49:bc:01:85:6f:f6:31:43:4a:4d:ef:e9:4a:65:19:2b:
16:9d:9c:2a:52:37:72:fe:3e:e0:54:ed:ce:08:3e:02:19:7b:
c6:21:d2:c9:06:19:86:6d:b9:26:16:fc:3a:75:47:70:f4:d3:
d2:ee:f8:69:d9:85:bf:6a:04:ed:20:3e:e6:b3:d1:6f:01:ec:
d7:e5:e7:07:fa:54:a3:23:a5:68:e8:59:75:8c:e5:ef:fd:83:
94:79:ce:e4:ef:e9:79:d0:8e:21:67:0b:8d:d1:cf:2b:89:c6:
1e:4b:f9:a1:54:20:66:80:50:c7:30:11:49:c7:aa:b0:e0:20:
7f:83:78:b8:1a:7f:49:17:5a:9a:17:92:a3:0a:57:32:73:ea:
37:90:b1:8e:11:72:b9:76:50:0d:41:08:f6:be:56:11:8f:9a:
49:65:d5:f4:be:b4:8d:2e:df:e3:a2:ef:75:8b:8e:2b:14:27:
0f:ea:fa:a3:0c:54:ec:3e:31:55:d6:ae:e2:8f:3d:61:93:a3:
aa:47:41:d5:bd:46:99:10:c9:2a:eb:1e:b7:e6:c8:9e:8f:80:
d3:12:42:6a:c7:f0:44:37:d8:cc:c1:5d:c5:f6:42:0e:e6:8c:
b3:ec:a8:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYEURTiZU8y5wRYQjJ/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDYwMmI5ZTFkYTJiNTY4ZGY1NDRiZGE1MGU0MTU3OTli
YmIxZTIwHhcNMjUwNjI4MTMwMjA2WhcNMjUwNjI5MTMwMjA2WjAzMTEwLwYDVQQD
EygxNWQ4MGE3YjNlZTMxYjJiMTU2ZTI5Mjk4YjNlZjJkYjY0ZjI2YWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH7Z0Ga76LvXl8jaHdP5Q8oixh/y
GiroHL+3JKEDvECdmN/tg9WA4/uUyR26AK0mxy+6Mggmu/atSmsznekCFyauEcMo
NYflqTRpA7TuZ26gnxzyFf/uYOPEu0QG7iTwLWX2MTXDjo9z2bxES1t/KWQZYuM8
p0iaFe+9egBC2/RN0p13jTPlfbJV89cHIPsb5LauXa2jfbzKG0dr9jrv2ScCVFdu
H+uthlekVNv2uSTJPNT4nZwlm0YTyQBDciaj9f19G9x18XS67uHzxyRF342VJfPK
uXkm8PmgSYWNzjbdyj2YF5eE2oSnfRbP6t5YBXcbc+9DlRQjQ1yC6EONeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXYCns+4xsrFW4pKYs+8ttk8mqgMB8GA1UdIwQY
MBaAFAPWArnh2itWjfVEvaUOQVeZu7HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEt
ZmI5N2RkZDU0ODkxLzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEtZmI5N2RkZDU0ODkx
LzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqok68h9i
uqO9kheKM/J1BBJSKmhJvAGFb/YxQ0pN7+lKZRkrFp2cKlI3cv4+4FTtzgg+Ahl7
xiHSyQYZhm25Jhb8OnVHcPTT0u74admFv2oE7SA+5rPRbwHs1+XnB/pUoyOlaOhZ
dYzl7/2DlHnO5O/pedCOIWcLjdHPK4nGHkv5oVQgZoBQxzARSceqsOAgf4N4uBp/
SRdamheSowpXMnPqN5CxjhFyuXZQDUEI9r5WEY+aSWXV9L60jS7f46LvdYuOKxQn
D+r6owxU7D4xVdau4o89YZOjqkdB1b1GmRDJKuset+bIno+A0xJCasfwRDfYzMFd
xfZCDuaMs+yopQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:28 2025 by rpki-client