Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: plN/D2pSf17bwcWcLsyDAl6V0X/Yq7gA5/gn7TwocYE=
Subject key identifier: 18:55:24:D6:7E:88:97:A4:B7:31:3C:B0:9E:3C:C9:D9:A0:AA:87:DA
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 0197B7B3846DFDAF646C8AA6BBF739D2F5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:01:24 +0000
Manifest this update: Sat 28 Jun 2025 18:01:24 +0000
Manifest next update: Sun 29 Jun 2025 18:01:24 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: rPrQyDJXmV7iTFcFHPnwvuAx89DIMAjfRNVdxwh1UJw=)
2: OB1GsVdt7iCzhWhmgirUwJgGaak.roa (hash: HNRDkQU9zd4iAZZaAQcAxCYiJZDSBKH3pYjhla6LGLs=)
3: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (hash: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:84:6d:fd:af:64:6c:8a:a6:bb:f7:39:d2:f5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Jun 28 18:01:24 2025 GMT
Not After : Jun 29 18:01:24 2025 GMT
Subject: CN=185524d67e8897a4b7313cb09e3cc9d9a0aa87da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:e1:65:79:96:49:32:79:c3:04:77:4b:81:
f6:05:35:36:dc:cc:a2:5f:16:02:3e:7d:8b:97:15:
22:19:8a:2a:e1:80:dc:b0:dc:40:44:5b:d2:0e:c7:
1f:ed:6b:ac:35:2d:79:ef:38:b5:ed:39:79:7f:59:
8b:b2:e1:f8:c1:dc:f3:b1:e6:5d:d7:2c:96:9c:58:
27:50:e3:46:27:cd:ce:75:c7:1c:bc:ea:f3:9c:66:
10:74:b0:9b:91:fe:f1:4e:9c:4e:c4:2e:47:ca:ab:
e4:1a:27:77:d8:03:3d:af:b7:cf:a7:23:39:5c:d1:
6f:6c:a6:3c:1c:1d:fa:66:24:7b:81:88:95:f4:3b:
db:fb:e0:b1:d6:d1:51:2f:09:84:98:c4:54:9b:57:
c6:ca:be:12:a2:96:33:90:8f:2c:ee:27:41:f4:11:
86:ce:c3:99:1e:f7:e2:33:f1:c4:68:3f:9a:e2:90:
69:0a:8c:cd:dd:fe:dd:28:96:26:73:74:60:08:2a:
57:33:54:28:f3:c0:ca:cc:1c:b6:ca:05:e3:69:cd:
7a:34:10:69:49:f0:e2:82:03:f1:de:f4:f6:43:63:
01:27:d4:26:b4:5f:39:41:6c:51:d1:31:7a:72:c3:
1a:82:5c:68:72:ae:68:eb:99:7c:2a:6f:ed:8b:f4:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:55:24:D6:7E:88:97:A4:B7:31:3C:B0:9E:3C:C9:D9:A0:AA:87:DA
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c4:6a:4d:f5:98:ad:8d:bf:fd:30:a9:b1:23:30:65:5d:8c:
4b:5b:86:a3:d8:89:d7:2b:08:6e:0c:aa:2d:8e:e6:9d:4b:a3:
5a:a2:88:4f:a9:9f:9e:cf:88:e6:88:36:80:54:e7:75:27:af:
58:a3:65:4a:d8:e2:98:39:5c:7a:fb:b8:f7:c4:65:1c:fe:f0:
4a:e6:c3:40:0a:c3:37:98:48:8a:40:37:5b:c5:7a:9b:2a:41:
3a:3e:9f:f9:f8:fd:fb:1f:45:e5:40:d0:01:fa:a8:37:8e:c6:
de:92:ae:6a:98:5c:b6:6a:c4:fc:e1:56:9e:7a:da:61:44:6a:
5f:90:ce:f7:ba:64:b0:85:a0:66:90:e1:2a:80:32:c3:8d:24:
26:e3:0e:2c:f3:0e:8a:2b:5e:c3:16:84:0a:c6:71:cc:61:6e:
c7:aa:c1:4b:e8:d9:8b:b0:d0:22:39:0d:fa:41:6c:ae:1c:2d:
1b:2a:ad:86:8b:9e:0d:2e:87:73:dc:ed:94:4c:7d:e2:cd:8e:
03:4f:8d:c5:5a:1d:af:84:3f:a0:69:c7:c8:5c:6c:4a:bc:8d:
30:97:e4:20:29:0e:06:5f:cd:51:22:e3:93:22:4e:e0:ba:85:
70:b6:a6:30:46:c2:11:0c:a6:21:4f:13:dd:c2:ae:82:e7:17:
d4:79:3c:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s4Rt/a9kbIqmu/c50vWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk
Y2NlZDgwHhcNMjUwNjI4MTgwMTI0WhcNMjUwNjI5MTgwMTI0WjAzMTEwLwYDVQQD
EygxODU1MjRkNjdlODg5N2E0YjczMTNjYjA5ZTNjYzlkOWEwYWE4N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB/hZXmWSTJ5wwR3S4H2BTU23Myi
XxYCPn2LlxUiGYoq4YDcsNxARFvSDscf7WusNS157zi17Tl5f1mLsuH4wdzzseZd
1yyWnFgnUONGJ83OdcccvOrznGYQdLCbkf7xTpxOxC5HyqvkGid32AM9r7fPpyM5
XNFvbKY8HB36ZiR7gYiV9Dvb++Cx1tFRLwmEmMRUm1fGyr4SopYzkI8s7idB9BGG
zsOZHvfiM/HEaD+a4pBpCozN3f7dKJYmc3RgCCpXM1Qo88DKzBy2ygXjac16NBBp
SfDiggPx3vT2Q2MBJ9QmtF85QWxR0TF6csMaglxocq5o65l8Km/ti/Q4RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhVJNZ+iJektzE8sJ48ydmgqofaMB8GA1UdIwQY
MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt
NmE5Y2Q5NDIwMmZmLzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm
LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8RqTfWY
rY2//TCpsSMwZV2MS1uGo9iJ1ysIbgyqLY7mnUujWqKIT6mfns+I5og2gFTndSev
WKNlStjimDlcevu498RlHP7wSubDQArDN5hIikA3W8V6mypBOj6f+fj9+x9F5UDQ
AfqoN47G3pKuaphctmrE/OFWnnraYURqX5DO97pksIWgZpDhKoAyw40kJuMOLPMO
iitewxaECsZxzGFux6rBS+jZi7DQIjkN+kFsrhwtGyqthoueDS6Hc9ztlEx94s2O
A0+NxVodr4Q/oGnHyFxsSryNMJfkICkOBl/NUSLjkyJO4LqFcLamMEbCEQymIU8T
3cKugucX1Hk84A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:06 2025 by rpki-client