Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: qJN/bEtFXdC26WeKdWHqjmbiNEga/IxaiYxaW4VXZqc=
Subject key identifier: 1E:10:9F:ED:DF:2E:83:26:C9:E9:74:7C:14:DF:9C:B5:45:F1:EE:D0
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 0198D7A8952B2D62F7FDBF8C57F9D3362EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 13F2
Signing time: Sat 23 Aug 2025 16:00:06 +0000
Manifest this update: Sat 23 Aug 2025 16:00:06 +0000
Manifest next update: Sun 24 Aug 2025 16:00:06 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: 0F7ojL3v3CKeEtKLeAdcjhfCa/8C6bgbOyMlwqtASK0=)
2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:95:2b:2d:62:f7:fd:bf:8c:57:f9:d3:36:2e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Aug 23 16:00:06 2025 GMT
Not After : Aug 24 16:00:06 2025 GMT
Subject: CN=1e109feddf2e8326c9e9747c14df9cb545f1eed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:c8:6b:11:3d:23:46:08:9e:69:f0:7d:a2:
13:e7:f5:58:cd:90:7e:63:b3:c8:85:4b:a3:2a:ec:
91:25:77:97:ac:e6:b7:7d:32:b9:7c:6b:e2:61:03:
fb:af:02:33:68:a7:47:59:dd:03:ec:d9:59:50:03:
ed:b5:97:83:2f:6e:14:00:db:80:e0:36:0c:3f:b2:
8b:56:56:aa:31:2c:48:c9:e5:8f:38:6b:3e:31:b4:
c3:ee:b3:e8:26:6f:ae:2b:34:57:bc:10:bc:72:8c:
fe:22:56:4e:4f:3d:69:e7:f2:9d:d2:99:cb:58:46:
d3:3c:01:de:1b:c8:cf:22:7d:3d:31:4c:d8:3a:88:
b2:04:a4:c6:fb:bb:87:08:5c:60:53:e8:d3:ce:d8:
d3:77:53:41:a8:3c:5b:ec:24:1f:49:f7:bc:40:98:
c0:95:c1:bd:fc:08:c0:20:c6:f1:68:e6:23:41:09:
ce:8c:9e:eb:2a:86:19:55:ea:f7:c9:14:ac:ec:55:
e5:84:e2:5f:87:8e:70:ce:f0:e4:d7:78:f8:39:f1:
11:fd:ef:9a:25:7e:7c:fd:d0:79:26:b5:85:6e:2a:
13:46:f4:34:1e:c3:ba:bc:df:c1:2c:e1:88:82:f6:
af:06:d6:40:1b:ef:7a:83:17:72:29:32:a3:f8:2b:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:9F:ED:DF:2E:83:26:C9:E9:74:7C:14:DF:9C:B5:45:F1:EE:D0
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e6:95:0f:2f:49:0a:da:1b:ad:fe:c3:7c:89:e4:ea:fd:d9:
8e:f7:b8:bb:3c:5b:06:0f:f4:7f:86:a8:a7:be:fc:d3:c2:5c:
4c:9d:41:bd:8b:33:66:ec:59:af:bb:b1:4a:5a:6b:b4:39:10:
41:80:79:6d:31:2c:13:c8:6d:1e:74:5f:04:72:22:d1:06:ef:
da:a4:85:31:97:0b:67:1b:0c:54:6c:e2:86:c6:d8:83:43:cc:
01:9d:2c:6f:e9:40:d5:5a:27:b7:60:4c:58:af:22:5c:6b:25:
19:e0:4b:26:ad:d2:15:d3:53:70:3c:03:aa:77:62:b6:dc:48:
53:9c:4f:09:fb:bf:20:31:87:0e:d3:3a:72:9b:9b:bc:e3:c4:
12:87:b3:5a:53:e7:0b:cb:82:09:a2:5a:62:7f:2d:ba:6c:69:
94:03:bf:dd:ac:0f:4f:44:8e:9e:de:dc:da:d0:e8:7b:ce:de:
b1:c4:5e:16:ca:90:e6:65:47:a9:d7:da:2c:63:ef:34:e9:72:
6f:c9:52:23:76:b2:fd:16:26:05:85:9e:40:7c:26:83:69:d9:
94:2a:f0:5a:36:76:d5:83:fd:64:d0:71:ed:29:64:fd:65:c0:
cc:87:43:43:e9:e6:ce:8d:a1:d3:c8:ae:01:38:4a:43:64:a7:
50:23:18:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqJUrLWL3/b+MV/nTNi7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDFkNDY4OTNhYWExNjRmZTI2NzM5OTBkMDdhYTZjMDcx
MDAzYzAwHhcNMjUwODIzMTYwMDA2WhcNMjUwODI0MTYwMDA2WjAzMTEwLwYDVQQD
EygxZTEwOWZlZGRmMmU4MzI2YzllOTc0N2MxNGRmOWNiNTQ1ZjFlZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9PIaxE9I0YInmnwfaIT5/VYzZB+
Y7PIhUujKuyRJXeXrOa3fTK5fGviYQP7rwIzaKdHWd0D7NlZUAPttZeDL24UANuA
4DYMP7KLVlaqMSxIyeWPOGs+MbTD7rPoJm+uKzRXvBC8coz+IlZOTz1p5/Kd0pnL
WEbTPAHeG8jPIn09MUzYOoiyBKTG+7uHCFxgU+jTztjTd1NBqDxb7CQfSfe8QJjA
lcG9/AjAIMbxaOYjQQnOjJ7rKoYZVer3yRSs7FXlhOJfh45wzvDk13j4OfER/e+a
JX58/dB5JrWFbioTRvQ0HsO6vN/BLOGIgvavBtZAG+96gxdyKTKj+CsSUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4Qn+3fLoMmyel0fBTfnLVF8e7QMB8GA1UdIwQY
MBaAFPVB1GiTqqFk/iZzmQ0HqmwHEAPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMt
Mzk4YzA0NTE4OWViLzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMtMzk4YzA0NTE4OWVi
LzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOaVDy9J
Ctobrf7DfInk6v3Zjve4uzxbBg/0f4aop77808JcTJ1BvYszZuxZr7uxSlprtDkQ
QYB5bTEsE8htHnRfBHIi0Qbv2qSFMZcLZxsMVGzihsbYg0PMAZ0sb+lA1Vont2BM
WK8iXGslGeBLJq3SFdNTcDwDqndittxIU5xPCfu/IDGHDtM6cpubvOPEEoezWlPn
C8uCCaJaYn8tumxplAO/3awPT0SOnt7c2tDoe87escReFsqQ5mVHqdfaLGPvNOly
b8lSI3ay/RYmBYWeQHwmg2nZlCrwWjZ21YP9ZNBx7Slk/WXAzIdDQ+nmzo2h08iu
AThKQ2SnUCMYnw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:16:29 2025 by rpki-client