Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: G+OU31ayY1BOhTSJeLm+VMxQePc1KpUURRAXXXg2ELk=
Subject key identifier: 62:2A:93:D4:33:8E:49:1C:94:96:30:0E:2A:D0:96:55:BF:A3:25:54
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 0197B77C3C1E748BA7714243ABE99ED37854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: njWkzdtcNxGrKiwqln55ctoRf0Y/sM3sX07OMLdQRrM=)
2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3c:1e:74:8b:a7:71:42:43:ab:e9:9e:d3:78:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=622a93d4338e491c9496300e2ad09655bfa32554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:76:41:32:1e:f0:25:d7:f3:52:e3:64:5d:
3d:1d:07:50:89:d1:14:da:7e:34:a3:e3:3c:61:f5:
cd:52:b8:64:2f:52:0d:95:18:bd:d3:78:a1:a9:63:
7a:f3:6d:07:e2:7a:bb:40:c9:9d:af:e6:28:65:69:
cf:0d:24:dc:c3:e6:14:5a:dc:dd:f7:dd:58:fc:0e:
17:b2:a7:49:20:94:3a:54:54:84:20:59:51:de:cc:
f0:06:0a:f2:ca:85:6e:1f:79:2e:75:f9:da:b0:61:
13:4c:2d:7f:76:df:0d:6b:d4:ec:f5:68:3e:8d:64:
f4:5d:67:1b:c2:78:9f:0c:07:65:80:c4:ea:69:8d:
9c:d1:f2:2d:8b:76:a7:7d:49:2b:de:3c:f8:8e:cd:
2e:ad:44:55:dd:27:7c:63:f3:c7:c4:4b:73:3e:cc:
3f:ba:34:6f:cd:41:4f:b9:e3:b1:ef:9a:b4:58:14:
7c:20:c5:e0:46:90:df:d3:29:73:43:fc:a1:40:89:
c8:81:f7:ea:36:30:ad:d3:d7:70:6b:af:66:33:3b:
c9:39:ce:cd:79:28:b4:95:39:0f:06:e9:f6:52:1d:
3e:87:ce:90:d1:35:4e:ae:ef:12:eb:c7:e6:97:76:
26:7f:cc:ae:21:21:e2:83:3c:02:e6:49:d9:af:56:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:93:D4:33:8E:49:1C:94:96:30:0E:2A:D0:96:55:BF:A3:25:54
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5d:15:23:0c:df:8f:c8:ac:f0:88:66:5f:91:4e:06:78:f8:
88:0e:2d:e9:c6:d8:c9:13:60:79:8f:65:41:18:5d:0e:57:ad:
27:66:14:d9:80:87:b7:a0:9e:8f:78:2e:61:78:a8:f7:a3:db:
23:31:e9:8b:2a:65:19:ff:1d:bb:9d:eb:00:bd:43:a7:85:be:
b5:68:5e:f8:87:e6:52:f1:1c:a8:42:50:49:1f:a4:ef:7b:d8:
de:0a:ed:6f:46:ce:a8:76:9e:92:15:5a:62:da:f2:68:22:2e:
ae:ea:fc:b4:fc:80:15:09:83:41:de:62:03:44:fd:1a:87:dc:
48:a5:63:c1:c7:d2:c1:36:58:b9:b3:05:5e:04:a4:32:8a:a1:
ec:5c:d8:98:a8:bb:ed:a1:35:65:64:8c:f7:75:af:09:9c:d7:
71:78:80:ba:89:40:47:c5:02:d3:b8:f7:03:1d:7f:46:79:e4:
82:43:fe:da:b6:9f:f1:9e:c5:01:12:60:81:72:4b:ac:01:0b:
a4:ea:59:f6:5b:20:70:77:1e:b2:7f:68:70:4b:3f:09:ab:f0:
77:6e:ce:3a:3b:31:bf:6d:5a:d8:fa:2e:d7:9b:2a:26:86:1d:
22:92:fe:9a:0e:9e:6d:01:ed:04:4e:a5:44:e2:6a:4c:bd:c7:
9f:ae:2f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDwedIuncUJDq+me03hUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDhlZTYzZjE5ZDBjMWYyMmM2ZjYxY2U0YTgxZWNlYWJi
OGU3OTAwHhcNMjUwNjI4MTcwMTAxWhcNMjUwNjI5MTcwMTAxWjAzMTEwLwYDVQQD
Eyg2MjJhOTNkNDMzOGU0OTFjOTQ5NjMwMGUyYWQwOTY1NWJmYTMyNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQZ2QTIe8CXX81LjZF09HQdQidEU
2n40o+M8YfXNUrhkL1INlRi903ihqWN6820H4nq7QMmdr+YoZWnPDSTcw+YUWtzd
991Y/A4XsqdJIJQ6VFSEIFlR3szwBgryyoVuH3kudfnasGETTC1/dt8Na9Ts9Wg+
jWT0XWcbwnifDAdlgMTqaY2c0fIti3anfUkr3jz4js0urURV3Sd8Y/PHxEtzPsw/
ujRvzUFPueOx75q0WBR8IMXgRpDf0ylzQ/yhQInIgffqNjCt09dwa69mMzvJOc7N
eSi0lTkPBun2Uh0+h86Q0TVOru8S68fml3Ymf8yuISHigzwC5knZr1alCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIqk9QzjkkclJYwDirQllW/oyVUMB8GA1UdIwQY
MBaAFPRI7mPxnQwfIsb2HOSoHs6ruOeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEt
NzE5NDAxYmJjYTJlLzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEtNzE5NDAxYmJjYTJl
LzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal0VIwzf
j8is8IhmX5FOBnj4iA4t6cbYyRNgeY9lQRhdDletJ2YU2YCHt6Cej3guYXio96Pb
IzHpiyplGf8du53rAL1Dp4W+tWhe+IfmUvEcqEJQSR+k73vY3grtb0bOqHaekhVa
YtryaCIurur8tPyAFQmDQd5iA0T9GofcSKVjwcfSwTZYubMFXgSkMoqh7FzYmKi7
7aE1ZWSM93WvCZzXcXiAuolAR8UC07j3Ax1/RnnkgkP+2raf8Z7FARJggXJLrAEL
pOpZ9lsgcHcesn9ocEs/Cavwd27OOjsxv21a2Pou15sqJoYdIpL+mg6ebQHtBE6l
ROJqTL3Hn64vwg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:59 2025 by rpki-client