Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: ofFiECAUFwXwtHdISyEGvQuEc875pntdlF9hAQltijw=
Subject key identifier: 53:A2:7E:39:04:3D:D6:05:14:FA:07:7C:A4:37:EF:D7:46:5F:9B:BF
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 0197B70EC7A372283C9E8460CAB19BAACE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0808
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: Qvf4iM9umLT6S2mkhiBQWkTRHil+bFBYVE2DtvsmhOQ=)
3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c7:a3:72:28:3c:9e:84:60:ca:b1:9b:aa:ce:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=53a27e39043dd60514fa077ca437efd7465f9bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:67:e4:64:36:e0:af:f8:37:19:4b:2d:60:
25:76:00:cd:29:4c:b4:cb:c3:3e:e7:5b:a8:f1:8b:
ad:21:74:b2:fb:b2:99:1a:4d:df:f7:08:e4:95:16:
93:3e:56:2f:50:2c:5d:06:a1:b0:06:53:5d:1a:4e:
1d:6b:50:46:15:2d:22:8d:85:4f:d8:ec:ba:d4:d7:
87:f5:67:39:30:b9:29:2f:65:59:8a:88:c9:ed:ef:
3b:1b:e8:84:12:f6:b5:f8:7d:03:22:64:19:25:e7:
14:97:98:1d:c4:3f:fa:ea:28:15:5f:2e:d0:53:f3:
fb:78:0a:af:db:46:a5:28:47:bd:cd:24:57:3a:6c:
6a:25:90:58:8f:2c:94:08:0a:c4:35:5e:76:d8:6a:
b7:03:5d:61:e9:2b:b8:4f:f2:13:10:c6:98:cc:fa:
8b:e5:c0:11:71:ee:76:2f:90:c2:d5:5b:a9:29:78:
50:6e:2b:c2:d7:2b:57:fa:c2:c5:87:82:e1:fc:11:
a6:8c:9d:60:90:08:e0:2f:f6:1b:49:38:91:59:d9:
c3:49:39:82:5a:92:af:27:a6:84:5f:1c:39:5d:42:
b8:44:1b:de:57:69:c5:c5:3f:87:80:cd:93:35:1a:
3c:88:24:1f:cf:f4:9f:9a:11:1f:27:f4:d5:79:26:
fd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A2:7E:39:04:3D:D6:05:14:FA:07:7C:A4:37:EF:D7:46:5F:9B:BF
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:18:7f:79:48:2c:28:95:93:74:0a:b6:f7:7d:a6:00:6b:ce:
89:10:3e:6f:25:e8:b3:33:80:0e:be:26:4c:65:89:9a:e3:de:
a1:65:ea:0c:66:dd:21:ad:b8:6b:94:3f:0d:5d:1b:4d:92:b4:
94:b8:b5:4d:41:b5:17:3e:dc:e4:25:96:e5:e9:57:c6:e3:d5:
cb:1e:b2:75:48:99:b0:41:ba:7f:f0:9e:f1:21:dd:23:b9:7d:
99:3f:fa:e3:3c:bc:a2:65:c1:0a:5a:13:c2:ff:2a:d7:db:c3:
82:35:bb:c3:f8:2d:81:6f:52:87:8c:ec:df:7e:64:d5:f8:0d:
19:31:2e:ae:72:b9:b0:75:f5:12:a7:4b:13:e5:a5:4e:58:dc:
a6:8f:9f:22:4a:1b:c3:67:5e:b5:d2:be:47:be:c9:fe:44:ac:
7d:fd:a9:be:85:50:8f:36:39:f5:6e:68:3d:ee:14:8c:6b:3a:
f1:c8:b6:80:53:94:f1:3f:5d:ad:32:7f:33:50:4b:f0:51:46:
6a:ee:dc:91:ae:76:2d:88:11:47:e9:3f:8a:e7:4f:6f:27:43:
8b:08:15:ed:c4:bc:56:0f:c7:2d:f7:79:e2:4f:20:41:33:b0:
b3:e0:d9:1f:d2:eb:5d:a2:d0:54:60:ae:49:3e:88:80:d9:0b:
20:a8:76:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dsejcig8noRgyrGbqs4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE1NTU0OGVjOWFiZTExZWYzYmU3MDYwNmE0Yjk4N2Vh
ZTM4MjUwHhcNMjUwNjI4MTUwMTI4WhcNMjUwNjI5MTUwMTI4WjAzMTEwLwYDVQQD
Eyg1M2EyN2UzOTA0M2RkNjA1MTRmYTA3N2NhNDM3ZWZkNzQ2NWY5YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk9n5GQ24K/4NxlLLWAldgDNKUy0
y8M+51uo8YutIXSy+7KZGk3f9wjklRaTPlYvUCxdBqGwBlNdGk4da1BGFS0ijYVP
2Oy61NeH9Wc5MLkpL2VZiojJ7e87G+iEEva1+H0DImQZJecUl5gdxD/66igVXy7Q
U/P7eAqv20alKEe9zSRXOmxqJZBYjyyUCArENV522Gq3A11h6Su4T/ITEMaYzPqL
5cARce52L5DC1VupKXhQbivC1ytX+sLFh4Lh/BGmjJ1gkAjgL/YbSTiRWdnDSTmC
WpKvJ6aEXxw5XUK4RBveV2nFxT+HgM2TNRo8iCQfz/SfmhEfJ/TVeSb9PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOifjkEPdYFFPoHfKQ379dGX5u/MB8GA1UdIwQY
MBaAFPThVVSOyavhHvO+cGBqS5h+rjglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMt
YzlmMTZlODBiM2M0LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMtYzlmMTZlODBiM2M0
LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxh/eUgs
KJWTdAq2932mAGvOiRA+byXoszOADr4mTGWJmuPeoWXqDGbdIa24a5Q/DV0bTZK0
lLi1TUG1Fz7c5CWW5elXxuPVyx6ydUiZsEG6f/Ce8SHdI7l9mT/64zy8omXBCloT
wv8q19vDgjW7w/gtgW9Sh4zs335k1fgNGTEurnK5sHX1EqdLE+WlTljcpo+fIkob
w2detdK+R77J/kSsff2pvoVQjzY59W5oPe4UjGs68ci2gFOU8T9drTJ/M1BL8FFG
au7cka52LYgRR+k/iudPbydDiwgV7cS8Vg/HLfd54k8gQTOws+DZH9LrXaLQVGCu
ST6IgNkLIKh2lg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:11 2025 by rpki-client