Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: n81+j2fhrFktTNcuFJwUMjMu9CGHkRN6ToWxUz7Wkl8=
Subject key identifier: DF:8F:67:4D:81:75:94:8E:44:B2:9D:D6:9C:4A:B2:B5:32:BE:23:A6
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 0197B96AC79116995AE0A6DBD2E7241F16CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 0F1A
Signing time: Sun 29 Jun 2025 02:01:12 +0000
Manifest this update: Sun 29 Jun 2025 02:01:12 +0000
Manifest next update: Mon 30 Jun 2025 02:01:12 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: Mv66W1Dm4V547F7+x7BXv9LzRnfXMt/eSouu3q9B4YQ=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:c7:91:16:99:5a:e0:a6:db:d2:e7:24:1f:16:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Jun 29 02:01:12 2025 GMT
Not After : Jun 30 02:01:12 2025 GMT
Subject: CN=df8f674d8175948e44b29dd69c4ab2b532be23a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:5c:50:38:74:eb:d8:11:27:08:08:6f:56:
c4:f4:62:3f:01:41:93:d5:79:0a:90:6d:14:2d:20:
be:67:d6:d6:20:03:36:0e:30:48:c9:41:a3:bf:02:
17:b1:db:b1:60:96:73:10:7f:bb:97:4b:73:7c:81:
ec:e8:f2:49:ee:ab:ab:83:31:05:db:6b:23:c9:7f:
16:54:a2:12:22:cc:ff:67:82:a1:62:ed:c9:87:e4:
29:5a:09:4d:39:a1:5e:c7:48:a1:52:56:36:ad:33:
cc:35:fa:a1:8a:a0:a3:8b:0f:2c:6a:85:5c:be:92:
c8:ed:6d:69:93:ae:18:80:22:cd:a8:9e:2b:fa:73:
09:31:39:c9:9f:bd:be:98:64:2c:3d:4d:38:4f:6f:
d7:dd:9f:83:eb:87:a6:70:93:de:c6:a4:25:c3:f2:
72:35:68:0e:4b:39:33:42:7f:4a:8a:33:78:fb:9a:
2a:d3:ae:49:a3:43:b2:7a:5f:b4:99:0a:fb:d7:06:
2e:d1:49:13:e1:6b:06:70:e6:ee:68:81:77:9f:33:
f7:a9:42:1a:7d:77:ae:bf:14:22:0b:a4:f2:1d:ca:
1c:86:a3:55:fb:d2:9e:47:2a:d3:05:4d:c3:fd:8e:
29:7b:e3:18:ed:c1:dc:5b:c9:1e:ab:86:60:16:00:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8F:67:4D:81:75:94:8E:44:B2:9D:D6:9C:4A:B2:B5:32:BE:23:A6
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ee:eb:02:fd:95:e4:45:5f:d7:b6:ea:83:02:4f:3b:eb:f5:
b9:c6:13:2f:4a:b4:b6:ab:31:62:93:22:b4:a9:68:fd:8f:35:
69:be:d8:ec:eb:b6:21:a4:ae:dd:f5:ad:e6:12:22:21:91:1b:
99:4f:bf:03:d0:be:f1:73:80:75:3f:f1:0a:c2:2e:d2:ba:81:
1c:11:61:77:3d:9e:2f:cd:b8:b4:7d:f3:95:f9:70:03:19:ed:
5c:5e:31:a2:fd:fd:72:cd:a3:38:2a:ab:dc:1d:94:f0:9a:90:
d0:61:9e:89:8f:ef:95:6a:fc:dc:89:17:51:0f:75:55:a9:e1:
57:20:49:4c:34:36:c0:df:99:8c:0d:e4:74:4e:fd:eb:77:72:
de:f4:aa:dd:6e:3e:61:1a:8a:6c:d1:f0:b1:96:70:6b:3f:60:
1e:f8:17:28:11:7c:4d:33:df:2e:2a:41:7b:53:3b:82:b9:83:
3c:80:01:e8:15:2c:f0:2c:04:45:e2:ca:db:8c:1c:10:dd:95:
58:b0:c7:d7:f8:0e:f3:0e:29:29:33:f2:d0:2c:3f:6a:90:af:
e1:22:3e:22:cd:49:b7:fc:b1:32:80:6d:03:70:85:14:e4:4c:
62:fa:d9:d8:9c:9f:aa:5d:94:f1:ba:71:44:44:ed:7b:3d:19:
a7:e6:d0:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5aseRFpla4Kbb0uckHxbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGI4M2FkYzc2YmFmZjYwNTcwMGNjYTQ4Y2M0ZjZmOGM1
MjlmNjYwHhcNMjUwNjI5MDIwMTEyWhcNMjUwNjMwMDIwMTEyWjAzMTEwLwYDVQQD
EyhkZjhmNjc0ZDgxNzU5NDhlNDRiMjlkZDY5YzRhYjJiNTMyYmUyM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzxcUDh069gRJwgIb1bE9GI/AUGT
1XkKkG0ULSC+Z9bWIAM2DjBIyUGjvwIXsduxYJZzEH+7l0tzfIHs6PJJ7qurgzEF
22sjyX8WVKISIsz/Z4KhYu3Jh+QpWglNOaFex0ihUlY2rTPMNfqhiqCjiw8saoVc
vpLI7W1pk64YgCLNqJ4r+nMJMTnJn72+mGQsPU04T2/X3Z+D64emcJPexqQlw/Jy
NWgOSzkzQn9KijN4+5oq065Jo0Oyel+0mQr71wYu0UkT4WsGcObuaIF3nzP3qUIa
fXeuvxQiC6TyHcochqNV+9KeRyrTBU3D/Y4pe+MY7cHcW8keq4ZgFgAjJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+PZ02BdZSORLKd1pxKsrUyviOmMB8GA1UdIwQY
MBaAFPTbg63Ha6/2BXAMykjMT2+MUp9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQt
MWI0MTdkNWUxZmJkLzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQtMWI0MTdkNWUxZmJk
LzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbe7rAv2V
5EVf17bqgwJPO+v1ucYTL0q0tqsxYpMitKlo/Y81ab7Y7Ou2IaSu3fWt5hIiIZEb
mU+/A9C+8XOAdT/xCsIu0rqBHBFhdz2eL824tH3zlflwAxntXF4xov39cs2jOCqr
3B2U8JqQ0GGeiY/vlWr83IkXUQ91VanhVyBJTDQ2wN+ZjA3kdE7963dy3vSq3W4+
YRqKbNHwsZZwaz9gHvgXKBF8TTPfLipBe1M7grmDPIAB6BUs8CwEReLK24wcEN2V
WLDH1/gO8w4pKTPy0Cw/apCv4SI+Is1Jt/yxMoBtA3CFFORMYvrZ2Jyfql2U8bpx
RETtez0Zp+bQdA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:02:19 2025 by rpki-client