Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: By3cATge8k7NaL+ofO8LqcUwMmCm61cpPHtX0MnGZ4o=
Subject key identifier: 6A:94:20:9B:A3:3E:03:2E:61:43:E4:48:94:75:41:90:FE:72:D4:50
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0197B9D87946E9560A6A0358B9A49695C1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 0DCF
Signing time: Sun 29 Jun 2025 04:01:01 +0000
Manifest this update: Sun 29 Jun 2025 04:01:01 +0000
Manifest next update: Mon 30 Jun 2025 04:01:01 +0000
Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: hm2kOD4eloNwOrWC6bxIh9Q6dmIQJHIISQhXOeHKuCo=)
3: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
4: S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (hash: X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=)
5: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
6: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=)
7: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
8: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:79:46:e9:56:0a:6a:03:58:b9:a4:96:95:c1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jun 29 04:01:01 2025 GMT
Not After : Jun 30 04:01:01 2025 GMT
Subject: CN=6a94209ba33e032e6143e44894754190fe72d450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:1a:69:20:63:7e:5a:60:be:7b:ca:a1:38:
19:e5:e0:ff:12:a3:aa:41:a5:04:35:fd:56:ae:b5:
00:37:d3:9f:ac:58:7a:39:27:35:9c:8e:95:b6:a3:
41:67:37:a2:f8:39:bb:16:fa:a1:19:dd:59:f1:e8:
5b:1b:26:c6:e0:d9:e7:77:c2:44:9a:20:f6:1f:6f:
a4:6e:f6:d4:fc:cc:19:06:3a:72:9d:a4:1d:6e:ae:
8a:15:7b:5a:1c:8d:f7:53:b0:da:9f:22:66:f2:c3:
d3:aa:a8:ad:36:2b:37:8a:4f:f8:36:d5:30:f1:fc:
12:4d:e0:3e:69:69:1d:8c:5d:47:6a:14:09:cc:7e:
4d:d4:78:04:d6:38:4c:13:f1:4a:45:8e:b9:51:a9:
a1:c3:8e:b8:e3:0f:eb:2b:f9:c9:ab:ec:e0:25:47:
85:ef:81:6c:b3:d6:51:4e:41:bc:a8:ca:2b:c0:c1:
f7:1f:ca:2a:f1:da:36:df:95:15:48:e3:b6:9c:07:
a3:7d:93:79:13:41:42:1a:82:54:8d:58:e8:1a:af:
ce:e0:75:70:e3:10:9b:b1:7c:a4:24:d2:f8:f3:51:
db:2d:4c:28:38:6d:d6:20:01:66:ef:6b:7e:25:48:
a5:b6:83:be:e8:fc:1d:4e:eb:e7:a0:10:8b:08:a8:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:20:9B:A3:3E:03:2E:61:43:E4:48:94:75:41:90:FE:72:D4:50
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:74:bb:e6:1a:6b:2a:3a:87:1e:55:b8:42:0f:43:5b:31:c6:
1d:f3:9e:6b:ce:dc:19:36:e7:17:20:31:f2:0e:82:65:cd:87:
e8:b8:aa:b3:0f:02:1d:2e:ec:ef:94:b3:1f:22:c9:98:4d:6e:
49:b6:b4:53:e6:b9:d2:dd:a0:ef:94:f8:ef:50:87:aa:36:6d:
f7:64:b8:ae:93:56:73:24:92:97:6c:b1:f2:0f:2d:9e:16:bb:
53:fd:68:35:cb:de:3a:46:8e:ea:3c:77:58:e1:0f:a2:f8:91:
e2:ab:13:a6:a8:bc:4e:b2:d2:1d:57:e2:cf:90:53:5e:59:81:
76:a5:b1:9d:bf:c8:43:99:4c:18:87:78:a4:46:8f:b1:2e:8d:
f6:a1:03:b9:54:dc:b5:e7:6c:29:91:c4:ef:98:9c:dc:09:ad:
49:a8:f4:63:96:c1:d9:33:2f:cb:e8:68:01:2e:9c:0c:61:d9:
2e:c3:f5:28:59:24:c0:95:2b:8d:65:9e:13:75:78:54:44:a1:
2c:5e:19:ff:1f:a9:b1:e4:11:2e:62:bf:f5:23:64:5c:6d:96:
7c:a7:0b:ad:53:d4:42:cf:05:92:e6:11:0f:7a:99:e4:21:e0:
f9:88:da:e0:b6:c0:ec:f1:45:b3:1c:af:8d:66:36:e5:95:3e:
ca:59:30:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52HlG6VYKagNYuaSWlcHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1
ZWI1NmYwHhcNMjUwNjI5MDQwMTAxWhcNMjUwNjMwMDQwMTAxWjAzMTEwLwYDVQQD
Eyg2YTk0MjA5YmEzM2UwMzJlNjE0M2U0NDg5NDc1NDE5MGZlNzJkNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5QaaSBjflpgvnvKoTgZ5eD/EqOq
QaUENf1WrrUAN9OfrFh6OSc1nI6VtqNBZzei+Dm7FvqhGd1Z8ehbGybG4Nnnd8JE
miD2H2+kbvbU/MwZBjpynaQdbq6KFXtaHI33U7DanyJm8sPTqqitNis3ik/4NtUw
8fwSTeA+aWkdjF1HahQJzH5N1HgE1jhME/FKRY65Uamhw4644w/rK/nJq+zgJUeF
74Fss9ZRTkG8qMorwMH3H8oq8do235UVSOO2nAejfZN5E0FCGoJUjVjoGq/O4HVw
4xCbsXykJNL481HbLUwoOG3WIAFm72t+JUiltoO+6PwdTuvnoBCLCKitCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqUIJujPgMuYUPkSJR1QZD+ctRQMB8GA1UdIwQY
MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt
MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy
LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnS75hpr
KjqHHlW4Qg9DWzHGHfOea87cGTbnFyAx8g6CZc2H6Liqsw8CHS7s75SzHyLJmE1u
Sba0U+a50t2g75T471CHqjZt92S4rpNWcySSl2yx8g8tnha7U/1oNcveOkaO6jx3
WOEPoviR4qsTpqi8TrLSHVfiz5BTXlmBdqWxnb/IQ5lMGId4pEaPsS6N9qEDuVTc
tedsKZHE75ic3AmtSaj0Y5bB2TMvy+hoAS6cDGHZLsP1KFkkwJUrjWWeE3V4VESh
LF4Z/x+pseQRLmK/9SNkXG2WfKcLrVPUQs8FkuYRD3qZ5CHg+Yja4LbA7PFFsxyv
jWY25ZU+ylkwww==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:24 2025 by rpki-client