Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: 2jmbdoDkbj1KC+ZHrCZl8liJL/C8HjZDYrylKGe/rxU=
Subject key identifier: 73:CD:9B:AC:B3:A1:DB:EF:31:EF:A2:D0:79:E4:BB:98:05:55:B8:61
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 0197B6A08542ACCC1F70F76B2DF17F0C44A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 12A2
Signing time: Sat 28 Jun 2025 13:01:02 +0000
Manifest this update: Sat 28 Jun 2025 13:01:02 +0000
Manifest next update: Sun 29 Jun 2025 13:01:02 +0000
Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: 2pBJkcIWH35C10tkdrQVHwIyVKFSAwyv7OPGaO5dAy0=)
2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:85:42:ac:cc:1f:70:f7:6b:2d:f1:7f:0c:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Jun 28 13:01:02 2025 GMT
Not After : Jun 29 13:01:02 2025 GMT
Subject: CN=73cd9bacb3a1dbef31efa2d079e4bb980555b861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:0d:e1:b3:ef:16:e6:09:5f:c7:1a:0f:b4:
d9:6a:9c:44:aa:32:e1:57:22:2e:0b:ec:94:e9:24:
ab:81:5d:1f:cd:e8:6c:15:14:c3:36:13:65:d6:19:
bf:90:b5:7c:2f:b4:ee:5f:e4:d9:0a:90:42:40:88:
b4:4b:f1:ac:cb:63:37:d5:af:64:c5:29:cc:a3:62:
a1:f8:13:fa:4f:6c:67:c4:ee:8b:47:d7:83:93:41:
da:3b:3a:e4:9b:6d:16:d2:5d:1f:7f:33:00:8d:89:
90:d5:57:8b:57:1a:41:28:a2:f3:5d:12:d6:c0:9a:
3b:f5:7f:d8:19:be:5d:02:52:3f:83:54:60:50:2b:
c9:c9:15:8b:04:23:82:13:6a:b2:a1:f3:8b:6b:cf:
cd:0a:65:21:ef:5b:a7:ab:78:20:86:ec:5d:2f:40:
bf:98:aa:5b:32:25:f0:9f:ba:be:97:5f:65:08:fa:
fb:0b:0c:b3:34:48:f3:b6:f9:28:8a:b2:af:31:b7:
9d:77:2e:2e:63:32:bb:03:62:f0:e1:30:6f:f4:67:
4d:9f:8d:fd:7e:47:a2:c7:e5:3e:7e:2a:b1:78:63:
69:78:2c:df:7f:ee:5c:60:af:38:bd:46:b9:9d:d2:
64:cc:8b:68:4f:59:ba:b4:79:45:3a:60:ab:e0:fc:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CD:9B:AC:B3:A1:DB:EF:31:EF:A2:D0:79:E4:BB:98:05:55:B8:61
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e2:ff:77:2d:c3:c1:d3:9d:3c:5a:fe:ea:07:b3:18:1c:51:
7d:d1:2b:7d:4e:cb:dc:7c:b0:94:4d:23:f3:a1:a1:20:c6:31:
98:8f:c3:0e:54:45:55:5a:65:df:70:cd:00:31:28:cd:78:b9:
b1:38:d0:bc:5b:4c:e9:b8:39:bb:ca:d4:30:8c:74:07:ef:88:
1d:86:bf:1d:29:43:fd:66:4a:33:ed:57:19:13:7b:8c:31:9e:
7c:5d:bf:19:73:9c:ac:45:7d:f4:24:46:b8:aa:5c:d6:26:d9:
85:53:89:6a:2b:9a:67:c1:53:8f:de:70:27:3e:97:82:6d:4b:
91:6d:22:57:a8:42:40:7b:93:6f:68:0a:0b:f1:59:b0:fe:5c:
d2:22:5d:9f:a6:a8:c5:2a:04:2f:f0:8d:64:26:92:37:f2:ed:
2a:e4:97:cb:17:68:4a:fa:35:1a:5d:63:e4:44:42:b2:db:77:
82:ff:58:b1:8f:61:d7:a2:3f:5d:a1:ba:9b:56:bc:f6:fc:7b:
55:72:4d:57:31:04:5d:f3:f6:ac:45:82:1c:c0:6b:ed:b3:53:
01:27:c2:28:4c:34:23:6b:7e:9b:24:12:f7:9e:7c:15:8e:64:
d6:81:0d:0f:f6:e9:77:06:62:90:b5:01:5b:2b:68:45:c1:2b:
5e:05:6e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oIVCrMwfcPdrLfF/DESlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNWM3ZDljNzQ0MGU1Y2I0YjBhNjc2MTU2M2MwZDg1MGYw
ODExMWEwHhcNMjUwNjI4MTMwMTAyWhcNMjUwNjI5MTMwMTAyWjAzMTEwLwYDVQQD
Eyg3M2NkOWJhY2IzYTFkYmVmMzFlZmEyZDA3OWU0YmI5ODA1NTViODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06cN4bPvFuYJX8caD7TZapxEqjLh
VyIuC+yU6SSrgV0fzehsFRTDNhNl1hm/kLV8L7TuX+TZCpBCQIi0S/Gsy2M31a9k
xSnMo2Kh+BP6T2xnxO6LR9eDk0HaOzrkm20W0l0ffzMAjYmQ1VeLVxpBKKLzXRLW
wJo79X/YGb5dAlI/g1RgUCvJyRWLBCOCE2qyofOLa8/NCmUh71unq3gghuxdL0C/
mKpbMiXwn7q+l19lCPr7CwyzNEjztvkoirKvMbeddy4uYzK7A2Lw4TBv9GdNn439
fkeix+U+fiqxeGNpeCzff+5cYK84vUa5ndJkzItoT1m6tHlFOmCr4PzU2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPNm6yzodvvMe+i0Hnku5gFVbhhMB8GA1UdIwQY
MBaAFEtcfZx0QOXLSwpnYVY8DYUPCBEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85ZDY2NjAtNzc1YS00ZjNmLTkzYzIt
YTVlZWJkMjhkNDk2LzEvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy85ZDY2NjAtNzc1YS00ZjNmLTkzYzItYTVlZWJkMjhkNDk2
LzEvUzF4OW5IUkE1Y3RMQ21kaFZqd05oUThJRVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOL/dy3D
wdOdPFr+6gezGBxRfdErfU7L3HywlE0j86GhIMYxmI/DDlRFVVpl33DNADEozXi5
sTjQvFtM6bg5u8rUMIx0B++IHYa/HSlD/WZKM+1XGRN7jDGefF2/GXOcrEV99CRG
uKpc1ibZhVOJaiuaZ8FTj95wJz6Xgm1LkW0iV6hCQHuTb2gKC/FZsP5c0iJdn6ao
xSoEL/CNZCaSN/LtKuSXyxdoSvo1Gl1j5ERCstt3gv9YsY9h16I/XaG6m1a89vx7
VXJNVzEEXfP2rEWCHMBr7bNTASfCKEw0I2t+myQS9558FY5k1oEND/bpdwZikLUB
WytoRcErXgVuQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:09 2025 by rpki-client