Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: l2/tzOchev2SEBQHKw9ivDU4hQkMWhsdZG5uS0up050=
Subject key identifier: F1:DE:C7:B3:E5:BC:82:CB:87:66:0B:15:F9:B1:4E:D1:04:85:29:B8
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 0198D66103D8EF6C82E1819BA4A6CEA7E463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 0348
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: j5sccrk2urRHsiwICrVVxQKIJ5e12dpyg/6sMqA2/70=)
2: OHGF750j4DJGNc1Oe80dc-FWYaY.roa (hash: h+xssOn739NLfAUDZmv5GlRt0V3PO+xTJdzfH9zAWE8=)
3: _HF2gqhC9uCDDnAOpKs3WUfmbDo.roa (hash: QhESuMW1F4EzEaEsL+0TS0hEypm5aO6tHQYl52gTh58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:03:d8:ef:6c:82:e1:81:9b:a4:a6:ce:a7:e4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=f1dec7b3e5bc82cb87660b15f9b14ed1048529b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:7d:61:2a:dc:4e:eb:dd:84:f6:74:46:13:
83:4f:5a:0f:5c:62:fb:bd:26:ea:f3:15:e4:dc:21:
42:0c:41:ae:49:31:23:92:52:ab:4e:3e:ec:7e:10:
19:d4:3f:41:fb:3c:93:c7:eb:cf:c0:90:91:3e:cd:
86:f2:65:59:26:a3:f4:61:2a:74:a0:9e:18:d9:1a:
bd:93:7f:2d:2c:d5:b4:21:f9:c6:b6:13:13:29:7c:
7d:2d:e4:95:24:4a:71:1a:60:c7:d9:df:69:9d:56:
0d:50:87:58:06:e7:af:6b:37:2e:8f:80:39:c8:47:
3c:ea:6d:ad:70:76:61:3f:7e:e3:0c:71:69:d9:e2:
a2:7c:ab:c7:ff:ef:d5:c2:bd:a3:fd:8f:0e:29:31:
25:18:35:05:43:76:d2:f3:31:98:05:80:66:25:d4:
b7:1c:61:d5:1e:ba:ba:9b:73:2d:5d:1b:63:79:61:
d6:6a:0b:5f:89:c9:5a:3a:cb:17:cb:08:dd:2e:60:
3c:d7:79:db:e4:18:68:8e:cf:53:dc:35:dc:c5:99:
6a:19:60:87:93:75:de:22:f4:4c:5a:14:ed:4a:e1:
1d:a8:ca:be:f8:a4:b8:a8:77:46:98:80:97:48:1a:
94:ad:3d:d5:fe:e4:e8:ac:3f:f9:76:dc:a0:07:94:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:C7:B3:E5:BC:82:CB:87:66:0B:15:F9:B1:4E:D1:04:85:29:B8
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f4:d9:d5:ca:67:f4:28:54:37:0d:e5:9e:e7:c7:03:ed:73:
29:83:a5:07:09:b2:32:10:88:3b:51:f6:23:28:04:23:7b:73:
2a:3c:92:2d:6e:8b:2d:eb:22:64:02:83:85:49:03:85:09:63:
7a:72:ff:a8:07:5f:c6:56:be:bf:b6:56:76:d8:d9:c4:38:7b:
ef:f7:ca:57:13:16:a3:82:2d:ee:c0:ef:01:40:52:d6:02:bf:
e8:a5:7c:5c:8f:d9:89:f3:dc:4c:35:c0:1a:f5:c7:08:ce:0f:
37:1f:a8:79:90:3a:75:42:c8:52:12:bb:28:d5:74:06:b0:86:
3d:4c:24:ab:34:7b:f4:04:45:c6:7d:e0:c7:4a:f9:4a:a4:8d:
3a:f5:9c:05:22:ce:87:31:25:54:0b:23:25:3c:3f:58:94:da:
53:fb:17:d0:75:c2:b6:fe:de:dc:dc:90:90:d0:c3:8b:e2:3d:
9b:42:b8:03:04:f0:b9:87:59:a0:7b:b6:c2:0b:b8:47:48:70:
b8:b1:ab:15:ec:c5:ee:a3:e8:6f:d8:d4:a4:3d:6c:ad:d9:4a:
47:0c:3a:09:2b:d7:df:87:c5:5d:3a:82:f1:b0:ce:96:a1:5e:
35:b2:5b:58:c7:70:06:c2:c9:a4:be:2f:1b:d4:56:a7:b0:a0:
f0:47:59:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYQPY72yC4YGbpKbOp+RjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MWM3ZDQ3NzE4YThhNGE5ZDhjNTBiMjYwODNlNzE4NTI1
YjZjMWIwHhcNMjUwODIzMTAwMjE4WhcNMjUwODI0MTAwMjE4WjAzMTEwLwYDVQQD
EyhmMWRlYzdiM2U1YmM4MmNiODc2NjBiMTVmOWIxNGVkMTA0ODUyOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5F9YSrcTuvdhPZ0RhODT1oPXGL7
vSbq8xXk3CFCDEGuSTEjklKrTj7sfhAZ1D9B+zyTx+vPwJCRPs2G8mVZJqP0YSp0
oJ4Y2Rq9k38tLNW0IfnGthMTKXx9LeSVJEpxGmDH2d9pnVYNUIdYBuevazcuj4A5
yEc86m2tcHZhP37jDHFp2eKifKvH/+/Vwr2j/Y8OKTElGDUFQ3bS8zGYBYBmJdS3
HGHVHrq6m3MtXRtjeWHWagtficlaOssXywjdLmA813nb5Bhojs9T3DXcxZlqGWCH
k3XeIvRMWhTtSuEdqMq++KS4qHdGmICXSBqUrT3V/uTorD/5dtygB5REaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHex7PlvILLh2YLFfmxTtEEhSm4MB8GA1UdIwQY
MBaAFPQcfUdxiopKnYxQsmCD5xhSW2wbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUt
NjBiMmM5ODIxMDc4LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUtNjBiMmM5ODIxMDc4
LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvTZ1cpn
9ChUNw3lnufHA+1zKYOlBwmyMhCIO1H2IygEI3tzKjySLW6LLesiZAKDhUkDhQlj
enL/qAdfxla+v7ZWdtjZxDh77/fKVxMWo4It7sDvAUBS1gK/6KV8XI/ZifPcTDXA
GvXHCM4PNx+oeZA6dULIUhK7KNV0BrCGPUwkqzR79ARFxn3gx0r5SqSNOvWcBSLO
hzElVAsjJTw/WJTaU/sX0HXCtv7e3NyQkNDDi+I9m0K4AwTwuYdZoHu2wgu4R0hw
uLGrFezF7qPob9jUpD1srdlKRww6CSvX34fFXTqC8bDOlqFeNbJbWMdwBsLJpL4v
G9RWp7Cg8EdZBw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:05 2025 by rpki-client