Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json)
Hash identifier: wVMHGjPoc24U0pE6WYSktoIi+Ya0IwQdIUqVgQb/KmA=
Subject key identifier: EE:2F:FC:2E:77:66:6F:4F:53:AA:D1:05:20:A7:5A:64:20:05:50:08
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial: 0197D2F37529A2636A60870BAB733A524007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
Manifest number: 065D
Signing time: Fri 04 Jul 2025 01:00:59 +0000
Manifest this update: Fri 04 Jul 2025 01:00:59 +0000
Manifest next update: Sat 05 Jul 2025 01:00:59 +0000
Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: jUMmQmeHwerKGJdyrvZ4oXeXSEGgnt/dz+ymg/16YJs=)
2: 1Xq5NcZrjlFL23QLXPQ2cW-IBls.roa (hash: HbBq96j6XF4InfiwCDfEHXOlCXag1YicK/gCEex0C0Y=)
3: WPkeJ7VVhsQIoqJp0qX_1NW0Ods.roa (hash: mxYAtiu5jjm0C1BeKBzzTHZkmyPXrcSCe59vx0mWEsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:f3:75:29:a2:63:6a:60:87:0b:ab:73:3a:52:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Validity
Not Before: Jul 4 01:00:59 2025 GMT
Not After : Jul 5 01:00:59 2025 GMT
Subject: CN=ee2ffc2e77666f4f53aad10520a75a6420055008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:8e:6e:c1:b0:6d:dd:c6:95:a4:bb:d9:16:
f6:c5:b0:7f:2f:97:d9:74:69:d9:96:12:ae:e1:81:
64:db:3d:54:c1:9d:b9:04:f0:7e:3d:87:4f:40:bd:
eb:1a:ef:0f:7f:63:b7:e6:98:3a:49:8e:7a:02:c9:
03:8d:51:e4:98:a6:2e:79:63:9b:59:0c:5c:5e:e5:
cf:6c:b0:a5:d3:8c:d5:28:4c:79:b0:f2:3c:a7:c3:
62:4d:6e:f2:b3:ae:8d:51:04:31:87:2b:a5:bd:e6:
38:d0:07:e4:ac:66:b3:4c:f3:85:97:09:06:61:62:
3d:15:32:8c:31:47:52:29:ab:d8:f9:fc:cf:5f:c0:
60:88:13:27:d6:40:97:6e:17:e1:db:0a:9c:99:34:
75:9a:43:97:84:9e:cd:a7:88:1e:42:d6:81:40:8e:
ef:cc:0a:29:b8:10:55:b2:a0:ab:77:64:9d:3e:68:
a2:c4:b6:9b:d9:d3:57:86:13:53:f5:c7:df:c9:77:
88:48:0f:8c:0c:83:57:ea:4e:bc:93:6c:e7:e9:02:
7b:81:ee:17:77:c9:2d:5a:8a:42:49:e6:fc:c2:d8:
d6:ef:28:68:06:c8:41:ea:18:36:c3:67:b8:01:8c:
38:30:8b:2a:fc:0e:ee:29:3c:7d:e1:bb:cb:44:b2:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2F:FC:2E:77:66:6F:4F:53:AA:D1:05:20:A7:5A:64:20:05:50:08
X509v3 Authority Key Identifier:
keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:8f:bb:70:09:2f:b0:e5:da:8f:81:be:57:ef:98:72:f4:95:
34:43:a8:cf:60:34:09:01:8f:6d:92:c6:70:89:65:9d:f3:3c:
77:6d:72:0e:f3:fc:4c:70:50:85:94:ee:df:36:13:10:45:a1:
7d:84:43:a5:4b:d6:0f:fd:cf:74:27:db:8d:0e:e4:dc:8a:77:
2b:6d:3d:13:64:b6:19:a5:57:c8:91:49:62:c3:d7:4a:7c:6f:
c5:8f:80:6c:bf:9c:fa:da:23:7d:0f:79:69:e9:25:67:a0:de:
ce:55:d4:0f:e1:34:b2:f7:d1:3c:35:ea:46:b5:a4:46:91:c0:
ec:59:2d:25:df:18:36:a2:01:8f:bf:1b:00:05:71:14:c4:cf:
18:8e:30:d6:06:97:3c:98:51:0a:2e:51:d4:68:5d:b5:b6:be:
f0:b7:51:e6:31:92:fe:12:46:79:9f:0a:8c:e6:45:14:a4:4d:
7f:f2:dc:9b:1b:d4:a1:d0:9c:64:dd:20:ff:69:ca:3f:44:de:
6e:66:df:7c:46:26:1d:a7:fd:8a:99:85:3e:80:e1:de:1d:4b:
a7:bf:b0:26:f0:91:a2:5b:f5:01:36:86:5f:21:3d:b5:39:c9:
bb:41:8f:76:2d:ef:5a:6d:96:bf:08:3b:66:05:3e:02:4e:2f:
00:3a:eb:1e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZfS83UpomNqYIcLq3M6UkAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGRmZmY3ZjNjZGFhNzlhYThjNTFmNWNlMTJiMjM4NzA2
NDQwODEwHhcNMjUwNzA0MDEwMDU5WhcNMjUwNzA1MDEwMDU5WjAzMTEwLwYDVQQD
EyhlZTJmZmMyZTc3NjY2ZjRmNTNhYWQxMDUyMGE3NWE2NDIwMDU1MDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKqObsGwbd3GlaS72Rb2xbB/L5fZ
dGnZlhKu4YFk2z1UwZ25BPB+PYdPQL3rGu8Pf2O35pg6SY56AskDjVHkmKYueWOb
WQxcXuXPbLCl04zVKEx5sPI8p8NiTW7ys66NUQQxhyulveY40AfkrGazTPOFlwkG
YWI9FTKMMUdSKavY+fzPX8BgiBMn1kCXbhfh2wqcmTR1mkOXhJ7Np4geQtaBQI7v
zAopuBBVsqCrd2SdPmiixLab2dNXhhNT9cffyXeISA+MDINX6k68k2zn6QJ7ge4X
d8ktWopCSeb8wtjW7yhoBshB6hg2w2e4AYw4MIsq/A7uKTx94bvLRLIXEwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO4v/C53Zm9PU6rRBSCnWmQgBVAIMB8GA1UdIwQY
MBaAFPmN//fzzap5qoxR9c4SsjhwZECBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZM185X1BOcW5tcWpGSDF6aEt5T0hCa1FJRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNTQ3MWE4LWFlZGYtNGQ4Ni1hNDZk
LTc4OGM2MzA2YmIzZi8xLzEtWTNfOV9QTnFubXFqRkgxemhLeU9IQmtRSUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY4LzU0NzFhOC1hZWRmLTRkODYtYTQ2ZC03ODhjNjMwNmJi
M2YvMS8xLVkzXzlfUE5xbm1xakZIMXpoS3lPSEJrUUlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyY+7
cAkvsOXaj4G+V++YcvSVNEOoz2A0CQGPbZLGcIllnfM8d21yDvP8THBQhZTu3zYT
EEWhfYRDpUvWD/3PdCfbjQ7k3Ip3K209E2S2GaVXyJFJYsPXSnxvxY+AbL+c+toj
fQ95aeklZ6DezlXUD+E0svfRPDXqRrWkRpHA7FktJd8YNqIBj78bAAVxFMTPGI4w
1gaXPJhRCi5R1Ghdtba+8LdR5jGS/hJGeZ8KjOZFFKRNf/LcmxvUodCcZN0g/2nK
P0TebmbffEYmHaf9ipmFPoDh3h1Lp7+wJvCRolv1ATaGXyE9tTnJu0GPdi3vWm2W
vwg7ZgU+Ak4vADrrHg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:28:31 2025 by rpki-client