Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier: Qy0hBuiOj8AMesL6pY6tqmHNaVVbpX0EG+fDRiiEBg4=
Subject key identifier: 98:BC:5B:14:EB:35:B1:7A:4B:0C:E7:DC:1A:31:E1:05:23:1A:7E:71
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial: 0197B6A181F0C42F8D112E354AE794536387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number: 1019
Signing time: Sat 28 Jun 2025 13:02:07 +0000
Manifest this update: Sat 28 Jun 2025 13:02:07 +0000
Manifest next update: Sun 29 Jun 2025 13:02:07 +0000
Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: XRZVlrOTynwR8/WhGcngMdtWP8zy8wUpzZwuI+MLuPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:81:f0:c4:2f:8d:11:2e:35:4a:e7:94:53:63:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Validity
Not Before: Jun 28 13:02:07 2025 GMT
Not After : Jun 29 13:02:07 2025 GMT
Subject: CN=98bc5b14eb35b17a4b0ce7dc1a31e105231a7e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:53:32:12:c9:28:03:89:53:70:5c:4f:7c:
c2:24:e7:72:a1:b2:2d:33:1b:a6:43:c0:ee:df:5a:
95:3c:00:b5:b4:fd:96:fa:0d:9c:2a:11:d0:6e:8e:
ef:3c:fc:cf:c6:9b:d7:3f:b2:02:41:36:76:dd:32:
a9:e0:fb:0c:df:67:c1:82:f3:ba:f7:c6:c4:66:b0:
42:54:c8:22:9a:e3:e1:6e:4a:f1:46:fc:1b:8c:8c:
17:21:5d:05:39:73:1f:f3:ec:4b:31:9c:6b:d7:66:
80:a5:a1:94:f9:95:4c:3e:2d:40:a8:8a:21:1c:68:
81:41:b6:fa:1f:08:78:e8:3f:ab:85:20:77:ee:8d:
2f:56:7b:be:1f:51:bd:fa:91:f7:5f:0f:c7:dd:36:
9e:0a:2b:1b:aa:3d:c8:00:03:2d:c2:aa:e6:56:e2:
91:31:6b:11:8b:55:0e:c3:63:6b:7f:9a:a4:5e:b6:
89:41:76:0f:5f:ca:dd:83:28:25:3e:89:d6:df:59:
21:7b:6e:ee:23:52:bd:92:c9:31:8d:df:25:1e:a3:
67:c4:1a:64:15:50:e4:49:fc:9d:69:3e:80:96:12:
0f:f9:3f:6f:ce:24:d6:8b:41:41:16:5e:98:50:d6:
55:a1:fc:3f:aa:d5:5a:99:8c:3e:b4:66:c3:56:28:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:5B:14:EB:35:B1:7A:4B:0C:E7:DC:1A:31:E1:05:23:1A:7E:71
X509v3 Authority Key Identifier:
keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:66:68:44:5c:ad:4d:19:c8:5d:02:59:34:79:13:0c:9f:c7:
0f:f4:16:d2:d3:5a:27:d7:2d:d3:0c:bc:60:c9:04:be:97:13:
fc:94:a2:f8:80:00:28:92:66:7c:2f:5f:33:e9:56:e0:c1:88:
95:f1:96:e0:4b:e0:55:1c:df:7d:c8:03:35:7b:33:da:96:01:
9d:bc:60:92:d2:4f:51:7d:55:46:c5:62:9c:0d:f7:21:3a:e9:
d4:6d:69:a6:dd:12:62:6d:3b:22:1f:47:50:32:61:80:df:6c:
ae:64:1c:3d:3a:a6:c1:5c:2b:86:56:0b:ff:9a:e2:c8:d8:1c:
07:6f:99:bc:55:32:7d:ab:d4:14:c0:ba:33:a5:7f:8d:72:92:
ad:65:78:03:27:4a:cc:01:ed:7f:fe:fb:04:93:04:e8:5c:d7:
df:33:aa:64:59:d6:19:5a:cf:08:a6:57:69:94:00:80:90:f1:
4a:e7:89:56:ea:86:71:91:01:c3:08:43:ca:0c:e5:cf:6a:c0:
ef:80:ef:fa:87:3b:84:7d:5c:3b:2e:ec:05:dc:71:c1:1d:80:
d7:99:ed:47:40:22:6a:85:79:2f:ec:24:8b:c1:c8:22:a8:f3:
19:77:b6:2c:59:27:d7:51:a4:b6:12:34:ca:9a:ae:23:3d:84:
6f:b8:ef:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYHwxC+NES41SueUU2OHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YjMxMGU5ZDQ0ZTg0NzBkNmNkODAwOTU5MDY2Y2IwMGYy
OTFlZmEwHhcNMjUwNjI4MTMwMjA3WhcNMjUwNjI5MTMwMjA3WjAzMTEwLwYDVQQD
Eyg5OGJjNWIxNGViMzViMTdhNGIwY2U3ZGMxYTMxZTEwNTIzMWE3ZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8JTMhLJKAOJU3BcT3zCJOdyobIt
MxumQ8Du31qVPAC1tP2W+g2cKhHQbo7vPPzPxpvXP7ICQTZ23TKp4PsM32fBgvO6
98bEZrBCVMgimuPhbkrxRvwbjIwXIV0FOXMf8+xLMZxr12aApaGU+ZVMPi1AqIoh
HGiBQbb6Hwh46D+rhSB37o0vVnu+H1G9+pH3Xw/H3TaeCisbqj3IAAMtwqrmVuKR
MWsRi1UOw2Nrf5qkXraJQXYPX8rdgyglPonW31khe27uI1K9kskxjd8lHqNnxBpk
FVDkSfydaT6AlhIP+T9vziTWi0FBFl6YUNZVofw/qtVamYw+tGbDVijqCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi8WxTrNbF6Swzn3Box4QUjGn5xMB8GA1UdIwQY
MBaAFPWzEOnUToRw1s2ACVkGbLAPKR76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNDhkZTEtOWYzMy00ZjBhLTg2NzYt
ZTgzNmViM2QyZjFmLzEvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mNDhkZTEtOWYzMy00ZjBhLTg2NzYtZTgzNmViM2QyZjFm
LzEvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmZoRFyt
TRnIXQJZNHkTDJ/HD/QW0tNaJ9ct0wy8YMkEvpcT/JSi+IAAKJJmfC9fM+lW4MGI
lfGW4EvgVRzffcgDNXsz2pYBnbxgktJPUX1VRsVinA33ITrp1G1ppt0SYm07Ih9H
UDJhgN9srmQcPTqmwVwrhlYL/5riyNgcB2+ZvFUyfavUFMC6M6V/jXKSrWV4AydK
zAHtf/77BJME6FzX3zOqZFnWGVrPCKZXaZQAgJDxSueJVuqGcZEBwwhDygzlz2rA
74Dv+oc7hH1cOy7sBdxxwR2A15ntR0AiaoV5L+wki8HIIqjzGXe2LFkn11GkthI0
ypquIz2Eb7jvqQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:54 2025 by rpki-client