Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: 8UZ4Fd5UZagkJ5QeoHVpo1VI5nBc8vHAJJ5302VUR8A=
Subject key identifier: 66:3C:3B:CD:95:DF:A3:09:9D:06:B2:58:9A:91:55:1B:39:56:78:D2
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 0198D705BCF78417736F9BCC6B92291880ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 1386
Signing time: Sat 23 Aug 2025 13:02:14 +0000
Manifest this update: Sat 23 Aug 2025 13:02:14 +0000
Manifest next update: Sun 24 Aug 2025 13:02:14 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: suC0LOquEdVGfjdsxGaJAvdHwP+4XWPy3pVceUesDks=)
2: VBSMUM2E1eY-HeRIXiGsI4i681A.roa (hash: 9hPqZnbB+hAnaLIqMz7J1BKYjhJ96B3SoRz8LPWNz7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:bc:f7:84:17:73:6f:9b:cc:6b:92:29:18:80:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Aug 23 13:02:14 2025 GMT
Not After : Aug 24 13:02:14 2025 GMT
Subject: CN=663c3bcd95dfa3099d06b2589a91551b395678d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:7f:1b:a1:fe:df:c5:c8:5e:da:e1:77:11:
c0:00:a6:df:63:36:58:a8:58:b9:9e:92:56:6d:fe:
13:5d:1d:89:81:f4:12:2a:bb:23:1e:48:97:de:af:
6a:81:3a:06:e0:a4:e5:32:06:72:0b:06:37:94:b3:
f2:ef:67:49:ed:f9:3d:4b:15:20:1a:c9:ab:3f:c6:
6c:6f:4a:d9:2c:d8:ac:2a:ca:6e:d2:85:b2:d6:8c:
f0:c7:88:22:9b:a1:63:3d:a9:6f:c2:8e:5c:7d:b1:
ca:3e:7a:aa:e5:0f:76:63:2c:be:74:a1:52:2a:ba:
34:16:2a:e4:d7:ac:c3:db:8a:ca:bb:e8:57:c8:2d:
4e:db:3e:04:fd:23:43:f6:8b:cb:3d:3c:2f:0e:40:
9b:96:13:69:1e:0a:57:e3:48:6d:a8:78:9d:79:34:
9d:18:9a:e2:00:97:55:bc:e6:c1:ae:32:92:49:ae:
e5:69:0e:e6:bf:8d:dd:7f:80:a3:54:cc:e5:e3:f1:
db:09:68:73:dc:7e:f9:e1:dd:d4:8e:f9:9f:be:eb:
a6:7d:df:8a:75:d4:08:7a:79:7d:3d:72:d7:61:5e:
01:72:75:ed:a6:0b:bf:dd:a6:5c:b5:25:a1:28:6c:
89:01:b7:bd:3d:49:37:2e:0f:ea:50:69:df:df:68:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3C:3B:CD:95:DF:A3:09:9D:06:B2:58:9A:91:55:1B:39:56:78:D2
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9f:95:92:ae:d5:17:aa:9d:1f:4c:11:ac:40:c4:66:56:22:
09:2c:4b:cb:29:d8:3b:d9:8f:85:15:6b:c7:4f:39:50:4e:7c:
93:78:b0:92:cd:88:5d:e3:5a:4f:e6:fe:0d:dc:46:18:89:5d:
dc:8c:33:76:b7:0c:55:0a:0a:98:96:23:ab:09:05:00:24:ac:
3c:99:39:12:90:c2:15:2b:87:78:5b:77:3c:ea:bf:db:9f:ed:
62:c6:5b:37:86:82:5d:92:8a:00:3f:97:13:58:35:8d:25:85:
01:85:66:19:15:88:f2:bb:98:f8:81:5f:ff:70:84:d9:55:2c:
55:7c:af:6b:3f:3d:d2:6d:6d:8e:c2:21:14:33:02:64:b8:c4:
8e:07:94:de:bb:a3:04:cb:b7:46:8a:d0:3c:33:6b:d6:98:a6:
59:e0:1f:e5:5a:a3:c4:83:7d:88:2b:9b:bd:39:61:1b:b0:21:
c5:4d:c4:bf:ed:34:e2:24:fe:fd:85:e1:74:b1:0b:50:20:29:
87:af:35:c8:21:44:54:fb:72:39:7d:c0:e9:72:5c:6d:9f:6c:
2e:a6:91:50:aa:92:35:9f:74:2a:11:56:d8:ad:52:04:e6:32:
07:eb:f5:d1:45:c8:7d:f7:72:84:71:a8:d7:65:f5:aa:3d:e8:
23:96:bf:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBbz3hBdzb5vMa5IpGIDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDFiOWUyMDYxNmQ2ODZiNDA1ZGE5MDZhZmE1OTc2MzUw
NjM2NDAwHhcNMjUwODIzMTMwMjE0WhcNMjUwODI0MTMwMjE0WjAzMTEwLwYDVQQD
Eyg2NjNjM2JjZDk1ZGZhMzA5OWQwNmIyNTg5YTkxNTUxYjM5NTY3OGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8d/G6H+38XIXtrhdxHAAKbfYzZY
qFi5npJWbf4TXR2JgfQSKrsjHkiX3q9qgToG4KTlMgZyCwY3lLPy72dJ7fk9SxUg
GsmrP8Zsb0rZLNisKspu0oWy1ozwx4gim6FjPalvwo5cfbHKPnqq5Q92Yyy+dKFS
Kro0Firk16zD24rKu+hXyC1O2z4E/SND9ovLPTwvDkCblhNpHgpX40htqHideTSd
GJriAJdVvObBrjKSSa7laQ7mv43df4CjVMzl4/HbCWhz3H754d3Ujvmfvuumfd+K
ddQIenl9PXLXYV4BcnXtpgu/3aZctSWhKGyJAbe9PUk3Lg/qUGnf32h5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGY8O82V36MJnQayWJqRVRs5VnjSMB8GA1UdIwQY
MBaAFPUBueIGFtaGtAXakGr6WXY1BjZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWIt
NzVkNTg0M2FhNDg5LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWItNzVkNTg0M2FhNDg5
LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJ+Vkq7V
F6qdH0wRrEDEZlYiCSxLyynYO9mPhRVrx085UE58k3iwks2IXeNaT+b+DdxGGIld
3IwzdrcMVQoKmJYjqwkFACSsPJk5EpDCFSuHeFt3POq/25/tYsZbN4aCXZKKAD+X
E1g1jSWFAYVmGRWI8ruY+IFf/3CE2VUsVXyvaz890m1tjsIhFDMCZLjEjgeU3ruj
BMu3RorQPDNr1pimWeAf5VqjxIN9iCubvTlhG7AhxU3Ev+004iT+/YXhdLELUCAp
h681yCFEVPtyOX3A6XJcbZ9sLqaRUKqSNZ90KhFW2K1SBOYyB+v10UXIffdyhHGo
12X1qj3oI5a/mQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:25 2025 by rpki-client