Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: Fd20rAMmb9o1vm1kB6WLOm0EdM6MSroAowaSaCZq++E=
Subject key identifier: 93:BB:AE:6B:73:23:FB:48:CC:E6:4C:58:CC:FA:9B:84:6D:AC:7F:CE
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 0197C236C20CD5CF696E7741F9FB97E54881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0DB0
Signing time: Mon 30 Jun 2025 19:00:57 +0000
Manifest this update: Mon 30 Jun 2025 19:00:57 +0000
Manifest next update: Tue 01 Jul 2025 19:00:57 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: 9dkvd+SNsWJlZofa30PX7N8CbQSU6g3rzw3MkF/GdbI=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:36:c2:0c:d5:cf:69:6e:77:41:f9:fb:97:e5:48:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Jun 30 19:00:57 2025 GMT
Not After : Jul 1 19:00:57 2025 GMT
Subject: CN=93bbae6b7323fb48cce64c58ccfa9b846dac7fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:c6:e2:76:4b:04:25:ee:fb:e4:27:fb:63:
32:ec:b9:1b:57:1f:7d:11:a1:04:05:a4:cf:9f:a5:
6d:34:a8:13:2c:07:1c:47:b6:e1:4a:eb:4f:2c:b5:
fd:a9:fd:f2:6e:cf:a4:90:50:39:c9:75:56:26:d0:
08:3f:6c:44:5f:7a:73:e5:97:6a:2d:f2:04:40:e5:
89:82:ea:0c:cf:43:e4:55:fd:76:e1:af:d6:31:cf:
a5:42:b9:25:77:4a:b6:46:8e:c4:41:f3:94:b3:ea:
b4:26:02:c9:fe:10:4a:99:42:92:5c:13:47:1c:3d:
c9:c9:3a:25:33:92:03:76:22:fc:56:38:42:5c:df:
17:ca:cc:3c:c7:f5:2b:0a:5a:e7:b8:03:50:dc:0b:
31:fa:60:c6:59:70:fa:e5:5c:a5:f7:74:6a:13:a1:
7a:2c:24:52:03:b3:91:29:8c:29:c5:a2:4b:8e:81:
7e:2d:d3:29:d8:e4:ce:e5:c3:fe:79:cd:84:5a:1a:
e6:e7:a3:75:85:3b:e7:11:9c:9e:bc:f7:f0:17:9c:
b5:6a:73:aa:ac:a7:98:d6:a4:6f:03:da:d4:c5:47:
9f:16:e1:bf:ef:77:a0:94:b2:81:44:06:72:74:50:
82:eb:c0:73:1d:76:ad:e2:3a:80:63:3d:31:24:d1:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BB:AE:6B:73:23:FB:48:CC:E6:4C:58:CC:FA:9B:84:6D:AC:7F:CE
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:13:d4:4f:c0:01:10:cc:1d:a7:b0:e4:e4:81:95:4f:df:ac:
05:b3:82:af:f9:7d:d3:0c:19:63:bd:74:3d:b8:7e:b7:35:28:
cb:68:c3:f0:44:55:7d:18:c9:0d:2d:cf:1e:46:f6:c7:6a:fc:
3d:4e:1a:64:a7:8e:41:70:17:f0:81:4e:04:55:43:e1:da:44:
34:41:a4:04:af:20:02:f2:8b:6f:d6:c3:73:90:98:f2:a3:17:
b4:80:39:9e:f4:18:60:97:0e:69:39:71:fc:f5:05:c4:10:cf:
20:92:ba:28:fd:10:d3:2f:61:8c:cd:59:e6:8a:4e:c3:c7:2b:
7a:94:dd:20:3c:41:71:9f:fd:ba:bd:32:ae:16:ea:d1:fe:24:
e4:b7:e0:e0:4a:25:c6:6f:85:bf:6e:0f:e8:93:f1:25:e8:c1:
33:98:0e:e4:2d:68:2e:4f:20:81:ba:7e:83:71:f2:c5:d6:1d:
39:ad:40:45:d3:ba:88:d8:48:b3:47:b6:fe:88:2c:60:1b:16:
c1:0e:ce:80:27:d7:b0:7e:42:b3:73:77:ea:8b:71:70:3a:c6:
f3:51:44:ac:0e:79:7b:46:bb:46:e3:43:f7:6f:62:9e:6f:70:
e8:4f:43:db:85:59:f5:b8:5f:b3:7c:25:9a:2d:cd:71:22:0d:
da:d0:b7:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfCNsIM1c9pbndB+fuX5UiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDQ0NGM4NjRlOWU4NWQzNTM3NmUwZjY4MjgxNzk5ZjYy
ODFmMTQwHhcNMjUwNjMwMTkwMDU3WhcNMjUwNzAxMTkwMDU3WjAzMTEwLwYDVQQD
Eyg5M2JiYWU2YjczMjNmYjQ4Y2NlNjRjNThjY2ZhOWI4NDZkYWM3ZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSzG4nZLBCXu++Qn+2My7LkbVx99
EaEEBaTPn6VtNKgTLAccR7bhSutPLLX9qf3ybs+kkFA5yXVWJtAIP2xEX3pz5Zdq
LfIEQOWJguoMz0PkVf124a/WMc+lQrkld0q2Ro7EQfOUs+q0JgLJ/hBKmUKSXBNH
HD3JyTolM5IDdiL8VjhCXN8Xysw8x/UrClrnuANQ3Asx+mDGWXD65Vyl93RqE6F6
LCRSA7ORKYwpxaJLjoF+LdMp2OTO5cP+ec2EWhrm56N1hTvnEZyevPfwF5y1anOq
rKeY1qRvA9rUxUefFuG/73eglLKBRAZydFCC68BzHXat4jqAYz0xJNEMmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO7rmtzI/tIzOZMWMz6m4RtrH/OMB8GA1UdIwQY
MBaAFEvURMhk6ehdNTduD2goF5n2KB8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMt
MjkwOTVhZDFjY2VkLzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMtMjkwOTVhZDFjY2Vk
LzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRPUT8AB
EMwdp7Dk5IGVT9+sBbOCr/l90wwZY710Pbh+tzUoy2jD8ERVfRjJDS3PHkb2x2r8
PU4aZKeOQXAX8IFOBFVD4dpENEGkBK8gAvKLb9bDc5CY8qMXtIA5nvQYYJcOaTlx
/PUFxBDPIJK6KP0Q0y9hjM1Z5opOw8crepTdIDxBcZ/9ur0yrhbq0f4k5Lfg4Eol
xm+Fv24P6JPxJejBM5gO5C1oLk8ggbp+g3HyxdYdOa1ARdO6iNhIs0e2/ogsYBsW
wQ7OgCfXsH5Cs3N36otxcDrG81FErA55e0a7RuND929inm9w6E9D24VZ9bhfs3wl
mi3NcSIN2tC3PA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:05:24 2025 by rpki-client