Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: xaOLjxJNIj1JRedH0MyBjERXrpKosU1T/W8mMP6u9n8=
Subject key identifier: A2:F8:6A:0B:45:43:37:4D:BE:BE:D6:E6:D5:6B:1A:2F:1D:5B:92:68
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 0197BB21F71CE001BC043FC2E84FAA8590CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 15D0
Signing time: Sun 29 Jun 2025 10:00:54 +0000
Manifest this update: Sun 29 Jun 2025 10:00:54 +0000
Manifest next update: Mon 30 Jun 2025 10:00:54 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: iwe/Xxro9z7ixfgaf/eWlJZaxGw0y78bk2MRWSXYzkw=)
2: Rq5qhuZJL_f0RiemcCNo1CeBLZg.roa (hash: QjHh1mk02MSSyzdrymnZqYJyNlwN9P8BOUPtrzzXBu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:21:f7:1c:e0:01:bc:04:3f:c2:e8:4f:aa:85:90:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Jun 29 10:00:54 2025 GMT
Not After : Jun 30 10:00:54 2025 GMT
Subject: CN=a2f86a0b4543374dbebed6e6d56b1a2f1d5b9268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:c2:18:05:67:8e:f2:c1:7d:b9:9f:a8:42:
bc:48:39:86:20:84:cc:66:32:24:2f:2b:0f:5b:7f:
21:e5:ff:fe:e4:26:14:ff:aa:f2:74:ad:9a:00:e4:
aa:6b:2e:9c:c7:5c:0a:a1:6b:af:43:9c:3b:27:3d:
8b:bf:0a:42:2b:cf:58:c1:65:61:f0:27:98:df:4a:
30:9a:65:99:43:10:08:c4:dc:4e:ae:39:e8:01:fa:
89:0b:63:e6:25:1c:95:09:e3:a6:69:ba:e6:86:16:
f4:e4:bb:6e:30:ba:86:4a:08:cb:cd:ff:b7:c5:36:
b1:69:a7:2a:16:0e:67:47:c1:99:dd:85:ac:89:76:
9e:e4:90:d7:ac:fd:71:ec:24:39:68:d8:39:09:2a:
18:7c:10:88:08:cd:d2:d3:45:59:cf:9e:4e:c0:4c:
90:1d:6d:eb:28:cb:d6:00:c5:d5:d4:be:c5:12:c4:
a1:32:ec:5f:ae:e2:ac:3f:38:7e:86:fd:bd:ed:46:
97:0b:4c:2a:31:9d:44:59:16:b2:7e:42:b2:26:45:
5f:be:c5:b9:2c:f2:fe:f9:d8:65:34:7a:67:31:23:
31:9a:5a:2d:75:7a:c4:5e:51:bc:d9:5c:01:7f:77:
57:0d:aa:fa:2e:e4:da:50:4b:75:a4:bc:8e:78:13:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:6A:0B:45:43:37:4D:BE:BE:D6:E6:D5:6B:1A:2F:1D:5B:92:68
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e3:ad:8a:f2:7d:d4:32:52:95:e1:a4:f4:e8:55:33:eb:7b:
37:4d:10:f2:eb:cc:ac:b6:e1:9d:7e:0e:77:54:7b:1e:23:0b:
25:36:6f:17:b9:02:dd:00:92:d5:7b:04:21:f0:a8:ae:56:c7:
d2:f1:ce:ad:39:9b:22:0f:b0:cb:68:e6:0a:2a:00:9b:3f:7c:
a9:aa:d8:cf:ed:0c:d9:78:11:9b:89:8b:a2:e4:16:7f:50:c0:
05:a6:1d:3c:29:1e:1d:98:7e:83:b3:5e:ce:09:92:71:cd:3a:
bd:73:2f:c5:df:11:42:72:b1:a3:1f:66:0f:4b:dd:e6:38:04:
e5:bf:7d:c0:a5:21:b9:15:c8:66:36:7c:3a:18:2a:a8:4b:83:
92:95:dd:eb:9b:c8:bf:d9:25:ad:28:99:73:2a:14:ff:89:db:
06:ee:28:a0:80:ca:fe:83:8d:dd:33:48:6a:71:00:46:53:70:
b4:98:1f:e8:0f:0c:b5:8c:a6:c8:80:1a:9f:c3:a2:c8:6f:aa:
59:eb:86:de:8b:09:9f:2a:39:00:54:bf:c5:3e:ec:0e:bb:96:
da:f0:c2:5b:99:c5:f2:00:ba:d5:11:0c:76:9a:6a:95:14:c9:
f1:e5:db:ee:17:b7:dd:f0:3d:8e:e0:45:ef:cc:23:1e:8b:f8:
39:ca:c4:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7Ifcc4AG8BD/C6E+qhZDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0M2JmOTA4MDhhZTdlY2EwNjNmNzQ2YThmMWQ4ODg2NTcz
NGM4YTMwHhcNMjUwNjI5MTAwMDU0WhcNMjUwNjMwMTAwMDU0WjAzMTEwLwYDVQQD
EyhhMmY4NmEwYjQ1NDMzNzRkYmViZWQ2ZTZkNTZiMWEyZjFkNWI5MjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HDCGAVnjvLBfbmfqEK8SDmGIITM
ZjIkLysPW38h5f/+5CYU/6rydK2aAOSqay6cx1wKoWuvQ5w7Jz2LvwpCK89YwWVh
8CeY30owmmWZQxAIxNxOrjnoAfqJC2PmJRyVCeOmabrmhhb05LtuMLqGSgjLzf+3
xTaxaacqFg5nR8GZ3YWsiXae5JDXrP1x7CQ5aNg5CSoYfBCICM3S00VZz55OwEyQ
HW3rKMvWAMXV1L7FEsShMuxfruKsPzh+hv297UaXC0wqMZ1EWRayfkKyJkVfvsW5
LPL++dhlNHpnMSMxmlotdXrEXlG82VwBf3dXDar6LuTaUEt1pLyOeBMZGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKL4agtFQzdNvr7W5tVrGi8dW5JoMB8GA1UdIwQY
MBaAFPQ7+QgIrn7KBj90ao8diIZXNMijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hOGQ5NDMtZjA4Mi00YjE4LWI4NDAt
Mzg5MTk1YzRmMDdiLzEvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hOGQ5NDMtZjA4Mi00YjE4LWI4NDAtMzg5MTk1YzRmMDdi
LzEvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeOtivJ9
1DJSleGk9OhVM+t7N00Q8uvMrLbhnX4Od1R7HiMLJTZvF7kC3QCS1XsEIfCorlbH
0vHOrTmbIg+wy2jmCioAmz98qarYz+0M2XgRm4mLouQWf1DABaYdPCkeHZh+g7Ne
zgmScc06vXMvxd8RQnKxox9mD0vd5jgE5b99wKUhuRXIZjZ8OhgqqEuDkpXd65vI
v9klrSiZcyoU/4nbBu4ooIDK/oON3TNIanEARlNwtJgf6A8MtYymyIAan8OiyG+q
WeuG3osJnyo5AFS/xT7sDruW2vDCW5nF8gC61REMdppqlRTJ8eXb7he33fA9juBF
78wjHov4OcrEzA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:44:56 2025 by rpki-client