Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: vtCTma2C6ggChQkllHOMMvJOY00JAze56In27pm3SRs=
Subject key identifier: 72:97:B8:8D:EB:A6:B8:05:A7:98:4E:9D:CC:E9:69:25:54:0C:29:48
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 0197B7B367FBCA84E9ACAA14FDF05F8B370E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 0880
Signing time: Sat 28 Jun 2025 18:01:17 +0000
Manifest this update: Sat 28 Jun 2025 18:01:17 +0000
Manifest next update: Sun 29 Jun 2025 18:01:17 +0000
Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=)
2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: yYMom8hD3lhlD1M0nkzVvr+H7IEQpDpWHkUWgJbqNso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:67:fb:ca:84:e9:ac:aa:14:fd:f0:5f:8b:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Jun 28 18:01:17 2025 GMT
Not After : Jun 29 18:01:17 2025 GMT
Subject: CN=7297b88deba6b805a7984e9dcce96925540c2948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:c6:bd:e7:32:ac:75:cc:a1:57:a3:d1:a2:
32:80:5c:f6:31:95:8a:6b:10:13:31:28:83:de:f0:
c1:a8:f6:76:13:91:60:51:20:ae:84:2f:5b:8e:58:
ae:2f:e6:ca:50:66:cc:5b:19:55:7f:2b:21:bf:9b:
5c:2f:0e:d2:7f:0a:e1:19:4f:d1:80:05:db:10:ca:
f5:9a:7c:97:d5:62:c1:ae:40:fa:31:73:c9:0a:3a:
15:58:98:da:dd:fa:f9:10:6e:fa:e6:ba:dd:4d:2a:
c7:a6:28:3b:5d:81:78:07:30:95:e5:8a:79:d3:7d:
cf:ff:50:d1:82:84:bc:74:7f:9f:71:d4:d3:47:08:
f7:bc:5e:1e:7d:d8:71:8a:d4:e8:05:f5:d5:74:db:
e0:1c:9c:1c:db:18:10:76:a2:11:56:3e:53:3c:cb:
86:c7:c9:bd:18:f6:94:ae:ce:51:46:71:47:21:71:
3f:81:6e:22:3f:78:b0:a0:e8:36:ef:71:3e:ca:e2:
39:c3:ba:29:6b:66:78:31:a8:da:74:a3:4d:d9:1c:
c4:93:f6:13:50:38:ef:b4:51:7a:ab:34:b1:6f:ef:
21:fd:15:af:bf:0d:36:d7:46:a7:6c:62:ac:69:ef:
0f:66:8d:5c:1c:67:12:07:b2:3b:32:ae:52:79:83:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:97:B8:8D:EB:A6:B8:05:A7:98:4E:9D:CC:E9:69:25:54:0C:29:48
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b1:e6:19:14:94:c5:ec:aa:b4:b5:ef:74:38:0e:2c:f2:39:
0a:78:a0:5e:b2:16:4b:6d:67:60:24:41:ba:6b:82:f1:c5:de:
c1:74:bf:19:44:c7:e3:09:d8:7f:f9:ee:63:38:70:a6:9c:f7:
15:29:7f:a9:bf:b9:60:43:e2:22:cc:ce:7f:4b:d0:48:9d:1e:
93:c0:d9:81:69:42:32:c0:1b:67:b6:0c:9f:aa:66:41:f7:9f:
ec:9e:24:1a:65:47:10:13:5e:4c:e3:21:02:23:d7:a1:3d:8b:
1b:c5:91:bf:48:63:d7:66:d6:c7:9f:b2:a4:be:fc:96:c5:a0:
af:a7:8f:d1:01:05:49:0b:37:ee:cd:67:af:25:fd:d0:b2:43:
79:ed:9d:9e:1d:91:5d:fa:b2:da:b3:36:72:88:fa:df:a8:a8:
d7:61:8d:d8:c4:c9:06:97:50:f6:c0:26:8b:6b:16:86:e3:6a:
11:da:1e:33:ee:99:e9:5d:5f:95:5d:f3:a7:0c:15:06:b3:14:
23:4d:4f:b9:ab:6c:0c:e9:31:48:b1:82:bf:fd:8e:3e:fc:36:
19:0d:f1:7f:72:f0:59:62:f0:69:b2:10:6a:a9:fd:33:29:62:
c9:d8:b5:fc:0a:84:f6:7f:c9:ee:e8:42:81:97:da:7a:e7:93:
28:b8:e4:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s2f7yoTprKoU/fBfizcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5
NDJhYmQwHhcNMjUwNjI4MTgwMTE3WhcNMjUwNjI5MTgwMTE3WjAzMTEwLwYDVQQD
Eyg3Mjk3Yjg4ZGViYTZiODA1YTc5ODRlOWRjY2U5NjkyNTU0MGMyOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR/GvecyrHXMoVej0aIygFz2MZWK
axATMSiD3vDBqPZ2E5FgUSCuhC9bjliuL+bKUGbMWxlVfyshv5tcLw7SfwrhGU/R
gAXbEMr1mnyX1WLBrkD6MXPJCjoVWJja3fr5EG765rrdTSrHpig7XYF4BzCV5Yp5
033P/1DRgoS8dH+fcdTTRwj3vF4efdhxitToBfXVdNvgHJwc2xgQdqIRVj5TPMuG
x8m9GPaUrs5RRnFHIXE/gW4iP3iwoOg273E+yuI5w7opa2Z4MajadKNN2RzEk/YT
UDjvtFF6qzSxb+8h/RWvvw0210anbGKsae8PZo1cHGcSB7I7Mq5SeYOaPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKXuI3rprgFp5hOnczpaSVUDClIMB8GA1UdIwQY
MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt
Y2QyZGNiMzU1NjU1LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1
LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLHmGRSU
xeyqtLXvdDgOLPI5CnigXrIWS21nYCRBumuC8cXewXS/GUTH4wnYf/nuYzhwppz3
FSl/qb+5YEPiIszOf0vQSJ0ek8DZgWlCMsAbZ7YMn6pmQfef7J4kGmVHEBNeTOMh
AiPXoT2LG8WRv0hj12bWx5+ypL78lsWgr6eP0QEFSQs37s1nryX90LJDee2dnh2R
Xfqy2rM2coj636io12GN2MTJBpdQ9sAmi2sWhuNqEdoeM+6Z6V1flV3zpwwVBrMU
I01PuatsDOkxSLGCv/2OPvw2GQ3xf3LwWWLwabIQaqn9Myliydi1/AqE9n/J7uhC
gZfaeueTKLjkHg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:51 2025 by rpki-client