Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: yoaUZxLucIk4RKWsEMBmNPvzGWMK2PPVQPkl7bTfP38=
Subject key identifier: F6:23:DF:75:F8:C1:7F:F8:37:86:EC:EF:89:1B:3C:24:5C:FD:E4:8E
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 0197B70EA16557DB8FDE321E5B096758265E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0E26
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: UFy4W10oicxgmbeQ9Qsjx3EgCQo.roa (hash: duZf8h2S3aFjJNNyhBun9TsZgrWqDeY96HLWVCbzObE=)
2: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: katA1JNFcpGFGDTvqOTg1p0WvKHKqmGumaRJrgYWaDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a1:65:57:db:8f:de:32:1e:5b:09:67:58:26:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=f623df75f8c17ff83786ecef891b3c245cfde48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:d2:1e:e9:e7:a1:0e:0f:58:60:73:4e:c4:
93:0c:90:54:d7:f8:1a:82:09:32:1f:43:f1:c7:13:
c7:32:0d:86:43:e8:83:04:8a:29:ac:af:c4:2a:82:
65:c6:49:63:05:18:08:b9:99:3f:c7:7a:df:ad:86:
d4:d4:88:d8:77:88:d0:f3:1b:dd:68:40:3e:8a:4a:
15:8c:ed:0c:03:e7:1a:d0:4a:cf:46:62:b2:19:97:
f8:1e:96:6e:0c:f5:ba:e7:0c:3a:cd:19:5b:5b:33:
5e:f7:7c:0b:7b:20:82:7f:bb:c6:c6:aa:f4:ef:13:
3a:6c:eb:57:4a:d6:49:c9:af:fd:b5:a1:69:3d:29:
91:bf:70:75:aa:a3:11:5b:d0:d7:55:69:05:07:c3:
92:e6:56:ee:fc:33:a0:6d:22:55:8e:ca:2a:51:0f:
bf:8f:9c:0d:2d:4f:ba:40:57:b9:37:d7:d9:9b:60:
1e:df:6b:6b:bd:22:c4:0f:29:c1:6e:34:06:e3:55:
f8:ae:33:a6:06:2e:c7:6a:f7:aa:0c:90:b9:a5:10:
00:6b:25:61:1c:6d:b4:4c:67:73:eb:fc:d2:b3:ca:
b7:f4:fa:8f:2c:88:e9:ba:5f:f0:66:d9:7f:a7:4b:
1e:8e:4a:a4:07:f9:af:4e:14:7f:8f:b5:d3:e7:ae:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:23:DF:75:F8:C1:7F:F8:37:86:EC:EF:89:1B:3C:24:5C:FD:E4:8E
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ef:12:cc:13:5c:63:bc:32:c1:96:dc:b4:d1:32:69:15:f8:
51:36:86:93:26:cc:e5:f4:c6:6a:60:6e:1a:a5:56:90:30:2a:
06:ac:87:8c:72:d6:75:90:dd:0a:33:2e:cf:7a:40:ec:7b:68:
80:7f:a4:5f:fe:65:14:e7:12:02:09:e0:9a:0d:b7:43:75:69:
b3:4c:1b:97:0c:94:17:76:ca:3e:e8:9b:d8:3f:cc:e0:ca:11:
d2:f8:99:90:61:09:f5:16:52:fa:47:18:26:ed:00:38:e5:38:
ec:9e:bf:33:5b:fe:2a:4a:3b:11:10:1f:f0:07:b5:f9:ab:a4:
02:76:04:0d:5f:7e:9e:14:2b:a9:cb:23:fc:db:ea:23:8a:5e:
4f:27:92:ee:29:d9:73:b8:4d:ba:05:e6:d1:1f:6e:37:ab:bb:
38:2a:63:6f:96:e7:de:07:aa:50:42:9f:d7:b0:ff:97:b4:25:
22:cb:59:c6:15:cb:38:bf:3a:71:07:bb:a1:1d:6d:86:8b:5e:
99:02:43:15:01:13:aa:3a:1a:82:0d:2e:4c:7d:ac:9d:d9:e2:
89:1e:ab:e6:a5:a1:23:13:9a:00:6e:83:75:02:41:6f:c3:10:
1b:ec:c6:5c:eb:17:b4:f1:d7:d7:55:1e:48:02:29:07:7b:f0:
f8:4e:41:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqFlV9uP3jIeWwlnWCZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDg1YWRlMmIwZDRlYzFjYTA5MmE4ZTI3MDNjMTkyMDBj
NzJmMzIwHhcNMjUwNjI4MTUwMTE4WhcNMjUwNjI5MTUwMTE4WjAzMTEwLwYDVQQD
EyhmNjIzZGY3NWY4YzE3ZmY4Mzc4NmVjZWY4OTFiM2MyNDVjZmRlNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnrSHunnoQ4PWGBzTsSTDJBU1/ga
ggkyH0PxxxPHMg2GQ+iDBIoprK/EKoJlxkljBRgIuZk/x3rfrYbU1IjYd4jQ8xvd
aEA+ikoVjO0MA+ca0ErPRmKyGZf4HpZuDPW65ww6zRlbWzNe93wLeyCCf7vGxqr0
7xM6bOtXStZJya/9taFpPSmRv3B1qqMRW9DXVWkFB8OS5lbu/DOgbSJVjsoqUQ+/
j5wNLU+6QFe5N9fZm2Ae32trvSLEDynBbjQG41X4rjOmBi7HaveqDJC5pRAAayVh
HG20TGdz6/zSs8q39PqPLIjpul/wZtl/p0sejkqkB/mvThR/j7XT567jrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYj33X4wX/4N4bs74kbPCRc/eSOMB8GA1UdIwQY
MBaAFKfYWt4rDU7BygkqjicDwZIAxy8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYt
MDRiMGJmNjBiOWI3LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYtMDRiMGJmNjBiOWI3
LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJu8SzBNc
Y7wywZbctNEyaRX4UTaGkybM5fTGamBuGqVWkDAqBqyHjHLWdZDdCjMuz3pA7Hto
gH+kX/5lFOcSAgngmg23Q3Vps0wblwyUF3bKPuib2D/M4MoR0viZkGEJ9RZS+kcY
Ju0AOOU47J6/M1v+Kko7ERAf8Ae1+aukAnYEDV9+nhQrqcsj/NvqI4peTyeS7inZ
c7hNugXm0R9uN6u7OCpjb5bn3geqUEKf17D/l7QlIstZxhXLOL86cQe7oR1thote
mQJDFQETqjoagg0uTH2sndniiR6r5qWhIxOaAG6DdQJBb8MQG+zGXOsXtPHX11Ue
SAIpB3vw+E5Blw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:00 2025 by rpki-client